The single best thing you can do security wise, is to NOT have any personal data on a web facing server.

Separate the data

Rereading it does look like you are doing the things right; so just audit what is on the public side. - your calendar and tasks- cool

Your photo and docs, do those need to be on there?

they are not accessible on the WAN

If they are on a server that is publicly accessible, please move them to a different location

Otherwise you sound like your doing well

5 days to boot. Damn. The dedication to get it to work is amazing

I hope he doesn’t have to patch it….

Funny story, before they did the 2007 redesigns, they asked users what they wanted to be added; 95% said features that were already in Office.

The Ribbon was designed to make features more findable.

Alas.

As above; intel will be SO much easier

Macs don’t have a bios. But they boot easily into Linux (again intel)

Enjoy

Sort of like the difference between the cathedral and a bazaar?

Right. This is at its core a mechanical computer. This is only a few changes away from doing stuff like calculating real world data

That some damn fine work

The tenacity, or madness to work through how to make that work is amazing.

I forgot where I heard this::: If there are fewer, more relevant ads, Google and YouTube should be able to make more money with fewer ads.

The advertisers though want more ads even though they are less affective. As it forces the cost per ad down.

It is totally backwards…. ¯\_(ツ)_/¯

Short version: no

Long version: I’m pretty sure; no. I believe that; tools used like apps would not be subject to FOIA.

I deal with public records requests at work… email, documents etc. sure thing, but I’m pretty sure that the AG would laugh at you requesting the source code for apps we use.

—- I could only wish that we were mandated to use only open source software

Yep. And even I did it in my post. Notice what is missing?

Test your backups!

Agreed… Yes, and… specific to backups all the encryption….

Your production stuff, yes should be as well

Would that be sufficient

No.

3-2-1

Three copies; your working copy, and a cloud copy, and (as an example) on and external HD that you keep at a friend’s house….

On two separate media… so yes cloud can cover that

One off site. So yeah cloud covers that.

Encryption on your off site copies. Yeah I don’t care if they are Linux ISOs or your grandmas recipes. ENCRYPTED

Thanks for coming to my TED talk

Is there a thing that you do?

Are you looking to sysadmin or dev or something else?

Libreoffice. Librewolf but then I deal with students… ymmv

🤣

TLDW ???

TLDR:: Bitcoin

We do a quarterly test.

I have the DB guy make a change, I nuke it and ensure I can restore it.

For us. I don’t work for Veeam, while I don’t like their licensing. Veeam is pretty good

Hth

¯\_(ツ)_/¯ Yeah. It is kinda hard.

Backups. First and foremost.

Now once that is sorted, what if your DB gets corrupted. You test your backups

Learn how to verify and restore

It is a hassle. That’s why there is a constant back and forth between on prem and cloud in the enterprise

“For the children “ …. Like none of them have ever heard bad words…. They must be protected at all cost.

Like a person who likes to grab them by the pussy…

We make it a drinking game…

Whenever a salespeople or a demo uses weasel language. DRINK!

Thank you. I’m totally going to steal “Tech debt reduction “. Ffs

While I appreciate that these benchmarks matter to someone; I’m more interested in hey it runs and is reasonably supported, not requiring hand rolling any config

Hey this XX runs fine.