Well, my first interview is Tuesday, even before my final pay check is due

@DustinB3403 said in What Are You Doing Right Now:

@RojoLoco said in What Are You Doing Right Now:

@DustinB3403 said in What Are You Doing Right Now:

@RojoLoco That is a totally different life style to what I was imaging...

So where do they grow their plants if they don't have land to work? Where do they sleep if they don't own or rent? And don't they ever just get an urge to have a big fat juicy steak with a side of shrimp?

The answer to all those queries is "who cares, they're filthy hippies".

hey now, hippies have a use, like human shields.... or fertilizer for feed for beef farms..

Yes, they made my news feeds again today.

https://www.bleepingcomputer.com/news/security/hardcoded-password-found-in-cisco-software/

Since Cisco keeps being so popular with the security breaches and vulnerabilities, I figured it's time they get their very own thread.

Well, looks like I will be able to make it, thanks to @DustinB3403!

Dilbert and one of the big topics around here:

Thought I'd drop one of my current projects here. It started as just wanting a way to see what the temperature in a room is without having to have someone go check. (It's another building in a locked room few people have a key for.)

We already have lots of project cases, and also already had a Raspberry Pi. The new $5 Pi would need a network connection of some sort, so figure $10 for the networked PC ($20 if you need a power supply and memory card as well). I splurged at $13 for a combination temperature and humidity sensor. I went ahead and added a door sensor as well, it was $2. I also got a Cobbler Plus GPIO Breakout for $8 and a Perma-Proto board for $6. Total cost for me was $29. If you need a Pi as well figure ~$50 for everything. Compare that to any of the commercial offerings!

I'll post the code I use for everything here, along with references where possible. After all, that's where the real cost of these little things end up being.

It might be good to add a battery backup to it as well, which is quite easy, but I have no real need for that (if the power is out, the temperature isn't going to be getting out of control.) Adafruit makes it really easy.

@eddiejennings said in What Are You Doing Right Now:

Thing learned today: Domain controller must have SMB v1 enabled for a Server 2003 member to join the domain.

I learned that I only have to get inside your LAN in order to steal all the network data.

This is mostly to make things a matter of public record, in addition to a bit of a rant.

Got a call yesterday morning. They can't process credit cards. That office happens to use Intuit/Quickbooks for everything from inventory tracking, to payment processing and accounting. I've been down the road of getting away from Intuit often. Don't know if this will push them past the edge or not.

Ok, spent 2 hours manually doing updates because the automatic ones broke along the way somewhere. Updates complete. Good, we should be up and running. They try to login, and get asked for a code. Ok, check the email address... nothing.

Now I'm calling Intuit support (bad idea, but we're basically not in business at this point.) That's a 3 hour call where I'm told something is wrong with our email server.

Fine, hang up with one unhelpful peon. Go eat lunch (3:30pm at this point, my blood sugar is about to tank.)

Get back into the office around 4:30. Enough time to find something very interesting in the server logs...

2016-10-05 14:01:56 H=lvmailappout12.intuit.com [199.16.139.22]:30939 sender verify fail for <[email protected]>: response to "RCPT TO:<[email protected]>" from mailin.intuit.com [206.108.40.19] was: 550 #5.1.0 Address rejected.
2016-10-06 11:17:10 H=mailout203.intuit.com [206.108.40.17]:49121 X=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 CV=no F=<[email protected]> rejected RCPT <[email protected]>: Sender verify failed

Now, I spent way to much time figuring out how to deal with spam, and have gotten it figured out for the most part. So, they are sending a confirmation code out using an address that their own email server does not acknowledge as being valid. Yet it's somehow my fault that the email is not being delivered.

Spent another 2 hours on the phone this morning going over the same stuff. We're working through alternatives, none of which are something the business would normally find acceptable.

This on top of them having me enable SSL2 in the browser. Uhm, these computers have to remain PCI compliant, and they just purposely made them non-compliant.

Malicious company, let it be known.

Getting noticed is easy!

Getting the right kind of notice is very hard!

http://www.bleepingcomputer.com/news/security/900-000-routers-knocked-offline-in-germany-amid-rumors-of-cyber-attack/

On Facebook, Deutsche Telekom engineers recommended that users unplug their devices, wait for 30 seconds and restart their router. If the equipment fails to connect to the company's network, engineers told users to disconnect their device from the company's network permanently.

To compensate the downtime, Deutsche Telekom is offering free mobile Internet until the technical problem is resolved.

DSL routers all over Germany, and presumably worldwide if anyone else happens to be using the same DSL Modem that got hit by this.

@thwr, hope you're still running!

@nadnerb said in Random Thread - Anything Goes:

In the case of that picture, track down where the termination resistor disappeared to.

@dashrender said in Staying at your shitty employer is your fault:

@stacksofplates said in Staying at your shitty employer is your fault:

@dashrender said in Staying at your shitty employer is your fault:

I've read that west coast companies are now starting to have a new baseline salary for a position, then up it based on where you actually live. So the base might be $80K, but if you live in SF, you get $40K/y more, but live in Wisconsin - you just get 80K.

