The Comms Room

12:06 AM

yup

freiheit

►

any of you guys have experience with qemu?

@Chris: unless you need certain specific features, vanilla qemu sucks ;p

@RyJones spring

@Chris I've seen lots of emus

12:08 AM

(UNLESS, you need to run a vm sans admin (which is dodgy) or run another architecture)

i like qemu :D

However kvm (which is a fork of qemu) is awesome.

i just can't get it to pass through an iPod Touch to a win 7 VM

@Chris: That might be worth a question on SU, but I didn't even know qemu did passthrough ;p

Bob

@MarkHenderson We'll get them eventually.

Emu War

The Emu War, also known as the Great Emu War, was a nuisance wildlife management operation undertaken in Australia over the latter part of 1932 to address public concern over the number of emus said to be running amok in the Campion district of Western Australia. The attempts to curb the population of emus, a large flightless bird indigenous to Australia, employed soldiers armed with machine guns—leading the media to adopt the name "Emu War" when referring to the incident. == Background == Following World War I, large numbers of ex-soldiers from Australia, along with a number of British veterans...

12:10 AM

@JourneymanGeek yeah qemu supports kvm too ;)

@cole so 01 January or 40 June?

@RyJones April/May

@Chris: erm, not really. kvm (like virtualbox) uses qemu code ;p

i know ;)

i have kvm working with qemu :)

ahh

kvm does do passthrough

12:12 AM

SU?

but I tend to use it with libvirt

superuser

Q: iPod Touch 5G won't recognize in qemu Windows 7 VM

ahhh

0

I have an iPod Touch 5G, and a Windows 7 VM. I am trying to pass through the iPod Touch to the VM so Windows can recognize it, but I am getting the following error in the qemu monitor. (qemu) usb_add host:05ac:12aa Warning: speed mismatch trying to attach usb device "iPod" (high speed) to bus "...

@RyJones but also, not soon enough

@cole narrow down what part of Renton to live in? :)

Not Renton lol

All depends where I can find a job, too

12:21 AM

@cole get Amazon or Microsoft to relocate you

@RyJones not smart enough haha.

Too much of a generalist for that. Definitely don't know nearly enough Linux for Amazon and not enough MS for Microsoft.

@cole Let them make that decision. Don't negotiate against yourself

@RyJones I've applied to both.

@Chris I never use qemu/kvm directly. Always use libvirt/virt-manager.

@MichaelHampton Oh, if someone can find a dupe target for that question, we can close it with one close vote in every close category!

12:34 AM

How I caught someone/thing MITM patching binaries over Tor: http://www.leviathansecurity.com/blog/the-case-of-the-modified-binaries/ @LeviathanSec

Tweeted by midnite_runr on October 24, 2014 at 12:17 AM

One of our security consultants found serious issues in Tor.

@Jacob Sadpanda is sad :(

@MichaelHampton you have experience passing through usb devices to qemu

@MarkHenderson It's you

What? Tor is untrustworthy? quelle horreur

@Jacob doesn't load for me

@Jacob That's pretty damn impressive work, man.

12:37 AM

@Chris I might have done it once or twice.

@MichaelHampton superuser.com/questions/830890/…

@Chris I saw the question already

(-,-)

@RyJones No? time out?

@Jacob white page of death. I refreshed and it showed up, eventually

Pretty cool work, I'm kind of surprised that the scope of the attack is limited to one tor node

12:40 AM

@Jacob This is not just a Tor problem. It can be happening anywhere.

@Jacob finally loaded. Wow.

Russia, of course

@MichaelHampton however, Tor is a great attack vector for it.

@RyJones It's easier to do this to Tor users. A certain global passive adversary we all know can do it to just about anyone.

@MichaelHampton tor users self-select to be interesting to those people.

far better to run a malicious tor exit node

@MarkHenderson The server's country doesn't matter. I can lease a VPS in Russia right now if I wanted.

