The Comms Room

Shane Madden

4:00 PM

@mailq Never tried it before, but I think you can do it from their chat user profile?

Iain

@mailq I think they have to be in chat or the system thinks your chatting in comments and offers to make a room for you

mailq

That's bad. I don't like to chat in comments until the invitation occurs.

Chris S

@BartSilverstrim No, but I wouldn't have the slightest clue where to start trying to exploit it...

voretaq7

HOORAY FOR INCOMPLETE SPECS!

0

Q: Antivirus for a mail server to scan emails for virus

I have a requirement as follows "I have a site in which the end user is asked to upload a file which is directly sent to the client. Those files are not stored on my server. Now the issue is I don't want my client to complain having virus in the files which go through my mailing server to his sys...

Bart Silverstrim

@chriss: hopefully with the alterations now in place combined with the camera's (crappy) interface security it shouldn't be much of a problem.

Shane Madden

4:03 PM

@voretaq7 TI Calculator. Obviously.

MarkM

0

Q: windows 7 backup and restore to a remote linux server

i'm in the process of setting up simple automated backups for my home machines, with the intent to backup to a server on my lan. i've found the following site for using my mac's time machine backup software with a ubuntu server, but have so far been unable to do the same for windows. i have windo...

linux backup windows-7

^close that fucker

voretaq7

@ShaneMadden AMS/1.0, AMS/1.2 or AMS/2.0?

Shads0

In other news, only 75,885 more star'd posts until the star wall reads "...show all 80085"

6

Shane Madden

@voretaq7 Answer for all three. Just to be safe.

voretaq7

@MarkM /me is mean in comments

Iain

4:07 PM

s/in comments//

voretaq7

@Iain You wanna get kicked in the shins ya limey bastard? :P

Iain

:P

mailq

Why not close those

1

Q: Statistics about php setups / What extensions are installed by default

I'm trying to get some statistics about how most PHP sites are configured, specifically what extensions are installed on them. I'm particularly interested in knowing if Mcrypt is installed or not. Anyone know of any sites collating such information?

php statistics modules mcrypt phpinfo

voretaq7

mmmm close as what?

I guess OT?

Iain

@mailq drop stuff to close in the vote to close room

Server Fault: Improve or Close

Links to questions that may be improved or closed . Please not...

Shane Madden

4:14 PM

I threw a not constructive on it.

mailq

Nkay

voretaq7

@Iain people hang out there? Their star wall doesn't even have boobs...

@ShaneMadden I can get behind that.

Shane Madden

@voretaq7 Sure it does.

Bart Silverstrim

You only need 3,807 to have the starwall read "all 8008" though.

Shane Madden

in Server Fault : Vote to close, Sep 16 at 6:55, by Ward

Why hasn't someone mentioned boobs in here?

Iain

4:14 PM

@voretaq7 it's just for posting stuff to close

Bart Silverstrim

Why would you have open boobs?

voretaq7

@ShaneMadden pfft. one post.

INSUFFICIENT BOOBS.

2

MarkM

Check again

voretaq7

@BartSilverstrim How would one close boobs? For that matter how would one OPEN them?

Bart Silverstrim

You could expose them...don't know if that's the same as opening them, unless you're a surgeon.

voretaq7

4:16 PM

@BartSilverstrim that's opening a container of boobs...

Bart Silverstrim

Like a surgeon...cuttin' for the very first time!.../weird al

MarkM

@mailq said that he was going to flag boobs in VTC as offensive. He needs to spend more time in Comms Room I think

voretaq7

"Hey! You behave! Don't you MAKE me open a corset of boobs on yo' punk ass!"

@MarkM this is a REALLY lousy benchmark for community decency standards. Boobs on the star wall, entrails of lusers for curtains....

