Command Control Power: Apple Tech Support & Business Talk

Jerry Zigmont, Joe Saponare, Sam Valencia

Sam, Jerry, and Joe discuss their thoughts and draw from their combined experience of over 20 years in the Apple Consultants Network (ACN).

Play

Open in

24 episodes
weekly
Avg 55 min
English

Episodes 24

Newest Oldest Longest

All20 Unplayed20 In progress0 Played0

Counted on this page — what you have heard stays on this device, so it is not something the list can be paged by.

#585
Tuesday · 52 min
685: Recovered MacBook, Client Trust, and Preparing for Rosetta 2's Phaseout
Recovered MacBook, Client Trust, and Preparing for Rosetta 2's Phaseout In this episode of Command Control Power, Sam and Joe discuss being short-staffed while covering client onboarding and ticket work, and how client relationships shift when a different technician becomes the main contact. Joe recounts a new small boutique client raising concerns about him having passwords, leading to credential changes and enabling MFA, plus a quick non-technical win fixing a poorly positioned VoIP phone stand. They address HomePod/Apple Music use in a business and disabling personal content requests, suggesting services like Spotify instead. Joe shares a case where a "stolen" MacBook Air was recovered via Delta's lost-and-found because his MDM login window message showed company contact info; he used Adigy monitoring to track online status and IP changes, then arranged an Apple trade-in-value credit path for the recovered device. They close with upcoming macOS 28 changes: Rosetta 2 removal and loss of support for encrypted HFS+ volumes, recommending reporting to identify Intel apps and demonstrating MDM value to clients. 00:00 Cold Open And Introductions 00:17 Covering For Matt 01:31 Client Handoffs And Trust 04:49 Passwords And MFA Talk 06:55 The VoIP Phone Fix 08:13 HomePods In The Office 13:34 Small Biz Vs Enterprise Vibes 15:38 Adequate Survey And Anonymity 18:09 Music Tangent And Genre Debates 23:25 Back To Tech Teaser 23:33 Stolen Mac Recovery 24:23 Lost Device Monitoring 25:31 Delta Lost and Found Lead 30:15 Laptop Returned and Verified 30:36 Lock Screen Message Win 32:35 Trade In or Resell 35:29 Refurbish and Alerts Trigger 36:09 Flex Policy Breakdown 39:02 Lock Screen Serial Tips 41:20 Rosetta and HFS Changes 46:53 MDM Reporting Value 49:59 Wrap Up and Next Episode
#684
September 1 · 56 min
684: Resetting AirTags, Beta Bugs, and Vibe-Coded Mac Health Checks
Resetting AirTags, Beta Bugs, and Vibe-Coded Mac Health Checks The hosts discuss how to reset an Apple AirTag by inserting and removing the battery five times until a different sound plays, noting newer AirTags may require pressing down. They share issues seen on iOS 27 and macOS betas, including missing app icons in search, slow contact searching, Contacts app odd behavior, Apple Configurator on iPhone failing to enroll devices until using a non-beta phone, and a Control Center white-noise toggle bug requiring reboots. They debate installing macOS 27 "Golden Gate" on production machines, restarting habits, and workflow clutter from Safari tabs, Finder windows, and messy desktops, with Sam recommending an analog black glass dry-erase desktop board. They also note a Safari private browsing/profile issue showing history and Microsoft 365 credential problems. Jerry describes using Claude to "vibe code" an unsigned "MacWorks Health Check" app that collects Mac discovery info and uploads reports to Dropbox via API keys to replace a costly subscription tool. 00:00 Show Kickoff and Setup 00:26 Resetting an AirTag 02:33 iOS Beta Bugs and Contacts Glitches 04:20 Configurator Beta Breakage 07:41 White Noise and Beta Quirks 08:33 Should You Install macOS Betas 13:53 Restarting and Workflow Friction 15:06 Tabs Desktops and Finder Chaos 21:37 Analog To Do Board and Vig Talk 23:19 Vigorish Explained 23:45 Desktop Whiteboard Find 25:12 Madden Movie Tangent 25:55 Safari Private Mode Bug 29:53 Analog Workflow Systems 33:14 Notion For Solo Work 36:26 Vibe Coded Health Check 41:19 Sizing Storage Needs 50:55 Tool Ideas And Wrap
August 25 · 1 hr 3 min
Best Of CCP: 158: Balanced Billing the Partner Plan with Richard Wingfield of Envision Design
