Tuesday, December 26, 2017

Monday, December 25, 2017


"But now and then there are Mondays. Big temporal tipping points when anything's possible. . ."

Dakotah with a Sonic Screwdriver

Sunday, December 24, 2017


♫♫ "Although it's been said, many times, many ways. . ." ♫♫

Thursday, December 21, 2017


Two random $1.00 test charges from FedEx means I get a replacement credit card. The security nerd in me can't wait to see who's been compromised now, or wonders if I got tagged by a skimmer without knowing. . .

No bueno

Tuesday, November 28, 2017


For the record, impersonating security certifications is very very bad.

But if you're going to do it, please do not forget to change the number on the certificate you've stolen when you're going out of your way to change the name. That will save me some hassle when you get caught using mine.

Thank you.

Thursday, November 23, 2017


"Where’s the mashed potatoes? Where’s the cranberry sauce? Where’s the pumpkin pie?"


"As God is my witness, I thought turkeys could fly”


"If I cook stuffing inside the turkey, is there a chance I could kill my guests?"


Thankful for so many things. . .

Friday, November 17, 2017


If in one breath you passionately claim personal religious beliefs and morals as unwavering justification for one political stance. . .But just as quickly disregard them in the next for the sake of another political stance or candidate. . .

Well hell, you're doing it wrong

Sunday, November 12, 2017


Yes, in fact if you *do* present an easily debunked or otherwise purposely inflammatory one-sided meme as absolute fact, then *yes* you are willingly giving up your credibility on whatever you think you're talking about now. . . as well as when it comes up in the future.

Doesn't matter if you preface it with 'some say' or later follow up with when being directly asked 'I only believe the other points [that aren't absurd]'.

Doubly true if your other posts passionately deride actual news organizations as 'fake' only because you believe they aren't fact-checking stories enough since the content does not align with what you've heard, read, or otherwise 'believe in your gut.'

You're better than that. Be the person you clearly want others to be. You might not always be right any more than everybody else is always wrong.

But you'll be far more respected and believed by those around you when you actually take an intelligent stand on something that matters.

Friday, November 10, 2017


And now a "Notice of Data Breach" from my credit union. . . lovely

Monday, October 23, 2017


The kid likes the theme to Ducktales

</very proud father>

Sunday, October 15, 2017


Saddened by the death of William Melvin DuBois, June 20th, 1926 - October 14th, 2017

Friday, October 6, 2017


If you're only listening to respond and not to comprehend -- you're missing (at least) half of the conversation. . .

Thursday, October 5, 2017


Hope never has -- and never will be -- an effective risk management strategy. . .

Monday, October 2, 2017


Somedays it just feels like the world is trying to tear itself apart. . .

Saturday, September 30, 2017


It's not about fingerpointing or preexisting problems or hurt feelings or excuses or braggery or any of the other crapola that is being said to explain away whats going on in Puerto Rico

It's about 3.5 million Americans hurting and are in dire need of help.

The fact that we as a society can't collectively put politics and personal feelings aside long enough to see and focus on doing whatever is absolutely necessary to solve that clear and present challenge -- simply confounds me.

Thursday, September 28, 2017


The best way to gauge the effectiveness of an organization's approach to risk management and response all too often comes down to three simple canary questions:

1) When the building caught fire, why did they respond by pointing the hose at the parking lot?
2) Were they surprised when the building still burned down?
3) Did they learn from the mistake and change the approach before somebody brought in the next box of matches?

Monday, September 25, 2017


Wherever you fall in the politics of the "he should be allowed to peacefully protest because of _____" -- or -- "he should not be allowed to disrespect the flag because of _____" argument. . .

If you include in support of 'no disrespecting the flag' perspective an article or meme or statement -- and that 'supporting statement' in fact shows a direct violation of the flag code you're saying we all should adhere out of respect. . . I submit it's time you step back away from the emotion you have on the topic, open up your mind, and rethink your argument.