12:46 AM

@MichaelHampton I didn't say it did

@MichaelHampton Sure, but if there's something nafarious going on chances are it's the russians.

A: Best practices for Tor use, in light of released NSA slides

@RyJones Yeah, it's even easier to go after Tor users. Though it ought not take long before such a node is marked as a bad exit and everyone avoids it. After that, though, you just start up a new bad exit... bah.

@MarkHenderson Well, in this particular case it looks like it's just dropping plain old malware to create plain old botnets. But...

Though, as I've said before, you absolutely positively should NOT ever attempt to use Windows in such a scenario...

48

As a very long time Tor user, the most surprising part of the NSA documents for me was how little progress they have made against Tor. Despite its known weaknesses, it's still the best thing we have, provided it's used properly and you make no mistakes. Since you want security of "the greatest d...

Only applies if you decide to *update* Windows.

Really, the best approach for computers is the same as the best approach for cell phones - burners, and only in locations that can't be traced to you.

@HopelessN00b Locations that can't be traced to you: That is a hard problem in and of itself, especially with video surveillance becoming more pervasive.

Hell, that's why I run Windows 3.11. No more updates to be used in MITM patching, and practically no networking stack. Security!

@MichaelHampton Indeed. Need those realistic-looking silicone face masks to start coming down in price. Or just somehow get everyone to wear ski masks all the time in public.

But wither way, the relatively new ultra-cheap netbooks do provide hope for practical burner-laptops, without the shit-ton of effort it requires now.

12:58 AM

Yeah, I agree with being prepared to ditch your laptop. I just think that's not the only thing you should do. Defense in depth.

I'm surprised that Wesley jumped on that so fast

@HopelessN00b The problem with burner netbooks, though, is getting the thermite packed in.

Matt Bear

hiyo

So many retweets

lol

@MichaelHampton: I'd rather have a self dissolving usb key and run a live os off that

flip a switch (disguised as a physical read-only switch) and... it burns or melts the flash chip ;p

1:04 AM

@JourneymanGeek Depends on what you're doing. I need persistent data, and lots of it. So that's not really workable.

@HopelessN00b I just threw some Windows 95 beta disks in the trash

@MichaelHampton: they do get pretty big. 128gb?

instagram.com/p/ug6QVBzDCM/?modal=true

@JourneymanGeek I have a 64GB stick. But again, not quite enough. And slooow

and you could always use bigger storage and keep the encryption key there.

@MichaelHampton: You'd want to run your OS in memory anyway, and if you're worried about actual wrench-wielding threats, you'd keep data minimal anyway.

1:09 AM

@MichaelHampton Well, the real problem is that the government will charge you with destruction of evidence (etc) if you do that, so even with a disposable netbook, you need to use FDE and format the thing before you toss it in a dumpster. :/

@HopelessN00b use thermite

@RyJones That just lets them pile on arson and explosives charges. :(

@HopelessN00b Not in the states. Yet.

@RyJones Uh, yeah, in the States. Before they tightened shit down with the post-9/11 laws even.

@HopelessN00b Thermite is easy to buy or make, and is widely used for welding without any permit or anything. It isn't explosive.

Also, in about half of the states, there are no laws on making and using explosives.

1:14 AM

which explains all those videos where people use tannerite in off label ways? ;p

@RyJones Well, the government neither understands, nor gives a shit about those kind of distinctions.

@JourneymanGeek Tannerite is mostly legal.

@HopelessN00b You're thinking about some hypothetical "nice" government which only imprisons political dissidents. I have darker things to worry about.

@RyJones: I did say off label ways

I've seen videos where they've used it for demolition and... explosive mass boar-slaying.

@JourneymanGeek The only federal laws on explosives relate to storage or transport. Some states have no further laws.

1:16 AM

ahh

so if you make it and use it in the same place, without storing it, you're fine.

@MichaelHampton In that case, screw thermite. Pack it with C4 and white phosphorus and call it a sweepstakes prize.