Recorded on may 31, 2016 TOPICS: Richard B. Wingfield - Head Geek, Envision Design, LLC of Houston Texas:"I have been using Mac's in business since original Macintosh in '84 and Envision, as a consulting firm, has been around since 1993. Started part time as sole proprietor and 20+ years later we are now a firm of 5 full time consultants here in Houston. I tell people I am a "recovering architect" as I got my start in technology practicing architecture and being the "tech guy" in every firm I ever worked for. I even helped manage a DEC vax/vms system for a firm in Austin soon after graduating from The University of Texas with a degree in Architecture. This episode examines Richards own "recipe' for Managed Services. Here is a brief description as discussed: … Simple Hybrid Partner Plan is setup so almost all the clients "get it" and are not confused about how it works - 3 part invoice is made up of - small monthly fee per device (each mac, each windows, each iOS or android, each server… fees like $25/mac or $49/windows or $250/server etc) client must enroll ALL computers in the office (cant get cheap and have some on the system and some not) - our "consluting fee" - which is time for humans to do the work to manage, monitor, secure and maintain systems and ALWAYS includes a minimum of one 2hr visit per month (more if needed or requested) - fees for services or hosting (if we host kerio email or rackspace or web or crashplan backups or re-sell backblaze) ----------------------------------- You can find more about Richard and Envision design here: Web: http://www.envisiondesign.net
#682
August 18 · 1 hr
682: Using Claude for IT Fixes: Printer Pools, Chrome Log Sleuthing, UniFi IoT Wi‑Fi, and iPhone Protection Tips
The hosts discuss confusion caused by Microsoft's email warning that Publisher will end in October 2026 and urging users to convert files to PDF. Jerry shares how he's been using AI—especially Claude (and sometimes ChatGPT)—to speed up IT work: creating an Addigy printer pool by assigning static IPs to flaky Brother network printers, analyzing Mac logs with Claude to find a runaway Chrome render process causing memory pressure, and using the Quitter app to auto-quit Chrome as a workaround for battery and performance issues. He also describes fixing a weak UniFi doorbell connection by creating a 2.4GHz-only SSID and broadcasting it on multiple access points. The conversation broadens to AI guardrails, environmental and economic concerns, and social impacts. They cover security-minded IoT network segmentation, Sonos reliability, a client scare about entering a Mac password prompted by Touch ID autofill in private browsing, RingCentral sidebar customization, presbyopia eye drops, and phone accessory tips including ESR screen protectors, Spigen cases, camera lens vulnerability, battery health, and pros/cons of Apple's iPhone Upgrade Program. 00:00 Podcast Kickoff Banter 00:19 Microsoft Publisher Panic 01:39 AI Fixes Printer Deployments 04:19 Claude Reads Mac Logs 05:53 Quitter App Chrome Workaround 08:14 AI Ethics and Guardrails 12:07 AI Economy Bubble Talk 16:03 UniFi Doorbell WiFi Fix 20:23 IoT Networks and VLAN Trust 25:00 Sonos Reliability Updates 28:12 Experian Password Scare 30:06 Touch ID Prompts Confuse Users 32:00 V-Neck and Beard Side Chat 32:18 Beard and Shirt Banter 32:54 Eye Drops for Presbyopia 35:23 Screen Reflections on Calls 37:11 RingCentral Sidebar Hack 39:21 Best Budget Screen Protectors 41:58 Do You Even Need Protectors 44:27 Cracked Camera Lens Mystery 47:06 Battery Health and Upgrade Temptation 52:07 iPhone Upgrade Program Debate 57:54 Wrap Up and Sign Off
August 11 · 55 min
Best Of CCP - 540: Interview With Mike Bombich of CEO and Developer of Carbon Copy Cloner
-We are pleased to welcome Mike Bombich, creator of Carbon Copy Cloner. -He tells a story of losing data that inspired his creation of Carbon Copy Cloner. -Mike spent 8 years as a creative with Apple. -CCC was initially donation-ware. -He never wanted to put any barrier between you and your data. -macOS Big Sur started the downfall of bootable backups. -Mike talks about how that affected CCC and his customers. -We talk about Time Machine's reliability and alternatives to built in solutions. -Mike is not a fan of backing up to disk images. -Jerry talks about the new Quick Updates feature of CCC. -Mike talks about his feelings on cloud storage. -Migration Assistant is another hot topic and we get into methods of restoration. -Mike has always had a concern about releasing software that can delete data. -We love the fish (it's a tuna!) that guides us to privacy settings. -He shares a bug from the Mojave days that affects helper tools, that has now been corrected in Ventura. -Carbon Cooy Cloner's update will not be subscription based. -Check out the latest release of Carbon Cooy Cloner and the list of new features.
