Working in IT 3.0: xp_cmdshell

The Something Awful Forums > Discussion > Serious Hardware/Software Crap > Working in IT 3.0: xp_cmdshell

rafikki: Mar 8, 2008; I see what you did there. (It's pretty easy, since ducks have a field of vision spanning 340 degrees.)

~SMcD

Goddamn that Lenovo debacle.
http://arstechnica.com/security/2015/02/lenovo-pcs-ship-with-man-in-the-middle-adware-that-breaks-https-connections/

# ¿ Feb 19, 2015 17:58

Adbot: ADBOT LOVES YOU

# ¿ Apr 26, 2024 14:32

rafikki: Mar 8, 2008; I see what you did there. (It's pretty easy, since ducks have a field of vision spanning 340 degrees.)

~SMcD

Tab8715 posted:

Does this affect all Lenovo products including the "Think" business line?

Article was recently update with:

quote:

[Update: Lenovo has released a list of models that may have had Superfish installed.

G Series: G410, G510, G710, G40-70, G50-70, G40-30, G50-30, G40-45, G50-45
U Series: U330P, U430P, U330Touch, U430Touch, U530Touch
Y Series: Y430P, Y40-70, Y50-70
Z Series: Z40-75, Z50-75, Z40-70, Z50-70
S Series: S310, S410, S40-70, S415, S415Touch, S20-30, S20-30Touch
Flex Series: Flex2 14D, Flex2 15D, Flex2 14, Flex2 15, Flex2 14(BTM), Flex2 15(BTM), Flex 10
MIIX Series: MIIX2-8, MIIX2-10, MIIX2-11
YOGA Series: YOGA2Pro-13, YOGA2-13, YOGA2-11BTM, YOGA2-11HSW
E Series: E10-30]

# ¿ Feb 19, 2015 20:07

rafikki: Mar 8, 2008; I see what you did there. (It's pretty easy, since ducks have a field of vision spanning 340 degrees.)

~SMcD

Any thoughts on sending a Linkedin request after a good interview? I had a phone conversation with the director of operations at a place last week, then an in person interview with him and the NOC manager, as well as their VP of Operations yesterday. I'm new to the whole Linkedin thing, but I woke up this morning wondering if that would be a good way to follow up with them. I did some googling, and some places suggested doing it while others were the opposite. This is for a NOC tech job, for reference.

I don't have their individual email addresses, and the director said to stay in touch with the HR person who did the initial contact. I already sent her a thank you email after the interview, requesting that she pass that along to them.

# ¿ Mar 11, 2015 14:31

rafikki: Mar 8, 2008; I see what you did there. (It's pretty easy, since ducks have a field of vision spanning 340 degrees.)

~SMcD

flosofl posted:

I think the thank you email should be enough. Those are pretty normal.

I can only tell as someone who conducts later stage interviews that if I got a LinkedIn request from a candidate I'd think it was weird and kind of stalky and also a checkbox on someone's "How To Land A Job-Guaranteed!" list from some website.

Heh, that's what I was worried about. But since I'm totally inexperienced with Linkedin, I figured I'd ask.

# ¿ Mar 11, 2015 15:15

rafikki: Mar 8, 2008; I see what you did there. (It's pretty easy, since ducks have a field of vision spanning 340 degrees.)

~SMcD

Dry Dock on Hampden, Wednesday evenings is always an option :ninja:

# ¿ Mar 19, 2015 05:15

rafikki: Mar 8, 2008; I see what you did there. (It's pretty easy, since ducks have a field of vision spanning 340 degrees.)

~SMcD

Eonwe posted:

I did WGU, it was my 2nd bachelors. No employers have cared that it is online at all, and a few were even interested. Like anything you do online, I think it is all about what you put into it. When I was studying for my CCNA I bought switches and routers, did tons of labs, etc, but if I had wanted to I probably could have just downloaded a brain dump and passed it.

WGU is cheap, the mentors are quick to respond, most of the course work is pretty good, etc.

Each term is 6 months and the same price no matter how many courses you complete. Books and the cost of the vouchers/testing center stuff are all included in tuition. They also have a really big library, access to a bunch of online vids that you can study outside of your coursework, etc. I'm pretty happy with how it all turned out tbh.

WGU also gives you course credit for any certifications you might have.

# ¿ Mar 24, 2015 22:29

rafikki: Mar 8, 2008; I see what you did there. (It's pretty easy, since ducks have a field of vision spanning 340 degrees.)

~SMcD

Anyone have experience with Trustwave? I'm interviewing for a SOC analyst position there and wondered if anyone here had any thoughts on them or that position in particular.