Monday, September 11, 2017

Sunday, August 27, 2017

Monday, August 21, 2017


As the eclipse moves from west to east, there's a Heroes joke somewhere to be found. . .

Tuesday, August 15, 2017


Wow. That was an exceptional dumpster fire of a presidential press conference.

Monday, August 14, 2017


For those of you who might be curious. The City of Denton does, in fact, send out code compliance 'notices' (this was not a ticket) when somebody complains about you not pulling your trash cans off the street for a couple or three days past collection.

They were kind enough to also send me a photo of the issue to put on the bulletin board

But what made me laugh out loud was this -- "An inspection will be performed at this location no sooner than 08/22/2017. If you should need more time to perform the required work, please call me at [OFFICER PHONE NUMBER MASKED]." Do people really do that?

Also says "the City may correct the condition and bill for the work." Again -- does that really happen???

I get that I was wrong, and I get this is a form letter. But all this notice did was made me laugh out loud and picture the Code Enforcement Officer questioning their life choices because had to respond to yet another trash can complaint.

Good times

Sunday, August 13, 2017


Those who do not want to be held accountable for what they do and say, should perhaps find different things to say and do. . .

Saturday, August 12, 2017


Dismayed, horrified, embarrassed, ashamed, saddened, fearful, (and about 123 other emotions) again at yet another cowardly example of anger and hate by a few, wrongly speaking so loudly for the many.

No excuse ever said or imagined justifies this crap.

Friday, August 11, 2017


Now Heptaconta Certified with Certified Information Privacy Professional / Canada (CIPP/C) Goodness. . .

Wednesday, August 9, 2017


Yes, Facts DO matter. And if you're just pushing half truths and innuendo because it aligns with your political beliefs -- you're part of the problem.

Be a patriot. Research and fact check on your own. Be part of the solution.

Sunday, August 6, 2017


The number of people who are so apt to conflate what is clearly an opinion with legitimately sourced fact -- simply confounds me. . .

Thursday, August 3, 2017


The Macarena hit #1 today 20 years ago. If you were around then and don't feel just a little bit older after reading it now, you should probably be checked for delusion.


Monitoring is vastly different than just logging.

And if you're doing only the latter despite claiming the former -- you've neither got security, nor a remotely defensible position when the auditors and lawyers come-a calling. . .

Tuesday, August 1, 2017


There's no crying in baseball or information security. . .

Monday, July 31, 2017

No, I Do Not Have a FedEx Package Pending Delivery

Had my new office line for only 245 days, and usually don't have a reason to give it out since I just use the cel for convenience. . .

But still got tagged by the FedEx Delivery Scam today on the office line this morning claiming that [I] "had a package ready to be delivered to [Our Seattle Corporate Address] and needed to confirm delivery information".

Specific flags:
1) FedEx doesn't do this
2) Foreign accent with broken english on unsolicited call
3) Caller ID popped up a Sri Lanka phone number (+94 90161370) (I assume is bogus)
4) Call logs show it was forwarded out of a San Jose, California number (1-408-907-1818) (Marked as unsafe/spam call in online searching)
5) When I asked for the tracking number, they gave me a 10 digit number (FedEx Track numbers are 12 or 14 digits)
6) When I asked for the sender info, they said it was a bank (could not understand the name due to accent)
7) Said details would be in the email they would send me
8) When I asked for a call back number, they said I could go by my local FedEx Office

Good times

Sunday, July 30, 2017


If all you know are the 10-word talking points, all you want to do is further the argument. And that's basically how we got to where we're at and why nothing's getting done.

Friday, July 14, 2017


Now Nonahexaconta Certified with GIAC Advanced Smartphone Forensics (GASF) Goodness. . .


(Listening to Respond) ≠ (Listening to Comprehend)

Thursday, July 13, 2017


I don't care what side of anything you happen to be on. . .

If the whole basis of your passionate argument is to conflate unrelated details into one claim, pivot outright beyond what is being discussed, and/or personally attack those with whom you disagree -- you do not understand what you're talking about, and have zero desire to learn.