MarkM

Visual Studio 2010 SP1 is installing on my machine now. It's going on hour 2

mailq

@MarkM Thanks for closing. This question had an open bounty recently. Unbelievable

MarkM

4:18 PM

Anyone want to place bets on whether or not it finished before the end of business?

mailq

I'll bet against that. It usually takes two and a half hour.

MarkM

This is jsut the SP

voretaq7

@MarkM I'll wager 300 Quatloos on the newcomer (that's the Service Pack)!

MarkM

Fucking Microsoft.

If I didn't have to write some code that will generate temp AD accounts on demand, I wouldn't even have this abomination installing on my machine

mailq

At needs at least 6 GB on C:\ (temporarily)

additional to the SP itself

MarkM

4:21 PM

I have 177GB free at the moment. Setup.exe is only using 1% CPU every few seconds.

jscott

@MarkM Any reason to not use powershell instead of something requiring VS2010?

MarkM

@jscott It's got to be done through a web interface

and by end users

jscott

Ah, gotcha,

MarkM

Basically, our library allows alumni to log into library computers, but they have one shared account. They're supposed to keep track of usage but they can't since people get the password once and then just sit down the following day, lather rinse repeat. They asked me to give them a way to generate accounts that are useful for 1 day on demand that can only log into the library PCs and the wireless network.

I'm going to whip something up that the people at the reference desk can run and it will spit out a temp user name and password and have a expiration date of the following day.

voretaq7

. . . *raises hand* I has a KWESTION....
Wouldn't it be easier to give each alumnus their OWN GODDAMN ACCOUNT so you know who is using what?

jscott

4:27 PM

Sounds fun. Maybe not enough fun to suffer through a multi-hour SP install, but fun nonetheless

MarkM

No, there are tens of thousands

and maybe 15-20 a month use the library for computers

voretaq7

@MarkM …and? :)

MarkM

They don't need to keep track of anything other than "x alumnus used the library today"

voretaq7

OK, so do what my alma mater does: You get an alumni card - you keep it active, we keep your account active.

ah so it's not so much "data mining" as it is "data wiping-the-dust-off-the-curio-shelf" then?

MarkM

Yeah

Shads0

4:29 PM

or do what my alma mater does and use your student account as your alum account, then accidentaly open up the "e-mail everyone on the list" permission to basic users and watch the lulz ensues as everyone hits reply-all

voretaq7

<- gets a kick out of people who want to do data mining - "You know, like how many pageviews the website got"

MarkM

haha

@Shads0 awesome

voretaq7

"So you're not really interested in interesting/useful data so much as just having a pretty graph with big numbers to show the donation committee then?"

@Shads0 <golfclap />

Shads0

best part, they didn't fix it for a week.

MarkM

@voretaq7 essentially

Shads0

4:31 PM

i had to keep TB closed as well as disable mail on my phone, easiest week of telling professors "i didnt get your email because im getting every email ever in the history of everything"

MarkM

The library here does things for no real reason. They want to enforce alumns to take to a reference librarian each time they want to use the computers, and they cant make it happen with a shared non-expiring account.

Unfortunately, I wasn't able to "dude, thats dumb" my way out of this one to my boss.

(He has a meeting with the director of the library next week for something unrelated and doesn't want them to be pissed about anything)

Shads0

everyday I get interesting in doing school IT, then I come here and listen to @MarkM & @BartSilverstrim

MarkM

@Shads0 It's honestly not too bad, you just need to be OK with not having control over the bulk of the devices on your network

which most people just aren't ok with, because we're bred to smite any rogue device with furious anger.

voretaq7

@MarkM I'm fine with that, as long as I'm not responsible for them and can be a total nazi about everything else :)

MarkM

Things like NAC make it so that you have to directly interact with them.

And by directly interact, I mean send minions to directly interact, but the frustration is the same

voretaq7

4:35 PM

@MarkM NO NETWORK FOR YOU! COME BACK WHEN IN GRAD SCHOOL!