# ¿ Mar 25, 2015 18:59

rafikki: Mar 8, 2008; I see what you did there. (It's pretty easy, since ducks have a field of vision spanning 340 degrees.)

~SMcD

The Denver traffic I've got experienced so far is nothing compared to Atlanta. gently caress Atlanta.

# ¿ Mar 26, 2015 23:01

rafikki: Mar 8, 2008; I see what you did there. (It's pretty easy, since ducks have a field of vision spanning 340 degrees.)

~SMcD

22 Eargesplitten posted:

Thankfully, my folks live(d) 15 minutes from the airport in good traffic. So the most I've ever had to wait in traffic to get there was an hour

The worst traffic I ever saw in Denver was when someone decided it would be a good idea to narrow I-25 Southbound down to one lane of traffic out of three. Despite no construction or accident. Just a few cones blocking off two lanes over the course of about 100 feet. This was on Friday night, right around 5-6PM. Couldn't be more than five miles, it took me two and a half hours to get through it.

That sounds... special.

# ¿ Mar 27, 2015 00:47

rafikki: Mar 8, 2008; I see what you did there. (It's pretty easy, since ducks have a field of vision spanning 340 degrees.)

~SMcD

NOC tech jobs can get you exposure to a fairly broad range of technologies that you may not have touched before. I worked in a colo/managed hosting datacenter NOC for a little while (until it got bought out :argh:

) and got to do all sorts of things. I know you're working on your Microsoft cert, but if you don't have a network+ or ccna or something, you might want to sit down with the book and get down the fundamentals. Stuff like the OSI model, basics of how routing and switching actually work (and what the difference between the two is) maybe a little bit of NAT and ACLs, common ports, what subnetting is and how to do it, that sort of thing. I've done a fair bit of interviewing for another NOC job in the last month, and all that stuff came up every time. Also, some Linux basics.

# ¿ Apr 1, 2015 15:08

rafikki: Mar 8, 2008; I see what you did there. (It's pretty easy, since ducks have a field of vision spanning 340 degrees.)

~SMcD

I'm kind of curious what consulting looks like at a CCIE (not necessarily CCIEs specifically) level. It seems to my pretty inexperienced eye that it would take a fairly significant chunk of time just to get someone up to speed with where the company is at. What kind of projects are handed out, and how do consultants fit in to the day to day workings of an IT department?

# ¿ Apr 4, 2015 20:00

rafikki: Mar 8, 2008; I see what you did there. (It's pretty easy, since ducks have a field of vision spanning 340 degrees.)

~SMcD

Interesting, thanks for the replies.

# ¿ Apr 5, 2015 02:40

rafikki: Mar 8, 2008; I see what you did there. (It's pretty easy, since ducks have a field of vision spanning 340 degrees.)

~SMcD

Richard Noggin posted:

Thank you, Cloud to Butt Extention. This is the best one yet.

I was editing a wiki page that had a lot of references to Cloud Ring (eve online) while running that addon. A few days later someone pings me asking why I renamed everything to Butt Ring.

# ¿ Apr 28, 2015 02:41

rafikki: Mar 8, 2008; I see what you did there. (It's pretty easy, since ducks have a field of vision spanning 340 degrees.)

~SMcD

Methanar posted:

Well I got treated like an equal today and it was pretty nice. Until they told me I'd be cleaning the yard (raking loving dirt) for the next 4 days. I had already set up my own desk and build my own computer, put it on the domain and then I was pulled away to be told lolyourrakingdirt. I was given a tour, told about the AD structure, projects, shown the server room; then dirt.

If I wasn't so spineless I'd have immediately said "No. There has been a misunderstanding here. I am here for a reason and that reason is not cleaning your yard."

# ¿ May 5, 2015 02:17

rafikki: Mar 8, 2008; I see what you did there. (It's pretty easy, since ducks have a field of vision spanning 340 degrees.)

~SMcD

What the gently caress

# ¿ May 6, 2015 00:32

rafikki: Mar 8, 2008; I see what you did there. (It's pretty easy, since ducks have a field of vision spanning 340 degrees.)

~SMcD

The grounding in network fundamentals I gained from studying for the ccna has helped me immeasurably just in the last 6 months as a NOC tech, then especially in my current position where I spend most of my days working on firewalls of various flavors. In all of the interviews I had in March and April, I was much more prepared thanks to it. I've never seen the stuff for the network+, but I can't imagine it's as thorough.

# ¿ May 23, 2015 17:36

rafikki: Mar 8, 2008; I see what you did there. (It's pretty easy, since ducks have a field of vision spanning 340 degrees.)