Wednesday, July 5, 2017


There are legitimate reasons for people of all political stances to be concerned about what the politicians who represent them are doing on their behalf. This has been true for each and every one of the last 241 years.

But if you got mad and claimed 'conspiracy' because @NPR tweeted the Declaration of Independence as part of their July 4th observance -- the latest example in a 29-year tradition -- you're not the country first patriot you so loudly claim to be. You're just angry for the sake of being angry.

Holy crackers.

Tuesday, July 4, 2017


Taking a moment to remember the meaning of this day. . .

Wednesday, June 21, 2017


Quick word of advice -- if you've had an expensive medical procedure (like having a kid) that's going to kick out a plethora of bills from each and every individual contracted medical practitioner who delivered care -- and you're lucky enough to have insurance -- don't pay squat until you verify the charge against the Explanation of Benefits (EOB) generated by the insurance company for the claim(s).

I'm now disputing three separate bills totaling a little over $1,200 related to the muchkin's birthday, or the prenatal months leading up to it. Bills which did not match what my insurance company says I am directly liable, including:

1) A balance billing attempt that the EOB explicitly says that I have no liability and to send directly to the insurance claims address if received
2) A provider trying to bill me for a charge my insurance company originally denied pending additional information they still havent received
3) A clerical error where the provider didn't apply insurance discount to the account

This will all work out the way it needs to. But buyer beware -- those EOB's are worth holding on to.

Friday, June 16, 2017


Apparently it is possible to have a political conversation via facebook without it remotely devolving into incivility and fisticuffs.

Granted, it was about a Canadian law that didn't apply in any way whatsoever to us three Americans. But still -- nice to know.

Monday, May 29, 2017


Taking a moment to think about the meaning of this day. . .

Sunday, May 21, 2017


Apparently a 2x3 plastic box, pad, and baby blanket for 3 nights amounts to $5,231.85 of room and board charges at THR Denton, despite how Maddie was always in the same room as us as Alicia recovered (and how that room and board was separately worth $23,498.35)

Sure, why not.

So far, we're up to $35,409.55 for the cost of having a munchkin in Denton.

Very thankful we can afford reasonable insurance that knocks the total down 45% after discount, and the actual copay/coinsurance total from my wallet (so far) to just $967.06 + whatever this 5K claim ultimately amounts to.

No matter what the politics of the conversation might be, can't we all at least agree there should be a better solution -- one that balances the cost of the care, against the reasons for needing to receive it?

Saturday, May 20, 2017


So the science experiment using vinegar + salt + dish soap as an effective pet-friendly weed killer seems to work.

Awesome -- Goodbye roundup.

Friday, May 19, 2017


Forget what I said about Mylicon. I'm now convinced Gripe Water is the best thing medical science has ever created.

Hands down.

Wednesday, May 17, 2017


All but positive society would easily survive without a "Candy Crush" gameshow. . .

Sunday, May 14, 2017


A little bit of karmic poetry today, given that our first 'rightful' Mother's day is also our wedding anniversary. . .

Good times


(Somewhat) seriously considering an email to @SarahMcLachlan explaining all 3 of my minions were rescued from tragic beginnings and how I make a monthly donation to the Denton Animal Support Foundation -- as reasons why I should be exempted from ever having to see her ASPCA commercials again. . .

Tuesday, May 9, 2017


Whatever your political leaning, this administration continues to be the best thing to further the art of journalism in at least 20+ years. . .

Holy crackers

Monday, May 8, 2017


So apparently the cost of having a baby in Denton is $30,401.51 (not including claims pending submission and before insurance reviews/approves/discounts). . . Good to know

Thursday, May 4, 2017


Clearly, the Denton Tax District is enamored with Fort Marcinko, based on this statement I'm looking at. I'll happily consider their offer if they care to send it as a check vs. a bill.

