Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
Proteus Jones
Feb 28, 2013



Collateral Damage posted:

Then what's the point of the cloud service?

Money for Meraki.

Adbot
ADBOT LOVES YOU

Proteus Jones
Feb 28, 2013



Super Soaker Party! posted:

CPA client emailing us repeatedly on December 31st about her QB timer not working.

Lady, I can't tell you how much of a poo poo I don't give.

Also welcome the new thread same as the old thread. I look forward to rereading this post in 4 years when this thread closes and laughcrying about my lack of forward pro--oh who are we kidding I'll be drunk off my rear end probably and won't be able to read good.

In four years I'll be mumbling to myself in an alley, thinking about moving to a bigger box.

Proteus Jones
Feb 28, 2013



Samizdata posted:

SECOND REQUEST:

Hey, apparently, I am STILL unable to shitpost to the whole thread. Can you please give me rights to the complete thread? I have a crucial shitpost that MUST be done before open of business tomorrow.

CC: CIO, CEO

Hey guys, what's the hold up? This is Smizdata's manager, and I really, really need him to start shitposting ASAP.

If you can't get this done immediately, I'm going to have to escalate this to your Director. I'm having lunch with him in 20 minutes, so if it's not done by then I'll be raising the issue with him.

Proteus Jones
Feb 28, 2013



22 Eargesplitten posted:

In four years I’ll hopefully be working remote from somewhere in the mountains that still has a decent internet connection. Maybe somewhere cheapish., it would be cool to be able to just sock away big city money living up in the CO / WY mountains.

If I could get reliable high speed internet, I'd become a remote-working, mountain-man hermit so fast your head would spin.

Proteus Jones
Feb 28, 2013



Methanar posted:

I basically do this. It's fun for the first few months but after over 18 months it gets really, really lonely.

I mean, I'm already a work from home hermit. But I'm stuck in suburbia. God drat it I want to be a mountain-man hermit :black101:


E: I mean, I have this manifesto ready to go and everything

Proteus Jones
Feb 28, 2013



Malachite_Dragon posted:

That's what everyone says until the cabin fever sets in :shepface:

I'll have my internet porn to keep me warm :colbert:

Proteus Jones
Feb 28, 2013



nielsm posted:

The vulnerabilities requires the attacker is able to execute code. Usually networking equipment wouldn't accept code to run from arbitrary sources, I think? So it would need to be combined with another vulnerability as a manner of privilege escalation.

Most likely.

I know of a couple devices that do allow easy break out (as a matter of design) to the underlying OS the appliance runs on, but for the most part your Cisco/Juniper/Extreme switches won't generally be susceptible to Meltdown or Spectre without something worse being wrong.

Sickening posted:

Palo Alto is already sending me warning emails with new patches.

This makes sense since it's really just a bunch of interrelated applications running on top of <open source OS>. Most IDS/IPS (and some firewalls) are likely similar.

Proteus Jones fucked around with this message at 21:46 on Jan 4, 2018

Proteus Jones
Feb 28, 2013



rafikki posted:

The stuff I saw from PA today was an emergency content update with new vulnerability signatures for:

critical 40488 Microsoft Scripting Engine Memory Corruption Vulnerability CVE-2018-0769
critical 40489 Microsoft Scripting Engine Memory Corruption Vulnerability CVE-2018-0762
critical 40490 Microsoft Scripting Engine Memory Corruption Vulnerability CVE-2018-0773
critical 40491 Microsoft Scripting Engine Memory Corruption Vulnerability CVE-2018-0776
critical 40492 Microsoft Scripting Engine Memory Corruption Vulnerability CVE-2018-0774
critical 40493 Microsoft Scripting Engine Memory Corruption Vulnerability CVE-2018-0777
critical 40496 Microsoft Scripting Engine Memory Corruption Vulnerability CVE-2018-0758
critical 40498 Microsoft Scripting Engine Memory Corruption Vulnerability CVE-2018-0775

LOL.

2018 is off to a rip roaring start.

Proteus Jones
Feb 28, 2013



Samizdata posted:

It is horses and horse related kit, like trailers. I HAD to click it.

The internet has ruined us, hasn't it.

Proteus Jones
Feb 28, 2013



Data Graham posted:


<Joe'sCrimes.txt>


So, Joe is embezzling?

Also, and I'm not trying to slam you, why can a user alter transaction logs? or have I misunderstood and he's actually changing the "received" items like a correction?

Nvm. I see he's actively adjusting the inventory counts and you're correctly logging that interaction.