#680
August 4 · 54 min
680: Microsoft Retires SMS/Voice MFA, Salesforce SSO Headaches, and SOC 2 Realities
Sam and Joe discuss Microsoft's plan to retire Microsoft-provided SMS and voice calls for MFA, with key dates of Sept 1, 2026 (users on SMS/voice are automatically enabled for passkeys and nudged to register) and Feb 1, 2027 (blocking enforcement for users whose only MFA is SMS/voice, no opt-out), noting paid/customer-managed telecom options and the need to warn clients, address legacy per-user MFA vs conditional access, and handle shared accounts via shared mailboxes or passkey-sharing tools. Sam recounts a prolonged Salesforce SSO/MFA issue worsened by poor vendor documentation and misleading AI guidance, ultimately tied to a Microsoft KB update. They then cover partnering with Fuji for client SOC 2 compliance support, emphasizing evidence, audits, costs, and ongoing maintenance, plus how cyber-insurance questionnaires drive security improvements. The episode also touches on residential support cases, Vision Pro support challenges with DRM blocking screen mirroring, and show wrap-up. 00:00 Show Kickoff 00:17 Microsoft MFA SMS Retirement 00:44 Key Dates and User Impact 03:28 Authenticator Backups and PSAs 04:40 Legacy MFA Cleanup Challenges 07:36 Conditional Access Licensing Risks 10:12 Shared Accounts and Passkeys 12:21 Salesforce MFA SSO Headaches 13:25 AI Missteps and Vendor Docs 17:50 SOC 2 Help from Fuji 21:23 SOC 2 Costs and Maintenance 22:49 Easy Buttons and Real Audits 26:27 Cyber Insurance Questionnaires 27:53 Partnering for Expertise 29:07 Cyber Insurance Foot in Door 30:31 Apple Store Referral Win 31:01 Lightroom Migration Pitfalls 34:31 Blocked Contacts Mystery 38:04 Email Search and User Training 40:02 Supporting Vision Pro Clients 47:28 Amazon Returns and Exceptions 50:24 Wrap Up and Callouts
#679
July 28 · 52 min
679: New OS, Old Problems
In this episode of Command Control Power, the hosts discuss early experiences with the macOS 27 "Golden Gate" beta, noting it feels snappy and stable but breaks QuickBooks, leading one host to keep QuickBooks on a headless Mac mini running macOS 26. They cover upcoming Apple Intelligence features, including AI-assisted file renaming, Safari profiles and AI-suggested tab grouping, page-change notifications, and Apple Passwords' potential to automate password changes (which appears incomplete in testing). The conversation compares Apple Passwords with 1Password, explains passkeys with client-friendly metaphors and technical points, and notes issues caused by multiple password tools. They also review AirPods Pro 3 fit and changes, discuss hearing-aid functionality on AirPods Pro 2/3, and share troubleshooting tips for Splashtop permissions and an Apple Mail send bug tied to "check spelling before sending." 00:00 Show Kickoff 00:08 macOS Golden Gate Beta 01:47 Safari Tab Groups 06:18 Apple Intelligence Highlights 08:39 Passwords Auto Change 17:48 Passkeys Explained 24:01 Passkey Pitfalls 26:33 AirPods Pro 3 First Impressions 26:47 Better Fit Out of Box 27:07 Why Upgrade AirPods 28:08 Lost AirPod Find My 30:10 Sound Signature Debate 31:25 AirPods at Loud Venues 33:03 Hearing Aid Potential 37:00 Remote Setup iPhone Mirroring 42:08 Splashtop Permissions Trick 44:42 Fuzzy Mic Trend Rant 46:50 Apple Mail Send Bug Fix 49:17 Next Episode Teasers Wrap
July 21 · 37 min
Best of CCP - 342: Accruing Technical Debt
Sam Valencia, Jerry Zigmont and Joe Saponare discuss working with Apple technology and clients. Drawn from their combined experience of over 20 years in the Apple Consultants Network, thaey discuss technical support issues both with the technology and working with clients.