Wednesday, May 3, 2017


One word - Mylicon. Thirty days in, and I'm convinced this is the best thing medical science has ever created. . .

Monday, April 24, 2017


Back from Paternity Leave -- returning to regularly scheduled programming, already in progress. . .

Wednesday, April 19, 2017


Sixteen days in and really looking forward to the day when the munchkin finds something else to be proud of other than when she has a good poo while sitting in my lap. . .

Saturday, April 15, 2017


"But now and then there are Saturdays. Big temporal tipping points when anything's possible. . ."

Dakotah with a Sonic Screwdriver

Friday, April 14, 2017


Eleven days in and a little amazed how much I am drawing upon my old RU horse handling skills of patience and maintaining calming body language, trust building, deciphering behavioral tells, scheduled feedings, stall cleanup, and etc whilst taking care of Madelyn from one moment to the next.

Monday, April 10, 2017


If rule #1 of airline customer service is not to treat your paying customers as if they're committing a crime when trying to use the ticket they've clearly paid for. . .

. . .Can we also agree rule #1 of airline public relations is not to blame the customer for your actions (particularly when everybody on the plane had a camera phone)?

Holy crackers

Friday, April 7, 2017

And Now This. . .

Quick update on the saga that is Madelyn Amelia. . .

We got discharged from THR Presby Denton on Thursday afternoon, and we're back home now trying to figure out when to sleep in the middle of the random Munchkin needs. I'm guessing when she turns 19 years old. Perhaps a bit wishful.

Whatever the case -- all of Madelyn's post-delivery tests came back good, and we were released with only the typical guidance of feeding/changing schedules, future doctor's visits, legal paperwork, and what not. We're very happy, taking as many photos as we can, and deeply looking forward to all the memories yet to come.

Beyond the quick status update, I also want to take a moment to thank again everybody who chimed in over the last few days since the big reveal.

There were those who showed up (announced and otherwise) to wait out in the lobby during the uncertainties of Day 0.

Those who made it oh so clear they wanted to be there, only to have me either wave them off with my thanx -- or -- because of the complexities with their own schedules and distance, it was simply impossible to be here.

Those who chimed in after the fact publicly and privately with well wishes and gifts, from friends I've known for 22+ years (so long that I can't really remember), others from whom I have lost touch with after drifting apart due to life and such, and still others I've known only for just over 130 days. (And clearly just about every example in between)

Those who have (and continue to) added to my perspective by sharing insights drawn from their own experiences.

And clearly, those who's actions fall into other buckets I forget at this moment given how much the week has been a blur.

All have been beyond heartwarming, and it is (one of) the understatement(s) of the moment for me say how much they have been appreciated.

I will do my best to thank everybody individually. But if I miss you directly, please know it's not a reflection of absent gratitude -- rather only one of absent sleep and/or memory.

Awesome times -- (as always) text/email to reach out.

And now -- returning to regularly scheduled programming, already in progress. . .

Thursday, April 6, 2017


That moment when you are moved by your 3-day old daughter softly holding her head with her hand when she's sleeping on your chest -- and you look closer and notice she's also flipping you the bird.

(That's my daughter, no doubt)


Is it appropriate to take a 3 day old and reenact the opening scene of The Lion King when being discharged from the hospital?

(Asking for a friend)

Wednesday, April 5, 2017

Concluding Day 1 of the Madelyn Amelia Experience

Quick update on what's happened in the last 24 hours. . .

Madelyn herself (on Day 1 at least) seems to be continuing the theme of her arrival -- crying only for a moment here and there, spending the rest of her wakening time moving her eyes around trying to figure out the world around while also making clicking sounds when she's about to spit up. She's also passed all the standard medical tests given to this point without issue while also being a constant source of amusement to all involved.

Simply put -- everybody's still awesome and we're solving the typical first-day newborn challenges of disrupted sleep cycles and taking care of a poop machine.

