Author: Dave Farquhar

Why we have a cybersecurity talent shortage

Dave Farquhar security
Why we have a cybersecurity talent shortage

We have a cybersecurity talent shortage. You know it, and I know it. But part of the problem is self-inflicted. We don’t know how to interview.

A common complaint about security professionals is that we’re all smug know-it-alls. We have that reputation because that’s precisely the kind of person our interview process is designed to find. We won’t solve the cybersecurity talent shortage and our people skills problem until we get beyond looking for people who can pass CISSP in a suit.

Read more

Repair the fiberboard insulator in a train motor

Dave Farquhar Toy trains
Repair the fiberboard insulator in a train motor

The fiberboard insulators in prewar electric train motors can break or warp over time. If that happens, you have options besides plundering one from another motor. Here’s how to replace or repair the fiberboard insulator in a train motor.

Read more

What is fuzzing?

Dave Farquhar security
What is fuzzing?

What is fuzzing? Fuzz testing, or fuzzing, is a concept in computer security. Like the name suggests, it’s the practice of sending messed-up data to a system to see how it behaves. A good computer system should handle fuzzing gracefully. As you might guess, not all do.

When a computer receives data it doesn’t expect, it may malfunction in unpredictable ways. Fuzzing attempts to find those malfunctions.

Read more

Using a Sound Blaster 16 on a 286

Dave Farquhar Retro Computing
Using a Sound Blaster 16 on a 286

I wanted to play 1990-era games on my 286 that don’t run right on my 486, but that meant I needed a sound card. Early PC sound cards are very expensive, so I wanted a cheaper alternative. Here’s how I got a Sound Blaster 16 to work on a 286.

Creative’s DOS drivers for the Sound Blaster 16 require a 386. But the hardware functions properly on earlier PCs, so you can use them on a 286 or even an XT-class PC with a third-party driver.

Read more

Underappreciated at work? Here’s what to do.

Dave Farquhar Careers
Underappreciated at work? Here’s what to do.

If you feel unappreciated or underappreciated at work, you’re certainly not alone. It’s happened to me, and it happens to a lot of other people. Here are some examples, what you can do about it, and why you should do something about it before it’s too late.

Read more

Where to buy CRT monitors

Dave Farquhar Retro Computing
Where to buy CRT monitors

I generally prefer LCD monitors with vintage PCs, but if you want a true retro experience, you need a CRT. The problem is finding one. Here’s where to buy CRT monitors.

Read more

Investing in model trains: Good idea or bad?

Dave Farquhar model railroading, Toy trains
Investing in model trains: Good idea or bad?

From time to time, I see the topic of investing in model trains, whether Lionel, Marklin, scale brass models, or any other niche come up. There was a time when people make a lot of money doing that. Sad to say, for the most part that window of opportunity is closed.

It’s certainly possible to make money at your hobby. But investing in collectibles tends to be fleeting, so it’s something you should approach with extreme caution.

Read more

Tube radio buzz: The non-obvious fix

Dave Farquhar Troubleshooting
Tube radio buzz: The non-obvious fix

I picked up a cool-looking old tube radio the other day. Unfortunately it doesn’t work. When you turn it on, instead of a signal, you hear loud buzzing. Here’s what causes tube radio buzz and how to get it fixed.

Of course we assume any problem with a tube radio is the vacuum tubes. But loud buzzing is usually caused by bad capacitors, not tubes.

Read more

Is Yoast SEO good?

Dave Farquhar Writing
Is Yoast SEO good?

Let’s talk blogging. Specifically, let’s talk SEO. Is Yoast SEO good? You’ll hear mixed opinions of that. So I’ll share my personal experience, as someone who blogged without it for a decade.

My best blog posts didn’t need Yoast SEO. But there’s no question the majority of my blog posts do better with it, and I’ve never seen one do worse.

Read more

Valid reasons for running unauthenticated vulnerability scans

Dave Farquhar security
Valid reasons for running unauthenticated vulnerability scans

Authenticated vulnerability scans are usually better than unauthenticated scans. But sometimes there are valid reasons for running unauthenticated vulnerability scans. Here are some reasons you might want to do that.

The main reason to run unauthenticated vulnerability scans is to limit the information you share with people outside your organization, such as auditors. But they are also helpful for preparing for penetration tests.

Read more