I know how to make a netbook disappear permanently in the US. Just accidentally leave it in a Greyhound terminal.

blog.joehuffman.org/2007/05/01/idaho-hardware-testing

Also: blog.joehuffman.org/…

@RyJones Depending on the state, at least. And so long as there's no malicious cop or DA who wants to charge you with the any number of laws that can be stretched to cover "blowing shit up." (This actually happened not-so-long ago to 14-year old chemistry prodigy, if I'm remebering that right..

1:19 AM

@HopelessN00b Disturbing the peace covers a lot of ground.

And shortly Canada won't be much better, now that they've had their own terrorist attacks.

And pretty much any law with the word "reckless" or "disorderly" or "mischief" in it.

@MichaelHampton In what respect was Canada ever better than the US before those attacks?

@HopelessN00b Ummm... uh... yeah.

They didn't have the PATRIOT act?

@MichaelHampton Also, not enough of a tax base to fund their own NRO/NSA. =)

They're too worried with silly things like... ohh... healthcare.

And staving off the mind controlling zombie mooses.

@MichaelHampton They have a weaker constitution they didn't need a PATRIOT act to get around, though. :) Not that they'd generally bother... and why would they when they can just have the CIA/NSA/CSS/etc do it for them?

1:24 AM

@Wesley Actually... they do.

@Wesley No, they are definitely not worried about healthcare. The Canadian healthcare system has as much to do with healthcare as the TSA has to do with security.

So I've concluded that the only way to be truly safe is to go be a sheep herder in Mongolia.

@MichaelHampton NRO spends that much on strippers and party balloons each year.

@Wesley Well, bear in mind that Canada's total population is about the same as the population of NY state, so... yeah. Don't need to spend as much when you're only trying to spy on 30 million people, instead of 7 billion. And in all seriousness, Canadian intelligence agencies are as bad as American ones, just not as well known.

Anyway, the door is open now. I expect sometime in the next 20 years, the US will begin quietly executing politicals. In the name of fighting terrorism, of course.

1:28 AM

Our spy agencies were committing perjury in court before the CIA made it cool. :p

@MichaelHampton You mean overtly? The US already has been quietly assassinating political figures, for decades.

@HopelessN00b Well, yes, but they were generally from other countries. I mean they will turn inward and start executing Americans.

And yes, quite possibly overtly.

2:57 AM

[root@PanAm ~]# sh CP021266.scexe
Flash Engine Version: Linux-4.4.1-1

Name: Online ROM Flash Component for Linux - HP ProLiant ML350 G6 (D22) Servers
New Version: 07/02/2013

Current Version: 06/01/2009

The software is installed but is not up to date.

Do you want to upgrade the software to a newer version (y/n) ?y

I need to use the yes command more often

3:37 AM

Woo I am down to 6 un-read emails

Soooo.... been trying to find a new version or update for one of our systems, and guess what I just read about the latest service pack for the software?

> B. List of software fixes for Service Pack 3
-----------------------------------------------

1. Added support for Windows 2003 Service Pack 2 and Windows XP Service Pack 3

I'm beginning to suspect I may not be able to migrate this thing to Server 2012 R2.

3:55 AM

So I'm having a stupid VLAN issue. A switch would take a port-based VLAN and would tag egress traffic destined for a trunked port. Right?!

I'm having trouble with communication between a trunk port and a non-trunked port. They're both on VLAN101

But if I change the port-based VLAN to an 802.1q vlan, and then tag the VLAN on the device at the other end, it fucking works

Untag the device, set the port to port-based VLAN and nothing

It's like it's not tagging egress traffic

FUCK it was filtering ICMP traffic

It was working just fine

DONT FUCKING FILTER YOUR ICMP FUCKHEADS

3

5:13 AM

@MarkHenderson I can send you unfiltered ICMP if you wish

@MarkHenderson yes, I'll brew a gallon and send it to you

I don't understand why mymail and myvpn are such common hostnames.

5:41 AM

good morning

eh

Applied to NCS (local ex-government computer consulting company)

They don't have 'linux server' on their list of skills, yet they have 'linux desktop'

And no distro specific skills listed.