Some pictures of the day are below. More to come. . .
Sleeping in the hospital bassinet, wrapped up tight in her blanket

Later while laying in my lap inbetween meals

Alicia and her Mom having 1:1 moments

Wrapped up tight in her swaddle, reacting to something (I probably said) with an appropriate facepalm

Monday, April 3, 2017

So This Happened. . .

Introducing Madelyn Amelia Marcinko, born all of 6 lbs 6 oz and 19.25 inches @ 10:29 PM on April 3rd, 2017
"She's precocious, and she knows just what it takes to make a crow blush"

Some quick backstory. Alicia and I found out we were pregnant the somewhere near the end of last August. We purposely didn't formally announce beyond a handful of friends/family, choosing instead to keep the news largely to ourselves just in case things were not meant to be.

But every test we took along the way came back goodness. And now on this day, all is confirmed. Mother and daughter are both healthy. And I can't remember a time when I've been more proud.

Thank you to all for your heartfelt thoughts and well wishes -- and your understanding on why we decided to withhold the news for so long,

More to come in the days, weeks, and years to come. In the meantime, some of the many pictures we've taken along the way are below.

Awesome times -- text/email to reach out.

August, soon after we found out

September, when the Munchkin was trying to imitate a cat playing with a ball of yarn

October, when we found out we were having a girl

December, heading into the Second Trimester

January, and things continued to be awesome

February, during one of the few times when Madelyn was not messing with the Sono Tech

March, and the start of the final countodown

A couple of days before Madelyn was born

Wednesday, March 29, 2017


Another stormy night in Denton. Weather station caught a 40mph wind gust when the squall line came through and a little over a third of an inch of rain total. Also saw/heard some arcing powerlines a transformer blow in the distance a couple of streets south.

But the fence is still up. Shingles are still on the roof. And we're still here, albeit bleary eyed.

Monday, March 27, 2017


Definitions matter. And if you continually misuse a word to define your argument -- you will be defined by the error.

Sunday, March 26, 2017


Strafed to the north by golfball sized hail, then to the south with baseballs -- and then back to the north with more of both.

But just minor pea and limited marble at the Fort. Feels like it's going to be a long spring.

No bueno.

Saturday, March 11, 2017


This all important time of year, let's not ignore the all critical sacrifices of those who are forced to stand on the corner in an Uncle Sam or Lady Liberty costume hawking the tax prep services. Persevering through wind and the rain. Hot and the cold. Mockery and the smog. Doing a job clearly nobody else wants simply because it needs to be done.

True inspirations to us all. #NEVERFORGET

Wednesday, March 8, 2017

A Teachable Moment about Usernames, Passwords, Whiteboards, and Live Television

(Update 6:25P)
The later live shot went out of their way to not show the section of the whiteboard with the usernames and passwords. What was shown had the wifi password erased clean without any after image.

Good on them.

Bad security to have the info posted in the first place.

But the Organization reacted quickly to minimize the security incident. That's the right next move to be sure.

Hopefully, they are also (at a minimum):
1) Immediately changing all the affected passwords to new complex equivalents (while masked in my screenshot, the original passwords did not appear to follow such standards)

2) Establish/maintain a formal policy prohibiting the sharing of usernames and passwords in open mediums (post-it notes, whiteboards, etc)

3) Require unique usernames and passwords be assigned and used by all authorized individuals (as activity on shared accounts cannot be tracked/monitored without repudiation to a specific offender)

4) Establish/maintain a password expiration mechanism that forces all users to reset their passwords every 60-90 days (at a maximum)

5) Codify mandatory username and password lifecycle management requirements and limitations within a formal Access Control Policy (if it hasn't already been)

6) Include username and password requirements and limitations within Awareness Training and Acceptable Use Policy (AUP) provided to all organization stakeholders

Bonus points if they are also (at a minimum):
7) Creating new accounts replacing those which were wrongly shown to the live tv audience

8) Disabling and removing all assigned privileges from the existing now replaced accounts (including any remote access abilities)

9) (Regardless of points 6 and 7 are followed) Monitoring all accounts, both the newly established and the replaced disabled, for any misuse attempts

10) Establish/maintain a policy which reviews an internal/restricted area for confidential information -- removing/masking any identified -- prior to being accessible by the public (whether onsite, via a recorded video, or during a live TV shot)

(Original Post 4:38P)
Clearly no nefarious act here with the company or the news station. . . but. . .

