Well, my first interview is Tuesday, even before my final pay check is due :)

@DustinB3403 said in What Are You Doing Right Now:

@RojoLoco said in What Are You Doing Right Now:

@DustinB3403 said in What Are You Doing Right Now:

@RojoLoco That is a totally different life style to what I was imaging...

So where do they grow their plants if they don't have land to work? Where do they sleep if they don't own or rent? And don't they ever just get an urge to have a big fat juicy steak with a side of shrimp?

The answer to all those queries is "who cares, they're filthy hippies".

hey now, hippies have a use, like human shields.... or fertilizer for feed for beef farms..

Yes, they made my news feeds again today.

https://www.bleepingcomputer.com/news/security/hardcoded-password-found-in-cisco-software/

Since Cisco keeps being so popular with the security breaches and vulnerabilities, I figured it's time they get their very own thread.

Well, looks like I will be able to make it, thanks to @DustinB3403!

Dilbert and one of the big topics around here:

Thought I'd drop one of my current projects here. It started as just wanting a way to see what the temperature in a room is without having to have someone go check. (It's another building in a locked room few people have a key for.)

We already have lots of project cases, and also already had a Raspberry Pi. The new $5 Pi would need a network connection of some sort, so figure $10 for the networked PC ($20 if you need a power supply and memory card as well). I splurged at $13 for a combination temperature and humidity sensor. I went ahead and added a door sensor as well, it was $2. I also got a Cobbler Plus GPIO Breakout for $8 and a Perma-Proto board for $6. Total cost for me was $29. If you need a Pi as well figure ~$50 for everything. Compare that to any of the commercial offerings!

I'll post the code I use for everything here, along with references where possible. After all, that's where the real cost of these little things end up being.

It might be good to add a battery backup to it as well, which is quite easy, but I have no real need for that (if the power is out, the temperature isn't going to be getting out of control.) Adafruit makes it really easy.

@eddiejennings said in What Are You Doing Right Now:

Thing learned today: Domain controller must have SMB v1 enabled for a Server 2003 member to join the domain.

I learned that I only have to get inside your LAN in order to steal all the network data.

This is mostly to make things a matter of public record, in addition to a bit of a rant.

Got a call yesterday morning. They can't process credit cards. That office happens to use Intuit/Quickbooks for everything from inventory tracking, to payment processing and accounting. I've been down the road of getting away from Intuit often. Don't know if this will push them past the edge or not.

Ok, spent 2 hours manually doing updates because the automatic ones broke along the way somewhere. Updates complete. Good, we should be up and running. They try to login, and get asked for a code. Ok, check the email address... nothing.

Now I'm calling Intuit support (bad idea, but we're basically not in business at this point.) That's a 3 hour call where I'm told something is wrong with our email server.

Fine, hang up with one unhelpful peon. Go eat lunch (3:30pm at this point, my blood sugar is about to tank.)

Get back into the office around 4:30. Enough time to find something very interesting in the server logs...

2016-10-05 14:01:56 H=lvmailappout12.intuit.com [199.16.139.22]:30939 sender verify fail for <[email protected]>: response to "RCPT TO:<[email protected]>" from mailin.intuit.com [206.108.40.19] was: 550 #5.1.0 Address rejected.
2016-10-06 11:17:10 H=mailout203.intuit.com [206.108.40.17]:49121 X=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 CV=no F=<[email protected]> rejected RCPT <[email protected]>: Sender verify failed

Now, I spent way to much time figuring out how to deal with spam, and have gotten it figured out for the most part. So, they are sending a confirmation code out using an address that their own email server does not acknowledge as being valid. Yet it's somehow my fault that the email is not being delivered.

Spent another 2 hours on the phone this morning going over the same stuff. We're working through alternatives, none of which are something the business would normally find acceptable.

This on top of them having me enable SSL2 in the browser. Uhm, these computers have to remain PCI compliant, and they just purposely made them non-compliant.

Malicious company, let it be known.

Getting noticed is easy!

Getting the right kind of notice is very hard!

http://www.bleepingcomputer.com/news/security/900-000-routers-knocked-offline-in-germany-amid-rumors-of-cyber-attack/

On Facebook, Deutsche Telekom engineers recommended that users unplug their devices, wait for 30 seconds and restart their router. If the equipment fails to connect to the company's network, engineers told users to disconnect their device from the company's network permanently.

To compensate the downtime, Deutsche Telekom is offering free mobile Internet until the technical problem is resolved.

DSL routers all over Germany, and presumably worldwide if anyone else happens to be using the same DSL Modem that got hit by this.

@thwr, hope you're still running!

@scottalanmiller said in Non-IT News Thread:

@stuartjordan said in Non-IT News Thread:

Just managed to put some fuel in the car, the petrol stations are all run out. Last garage in my town has only an hour left of fuel. Idiot panic buyers causing carnage in the uk.

Damn. Toilet paper out in the EEUU / USA I hear. No issues here.

If we're having another shortage of **** paper, it hasn't hit my area yet.

@gjacobse said in Powershell Start-Process Differences:

@irj said in Powershell Start-Process Differences:

How big is the organization? Have you talked to others in IT about what's acceptable and what isn't?

It sounds like you need the ability to write powershell scripts. Why not bring it up to your manager and other teams if need be?

