topic Re: ISC2 Community Privacy concern in Tech Talk

ISC2 Community Privacy concern

d46j48fx — Thu, 31 Oct 2019 21:06:47 GMT

Hi all! Using Chrome, I just did a search for an answer to an Office 365 question...and a previous post I published on ISC2 community came up in the Google search results! I am very concerned as I was under the (maybe incorrect) impression that the ISC2 community boards were private? I have posted certain questions here under the impression that only members of the community would be able to read them...help!

Re: ISC2 Community Privacy concern

CraginS — Thu, 31 Oct 2019 21:51:30 GMT

@d46j48fx wrote:
Hi all! Using Chrome, I just did a search for an answer to an Office 365 question...and a previous post I published on ISC2 community came up in the Google search results! I am very concerned as I was under the (maybe incorrect) impression that the ISC2 community boards were private? I have posted certain questions here under the impression that only members of the community would be able to read them...help!

Derek,

The community forum is not private - it is open to the Internet. We had several discussions about this fact last year. But, you are right that this fact has not been well publicized to community members.

The positive aspect of this truth: Both Grandpa Rob @rslade and I have been able to use a google search of site:community.isc2.org to obtain MUCH more complete search results inside the Community than the really terrible, deficient built- search feature here.

Craig

Re: ISC2 Community Privacy concern

rslade — Thu, 31 Oct 2019 22:52:59 GMT

@d46j48fx wrote:
I am very concerned as I was under the (maybe incorrect) impression that the ISC2 community boards were private?

Ummm, who gave you that impression? The simple fact that this "community" is supposedly run by a security organization? What an amusing presumption!

No, actually. Very little of the "community" is protected in any way. There are a couple of "boards" that are, but most of the "community" is wide open. Anyone can come to the site, and, without signing on or even creating an account, read pretty much anything. That's why I created the "see the amazing dancing CISSPs and all their discussions" label. (For a while I tried using "privacy" as a tag, but that got lost pretty quickly.)

I tried to point out the lack of privacy in a post about a year and a half ago, but it didn't create much interest. And, as @CraginS pointed out, we are using this lack of privacy to our advantage. We've also tried to point out how newbies can use it to their advantage, but I suspect we're losing on that one. (We may have better luck with the advice on how to do an ego search ...) (Which can, actually, be handy ...)

Re: ISC2 Community Privacy concern

d46j48fx — Fri, 01 Nov 2019 00:15:34 GMT

Oh...kay...then. I will need to find another means of reaching out to security professionals w/o the risk that "persons of interest" could find my posts and by simple aggregation...

So...uh...is there an ISC2 discord, slack or telegram group?

Re: ISC2 Community Privacy concern

denbesten — Fri, 01 Nov 2019 02:52:56 GMT

@d46j48fx wrote:
Oh...kay...then. I will need to find another means of reaching out to security professionals w/o the risk that "persons of interest" could find my posts and by simple aggregation...

So...uh...is there an ISC2 discord, slack or telegram group?

Only people who have a CISSP are able to access "CISSP Group". You already have read access to it. You can easily grant yourself write access by clicking "join". If you confine your posts to that group, you can rest assured that your posts are only readable by 15426 security professionals that have been vetted by (ISC)² through the CISSP endorsement process.

Alternatively, you could join the rebel CISSPforum, which was created two years ago by a few CISSPs that had/have a fondness for an earlier yahoo group by the same name. That group is open only to current or former CISSPs. Currently, it has 247 members.

All other groups of which I am aware allow "non-CISSPs" to sign up, although some do hide their content from Google.

Re: ISC2 Community Privacy concern

d46j48fx — Fri, 01 Nov 2019 03:40:01 GMT

Thx! #joined

Re: ISC2 Community Privacy concern

AlecTrevelyan — Fri, 01 Nov 2019 14:08:59 GMT

@d46j48fx wrote:
Hi all! Using Chrome, I just did a search for an answer to an Office 365 question...and a previous post I published on ISC2 community came up in the Google search results! I am very concerned as I was under the (maybe incorrect) impression that the ISC2 community boards were private? I have posted certain questions here under the impression that only members of the community would be able to read them...help!

If you've posted something on here that you no longer want to appear you can always edit your posts to remove the "offending" content.

This may not clear the content from any caching or archiving services that may have picked it up but it's a start.

Re: ISC2 Community Privacy concern

d46j48fx — Fri, 01 Nov 2019 16:30:39 GMT

Nothing offensive...just confidential work-related situations that I wanted
community input on. The help in here was invaluable and I would want other
ppl to benefit from it. My only downer is that I thought it was somewhat
like Las Vegas but google shattered my illusion 😉

Derek Lewinson, CISSP #598659
(C) 416-560-4779 | (E) djl@icgcan.com

Re: ISC2 Community Privacy concern

rslade — Fri, 01 Nov 2019 19:11:39 GMT

> d46j48fx (Newcomer III) posted a new reply in Tech Talk on 10-31-2019 08:15 PM

> Oh...kay...then. I will need to find another means of reaching out to security
> professionals w/o the risk that "persons of interest" could find my posts and by
> simple aggregation... So...uh...is there an ISC2 discord, slack or telegram
> group?

Well, there's always:
https://community.isc2.org/t5/Welcome/CISSPforum-replacement/m-p/11006

====================== (quote inserted randomly by Pegasus Mailer)
rslade@vcn.bc.ca slade@victoria.tc.ca rslade@computercrime.org
To make no mistake is not in the power of man; but from their
errors and mistakes the wise and good learn wisdom for the future
- Plutarch
victoria.tc.ca/techrev/rms.htm http://twitter.com/rslade
http://blogs.securiteam.com/index.php/archives/author/p1/
https://is.gd/RotlWB