If you're going to let a local news crew into your office to do a live shot praising your service - please remember to remove your admin and wifi passwords from the whiteboard in the background.

Or just don't put them there to begin with. That's a far better plan.

And also please only use complex passwords and accounts tied to an individual user so the activity can be fully tracked.

So much badness here. Not good times.

Tuesday, February 28, 2017


The dogs do not seem to be as impressed when I sneeze on them, as they are when they sneeze on me. . . Good to know

Monday, February 20, 2017


Ok, so clearly I'm at work today. But there remains a .0000164270% chance I will be calling in sick on Thursday.

Just a heads up.

Sunday, February 19, 2017


With so much validatable authentic fact to pull from to promote any argument no matter the political stance, it continues to confound me why so many choose to double down on the easily debunked BS meme, crap talking point, or troll name calling when they see something with which they happen to disagree.

Saturday, February 18, 2017


There is a .0000164270% chance I will be calling in sick on Monday.

Just a heads up.

Wednesday, February 15, 2017


Holy crackers. . . The fact that a @Bombardier CRJ can hit a deer at 120+/- knots, still get airborne -- and then make a safe (and relatively uneventful) landing 45 minutes later. And all while leaving a trail of fuel from a bent up wing all along the way. . .

Speaks very highly about the airframe and those who designed it. . .


Gotten more email asking if I'm at RSA this year than I ever recall before. . . Wondering if I'm missing something really good. Like free puppy giveaway good.

For the record, if anybody I know is there *and* they're giving away puppies, please feel free to take mine and give him/her a good home. I ask only that you name them 'Puddles' and treat them with a kind playful heart (even if they live up to their moniker).

Tuesday, February 7, 2017


Back from Phoenix -- returning to regularly scheduled programming, already in progress. . .

Friday, January 27, 2017


"I suppose it makes sense... wearing a bit thin. I hope the ears are a bit less conspicuous this time. . ."

Thursday, January 19, 2017


I don't care what your political leaning might be -- but just because you disagree with a news report, does not in fact make it fake.

What makes a news article fake is if it pulled out of one's butt and/or doesn't rely on authentic validatable sources.

Stuff like. . .
"Was it caught on video?"
"Was it something the subject of the article personally wrote?"
. . .Both would be examples of stuff which would be validatable.

Word of mouth
Opinion and theories being passed as truth
Stuff which is contradicted by sound judgment and/or cannot be validated -- are by definition, unreliable sources

And yes, there is a difference between something posted a tabloid, a crap meme, or political leaning blog -- than an actual news source.

There's plenty of fake political crap out there on both sides of the spectrum that's purely designed to inflame and incite. And it's up to the news consumer to be responsible enough to examine and authenticate rather than just accepting at face value.

But just claiming something is fake because it's contrary to a political stance or opinion only serves to undermine whatever argument you're trying to make.

Echo chambers are bad. Educated electorate is good.

Tuesday, January 17, 2017


Now starting year 20, day 1 of the information security career. . .

Saturday, January 14, 2017


I often wonder how much better the world would be if people would spend their free time trying to find out all the legitimate information there is to know about whatever seems to have them bothered -- instead of just simply reacting on facebook with the meme of the moment at face value and/or venting out of snark, anger, immaturity, or distraction or whatever only because they politically disagree with whatever the conversation might be.

I bet that would be a nice place.

Sunday, January 1, 2017


Now a member of the International Association of Privacy Professionals (IAPP) Advisory Board for CIPT Exam Development. . .


"And we'll take a cup o' kindness yet..."