It's been a (sore) subject since I started... Having worked with @EddieJennings and @Dashrender on some scripts and the goal of moving to PS over MS Batch.. I wanted to do more..

But between Execution Policy and such, it's pretty much trying to pour water through a wall... just not going to happen due to security (reasons). We are a clinic - so security is of course important. But the State dealt with PHI and such as well and the Policy was permitted.... sigh

I don't suppose being cheeky and calling powershell commands from a batch file works differently? I'd assume not, but might be worth a try.

Someone at state has things a little backwards if they're allowing cmd bat files but not powershell ps1 scripts!

Just because I don't like powershell, doesn't mean it's not more useful than cmd.

@gjacobse said in What Are You Doing Right Now:

Fighting SMTP settings for a MFP to scan to email. Several things were changed since the last one I had to setup...

Good luck. Way to many times I've had to setup a local forwarding "server" to get that working since printer firmware updates never seem to update available SMTP settings.

@jaredbusch said in iPad 2 - are they still considered secure?:

@dashrender said in iPad 2 - are they still considered secure?:

OK Hive mind - I'm looking for opinions.

An iPad 2 - released in 2011, and not updated since iOS 9.3.5 in August 25, 2016.

Would you consider this a secure device today?

iPad 2 is no longer updatable, so no. It is not a secure device.

This

@gjacobse said in I can't even:

@notverypunny said in I can't even:

@gjacobse said in I can't even:

Users who can't do a proper shut down or restart of their computer. And then complaining that it's dog in winter slow.

Uptime was 22days (not the worst I've seen). Disk and Memory were at 100% usage before restart.....

With the W10 fast-boot / hybrid shutdown I've seen last boot times upwards of 9 months and a year on some machines.

Jeez - It's been several years,... but a friend had me check the uptime of the Linux server after him.... just to 'prove a point'... maybe.. Uptime was on the order of 960 days... Insanity.

You need to reboot to verify hardware hasn't failed at least once a month, sheesh.

@pete-s said in Experience with Supermicro Microcloud servers?:

@travisdh1 said in Experience with Supermicro Microcloud servers?:

@pete-s said in Experience with Supermicro Microcloud servers?:

@travisdh1 said in Experience with Supermicro Microcloud servers?:

@notverypunny said in Experience with Supermicro Microcloud servers?:

Based on experience with what appears to be re-branded SuperMicro stuff I'lm not a fan. I can't speak to your option specifically but they've been nowhere near as reliable as anything we've gotten from Dell.

We've had bad experience with a certain model SATADOM that Thinkmate sales had recommended for a while.

Sadly I don't think my boss has learned about trusting sales/vendors yet.

A Supermicro SATADOM? Do you know which one?

I don't remember, I used the hammer and concrete method of assured data removal on them. They looked like usb flash drives with a sata connector rather than a usb connector on the side.

Doesn't sound like Supermicro's own then. They look like this (they don't have a case, just a bare PCB):

They used a similar layout to that picture, but they had very few components on the circuit board. Found my old pictures tho, they were branded Innodisk, SATADOM-ML 3ME3.

@stuartjordan said in Exchange Environment - Lab:

@travisdh1 said in Exchange Environment - Lab:

@stuartjordan said in Exchange Environment - Lab:

I can see what others are saying, onsite exchange not really no point, but a lot of MSP's still host their own copy of exchange normally in a datacenter and you could sell your own hosted exchange to customers. This only would be advantageous with lots of users. But you just cannot beat the costs of 365 with normal Businesses.

If you want to host email, why would you use the worst platform possible to find? Why not Zimbra for example?

I'm not on about me, I personally use mailcow. But I'm stating big MSP'S and hosting companies still use hosted exchange in a datacenter enviroment.

I guess that requires the discussion about management not caring about the company and treating it like a hobby business yet again.

@pete-s said in Experience with Supermicro Microcloud servers?:

@travisdh1 said in Experience with Supermicro Microcloud servers?:

@notverypunny said in Experience with Supermicro Microcloud servers?:

Based on experience with what appears to be re-branded SuperMicro stuff I'lm not a fan. I can't speak to your option specifically but they've been nowhere near as reliable as anything we've gotten from Dell.

We've had bad experience with a certain model SATADOM that Thinkmate sales had recommended for a while.

Sadly I don't think my boss has learned about trusting sales/vendors yet.

A Supermicro SATADOM? Do you know which one?

I don't remember, I used the hammer and concrete method of assured data removal on them. They looked like usb flash drives with a sata connector rather than a usb connector on the side.

@notverypunny said in Experience with Supermicro Microcloud servers?:

Based on experience with what appears to be re-branded SuperMicro stuff I'lm not a fan. I can't speak to your option specifically but they've been nowhere near as reliable as anything we've gotten from Dell.

We've had bad experience with a certain model SATADOM that Thinkmate sales had recommended for a while.

Sadly I don't think my boss has learned about trusting sales/vendors yet.

@stuartjordan said in Exchange Environment - Lab:

I can see what others are saying, onsite exchange not really no point, but a lot of MSP's still host their own copy of exchange normally in a datacenter and you could sell your own hosted exchange to customers. This only would be advantageous with lots of users. But you just cannot beat the costs of 365 with normal Businesses.

If you want to host email, why would you use the worst platform possible to find? Why not Zimbra for example?