MarkM

@Shads0 If you can get over the "must have control" feeling and are OK with making below market value, it's really a great environment most of the time.

Stack Exchange

The Nubby SysAdmin: What is the Difference Between fsck, fsck.ext2, fsck.ext3, fsck.ext4 and e2fsck? Not much.

posted on October 07, 2011 by Wesley David

Recently I had a little issue with my laptop’s filesystem. I’m running Fedora 14 with ext4 partitions and had to run fsck to clear it up. Or at least, I had to run some mutation of fsck. The plethora of options that were available to me made my head spin. Let’s take a look at [...]

MarkM

I get to go to school here for free. Any spouses/dependents get to go here or most neighboring schools for free, etc

voretaq7

@MarkM It depends on how far below market value we're talking about too - I loved working a the ISP/MSP, except I was getting literally half of my market value.

@MarkM that's the big perk for academic environments: Free schooling.

MarkM

@voretaq7 It's not enough to make me leave, but it's enough that I weigh my situation monthly.

voretaq7

4:37 PM

of course it cuts both ways - it looks better if their faculty (they call you guys faculty I assume?) has advanced degrees, so make them dirt cheap to obtain :)

MarkM

When I get to the "I can do no more good here" point where most people stay with a company because of the money or benefits, that's when I won't have a compelling reason to stay.

@voretaq7 Not faculty if you don't teach. Some of us teach occasionally. I do not.

The ones that teach occasionally do factor into the statistics, though

Holocryptic

Forgot to flip a bit and broke DNS updates. Oops

MarkM

Who needs DNS anyway. They have WINS in place, right?

2

Or, a single subnet with a Master Browser?

Holocryptic

yeah... something like that

Iain

@StackExchange I wouldn't be surprised if fsck just spawned the appropriate fsck.extN binary

MikeyB

4:48 PM

@Iain That is exactly what happens.

Iain

so what's @wesleydavid going on about then

MikeyB

@Iain Train of thought pulling out of the fscking station.

voretaq7

@MarkM aw, you guys are nice.

Aaron

@voretaq7, luckily there is no commercial service at FDK, so no badges needed!

voretaq7

HU used to consider grad students running classes to be faculty

@Aaron we don't have scheduled service at FRG, but we're technically within (under) the NY class B

Aaron

4:52 PM

...so? didn't need badges at FME either

voretaq7

@Holocryptic I once broke DNS by decommissioning a secondary server & moving its IP to the primary while we replaced the hardware

@Aaron really? Why am I getting raped then?

Aaron

@voretaq7, because NY state agencies make up their own laws whenever they see fit

Holocryptic

@voretaq7 I forgot to enable dynamic updates on the forward lookup zone... so the PTR was getting updated, but not the A records

Aaron

@voretaq7, see: no pictures allowed on the bridges !!!!!!!

voretaq7

@Aaron they're protecting the guys who took those iconic pictures! No tourists muscling in on their turf man!

MarkM

5:06 PM

@Holocryptic dymanic updates are for pussies anyway.

You did the right thing.

Holocryptic

ha

Shane Madden

@MarkM Whatever, non-secure dynamic updates on the _msdcs zone is the way to be.

MikeyB

5:22 PM

@voretaq7 FFS, RedHat has had 6 fucking iterations of RHEL and they still don't provide a way to configure bonded interfaces during install or afterwards without putting in the files yourself by hand. BRAVO!

Now I have to go trudging off to find a goddamn RHEL box to figure out their magic syntax... grr....

voretaq7

@MikeyB Linux Sux :P

Shane Madden

...what?

0

Q: broadcast unicorn at www subdomain

I have sqlbuddy.domain.com - for db manage (php-fpm) domain.com - main site (unicorn) frontend is nginx but www.domain.com broadcast sqlbuddy.domain.com How to broadcast domain.com at www.domain.com

nginx unicorn

Maybe he means redirects..?

