When setting up campaigns in software like KnowBe4, you must make sure the existing protections don’t flag emails you send in your campaigns. These are usually defined in something like defender for cloud as a policy, and so additional policies for knowB4 mail campaigns have to be set so you don’t prevent them from being caught.
However, this is mostly just to ensure you get targeted content for a campaign to end users, and most every email we send would pass through anyway. We set the defender for cloud exceptions because we do not want to falsely impact measures on targeted cohort performance with defender policies.
The above email for example would not be flagged as phishing by any current policies in place in our organization.
While it is easy to be cynical about the phishing email campaigns, they do exist to try and get to a more mindful state of your users. We have research that supports their efficacy, and while you won’t ever get end users to universally “good” levels of behaviors around phishing, we can’t make that perfection be the enemy of trying to be more mindful.
Still, it is humorous when you define a campaign and make it more specifically targeted for C suite cohorts only to get told to tone it down. They missed the point indeed.
The symptoms are how you understand and characterize a disease.
Presentation of the runs from your gut is noteworthy and measured. You measure it for understanding incubation, water loss, recurrence, latency between events, and a slew of other data points.
It is in fact how you characterize disease at large, the symptoms.
It’s from A Man for All Seasons, a play that illustrates the importance of the rule of law.
William Roper: “So, now you give the Devil the benefit of law!”
Sir Thomas More: “Yes! What would you do? Cut a great road through the law to get after the Devil?”
William Roper: “Yes, I'd cut down every law in England to do that!”
Sir Thomas More: “Oh? And when the last law was down, and the Devil turned 'round on you, where would you hide, Roper, the laws all being flat? This country is planted thick with laws, from coast to coast, Man's laws, not God's! And if you cut them down, and you're just the man to do it, do you really think you could stand upright in the winds that would blow then? Yes, I'd give the Devil benefit of law, for my own safety's sake!
The overlap of people who have the conviction and experience of fighting from the tree line at 3AM and the people that share this sentiment contains very little overlap.
Most armor penetrating munitions use depleted uranium for its ability to self sharpen as it plows through metal armor and because it is flammable on impact. We refer to these as, “behind the target effects”.
The splintering and incendiary effects inside vehicles and as additional anti-material destruction on soft targets are why it’s used.
It makes for a poor radiation dirty bomb, and is only a mild radiation risk.
Keep the reaction stirring under ice and if you see the temp rise above 15 C you dump the whole thing in a water bucket or you get a runaway exothermic reaction that is never good with a high explosive forming crystals in the solution.
If you are stupid, don’t ventilate, or are stupid stupid it will light your shed on fire and potentially kill you.
That’s why you work at lab scale, and why you always keep your reactions under the temp limits with acids added slowly.
Basic chemistry safety covers all the bases here.
My preferred blasting caps are nickel guanidine based. I can play with the crystal morphology to produce small more friction inert powder and it is an extremely simple synthesis.
You can use reloading press combined with highly suggested lexan sheet as a blast shield and wooden block to gently press the powder into caps. China sells packs of 1000 electrical ignition assemblies for $40 that you can then set off with a COTS or a clacker.
I cannot emphasize enough that working at small scale and knowing what you are doing are important, but in faster time than it takes to print the parts for that drone you can absolutely complete the reaction, do some recrystalizstion, dry your product,and be ready to mix with plasticizer.
I synthesize energetics. I can make a primary explosive that is stable enough for cap usage with a solo cup. I can synthesize secondaries like RDX above (one of the more complicated common ones) in short order with a basic chemistry set and the internet to order basic reagents. None are controlled substances.
It is trivially easy to make effective shapes charges and energetics at home.
Synthesis is federally legal in the US so long as you do not assemble into a device or transport. You can do both with an SOT as an FFL.
If I wanted to, I could make a shaped charge that was point imitated and base detonated for the above projectile and it would punch through about 1.5 feet of homogeneously rolled steel.
The limit to threat is not the access to explosives, as the chemistry and processes are published freely online as easy to replicate. The drone parts and control surface actuation is by far harder and I say this as someone who has a professional background in computer science and software engineering.
My own experience was that we took our boots off and helmets off when entering homes to meet with village elders. We did not talk to nor break customs around interactions with their women. I built wells to give communities water, ensured they had cooking and fuel oil, repaired infrastructure, and I placed my body over a family to shield them when the house I was in was getting shot at.
There were 237 casualties on my battalion, but by the end of our tour the place that was mired in firefights every day became peaceful enough that the press could walk about with officers and not even wear body armor.
We played soccer with kids, gave out food, ran electricity to homes, and made the best of what we could.
I have done humanitarian aid for NGOs in the years since and worked on mission trips. Neither experience has come close to the magnitude of elevating community needs as my time in the military did for those we were trying to help.
Just my own personal experience, but felt it was worth sharing.
My day job that makes up the majority of my income is in software.
I wouldn’t call myself a woodworker over a software engineer.
You are calling yourself a content creator instead of a prostitute when that’s your primary profession. Nothing wrong with either profession, but that context is relevant.
So… not entirely accurate.
When setting up campaigns in software like KnowBe4, you must make sure the existing protections don’t flag emails you send in your campaigns. These are usually defined in something like defender for cloud as a policy, and so additional policies for knowB4 mail campaigns have to be set so you don’t prevent them from being caught.
However, this is mostly just to ensure you get targeted content for a campaign to end users, and most every email we send would pass through anyway. We set the defender for cloud exceptions because we do not want to falsely impact measures on targeted cohort performance with defender policies.
The above email for example would not be flagged as phishing by any current policies in place in our organization.
While it is easy to be cynical about the phishing email campaigns, they do exist to try and get to a more mindful state of your users. We have research that supports their efficacy, and while you won’t ever get end users to universally “good” levels of behaviors around phishing, we can’t make that perfection be the enemy of trying to be more mindful.
Still, it is humorous when you define a campaign and make it more specifically targeted for C suite cohorts only to get told to tone it down. They missed the point indeed.