~SMcD

adorai posted:

Not really. Since he's asking, he's probably looking to implement a very first change control process in his org. Ours is pretty simple, and simple is better because people are more likely to follow a simple process.

Name:
Date of change:
Short description of change:
Detailed description of change:
Suspected negative impact of change:
Alternatives to change:
Backout process for change:

Pretty easy.

Not sure if this is what you meant by the 5th point, but impact during the change is good, too. i.e. increased latency, or temporary outage of such and such service.

# ¿ Jun 8, 2015 02:29

rafikki: Mar 8, 2008; I see what you did there. (It's pretty easy, since ducks have a field of vision spanning 340 degrees.)

~SMcD

Methanar posted:

I've never properly appreciated how much I love cisco's cli.

I like it even more than bash. Networking device UIs suck rear end.

In my current job, on a daily basis I regularly switch from ASAs to Juniper firewalls to Linux UTMs, with the occasional Fortigate device thrown in for good measure. I haven't really decided which I like best. I think troubleshooting on a linux box is easiest for me, while I tend to like messing with policies on a Juniper. Packet tracer on ASAs is just the best thing ever, though.

# ¿ Jun 12, 2015 04:33

rafikki: Mar 8, 2008; I see what you did there. (It's pretty easy, since ducks have a field of vision spanning 340 degrees.)

~SMcD

psydude posted:

I agree with the exception that it doesn't work well for troubleshooting site to site VPNs.

Palo Alto best firewall.

Yeah, I've noticed that, too. Glad it wasn't just me misusing it somehow.

# ¿ Jun 12, 2015 04:41

rafikki: Mar 8, 2008; I see what you did there. (It's pretty easy, since ducks have a field of vision spanning 340 degrees.)

~SMcD

What? You're not intimately familiar with frame relay?! Shame on you.

# ¿ Jun 19, 2015 01:11

rafikki: Mar 8, 2008; I see what you did there. (It's pretty easy, since ducks have a field of vision spanning 340 degrees.)

~SMcD

I'm in my second IT job after a three month stint in a NOC that ended in a buyout. As I mentioned earlier in the thread, I'm regularly working on Linux UTMs, Juniper Firewalls and Cisco ASAs. For the latter, the company has been having us go through the CBT nuggets CCNP videos as supplementary training. It's definitely been a crash course in learning a wide range of stuff, but it's been coming together nicely.

# ¿ Jun 19, 2015 13:37

rafikki: Mar 8, 2008; I see what you did there. (It's pretty easy, since ducks have a field of vision spanning 340 degrees.)

~SMcD

Docjowles posted:

Thanks. Yeah... like I said I was not intending to make the move so soon. But the offer loving blew what I was even planning to ask for at the top end out of the water. So here we go!

Amusingly I actually interviewed with Google for a Linux admin position earlier this year. Made it through the entire thing, including multiple phone screens and a half-day onsite. Got great feedback at every stage, thought I was gonna get an offer. Then at the very last moment they decided I didn't meet their bar for programming skills and the whole thing blew up. To be fair I did kind of bomb that segment. I don't think I'm allowed to talk about it more than that (what up NDA's) but honestly this offer is close to what I'd likely have gotten from them. It's not the ungodly resume boost Google would be, but I'm pretty excited things worked out how they did since now I get to move back close to family.

# ¿ Jun 22, 2015 03:11

rafikki: Mar 8, 2008; I see what you did there. (It's pretty easy, since ducks have a field of vision spanning 340 degrees.)

~SMcD

pmchem posted:

I'm rather thinking that half the stuff you posted is stuff your bosses might not approve of posting? sheesh, at least you're out of a job one way or another!

I was kinda wondering about that myself.

# ¿ Jun 23, 2015 02:39

rafikki: Mar 8, 2008; I see what you did there. (It's pretty easy, since ducks have a field of vision spanning 340 degrees.)

~SMcD

Oh Cisco

http://arstechnica.com/security/2015/06/two-keys-to-rule-them-all-cisco-warns-of-default-ssh-keys-on-appliances/

# ¿ Jun 27, 2015 01:47

rafikki: Mar 8, 2008; I see what you did there. (It's pretty easy, since ducks have a field of vision spanning 340 degrees.)

~SMcD

Just wrapped up my three month contract to hire period and got an official job offer :yotj:

It was a bit nervewracking being laid off from my first IT job after three months due to a buyout but a month of being unemployed later I started this 3 month period with a 50% raise over the last job. And, I'm learning a lot more than I was on top of that.

One question, for LinkedIn/resumes etc in the future, should I split up the period where I was technically a contractor employed by a consulting company and the time that I officially work for the actual company or just put it as an uninterrupted block of time? For the purposes of background checks and such, I'm sure I need to mention that I was employed by two separate companies in that time period but how about as far as cluttering up my resume?