Iain

@ShaneMadden answers to or responds as

voretaq7

not even trying - ZOT.

that question hurt my brain just reading it, and any of the ideas I could come up with as to what he was asking are best answered by "Leave the internet. Do not return until you've read DNS and BIND, the Bat Book, and something on either Apache or nginx."

Wow. stallman.org/archives/…

Iain

@voretaq7 he is clearly not a native english speaker and is having a hard time translating

voretaq7

5:35 PM

Congrats Stallman - you're right up there with Westboro Baptist Church picketing, and Wikileaks publishing the guy's medical records.

@Iain That I don't mind, but my tolerance for "How do I set up X" / "Whuts DNS?" level questions is nil. I'm all for helping newbies, but ya gotta RTFM first and come correct with a real question.

Holocryptic

@voretaq7 Meh, I wouldn't say that he's gone that far if you're referring to the Jobs thing

Iain

@voretaq7 I refer the honourable gentleman to my earlier substitution

voretaq7

@Holocryptic no, he's keeping his toes behind the line - I still think it's tactless: I don't think apple platforms should be so insanely locked down, but you attack that, not the man.

Holocryptic

True

Shane Madden

What'd he say?

Err. Nevermind. Hey look, text in blue!

voretaq7

5:40 PM

When I make fun of Ballmer I make fun of him for his faults/idiosyncracies (DEVELOPERS MONKEYDANCE - GO!!!!) but when I rant about MS producing shit code I don't drag Ballmer into it

MarkM

►

voretaq7

I don't think that's mean, but then again I'm a BSD guy - I'm used to that being the hurdle you have to jump to get help.
Someone could post a question in kitty-pidgin and if it showed some promise I'd be all over helping but that one to me is one step above "HALP! IZ B0RKEN!"

MikeyB

@voretaq7 lick my /dev/nuts

2

voretaq7

actually kitty-pidgin is probably a bad example because we'd all be all over that anyway...

@MikeyB you mean your /proc/sys/body/below_waist/groin_area/nuts, or the ones mounted at /mnt/dangly_things/carbon_based/nuts?

@MarkM DEVELOPERS SUPER-MONKEY DANCE GO!!!!!

Shads0

what has this chat become

MikeyB

5:45 PM

@voretaq7 /sys/bus/fluidic/external/dangly_bits/…

MarkM

DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS

2

voretaq7

@Shads0 "Gone are the days of boobies and great tits…"

MarkM

THIS IS ABOUT DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS YEAAAHH!

voretaq7

@MarkM bhphotovideo.com/c/… ?

Shads0

reminds me of the badger song

MarkM

5:47 PM

The best part about that whole this is clearly the high pitched "yeah!" at the end

Shads0

►

voretaq7

@Shads0 Balmer Balmer Balmer Balmer Balmer Balmer Balmer Balmer THROW CHAIR THROW CHAIR

(the snake would be what.... Vista?)

Holocryptic

What. The. Fuck.

Shads0

oh god

@Holocryptic Have you never seen that before?

MarkM

@voretaq7 You're reading into this too much. Just smoke a joint, sit back and enjoy the show.

voretaq7

5:49 PM

@Holocryptic what... are you some kind of deprived child?

Holocryptic

yes

voretaq7

@MarkM no! Bring me a flash money that we may make a Steve Balmer BadgerBadgerBadger video!

Holocryptic

But thank you for expanding my knowledge of the internet

voretaq7

Next he'll be telling us he's never heard the Llama song.

Shads0

@voretaq7 Are we looking for deprived or depraved

Holocryptic

5:50 PM

@voretaq7 ??

voretaq7

►

@Shads0 there is difference?

MikeyB

@Holocryptic Tell me you've heard of Zombocom

Shads0

One implies overprotective parents, the other implies insanity

Shane Madden

@Holocryptic Run, while you still can.

voretaq7

@Shads0 when you've had too many drugs for badgers...

