The problem: the company pays for E3/E5 licenses assigned to accounts that haven’t signed in for months. Ten unused E3 licenses is roughly €2,800 a year thrown away.

[mai mult...]

An expired certificate discovered by your customer rather than by you is the most avoidable incident in IT. This doesn’t need Nagios or Zabbix — a scheduled task is enough.

[mai mult...]

Most companies sit on p=none and believe they’re protected. They aren’t — p=none only reports, it blocks nothing.

[mai mult...]

Blocking USB storage outright is easy and causes a revolt. Blocking with a serial-number whitelist is what reality actually demands.

[mai mult...]

[mai mult...]

[mai mult...]

[mai mult...]

[mai mult...]

Time Machine’s graphical interface lets you exclude folders one at a time by dragging them into the “Exclude these items” list, but this quickly becomes tedious if you have many cache folders, build directories, or virtual machine files that don’t need backing up. The tmutil command-line tool gives you far more precise and scriptable control, which is especially valuable for developers dealing with things like node_modules, Docker volumes, or Xcode’s DerivedData folder — all of which can balloon your backup size without adding any real value.

[mai mult...]

Disk Utility, an app most people only associate with formatting USB drives, actually has a genuinely powerful and underused feature: it can create an encrypted disk image that functions as a password-protected virtual vault, using the same AES-256 encryption standard as full-disk FileVault. This is a great alternative to paid encryption apps if you just need a secure place for sensitive documents, tax records, or private photos.

[mai mult...]