Proteus Jones fucked around with this message at 04:20 on Jan 5, 2018

Proteus Jones
Feb 28, 2013



FungiCap posted:

Glad to see nothing has changed with Fortinet since I stopped working for a company that used quite a few of them. I can't tell you how many times the web daemon would crash for the Fortigates (in HA pairs no less) and other unexplainable poo poo like the NTP server feature ceasing to function randomly (which was a big deal for us). Shame because I actually like the feature-set and how things are organized for FortiGate's but their reliability is so poo poo I would never put them in production again as a network engineer if I had the option.

When they're working, they hum along with nary a complaint. Until they don't and all hell breaks loose. And it's *always* something stupid like "oh, well. when we sourced the flash disk it was a bad lot. You'll have to turn off internal logging or it causes instability resulting in a lock-up".

That's what's so frustrating about about Fortigate. All this potential, right there lying just beyond my fingertips because I can't count on it for the long term.

Proteus Jones
Feb 28, 2013



Bob Morales posted:

After about two trips in the cold and snow I bought a UPS with a web interface for the power outlets :effort:

Yeah, our standard rack buildout now includes 2 non-negotiable devices. A multiport serial console server and a rack PDU.

Because it's been historically shown that we can't trust on-site people to find their rear end with both hands and a map (and honestly, dealing with that stuff isn't their job). Also, gently caress sending one of T1/2 guys 50 miles to cycle power.

Proteus Jones
Feb 28, 2013



Thanks Ants posted:

Do you drop in a cheap DSL circuit for OOB access to the serial server?

Nah, that's on whichever group (both internal and external customers) actually runs that datacenter. The stuff we manage on our single rack is behind all that.

E: sorry misunderstood what you were asking first.

Proteus Jones fucked around with this message at 16:43 on Jan 9, 2018

Proteus Jones
Feb 28, 2013



devmd01 posted:

drat near our entire business runs on it, from IT and HR to all of the field service technicians. Thankfully all I have to do is deal with change/incident, but at least half of our developers are servicenow focused.

The UI is a mess and nothing makes any god drat sense, so I’ve learned how to do the bullshit I need to do and that’s it.

Honestly, that's going to be on your developers. The whole thing is super flexible and customizable, which is what makes it such a huge pain when it gets half-assed.

We also use Service Now for a *lot* stuff, from Help Desk to Eng. escalations to Incident Response (and I think we'll be using it to track project deliverables soon too). We actually like it a lot, but it took about a year with stake holders in each department giving extremely detailed requirements and feedback to get it to the point it's at now.

Proteus Jones
Feb 28, 2013



blackswordca posted:

I was onsite swapping out the DB9->Ethernet adapters the use on site

Wait. What?

People still use those? They still make ethernet cards that use them? You have computers that need ethernet cards?

E: Just to be clear. You're referring to this?

Proteus Jones fucked around with this message at 01:18 on Jan 16, 2018

Proteus Jones
Feb 28, 2013



blackswordca posted:

They have a 15 or 20 year old sterilizer. Boss ran a dedicated Ethernet cable with two DB9->Ethernet adapters to manage the log dump.

Oh, OK.

I was reading that as all your clients were using them. Not as a one off for a specific device.

Proteus Jones
Feb 28, 2013



18 Character Limit posted:

I can be the guy that points out Sun Microsystems used to include these with their UltraSPARC II/III era gear. The silver-cased ones they sent were specifically for serial console connections.

I had suspected other vendors also used them, but all the ones I saw were for Sun.

Yeah, I linked an image to the serial converter. I was actually thinking of the old 15pin AUI connectors.

I've used a lot of those when I worked at an insurance company in the late 90s that handled government claims, and all that poo poo was run off a VAX. The whole computer was about the size of a compact car and the storage unit was the size of a washing machine. All the analysts on the floor connected to it using hyperterminal.

Proteus Jones
Feb 28, 2013



Inspector_666 posted:

The mouse action in both of these gifs is the most verisimilitude I've seen in media for a long time.

It really does.

I can absolutely believe that was a screen recording. In each one the mouse movement at the end indicates a definite "WHAT?! OH NONONONONONO!"

Proteus Jones
Feb 28, 2013



Data Graham posted:

I mean we all know this but just a step or two outside our area of expertise there's really no way for a non-subject-matter-expert to know what is trivially easy and what is ludicrous and impossible.

I found a good way to signal "ludicrous and impossible" is the ability to ask the user if they wish to fund the man-hours involved in developing a solution for their "problem". When they see the dollar amount that would get charged against their budget, these kind of "satisfy my curiosity for a really difficult metric to collect" requests are really reduced in quantity.

Proteus Jones
Feb 28, 2013



18 Character Limit posted:

A company I worked for N jobs ago had this issue: couldn't get contract support on hardware and storage due to seriously unpaid invoices. Rumor was that they unofficially paid an engineer for the storage vendor to keep a key production storage array running (without which, the company's primary contract would fold.) It was the best sign to vacate that job. That and buying parts off eBay.