Holocryptic

5:53 PM

@MikeyB requires Flash. DO NOT WANT!!!ONE11ELEVENTY!!

MikeyB

@Holocryptic Clearly that section of the web needs to be made HTML5-compliant.

Holocryptic

Clearly

Stack Exchange

Duct Tape and Popsicle Sticks: 802.1x, PEAP, NPS, Wildcard Certificates, and You.

posted on October 07, 2011 by MarkM

I recently had an issue involving wireless clients authenticating against our RADIUS server, which is a Windows Server 2008 R2 box running the NPS role. The certificate that we were using to secure PEAP was expiring and we needed a new one. We have a DigiCert wildcard plus that allows unlimited duplicates and unlimited server installs. Sweet, right? I thought so too. So, I requested a duplicate…

voretaq7

... hey @MarkM, does that mean that you finally slaughtered your way to competent help from MS?

Aaron

II have no idea what the llama song is, either

but I'll pass

voretaq7

5:56 PM

@Aaron it's a song. about Llamas.

Aaron

funny story: back in my childhood, when I was around 10 and living in Quito, we took a trip to macchu picchu. we stayed overnight at the hotel on top, and had breakfast the next morning, and I had a bread roll in my pocket. The llamas were chasing me all over the place :(

voretaq7

YOU MUST IMMEDIATELY CREATE A BAD COPY OF THE LINUX KERNEL, GATHER THE GNU FREETARDS UNTO YOUR BOSOM AND CREATE A BAD CLONE OF UNIX.
THE LLAMA IS YOUR LOGO. MAKE IT HAPPEN!

bonus points for gratuitously changing the behavior of utilities like sed and awk

Shane Madden

@voretaq7 POSIX compliance is for suckers.

voretaq7

Double bonus points if the only way to get POSIX compliant behavior is to add the undocumented ---I-Have-Read-The-Entire-POSIX-Specification-Motherfucker flag to the command.

MarkM

@voretaq7 Not really. I used a non-wildcard and it worked fine. MS still can't explain why it's fucked, though.

voretaq7

6:01 PM

@MarkM because their brain-damaged developers can't comprehend wildcards?

MarkM

Essentially.

Shane Madden

@voretaq7 And their brain-damaged developers re-write every damn thing all over the place instead of using their existing crypto APIs.

MarkM

Their crypto stack is doing something other than "yeah, this is valid and I trust it"

certutil -verify passed it, and all intermediates/roots without issue on the clients and server. Microsoft support was completely lost as to what the problem is.

voretaq7

@ShaneMadden NIHS.

@MarkM "OMG A STAR! WAS I A GOOD CRYPTO STACK? I puts it on my wall!" You can't have encryption - the certificate is covering a hole.

@MarkM that second part should be standalone.

Shane Madden

if FQDN == certificate.subjectName then {
    probablyvalid()
} else {
    whatisthiscrazycertificate()
}

voretaq7

6:03 PM

it's so broadly applicable.

MarkM

Haha, they've been good with us with Exchange issues.

In fairness to them

But yeah, anything else and it's like talking to a little tiny baby.

voretaq7

@ShaneMadden if (rand() % 10000 <= 52) { crash(); }

@MarkM nonsense. the baby would have been more helpful.

MarkM

It would have probably made me smile with how cute it was instead of saying "KAPEEL, KAPILE, KAHPEL, HOWEVER YOU SAY YOUR NAME, STOP FUCKING AROUND AND ESCALALTE ME"

Shane Madden

@MarkM Sir, let me restart some services again.

voretaq7

@ShaneMadden I'll restart YOUR services :-P

sometimes I think you should be able to press 5 to shock the tech on the other end of the line.

[BEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEP] "Now - are you going to escalate my call, or do I have to practice my morse code some more?"

MarkM

6:09 PM

Chat just freaked out for a second for me

One of their support suggestions was "Can we install the Enterprise CA role on this server and issue some certificates to see if it works."