# ¿ Jul 1, 2015 02:09

rafikki: Mar 8, 2008; I see what you did there. (It's pretty easy, since ducks have a field of vision spanning 340 degrees.)

~SMcD

Heh, both of you have good points and that's why I was asking. I worked through both lines of thought myself and couldn't decide so I figured I'd toss it out here. I'm 100% on board with flosofl is saying but I'm curious if that should apply to my resume and LI profile or if that should only be relegated to an actual job application.

# ¿ Jul 1, 2015 02:50

rafikki: Mar 8, 2008; I see what you did there. (It's pretty easy, since ducks have a field of vision spanning 340 degrees.)

~SMcD

Dark Helmut posted:

"Allow me to retort"

You can have it both ways:

Kickass Corp (via 3 mo contract to hire) JAN 2015 - Present
Bit Tickler
* Browse SA Forums
* Watch Let's Plays on You Tube
* Porn Torrenting

This way it's clear there was a contract period and when they call to verify you aren't trying to hide it. BUT, you can win back that ever so precious first page real estate that is PRICELESS.

My first rule of thumb in resume writing is "Assume they will never get to the second page" so it's key you don't waste time doubling up a job entry.

Good stuff, so just put the (via 3 mo contract to hire) and leave off the consulting company's name there, right? And the whole keeping it to one page was definitely in mind when I was thinking through the options.

# ¿ Jul 1, 2015 03:19

rafikki: Mar 8, 2008; I see what you did there. (It's pretty easy, since ducks have a field of vision spanning 340 degrees.)

~SMcD

I just converted from a contract to hire to full time employee and knew up front that was going to happen. That's pretty standard from what I understood before, and what the people have been saying here since you asked.

# ¿ Jul 19, 2015 04:30

rafikki: Mar 8, 2008; I see what you did there. (It's pretty easy, since ducks have a field of vision spanning 340 degrees.)

~SMcD

This should be fun:

http://arstechnica.com/security/2015/07/950-million-android-phones-can-be-hijacked-by-malicious-text-messages/

# ¿ Jul 27, 2015 19:36

rafikki: Mar 8, 2008; I see what you did there. (It's pretty easy, since ducks have a field of vision spanning 340 degrees.)

~SMcD

Packet tracer is always your friend, too.

# ¿ Jul 31, 2015 05:51

rafikki: Mar 8, 2008; I see what you did there. (It's pretty easy, since ducks have a field of vision spanning 340 degrees.)

~SMcD

Sheep posted:

Best to be explicit: the packet-tracer command is your friend. The Packet Tracer PC software probably won't be much help here even if it does emulate ASAs these days (I'm pretty sure it doesn't).

Cisco is dumb for having two completely different things share the same name.

Good call, yes. It definitely confused me when I first started working on ASAs and had only heard of Packet Tracer the software.

# ¿ Jul 31, 2015 16:59

rafikki: Mar 8, 2008; I see what you did there. (It's pretty easy, since ducks have a field of vision spanning 340 degrees.)

~SMcD

A CCNP is rather overqualified to work in a NOC, imo.

# ¿ Aug 2, 2015 15:31

rafikki: Mar 8, 2008; I see what you did there. (It's pretty easy, since ducks have a field of vision spanning 340 degrees.)

~SMcD

CptJackLaser posted:

I'm doing some research on an ESXi whitebox build with at least 64GB of RAM for a CCIE home lab setup. I figured I'd ask around here if anyone else has built one recently, and if so, do you have a parts list? Is anyone else studying for the CCIE R&S?

Just a heads up that there is a Home Lab thread http://forums.somethingawful.com/showthread.php?threadid=3561669 and Cert thread http://forums.somethingawful.com/showthread.php?threadid=3521165

This isn't me telling you to take the question out of this thread, by any means, because this is definitely the most active one with presumably the largest number of eyes, just a FYI.

# ¿ Aug 24, 2015 16:10

rafikki: Mar 8, 2008; I see what you did there. (It's pretty easy, since ducks have a field of vision spanning 340 degrees.)

~SMcD

KillHour posted:

This makes me sad all the outsourced people I work with are from the Philippines and won't get this reference. My roommate is Indian, though....

I see "do the needful" the most from our Philippines employees :shrug:

# ¿ Aug 28, 2015 14:18

rafikki: Mar 8, 2008; I see what you did there. (It's pretty easy, since ducks have a field of vision spanning 340 degrees.)