#677
July 14 · 50 min
677: Beyond the Surface: Network Tools and Cloud Security
The hosts discuss several network and security topics, starting with UniFi's new "Device Supervisor" feature under Power and Resiliency to monitor device heartbeat and automatically recover silent devices, plus UniFi's move from UniFi Server to UniFi OS Server that may require a migration and re-adoption, pushing remaining sites off a Mac mini to cloud management. They revisit ethernet surge protection and grounding for outdoor cameras and consider alternatives like rack grounding, DIN rails, grounding rods, or using a sacrificial outdoor switch with fiber uplink. They mention Speedify for bonding multiple cellular/Wi‑Fi connections. The conversation shifts to email security: Microsoft's "impossible travel" detection and API reporting versus Google's weaker reporting, alongside odd Google reauthentication/password-change loops and MFA fatigue leading to a Google account breach. They cover deploying Claude Enterprise in healthcare with BAA needs and using Microsoft Purview/Defender to block pasting PHI into Claude, then discuss risks of fake password prompts, password managers (1Password vs LastPass), and end-user security training.
#676
July 6 · 54 min
676: OS 27 Support, Siri AI, and the New Backup Reality
The hosts discuss early impressions of iOS 27 on an iPhone 15 Pro Max and interest in Siri AI on newer iPhone hardware, plus Apple's macOS 27 compatibility list ending Intel support while continuing support for 2020 M1 Macs, which they estimate could extend security updates to roughly 2029. They debate device lifespans for home and business, note iOS 27 supports iPhone 11, and consider how Siri AI's on-device, voice-first, screen-aware approach could change form factors and competition. A cautionary story highlights lost Quicken 2016 data due to missing backups and limitations of iCloud Drive and Backblaze, including Backblaze's cloud-sync folder controversy and retention/restore issues, while Carbon Copy Cloner's option to temporarily download cloud-only files is raised. They recount multiple Migration Assistant failures resolved by re-wiping and redoing the migration, identify a client complaint as Stage Manager, and briefly cover testing the UniFi 5G Max cellular backup with AT&T and a low-income T-Mobile-based SIM option.
June 30 · 1 hr 5 min
Best Of CCP - 034: Interview with Ben Greiner, Inventor of Robot Cloud and President of Forget Computers
Ben Greiner is a pioneer in the Apple IT consulting industry and a longtime leader in the Apple Consultants Network. He founded Forget Computers in Chicago in 1998, transforming it into one of the nation's most respected Apple-focused managed service providers, and later created Robot Cloud, an innovative multi-tenant management platform that helped popularize managed services and automation for Apple consultants. Widely recognized for championing standardized device management, recurring service models, and operational efficiency, Ben continues to influence the Apple consulting community as an Apple Champion and Growth Advisor at Addigy, where he helps MSPs build and scale successful Apple practices
#674
June 23 · 48 min
674: Champing at the Bit for iOS 27 and Ghostly Hackers
The hosts discuss Jerry installing iOS 27 beta on an iPhone 15 Pro Max and watch, reporting strong stability, snappy performance, and minor reported edge-case crashes, while noting Siri AI requires newer hardware due to RAM constraints and that others find the new Siri improved. Joe shares a fresh issue deploying an MDM configuration profile to disable Siri: users still received "unable to use Siri" prompts because "Listen for 'Hey Siri'" could remain enabled, requiring removing the profile, turning it off locally, and reapplying; Apple Intelligence also wasn't fully disabled. Sam describes improving client offboarding by building a monday.com form that feeds Zendesk tickets, and the group compares running lean teams, using subcontractors and Foundation as pay-as-you-go helpdesk support (including an optional branded phone line). They also cover business uncertainty, tax-law changes affecting S-corps, and handling time-consuming "I've been hacked" client calls. 00:00 Show Kickoff Banter 00:35 iOS 27 Beta First Impressions 01:42 Installing Live and Siri AI Limits 04:40 MDM Glitch Disabling Siri 07:52 Advising Clients on Apple AI 10:16 Offboarding Workflow in Monday 12:25 Solo Juggling Without the Team 15:49 Jerry Business and Tax Updates 19:05 Hacked Device Panic Call 20:51 Explaining Normal iOS Mac Features 22:46 Clean Bill of Health Limits 24:07 Lean Teams and Overhead 28:51 Using Outsourced Helpdesk 29:58 Onboarding Big Client While Away 34:56 Pricing and Custom Phone Line 37:57 How to End Free Calls 41:56 Defining Success and Boundaries 45:23 Wrap Up and Outro
