Daniel Thiele IT - daniel@dproject.de

 A gas and energy provider close to where I live got attacked recently. Just because they unknowingly shared stuff publicly they were not supposed to. Using Censys Internet Map, Heise shows in their article that it was easy to access files via HTTP and network share.   https://www.heise.de/news/Stadtwerke-Detmold-nach-IT-Vorfall-offline-11082906.html As a "junior IT guy" who is just following the news about cybersecurity a bit, I am happy there is a need for professional help, obviously, but at the same time, when I read the comments from more advanced members of the community, I am getting afraid about how deeply rooted the problem is, including a false sense of security by government and community. https://www.heise.de/forum/heise-online/Kommentare/IT-Vorfall-Stadtwerke-Detmold-nicht-mehr-erreichbar/Was-will-man-auch-erwarten/posting-45741595/show/ The commenter here says that critical infrastructure is not "critical" enough to be secured properly. The standards a...

Here’s a cleaned, tighter version that keeps your voice—direct, first-person, no fluff. As I mentioned, I’m currently involved with a company called Helferline and I was also in contact with the Red Cross. Both asked me for a Führungszeugnis —so I got one. Given the current state of society and my experience with different companies in various ways, I’ve been thinking about implementing a kind of Zero Trust mindset in life.  Zero trust means "never trust (nobody, even myself), always verify". That means I want some verification that I can be trusted...as a person.  With that certificate, I’m adding a new “security layer.” In networking/security terms, you’d call this: Certificate-based authentication (and authorization) , built on a Public Key Infrastructure (PKI) . If both sides verify each other with certificates (client and server), that’s mutual TLS (mTLS) . This is my way to show you that I can be trusted and my record is clean. Now—do you have something simi...

The truth is: it depends on who is asking. What do you need? What are you looking for in an administrator? Interface skills I studied Media Systems, which sits between media technology and IT. That gave me a broad foundation across fields and terminology. Even though I worked in graphics and management in the entertainment industry, I always had the IT basics with me. That helps me see both sides, communicate both, and do both. IaC (Infrastructure as Code) I have professional experience with Git, markup languages, scripting, and versioning. Even when I sat inside Art and Design departments, the work was usually part of software development for real products used by customers—and sometimes even architecture. Documentation Floor plans and graphics work (e.g., logical diagrams in draw.io) are part of my toolkit. I’ve done documentation and asset management. In games, “assets” are different from physical hardware, but the discipline is similar: we organized and managed thou...

You’ve seen AI image generators. You’ve seen AI videos with sound. You’ve heard that AI can even create games. The moment old clients and long-time friends started saying they don't need a concept artist anymore, I knew it was over. Not just slow—over.  The only reason why you did not hear about it is because while in the automotive industry they loose 50k jobs, there are not even 50k jobs in the entire German games industry to begin with. Last time I checked the games industry in Germany consists of about 11k jobs. That's also why I worked most of my life for companies outside of Germany. However in the games job market it feels like there are maybe five open roles worldwide. In Germany: basically none. The market was always tough. “Starving artist” isn’t a joke; it’s a business model. I still made it work for a long time and achieved some good things, that are now helping me to readjust. I got into it because colleagues and teachers pushed me, and I saw that it was possible...

 Here is my badge.    No time to breathe. I will eventually make another post about how I achieved it, but there is no time as I am diving into Linux now and am looking forward to LPIC 1. 

 My popup blocker:  

In the beginning of this year I was having a job interview at a company here in Gütersloh. I will not provide any names and such for the obvious reasons of respect toward potential employees, but the IT Manager said natural disasters are not a topic of cyber security, when I mentioned it. I was shocked and did not say anything but now with Ciscos Network Essentials and while Preparing for Network+ I can verify that both are seeing this as a cybersecurity topic. Earthquakes, floods, and other natural disasters are a concern for cybersecurity—specifically in the context of protecting the availability of systems and data. In cybersecurity, this is called a “physical threat” or “environmental threat.” While these events aren’t “hackers,” they can disrupt IT services, destroy hardware, or make data unavailable, which impacts the CIA triad (especially availability ). Network+ exam key point: Natural disasters are classified as non-malicious threats (not intentional attacks) that can ...