~SMcD

tomapot posted:

Since LinkedIn profiles are discussed here a bit I thought I'd share this. LinkedIn is running this cross-county tour with stops in selected cities to provide members with new headshots and profile advice. They are in NYC on Thursday 9/3.

https://opportunity.linkedin.com/tour

And of course they hit Denver three days before I get back from Canada.

# ¿ Sep 1, 2015 14:49

rafikki: Mar 8, 2008; I see what you did there. (It's pretty easy, since ducks have a field of vision spanning 340 degrees.)

~SMcD

22 Eargesplitten posted:

Are the Robert Half IT salary guides worth anything? On Tuesday I'm going to have a meeting discussing conversion to full time. I need a significant raise to be able to stay at this position, because I didn't realize how hard health insurance and a second person's significant medical expenses were going to gently caress my wallet. On the bright side, the amount I need is still within the Robert Half guide's range.

I'm also in a position where within a couple months I'll be providing some T2 support that nobody else on help desk can provide. It's currently being provided by the head of the development department, who has plenty to do without taking tickets. I'm hoping I can leverage that to at least put me at a T1.5 level of pay. It also took them three months to find me, and I'm hoping that their desire to not be drastically understaffed will give me leverage too.

I'm thinking of starting out asking 55k in not-Boulder Northern Colorado. They do pay well by all accounts, nobody has said how much they make to me but everyone agrees on that at least. The problem is that when I got my contract, I was stupid and desperate and only asked for 34k. I know there's a few Colorado goons in here, does that seem reasonable? Does it seem like I could ask for more?

I'm applying for jobs this weekend anyway, I'm nervous. I'd like to stay where I am, but I have mouths to feed.

I'm working in the DTC and making very similar to what you want in a T1 role. I don't know how specialized the help desk stuff you're doing is, but $34k seems on the low end.

e: we're hiring if you want to move...

rafikki fucked around with this message at 20:37 on Sep 4, 2015

# ¿ Sep 4, 2015 20:35

rafikki: Mar 8, 2008; I see what you did there. (It's pretty easy, since ducks have a field of vision spanning 340 degrees.)

~SMcD

Didn't that guy write you up for being incompetent or something? You should reply back to the mail with a copy of whatever he yelled at you about.

# ¿ Oct 5, 2015 15:42

rafikki: Mar 8, 2008; I see what you did there. (It's pretty easy, since ducks have a field of vision spanning 340 degrees.)

~SMcD

MC Fruit Stripe posted:

I haven't described anything, other people have simply run with what I've asked and added to it. All I am asking is if it is my responsibility to learn what I don't know, or if it is my boss's to teach me.

I wonder why people are running with what you've asked, since you haven't given any details.

# ¿ Oct 15, 2015 18:16

rafikki: Mar 8, 2008; I see what you did there. (It's pretty easy, since ducks have a field of vision spanning 340 degrees.)

~SMcD

Wow, this sound familiar? http://www.computerworld.com/article/2994787/it-careers/bank-s-severance-deal-requires-it-workers-to-be-on-call-for-two-years.html

# ¿ Oct 20, 2015 13:38

Adbot: ADBOT LOVES YOU

# ¿ Apr 26, 2024 14:32

rafikki: Mar 8, 2008; I see what you did there. (It's pretty easy, since ducks have a field of vision spanning 340 degrees.)

~SMcD

Garrand posted:

Any examples? PAT has some very obvious use cases but I'm curious what kinds of things NAT (the actual NAT) can be used for.

fake e: Actually I think I'll just read through this article here.

Two of the most common uses of NAT that I run in into are:

A: Port forwarding, where you say "hey! router! if any traffic comes to our public IP 5.5.5.5 on port 80, leave the source IP and source/dest ports alone, but translate the destination IP to $WEBSERVER's IP 192.168.200.52" After it's translated, your router (hopefully) says "hey! I have a route to 192.168.200.52" and so the web traffic is sent there. The return packets sent back out your outif are translated back to the source IP of 5.5.5.5 and everything is groovy.

B: Transparent web proxies, where port 80 traffic on your network is translated to port 8080 which your proxy service is listening on. It does its proxy magic, then sends the traffic on out to the internet.

There are variations on the port forwarding like, let's say you want to have multiple hosts behind your one public IP accessible via RDP from the internet for some reason. You can tell the router to watch for inbound traffic to 5.5.5.5 on port 9380 and translate that to have a destination IP of 192.168.234.21 and destination port 3389. Then you can say inbound traffic on 9381 is translated to .22 on port 3389, etc.

# ¿ Oct 22, 2015 13:32

The Something Awful Forums > Discussion > Serious Hardware/Software Crap > Working in IT 3.0: xp_cmdshell

«‹›8 »