Isn't there some goon in ones of these IT threads that buys all his mission critical server hardware off of eBay?

That's some serious :psyduck:

Proteus Jones
Feb 28, 2013



18 Character Limit posted:

I suspect more than one.

Some jobs are there to teach you to recognize what a bad job is.

Proteus Jones
Feb 28, 2013



Judge Schnoopy posted:

May I see it?

It doesn't concern you.

Proteus Jones
Feb 28, 2013



larchesdanrew posted:


<<larches draws a line in the sand>>


Go, you!

Proteus Jones
Feb 28, 2013



The Iron Rose posted:

Talk to the competitor, say that you'd need their salary to be higher due to your corporation's counter offer. If they cave, great. If they don't, take the counter.

Do not go down this road. Either take the counter-offer or don't. Once you start playing games like this, it's really easy to get the rug pulled out from under you.

Proteus Jones
Feb 28, 2013



larchesdanrew posted:

The best graffiti came in.

Last night, someone drew a photo-realistic Ronald Reagan on the whiteboard in the student lounge with the text, "Mr. [larchesdanrew], tear down this Smoothwall."

I want to get it framed.

Things like this gives me hope for the future.

Proteus Jones
Feb 28, 2013



guppy posted:

We have dealt with complaints like this before. Even if it were feasible, interfering with a wi-fi network not your own is an FCC violation. Telling them that it's illegal is generally enough to get them off your back.

This is truth.

You need to be very careful with any kind of wireless "countermeasures". There are times when you can, but almost always its to prevent unauthorized wireless clients from communicating with wireless networks you directly control (this is a simple dumbed down example).

The FCC takes a very dim view of interfering with unlicensed spectrum (which 802.11 networks use) and will come down like a ton of bricks if it's determined to be deliberate. They fined Marriott around $600K for knocking mobile hotspots out of the air to force conference attendees to use their guest networks. Granted Marriott charged a fee for those, but the punishment would have probably been the same even if the guest networks had been free of charge.

Proteus Jones
Feb 28, 2013



Methanar posted:

Buy a used Fortigate 100d and FortiGuard license for like, 2000 dollars altogether on ebay and use that.
100e is not that much more expensive, but yeah get a Fortigate and a support license that includes FortiGuard.

The 100d/e should easily handle the traffic load from your campus. Let Fortinet do the heavy lifting of categorization. It's been a while since I've used one, but I'm pretty sure if you use FortiGuard, you get multiple updates a day.

Based on the angry "why is this porn site blocked I thought this was America!" emails the firewall team has shared, it does a pretty good job at blocking specific categories of sites.

Proteus Jones
Feb 28, 2013



Bob Morales posted:

We had a GD here that sneeze and say and spray all over her screen, her iMac looked ten times worse than that. Never cleaned the drat thing either.

:stonk:

Proteus Jones
Feb 28, 2013



stevewm posted:

Ubiquiti has a long history of their marketing department being about 2 years ahead of their R&D department. They routinely put out products where major marketed features are not actually available until months or years after the initial product release.

It's just what they do.

Yeah, if you need to do more than a Home/Home Office or Branch Office needing 3 AP or less for coverage, Ubiquiti will probably meet your needs.

For anything larger (and especially if you're going to have more than 30 APs at a single location) I recommend Extreme's WiNG* based APs (NOT the ExOS based ones) or Cisco APs. Aruba is a valid choice if you can't get/afford Extreme or Cisco, but they lack some base features that Extreme and Cisco have out of the box (at least last I looked).

Personally, my experience is mostly with WiNG and the stability and MTBF of the APs is pretty impressive.


* - Previously Motorola's WiNG APs

Proteus Jones
Feb 28, 2013



Jaded Burnout posted:

It will indeed be a 2/3 AP home office with the ol' security cams and 48 active ports.

Then overall, Ubiquiti is probably a solid choice. Except for the cameras as mentioned earlier in thread.

Proteus Jones
Feb 28, 2013



Methylethylaldehyde posted:

I would be so much better if it was a pair of toddler sized booties spraypainted green. "You died, your corpse acts as a way marker for those who come after you, what have you learned?"

I'm the one that still loves these.

Proteus Jones
Feb 28, 2013



Kurieg posted:

They were also in talks with Budweiser at one point.

Let that fuel your nightmares.

This exists, which seems like it's halfway there.

https://www.picobrew.com

Proteus Jones
Feb 28, 2013



blackswordca posted:

Oops, meant 2'

Just got home after a 14 hour day. Have to go back tomorrow with a bunch of SSDs because the boss forgot to tell me that all the workstations were getting HDD upgrades. Plus I have to "fix" a licensing issue with a decades old dictation program not releasing the license back to the USB fob..