#673
June 16 · 56 min
673: AI for IT Workflows, Solutions and Apple's Slow Siri Rollout
In this episode of Command Control Power, the hosts discuss practical IT uses of AI, including improving client communications, speeding email migration due diligence via AI-generated PowerShell reporting (mailbox size, forwarding rules, aliases, naming pitfalls, licensing limits), and reducing billing friction by summarizing recorded RingCentral calls in Claude to log hours and generate detailed invoices, including for Ubiquiti camera projects. They debate risks such as blindly running AI-suggested commands, clients acting on AI advice, and data leakage when employees paste company information into public AI tools, emphasizing guardrails, policies, and potential local/private AI setups (e.g., Mac mini with Ollama). The conversation broadens to AI's impact on IT business models, automation in ticketing, and Apple's lackluster AI progress, delayed Siri features, privacy positioning, and reliance on partners like Google/Gemini. 00:00 Show Kickoff 00:02 New Studio Tour 00:31 Flag Outage Story 01:35 AI Migration Prep 03:26 PowerShell Due Diligence 05:36 Call Summaries Invoicing 07:31 Automating Call Logs 09:35 AI As Expert Helper 11:51 Safety With Commands 12:58 Clients Using AI 13:54 Data Privacy Guardrails 17:17 Industry Shift Fears 20:07 Auto Reply Ticketing 24:18 Local AI Knowledge Base 26:02 AI Eats Software 27:35 Future Of IT Services 29:04 AI Automation Ethics 30:06 Market Pressure On IT 31:03 Apple Intelligence Doubts 33:10 Privacy And Gemini 35:06 Apple Strategy And Mindshare 37:43 MDM Guardrails Needed 39:39 First Mover Myth 43:32 Ubiquity And AirPods AI 47:21 Beta Plans And Rollout 48:06 AI Policy And Profiles 51:32 Wrap Up And Outro
June 9 · 1 hr 8 min
Best Of CCP - Interview With Dave Hamilton - CEO of BackBeat Media, Mac Geek Gab, Gig Gab, and Business Brain Podcasts
Topics: -This week we welcome Dave Hamilton of Mac Geek Gab! -Dave actually grew up a street away from our very own Joe Saponare. -Dave has some knowledge on the music history in the area. -Dave has known his co-host, John Braun since they were 15 years old. -He remembers the days of NCSA Mosaic. -The Mac Observer and BackBeat Media are just some of Dave's major accomplishments. -Wasn't 2001 just a few years ago? -Dave takes us down memory lane in the early days of The Mac Observer. -His original plan was not to continue hosting Mac Geek Gab. -Being persistent paid off as he reached out to Steve Jobs himself to be included in their new Podcast Directory. -In both Texas and the northeast, Dave has a quite a technical background. -Quick Tip from Joe - If the minimum brightness is too bright on your iPhone, you can Reduce White Point under Accessibility>Display & Text Size. -We talk about listener burnout in the podcast world. -Mac Geek Gab is on episode 941! -A tip that Jerry heard on Dave's show was about Tailscale, which makes a virtual network out of your devices, no matter where you are. -Sam talks about some tips he learned on recent episodes of Mac Geek Gab. -The simple stuff is why you get paid the "big bucks". -Business Brain - The Entrepreneurs' Podcast is another show Dave co-hosts with Shannon Jean. -The 20 minute rule - keeping clients engaged every 20 minutes along the way. -Besides his podcasts, you can find Dave at https://www.davethenerd.com or on Twitter @davehamilton
June 2 · 59 min
672: Apple TV Picks, Disclosure Theories, and Practical macOS Admin Tips
