$colleague was supposed to have done some infrastructure work.. now it's 3 days past the deadline, and him and $othercoworker are both on annual leave, and there's no documentation about said work.
@Andrew Unfortunately yes... It was very strange having to report outdated and unpatched software as a truly fortunate and positive thing to our customers :-S
@MathiasR.Jessen Outdated and unpatched stuff is even more worrying because you don't know what nasty security holes are in it that will never be patched.
@MichaelHampton If the assumption is that OpenSSL is filled with more disclosure exploits akin (in severity) to HeartBleed, that we just haven't noticed yet, we might as well just turn everything off and abandon electronic communications altogether
the network is 172.16.0.0/16 must be subnetted to provide addrsses for the 3 lans.
HQ lan requires 500addresses, Branch 1 200 addresses, Branch 2 100 addresses
@MathiasR.Jessen It's not quite as bad on the client, but can still be exploited by a malicious server. Even a MITM server that doesn't validate - you can exploit heartbleed before the certificate stage (pretty sure).
I don't want to waste your time, but if you think this question can be saved, I would love to state it in a way that fits this site. I'm sorry that it appears I don't have a basic understanding of IP. Is the question I asked a very common and very basic setting in most routers that I am just not aware of? I've set up port forwarding, DMZ's, and DNS servers before, but I've never seen the case where a router handles 2 external IP addresses. I can't figure out how to have a computer respond to 192.168.1.15 internally and 172.75.176.53 externally — Tyler DeWitt2 mins ago
@MikeyB No, a heartbeat is a low-overhead alternative to renegotiation for keep-alive monitoring from the peer acting "client". From my understanding, at least... better find out
My server snagged the memory dump of the private key for CloudFlareChallenge.com yesterday at ~4PM. I just noticed now. Reiterating that that problem is absolutely as bad as they originally thought.
@BigHomie Or rather change $objUser to NTAccount("EXP\BigHomie") ... testing for equality with identical types might come in handy when you do the test 7 million times, performancewise
Your example poses an implicit type conversion from Security.Principal.NTAccount -> String before doing the comparison {$_.IdentityReference -eq "EXP\bighomie"} is essentially {$_.IdentityReference.ToString() -eq "EXP\bighomie"}
times 7 million :)
Since you cannot compare equality between the two types
@MathiasR.Jessen Well the thing is that even though in the beginning I specified a specific NTAccount, it still returns more than explicit perms because I set that part to $true, so it all depends on if he wants explicit perms or not msdn.microsoft.com/en-us/library/…
This is not really another heartbleed question. I don't want to go into massive detail on how the error happened, how heartbleed works, etc.
To summarize, the programmer (whether forgetting to, or just naivety) relied on the clients specification of how large the payload was. In this case it was...
The certificates my Microsoft CA is generating do not match the time period indicated in the template used. How can I resolve this?
I recently created a new certificate template for use on my Linux boxes on my Microsoft CA (2008 R2 Enterprise). This template is approved for server and client au...
There is a document management system that has million of files on an NTFS share. A single service account needs full permission to all of these files and the application brokers access using this service account.
During a migration of data, something happened and the permissions are now inconsi...
@NathanC Been doing some wireshark testing on my slow file server connection times.. One thing I noticed is when it does the SMB2 "Tree Connect Request Tree" it will do \\DC1\NETLOGON one time and \\DC2.domain.com\NETLOGON a different time. FQDN one time and NETBIOS name another...
@BigHomie Not a "Buffer Overflow" and not a "Buffer Overread" either (buffer overread is when the program reads past the end of the buffer, that wasn't the problem in Heartbleed). It's use of an uninitialized variable/buffer/memory (whatever you want to call it). cwe.mitre.org/data/definitions/457.html
After deleting a bunch of files, the space is still in use (I assume because the inodes weren't released). Does anyone know how to release those inodes w/o rebooting or using fsck since it's the root FS?
@ChrisS idk C, they're going according to CWE's definition of a buffer overread, it sounded weird to me too to be honest, but look cwe.mitre.org/data/definitions/457.html
Is that OK to leave a small endless loop script running on server?
