Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options answers only not deleted user 7777

Security is the degree of resistance to, or protection from, harm. Workplace questions should only be tagged with this if they relate to actual security concerns (physical or digital) and are specific to the workplace. See extended tag info for usage guidelines.

1 vote

How to convince manager of need for additional security testing before release

my manager told me that he does not feel additional testing is necessary due to coverage and the business need to deploy to production timely. How do I make a business case to convince my …
Joe Strazzere's user avatar
32 votes

Higher up doesn't carry around their security badge and asks others to let them in. What sho...

I am concerned about this double standard in company security. Think for a minute why you are concerned here. Because everyone should live by the same rules no matter who they are? … Because this Vice President is a security risk? Because I hate this rule, and if I must obey a foolish rule, everyone must? Because I follow every process rule to the letter every time? …
Joe Strazzere's user avatar
12 votes
Accepted

I keep getting challenged by internal infosec for no reason

I keep getting challenged by internal infosec for no reason You aren't being challenged by infosec. It's just Pete. Is there some sort of secret word I can use to get this to stop It's not much of …
Joe Strazzere's user avatar
64 votes

Is there any risk in sharing info about technologies and products we use with a supplier?

Is there any harm with telling suppliers what tech we use and why? Would your competitors be interested to learn what tech you use and why? If so, then you shouldn't be giving this information to …
Joe Strazzere's user avatar
17 votes
Accepted

Employer responsibility in a potentially (key) violent stalking situation?

If it were me, I'd certainly contact security ahead of time, rather than waiting for something to happen. …
Joe Strazzere's user avatar
61 votes
Accepted

How should an employer respond to on-site theft?

How would you expect an employer to respond in this case? I would expect the employer to warn employees to keep their valuables locked up when not at their desks. I would expect the employer to …
Joe Strazzere's user avatar
4 votes
Accepted

Is participation in different bug hunting programs viable career path and source of income?

Is participation in different bug hunting programs viable career path and source of income? As your sole source of income? Seem extremely unlikely, unless your expenses are very, very low. To determ …
Joe Strazzere's user avatar
81 votes

Should I disclose that I can still access a company's systems after I've left?

Are there any reasons why I should let the company know? Because you are a good person and a professional. And because if you were still with the company and another IT department head had left, you …
Joe Strazzere's user avatar
10 votes

How to coordinate urgent video conferencing meetings with team when working remote with less...

During a fluid situation such as this, how can I better coordinate response when technology outside of the company control is constraining my work? Open a telephone conference call. Phone li …
Joe Strazzere's user avatar
8 votes

Accidentally defaced an internal production website during vulnerability scanning - How do I...

How can I mitigate likelihood of such instance going forward? Never test in production unless there is no other viable method. Use a backup system, at least for the initial testing. If you must …
Joe Strazzere's user avatar
77 votes

Is it acceptable to do a security test on a company's open WiFi before an interview?

I told them that this is a serious issue and should not wait until I or anyone else be hired. Was I right in telling them that I did that? Lecturing an interviewer is seldom a good way to …
Joe Strazzere's user avatar
-2 votes

Request to meet with the CEO in a hotel before work

This seems unprofessional at best, and inappropriate or even dangerous at worst (particularly if my manager's account was hacked). Unprofessional? Inappropriate? Dangerous? You are imagining al …
Joe Strazzere's user avatar
2 votes

Communicating with a manager who has no programming experience

Your task here is to explain the benefits you see (productivity, sufficient security, etc) and then do your best to implement the task as you are required to do so. …
Joe Strazzere's user avatar
14 votes

Someone peeled an American flag sticker off of my truck. What do I do?

Report it to Security, Building Management and HR of the location where you have been working. Don't expect much - there's very little they can do. … They might have security video that could be reviewed, and if it shows the identity of the person who peeled off your sticker, you could choose to go to the police. …
Joe Strazzere's user avatar