This is the initial post. Dash stated this and then others had to jump in to argue. He is right, they do it. Whether anyone agrees or not with the idea is immaterial, it happens frequently so Dash was correct.

Right - I guess what I really wanted to know is what is wrong with this?

Clearly Scott took this to the extreme, you buy an expensive car - you get paid more, but buying an expensive car isn't required, but often moving to a cheaper place to live (i.e. another city/state/country) isn't an option many can or are willing to make.
So putting aside that we don't live in Scott's perfect world where exactly that will happen - again moving to lower expense area - The purpose of my post was discuss options.

I know this is happening more and more often. Just doesn't make any sense at all!

How does my value to the company change because of where I happen to live? (it doesn't). So why should my pay vary based on where I live, since my value to the company doesn't change?

@pete-s said in New customer - greenfield setup:

@scottalanmiller said in New customer - greenfield setup:

@dashrender said in New customer - greenfield setup:

So the long and the short of it is - Scott is saying - no filtering is worth it, either on the employee side or the guest side.

i.e. the firewall is not a place to provide filtering (via either IP blocking or DNS website blocking) - there is not enough value if it has any cost.

Doing something simplish like Cloudflare's DNS filtering is worthwhile because there's no cost.

Yeah, I think that something simple like CloudFlare or even PiHole (or combine the two) can have good value because the cost is low and the value is basic.

You don't need any PiHole. You can set up DNS filtering policies on your free cloudflare account.

Just block every kind of external DNS queries in the firewall/router. Set the router to forward DNS to Cloudflare's 1.1.1.1. Cloudflare will detect your IP and filter your DNS results based on your policies.

https://developers.cloudflare.com/cloudflare-one/tutorials/secure-dns-network

I haven't played with it yet but there seems to be a lot of filtering options.

Custom filtering without cost? That's news to me. I've known about the 1.1.1.2/1.0.0.2 and 1.1.1.3/1.0.0.3 options of course.

@gjacobse said in What Are You Doing Right Now:

@travisdh1 said in What Are You Doing Right Now:

Swearing at Dell. Latitude 3520 laptops do not use a standard Kensington lock... I'm 2 hours from the office on location with laptops that are supposed to be locked up.

That's odd... While I have never actually used the lock, I've near seen it not fit for anyone that does.

Yeah, neither have I, until now!

Swearing at Dell. Latitude 3520 laptops do not use a standard Kensington lock... I'm 2 hours from the office on location with laptops that are supposed to be locked up.

@dashrender The upgrade to Windows 10 was the first I remember that would just work more often than not. When it didn't work it would roll back to whatever version you were upgrading from. I, personally, never had it fail outright and leave a computer in an unusable state. So we'd schedule the upgrade to happen overnight most of the time if we couldn't get the upgrade scheduled during the day when we could watch it.

@gjacobse said in Windows 11 auto upgrade?:

Heh - I don't have to worry about Auto Upgrade as every computer I have is not compatible with it. One computer is so unsupported - 21h1 BSODs the damn thing...

I'll get 11 when I replace them,.. and I'm not about to replace every one at the same time...

Out of curiosity, how many workstations would that entail?

@wrcombs said in Windows 11 auto upgrade?:

@dashrender said in Windows 11 auto upgrade?:

@wrcombs said in Windows 11 auto upgrade?:

Has anyone noticed an uptick in Windows10 auto upgrading to Windows11 due to windows updates?
Seeing this with many Back office PC's where they "leave at the end of the night and it's windows10 and the come back and it's windows 11"

Just curious if were the only one's seeing this

While I haven't personally - I fully expect this to be the case. The longer Windows 11 is out, the more machines that will automatically go, if they pass the specs.

it just is a pain in the ass when it happens.
cause 3 or 4 of the programs we install on our devices get uninstalled.

That'll suffice for an understatement.

@wrcombs said in Windows 11 auto upgrade?:

Has anyone noticed an uptick in Windows10 auto upgrading to Windows11 due to windows updates?
Seeing this with many Back office PC's where they "leave at the end of the night and it's windows10 and the come back and it's windows 11"

Just curious if were the only one's seeing this

I haven't seen this yet.

It's likely just a matter of time, weather through user ignorance, Microsoft behaving badly, or both.

@dave247 said in Looking for simplest/secure setup for connecting a domain joined computer to corporate network when remote:

@pete-s said in Looking for simplest/secure setup for connecting a domain joined computer to corporate network when remote:

@dave247

On every Windows PC I've seen setup with VPN, you login in to the PC first, using the domain credentials (which I assume are cached). Then you "manually" connect with the VPN client using MFA.

So maybe you're overcomplicating things.

Yeah I think that's my issue. I was at home when I joined my test system to the domain so it couldn't finish the task and cache my credentials. I will have to play around with stuff a bit more not on the weekend. I think I can get this working the way I want...

Sign in with a local user account first, sign into the VPN. Switch user to your domain user, done.