"Um, no, you can't install a root enterprise CA in my DMZ on a production server doing RADIUS."

Shane Madden

@MarkM Brilliant plan!

MarkM

I don't even know what that would have accomplished

voretaq7

@MarkM Why not?

Shane Madden

@MarkM To prove even more emphatically that the PEAP server cert validation logic is b0rked.

voretaq7

@MarkM Well do you mean what BESIDES letting me 0wn your envir0nment? :-)

MarkM

6:13 PM

@voretaq7 because fuck you, that's why.

Shane Madden

@MarkM Just disable server certificate validation!

MarkM

GAH

voretaq7

@MarkM You need MS Palladium Support for that. You get to sleep with the support chimp of your choice.

MarkM

I didn't have to pay for that ticket because they suggested turning off cert validation :)

voretaq7

@ShaneMadden IIRC that was their first suggestion. and ya know it WOULD solve the problem :-)

@MarkM Security? DO NOT WANT! oh... wait no... the other one... WANT!

MarkM

6:14 PM

I sent it to our sales rep and said that I was appalled that someone on the NPS team would even think about suggesting that as a real fix and that I wasn't paying for the ticket

Shane Madden

Just have an open network with a captive portal where users need to type their name into a text field. Honor system!

MarkM

FUUUU

voretaq7

@ShaneMadden Excellent idea old sport!. And hey let's disable bandwidth throttling and traffic shaping too - they'll police themselves, right?

MarkM

I was like "um, do I really know more about Windows than their own support guys?"

In hindsight, I shouldn't have been surprised.

Shane Madden

@MarkM The answer to your question is yes.

voretaq7

6:17 PM

http://serverfault.com/questions/319531/logging-authentication-failure-on-openldap
Anyone know if I'm right offhand? I don't feel like raping my production LDAP server :-)

Shane Madden

@voretaq7 They will if you also give them a link to a page with triangulated positions of all associated clients, ranked by bandwidth usage.

voretaq7

@ShaneMadden I prefer to give them NetDOOM - Bigger bandwidth hogs appear as bigger monsters.

ooh ooh! That's a GREAT way to regulate a network actually!
Make your packet loss inversely proportional to your health!

Holocryptic

Is there a way to browse to a network share in windows command prompt?

MarkM

\\server\share

Holocryptic

Like I do in Explorer by going \\server\share?

Shane Madden

6:19 PM

@voretaq7 Yes. We need to get working on that.

voretaq7

just chaingun someone down to about 25% health - when 75% of their packets are dropped they'll get frustrated and log off :)

MarkM

@Holocryptic does your account have access to the share or do you need to map it under alternate credentials?

voretaq7

armor can apply QoS tags :)

Holocryptic

@MarkM it supposedly has access

but for some reason he's losing access to the server randomly

MarkM

dir \\server\share should list the contents of the remote directory

Holocryptic

6:20 PM

I can't find why it's dropping the connection

MarkM

if you want to launch explorer in the share from the command prompt you can always do start \\server\share

voretaq7

oh hey apparently today is Ada Lovelace day (they moved it or something this year)

Holocryptic

huh. system cannot find the file specified....

strange

MarkM

@Holocryptic can you browse it in explorer?

Shads0

@Holocryptic is the user stupid?

voretaq7

6:22 PM

@Shads0 is the question rhetorical?

Holocryptic

@MarkM no, it comes up with an empty exlporer window

@Shads0 haha

but the share does exist

MarkM

@Holocryptic Empty, but no access denied?

Have fun with that.

Holocryptic

haha

@MarkM yeah, basically

MarkM

I've seen that when users only have Traverse Directory on the NTFS ACL for the share, but it's not something that comes and goes.

Unless of course, someone is fucking with you.

Holocryptic

someone's always fucking with me

2

The share permission looks good, checking ntfs now...

voretaq7

6:24 PM

@Holocryptic CALL MICROSOFT SUPPORT! They'll help!