2 foot cables? The only *possible* way I can see those working is to connect a VOIP phone in a cubicle where the network ports are desk height. But even then it seems to be a poor choice in length as it really limits phone placement based on personal preference.

As an aside, that’s one thing I really miss after moving from our old facility. The network ports were all desk height and the desk had a good sized cable hole right in front of it. I also miss having power receptacles both along the floor and at desk height. Also the little cable channels along the back edge of the desks to hide anything run above the desk and suspension cutouts for under the desk.

Proteus Jones
Feb 28, 2013



Jaded Burnout posted:

What does a hammer-four do?

:golfclap:

Proteus Jones
Feb 28, 2013



Entropic posted:

You've never seen this kind of setup?



I have. Usually a little neater than that where I work (what’s the purpose of those 1U plates wasting space?). And also NOT 2 foot cables either. Usually 6 inch cables.

Proteus Jones
Feb 28, 2013



dogstile posted:

Honestly this seems like a lot of effort for something three dudes could get through in an hour.

The solution is to store more down there, obviously.

They did only lift one tile. There could be a veritable sea of libations down there.

Proteus Jones
Feb 28, 2013



mewse posted:

Eh I'm sure they have enough expertise to ensure the entire thing doesn't tip over, proven by the fact that they're asking if it would be OK to tip it

See my first assumption is they’re going to go at it like it’s a vending machine with a dangling packet of pretzels.

Proteus Jones
Feb 28, 2013



KoRMaK posted:

I got roped into a call with a client mid... call (Im our lead developer) because our support guy couldn't answer some api questions. That's wierd because he is real good at it.


Turns out I walked into a loving lions den. These people, like 5 of them on the phone, start asking me about our process for being deleivered an xls file for importing: "you transmit the file to us via our restful api, and we process it on our side." They ask about encryption: "The file is sent through https and uses SSL so it's encrypted while transmitting and on our systems via the data layer"

I heard the smuggest condescending laughter in a professional setting ever "uhhh so WAIT, your saying its NOT encrypted???"

Bruh I just said that its loving encrypted as you send it to me. Do you not trust the computer you are sending it from? Then they start talking about PGP keys for some reason, then talk about ftp. LOL

Yea with ftp, or email, I see why you would wanna do pgp encrpytion. But get with it my dudes I got a restful api over https. OH, then they said "Well I'm sure you know MITM attacks could let you peer in the stream" yea sure, that sounds like a different loving problem though with your info sec people if your network is getting MITM

God I hate that “I’m going to ambush” bullshit.

A few years ago, I was on a call with one of our customer’s CISO and acting CIO (which should have been a warning sign right there) and some of their other executives. Apparently he was asking “hard questions” the accounts team couldn’t answer.

I jump on and he starts grilling me about all the different wireless stuff we can detect and monitor. He asks for details between how we differentiate between events that look similar. I give him as much detail as I can without revealing secret-sauce type stuff. He seems satisfied.

He then asks if there are certain types of wireless activities that “the Hacker” would do that we can’t see. And I replied “Sure, for instance if someone sat in your parking lot passively collecting all wireless packets that leak out of the building, short of looking out a window and seeing some sketchy dude in a car you won’t see that.”

Dude blew up. That’s unacceptable! How are you unable to detect a completely passive act that doesn’t interact in a meaningful way with the RF profile at this location? (Not his words, but what his argument boiled down to) I told him no vendor is going to be able to do this.*

I have friends and previous co-workers who are CISOs, and I’ve been offered that position at a smaller firm recently (offering less money than you would think, so pass). So at first I thought he was joking. He was not.

He also kept using the phrase “soup to nuts” which almost annoyed me more than the WHY CAN’T YOU DO MAGIC explosion. At this point I pretty much realized he was probably new to the field and given the position because “he’s a good manager”.


* - theoretically you *could*. But it would require some luck, really sensitive measurements, and the ability to eliminate all the typical attenuation and interference seen in an RF saturated business campus. So no, I can’t.

Proteus Jones fucked around with this message at 09:06 on Feb 10, 2018

Proteus Jones
Feb 28, 2013



Renegret posted:

it probably still doesn't

Those specs will be fine for a 20 x 70 spreadsheet. It's fine.

Adbot
ADBOT LOVES YOU

Proteus Jones
Feb 28, 2013



The Fool posted:

<loving obvious "clue" spoiling the poo poo out of S1>

E: That was too harsh of me. But that was still a lovely thing to do, dude.

Proteus Jones fucked around with this message at 12:47 on Feb 16, 2018

  • 1
  • 2
  • 3
  • 4
  • 5