Powershell assistance for Active Directory Cleanup
Those are two examples that I've seen in the last day. Neither of which deal with illegal activity, unethical behavior, or general shadiness. Sure, each environment might be uno...
@ChrisS On a side note, I was bummed to find the first question on-hold, no one has given a serious answer on actually implementing the file system monitoring functionality he's asking for in the (horrendously phrased) question
@MathiasR.Jessen I'm on brain-vacation. Yesterday was the personal tax deadline, the end of "Tax Season", which was horrendous this year with viruses and some general idiocy.
It's well known that many animated Disney movie parents (at least one of a set) die, were never in the picture, or started the movie already dead.
Is this just a financial thing (like in Toy Story), or does Disney have any other reason for this?
Some examples:
Toy Story - Dad doesn't exist
T...
@HopelessN00b DFS, of cuz I would like to use it if my boss is not an old fashion....everything must be running by script made by our own..... — Root Loop20 hours ago
@MDMarra - on your question, I get what you are after. So I'm guessing that simply applying an explicit allow at the root of the share and propogating permissions down isn't what you are after due to specific broken inheritances that were required in subfolders somewhere?
@Travis There's something funky with that file server. It's refusing to respond to the enum request (which returns the list you want) for quite a while
I just see a bunch of file open/file close requests until it finally kicks in
@MDMarra ah...gotcha. Wonder if they used EMC's cifs tools instead of Microsoft's.
@MDMarra I'm all for Powershell, but personally I like this tool for NTFS perm reporting. I use it all the time. It can do what you are after: cjwdev.co.uk/Software/NtfsReports/Info.html
I am looking for a way to disable WSD on Server 2012 and Server 2012 R2. Basically, a number of our printers on a number of our print server have decided that using this bloody service is better than using the TCP/IP ports they were assigned, and they are changing themselves over to WSD ports wh...
@NathanC lol...welcome to my world. I figured out why all those WP Administrator things were showing up. I was using Start, Search box to \\path. If I do Run instead it doesn't show that...
@NathanC When it takes 40 seconds to connect to the file share that Start, Search box thing just keeps saying "Searching" even if I type in eventvwr.msc...
@NathanC Right now with no delay it comes up instantly with whatever I'm "searching" for
@Iain True, it's getting hotter here though, but I can still manage. I got sidetracked, a cold, and then more sidetracked so I've taken up running on a treadmill. Interval training, more precisely.
@MathiasR.Jessen Haven't planted my butt on a saddle in about four weeks, sadly.
@BigHomie It was a Windows Media Services endpoint and there were about 100 publishing points on it. Each publishing point was for a different customer which had their own user account to connect to the server through Windows Media Encoder. Used Windows Auth.
@NathanC Interesting.. I'll give it a shot, TY. Can't seem to reliably replicate when these goddamn printers and this goddamn service decide to up and change my printers' settings, though...
@Iain Yeah, I'm doing the couch-to-5k program. Or at least, one of the many C2-5K iphone apps. Anyway, I'm stuck on Day 1 with six 60 second running intervals over 25 minutes. =P
@Travis my dad says he wants to be a garbage man when he retires. I told him that's a step up from being the sewage man he is today. (Works at the waste water plant)
@cole Nice! Some make good money. They did a follow around NY with the men behind the mess....they make really good money (much more than me) and I was like...oh boy! Then I realize the cost of living in NY is much more than mine as well
@Wesley Naw. I can type 31wpm with my right hand only, and the concussion definitely results in some degree of impairment from time to time but I'm mostly OK.
@Iain Not that I remember any pain. One moment I was wondering if my front tire was losing air, next moment wobble, next moment strapped to a backboard in an ambulance on the way to the helipad.
@Skyhawk A friend of mine has one - nice bikes. I used to use Michelin Krylion Carbon tyres and never had any problems. Last year I switched to Michelin Pro Race 3 Service Course - they are light and puncture easily as they wear out quickly . This year I'm on Michelin Pro Race 4 Endurance which are apparently the replacement for the Krylions - we'll see
Shit, I remember when I went over my handlebars (I hit a parking barrier that was hidden in the grass and came to a dead stop). I was much luckier. Still, it's pretty damn scary. One - I landed in grass, not road. Two - I was able to tuck and roll.