The hosts discuss Apple TV shows they were late to, including The Morning Show and For All Mankind, and talk about Hail Mary Project, comparing the film's "E.T.-esque" choices to Andy Weir's book. They segue into UFO/alien "disclosure" chatter, mentioning Spielberg's upcoming Disclosure Day, the film Age of Disclosure, alleged legacy programs, and the idea that disclosure could distract from other news. The conversation returns to Apple and IT topics: an Apple fix for managed login window settings not resetting, a Family Sharing change allowing adult members to use their own payment methods, and why hidden Wi‑Fi networks trigger Apple security warnings. They share productivity tips, including a Shortcut to sort Contacts by creation date, NFC tag uses, remapping Safari's Quit shortcut, menu bar icon spacing via defaults write, Finder column auto-sizing, and Boring Notch. Jerry describes building a client podcast studio around the RØDECaster Video S and Rode support, then they explain using Adigy DDM to automate macOS updates and upgrades with policies, scheduling, and monitoring alerts. 00:00 Show Kickoff Banter 00:18 Apple TV Catch Up 02:12 Hail Mary Debate 04:25 Disclosure Day Talk 07:32 Mac Login Banner Bug 09:47 Family Sharing Payments 10:50 Hidden WiFi Warning 13:25 Contacts Sort Shortcut 17:47 NFC Shortcut Ideas 20:38 Safari Quit Remap 24:00 Menu Bar Icon Tools 24:56 Menu Bar App Trust 26:16 Declutter Menu Bar 27:09 Shrink Icon Spacing 29:04 Finder Column Autosize 30:28 Boring Notch Tricks 32:10 Building Podcast Studio 33:17 RodeCaster Video S 39:27 Video Podcasts Debate 41:51 DDM Updates Workflow 49:20 DDM Policies and Alerts 55:32 Wrap Up and Patreon
May 26 · 45 min
Best Of CCP - 309: The Tech Power Of Magnets
Sam Valencia, Jerry Zigmont and Joe Saponare discuss working with Apple technology and clients. Drawn from their combined experience of over 20 years in the Apple Consultants Network, thaey discuss technical support issues both with the technology and working with clients.
#670
May 19 · 48 min
670: Adam Engst (TidBITS) Apple at 50 — The Anniversary Nobody's Talking About: Community, HyperCard, and What We Lost
Adam Angst of TidBITS reflects on Apple's 50 years through the lens of early tech idealism, arguing that what mattered most wasn't Apple itself but the community around it, which was weakened by shifts like the end of Macworld keynotes, Apple's vertical integration, and the decline of user groups and independent resellers. He contrasts the Mac's early "create" ethos (e.g., HyperCard) with later emphasis on communication and content consumption via iPod, iPhone, and social media, while noting growing societal harms from tech giants. Angst describes renewed excitement in creation via AI tools, citing apps he built for track training and race pacing. He recounts how his 1993 Internet Starter Kit for Macintosh bundled software (including MacTCP) and a flat-rate ISP account, prompting an Apple Legal scare resolved by the MacTCP product manager, and closes by urging people to ditch social media and "go outside." 00:00 Part Two Kickoff 00:37 TidBITS Anniversary 00:52 Apple 50 Reflections 01:59 Pre Web News Era 04:33 Early Internet Optimism 05:20 Flame Wars Then 07:31 Apple Idealism Fades 10:20 Community Was The Magic 11:45 Macworld And User Groups 14:00 Vertical Integration Shift 17:25 Apple Turning Points 22:20 Creators To Consumers 25:43 From Consumption to Creation 26:01 Bicycle for the Mind 27:27 AI as Research Assistant 28:26 Building Runner Tools 29:40 Pacing Math Problem 33:25 AI MVP to Real Code 36:04 Internet Starter Kit Origins 40:56 Apple Legal Scare 43:09 Invent a Better Future 46:04 Go Outside Finale ——————————————————————————__—
#669
May 12 · 1 hr 6 min
669: Adam Engst (TidBITS): Slack Impersonation Malware, Anthropic's Mythos, and Why You Need a Personal AI Defender
Adam Engst (TidBITS) discusses a malware incident in a long-running public "Slack Bits" group where a bad actor impersonated Glenn Fleishman via a duplicate Slack display name, tricking him into downloading an info-stealer, prompting Engst to consider shutting down the 1,400-member community. The conversation shifts to Anthropic's Mythos and Project Glasswing (as covered by TidBITS security editor Rich Mogull), which reportedly found long-standing bugs (including in OpenBSD and FFmpeg), raising concerns about AI-accelerated vulnerability discovery, defender/attacker asymmetries, costs and compute barriers, and impacts on zero-day markets. They also cover Apple's iOS signing and update/upgrade distinctions, why Apple supports macOS differently than iOS, broader distrust in institutions, social media's advertising/algorithm problems (including Section 230), bots and AI-driven phishing, and the idea of local, user-controlled AI agents to help protect individuals online. 