MarkM

@voretaq7 NO

Holocryptic

ntfs permissions look fine too...

MarkM

Have I suffered in vain?

Holocryptic

I'm thinking its something client computer based

just not sure what would cause it to fail to traverse the network...

MarkM

Ya, it's probably not that

Check AV. McAfee has a setting where you can block share browsing if there's an outbreak

Maybe someone was like "O.o I wonder what this option does?"

voretaq7

6:26 PM

@MarkM um…YEAH. It's Microsoft dude...

Holocryptic

The only share he can see on the server is his home dir, which is set to offline sync

none of the other shares show up...

MarkM

is he working offline?

You could always tell him that you're not sure why, but that access to shares is usually restricted when an employee is terminated and you just need to make one quick call and you'll be right back. And then never call him back.

Holocryptic

As in off the network completely? I'm connected remotely to him

MarkM

I mean his home directory

Holocryptic

@MarkM Ha, I'm sure that will get me fired or at least chewed out

huh. I just did a syncronize on his home dir, and then everything showed back up. All the shares on the main server and everything

Aaron

6:32 PM

one quick call, clickety-clack

voretaq7

6:43 PM

@Aaron Do we really need to do the "clickety-clickety" bit for this audience? :-)

Holocryptic

well that was weird. Maybe his profile is corrupt... I'm thinking blow it out and recreate it.

voretaq7

@Holocryptic how will that affect his porn^WImportant Company Documents?

Aaron

well, I suppose not, but it's always funny!

Holocryptic

@voretaq7 It means he'll have to blow harder

voretaq7

serverfault.com/questions/319549 The Wheel - Let me reinvent it for you.

Triangular.

MarkM

6:51 PM

0

Q: anonymous access to domain share on a windows server 2003 domain controller

I've set up a WDS 2003 server for OS installation. (2003 because we need XP support) I also want to use this server to store Acronis images of already installed PCs. The newly installed PCs would be cloned and the images would be stored on this server for later. This server is the DC as well, no ...

windows-server-2003 permissions network-share wds access-control

Shane Madden

@voretaq7 Can we try something concave this time around?

MarkM

W H Y

WHYWHYWHYWHYWHYWHYWHYWHYWHYWHY

Shane Madden

That is just...

Aaron

@voretaq7, I want a program running on this computer that monitors certain aspects of it, like disk space, cpu usage, and other things, and then when some other computer asks it for that data, it responds with that information. This would be great!

Shane Madden

"Here, let me help you turn on LM hashes everywhere, too."

Aaron

6:59 PM

lan manager 4 lyfe

jscott

Is this a real thing? I've seen FAX spam.... People really leave printers exposed to the wild?

1

Q: IP printer toner bombing

I have a problem and am looking for a solution to prevent it. The issue is that I have an IP printer, which is fairly old, ~5 years old, and it keeps on getting "toner bombed" from people in Serbia. What we want to do is somehow hide this printer from specific IP addresses or somehow only allow s...

networking printing firewall

Aaron

@jscott, people do all sorts of things, and most of them aren't good ideas, but until we deploy the internet police, this stuff is going to happen

Shane Madden

Port 9100 is far too high for anyone to look at it, clearly!

Aaron

You say "leave printers exposed", I say "never had a working firewall to begin with"

pauska

or even a simple nat router

jscott

7:03 PM

I'm half tempted to stick one of ours outside just to see what happens.

voretaq7

@jscott I used to print random porn to ones on the Cablevision network

3

@pauska The guy on the phone said I had gnats in my router. We dunked it in citronella oil to get rid of them. How come it doesn't work anymore?

jscott

@voretaq7 <golfclap />

voretaq7

there we go. now it's a tech support question.

@jscott Your XML is not well-formed sir!

jscott

Or something like that.