00:00 Welcome Back Adam Engst 00:20 Slack Impersonation Scare 02:15 Cleaning Up a Public Slack 03:40 Mythos and Glasswing Explained 05:19 AI Bug Hunting Reality Check 08:25 Red Team Blue Team Asymmetry 09:50 Compute Costs and Access Barriers 12:19 Trust Ethics and Regulation 17:50 Personal AI Security Agents 23:34 Zero Day Markets and Exploit Kits 25:40 iOS Signing and Update Windows 27:13 Why Macs Get Longer Support 32:06 Scams Incentives and Pig Butchering 34:02 Life Offline and Misinformation 35:41 Social Media Hot Garbage 36:43 Addiction By Design 37:46 Advertising Model Flaw 38:47 Infinite Scroll Limits 39:39 Dunbar Number Reality 40:54 Platform Power Responsibility 42:46 AI Influencers And Slop 43:37 Bots And Fake Accounts 46:33 AI Phishing And Passkeys 49:21 Closed Communities Trust 53:25 CAPTCHAs And Human Help 56:08 Section 230 And Algorithms 57:46 Chronological Feed Fix 59:35 Two Week News Rule 01:02:41 Ads In Maps Backlash 01:04:10 Wrap Up And Next Part
#668
May 5 · 48 min
668: Michael Thomsen of Origin 84, Part Two - Reusable Compliance Policies, ISO 27001 Audits, and Building a Fractional GRC/Strategy Bench
In this Command Control Power episode, host Joe and guests discuss standards, policies, certification, and compliance with Michael Thomsen of Origin 84 in Sydney, continuing an ISO 27001 deep dive. Michael explains how policies are written to solve specific control problems (e.g., MFA) and can be reusable, while areas like data classification require tailoring based on a client's industry, legislation, contracts, and workflows; key discovery questions include where data is stored and shared, and what obligations contracts impose. The conversation contrasts frameworks (NIST, Essential Eight) and notes auditors verify that policies drive processes and are followed, emphasizing continual improvement through audits, risk/incident tracking, and iterative remediation. Jerry and Sam share healthcare/SOC 2 experiences and discuss shifting solo consultants from tactical support to higher-value strategic advisory/account management, using fractional roles and partners. Michael outlines Origin 84's fractional model (financial controller, HR, strategy officer, plus legal/CFO) and sourcing via professional networks, LinkedIn, and conferences like ACEs, where Michael will present on account management
#667
April 28 · 58 min
667: Michael Thomsen of Origin 84 on Building a Process-Driven MSP and Using Compliance Frameworks for Strategy
CCP welcomes returning guest Michael Thomsen of Origin 84 from Sydney, Australia and discusses how he prepares to leave his business for long travel by relying on organizational design, documentation, and clear accountability, using Confluence and EOS-style role success criteria to prevent gaps and duplication. They explore perfectionism versus "good enough," emphasizing repeatable standards a team can deliver, protecting integrity, and avoiding preventable mistakes. The conversation shifts to why SOC 2, HIPAA, and ISO 27001 matter as clients face more vendor-risk questions, and how policies differ from procedures by enabling decentralized decisions. Michael explains Origin 84's fixed-fee, services-first model and a "magic quadrant" approach that moves from help desk and IT admin to account management and strategy, using root-cause fixes across all clients. He details standardizing on Microsoft-first tooling (including Entra SSO for Google), vendor-risk concerns, and how certification frameworks drive continual improvement and practical, auditable policies. 00:00 Welcome Back Michael 00:35 Travel Rituals Offline 01:14 Leaving the Business 03:23 Planning Like Military 04:47 Runbooks EOS Accountability 07:22 Perfection Versus Good 13:53 Standards And Certifications 16:32 Policy Versus Procedure 17:56 Building Sticky Services 20:14 Magic Quadrant Strategy 23:16 Fix Root Causes 26:21 Flat Rate Incentives 27:45 Strategy Alignment Limits 29:13 Listening Before Pushing 30:08 Pricing Pushback Story 31:52 Standardize Security Baselines 34:33 Paying for Certification Proof 36:10 Cut Costs via Account Management 36:50 Client Owned Subscriptions 39:21 Microsoft as North Star 41:10 Vendor Risk and Contingencies 47:37 Entra SSO for Google 50:46 ISO 27001 Policy Reality Check 54:57 Part Two Wrap Up

Showing 1–20 of 24 episodes