Chris S

@jscott Reminds me of someone I loosely knew, she had one of those wireless routers that a printer can plug into to share wirelessly. But the WAP has no password, so people would occasionally get into it, notice the printer and print something.

Aaron

7:08 PM

my dad would once in a while associate his laptop with the next-door neighbor's wi-fi and be confused as to where the shared drives were

voretaq7

@Aaron I like his comment: "I know I'm doing it wrong. I want to do it wrong because doing it right means I have to do more work now, but if I do it wrong i don't have to do that work until later."

@Aaron well your neighbor should secure their WiFi.

@ChrisS 500 pages of "SECURE YOUR BLOODY WIRELESS!" ?

@jscott 's better.

jscott

@voretaq7 Or at least mirror the neighbor's share names...

Aaron

lots of people should do lots of things

voretaq7

@jscott I'mma run me a WiFi hotspot named "honeypot" and see how many people connect...

jscott

SSID: Free Candy

3

voretaq7

7:16 PM

@jscott SSID: Honey's Pot Farm

MarkM

You know what's great about cisco WLCs, you can have them tell the APs to "contain" rogue APs that they detect.

It basically causes them to interfere with the rogue AP and make it so that clients can't connect to it via some RF magic.

Aaron

@MarkM, "contain" meaning blackwater-style?

MarkM

I have 500 of those APs around campus. I can shut down wireless for about 5 city blocks in north philly if I wanted to.

jscott

@MarkM Yeah, WCS is pretty fun. Did you get the Mobility Appliance too? Also enjoyable to see the little dots moving about the building maps.

Shane Madden

Yeah I think they fire de-association payloads at clients connected to the hostile APs

MarkM

7:19 PM

@jscott We do not

I wish we had it

voretaq7

@Aaron "Contain" meaning "Just what the unregulated spectrum needed - More noise!"

@jscott Finally - we can treat the users like the infestation of ants they are!

jscott

@voretaq7 Exactly. Pick out a moving dot.... Select them.... Drop their connection.... Wait for Help Desk phone to ring.

Of course, that was only during our implementation testing.

Wouldn't pull that crap in production.

I don't want to hear the phone ringing that much.

Holocryptic

Fuck me, this guy is pissing me off. He's being a whiney little bitch.

Shads0

@Holocryptic nyeh?

voretaq7

@jscott suuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuure you wouldn't.

Holocryptic

7:32 PM

@Shads0 Homeslice doesn't want to come back to the home office to pick up the pager. He's trying to get me or someone else to drive it out to him. Fuck that and him.

voretaq7

@Holocryptic lock out his account, send his mail to the null device, and modify the facilities databae to make his office the third floor men's room.

Shads0

lawlerskates

voretaq7

@Holocryptic Sure. $500/hr.

Minimum 1hr.

plus travel time.

Holocryptic

hehe

Shads0

and $20/mile(kilometer)

voretaq7

7:34 PM

@Shads0 /km. (more money for me.)

if anyone asks we're going metric to help out our european customers - it wasn't my idea honest!

voretaq7

7:52 PM

New rule! If your question contains "??" or "!!" you will be fed to a grue.

Holocryptic

@voretaq7 Why??

voretaq7

0

Q: Run antivirus as cron job on a particular set of folders

How can I run an antivirus s/w as a cron job to check for virus on a particular set of folders on my server(Apache, Drupal) where I store the files retrieved from users?? Any ideas??

apache2 antivirus

and N other questions where ?? is a marker for "My question is poorly worded, incomplete, grossly ill-conceived, or could have been answered by typing the command name into Google and clicking the first link"

Holocryptic

@voretaq7 Your comment is short a ?.

voretaq7

@Holocryptic I've always found one to be quite sufficient myself

Holocryptic

@voretaq7 Really??

voretaq7

7:57 PM

@Holocryptic Certainly!

Holocryptic

fucking timesheets....

Server Fault: Improve or Close

Transcript for