@RyJones Laziness.

5:57 AM

@MarkHenderson You make me want to tweet something like that.

6:17 AM

@RyJones Me either. I much prefer the drama that offensive hostnames provide for public-facing services like VPNs and email servers. You'd be surprised how freaked out users get when they get an NDR from achildmolester.[company].com

spam.[company].com

I need to try that :)

Dennis Kaarsemaker

6:46 AM

G'day

lo

Iain

7:04 AM

g'DAY

Iain

7:23 AM

I doubt this will fly as very few people really want to educate themselves serverfault.com/a/639323/9517

faker

heh, I've been moving our websites to another IP range. The only traffic left on the old range seems to be a SYN flood we never noticed so far

8:17 AM

Morning poopers

training on the school's defibrilator today... rubs paddles together "clear" tzzzzt

8:33 AM

sweet

8:52 AM

The email address you specified couldn't be found or is invalid. It may be due to a bad entry in your Outlook or Outlook Web App recipient AutoComplete cache. Use the steps below to clear the entry from the cache:
Click New mail.
In the To field start typing the recipient's name or email address until the recipient appears in the drop-down list.
Use the DOWN ARROW and UP ARROW keys to select the recipient, and then press the DELETE key.
Then resend your message – delete and retype the recipient’s name or e-mail address before sending it.

@ewwhite i think i got the exact same test like 1-2 weeks ago

but it's a good error message that highlights BAD UX

@ewwhite in my opinion its way too much text. just say username not found.. then the guys who do not know what that means should go to it support to let it get explained.. For the rest of us who actually understand this, they should not allways think its my "outlook" failure..

but it's fucked up that people have bad Outlook cache items...

it leads to bad ServerFault questions...

hah

Standalone Sysadmin: Accidental DoS during an intentional DoS

9:35 AM

@tombull89 don't you guys use the auto-magical ones?

Stack Exchange

posted on October 24, 2014 by Matt Simmons

Funny, I remember always liking

10:03 AM

@ewwhite odd query that my hp guys have had to send to houston, who haven't replied yet - is there a supported way of adding a D6000 to a dl380 g7? I'm confused

what's a D6000?

@MichelZ a disk shelf

ah

@MichelZ DAS over 4-way SAS, two banks of 7x5 3.5" SAS/SATA disks in 5U - you can get them with 6TB disks now so that works out at over 80TB/U - which is nice

does sound nice

10:08 AM

@MichelZ I could probably just buy the various adapters/cables etc. but HP-people like me and Ed are always very concerned about 'supported configurations' because HP will run to the hills if they find any form of 'incompatibility' but will support you to the hilt if it is to spec

yep, I know

I'm trying to avoid unsupported stuff as well

:)

sometimes it's just not possible tough

yeah, annoying isn't it

absolutely

unlimited money? anyone?

10:19 AM

@MichelZ yes, please.

actually, according to Gamergate I can get that by simply being a "professional victim". I still haven't found a link to where I can sign up for it, though.

lol

just be against females in games and blog about it

et voilà

10:34 AM

Also claim you got death threats after that.

wishes he could smack everyone involved into sensibility with rolled up newspapers.

of course only works if you're female as well

@MichelZ: meh, just use stock photos ;p

People do that on the internet all the time ;p

hehe

I have friends on both sides of the arguement.

I think the solution is to stop feeding the trolls on both sides.

an argument is OK - death threats are not

10:39 AM

Precisely!

@JourneymanGeek turns out yeah, ours is a semi-auto one. You place the pads on their chest and it analyzes the patient but you need to press the button to shock them

That makes sense.

11:19 AM

@MichelZ nonono, those aren't professional victims, those are BRAVE HEROES SPEAKING OUT! The professional victims are those sad people like Felicia Day and Randi Harper who are completely whining and not reals gamers anyway.

ah... media whiners

@JourneymanGeek I find it hard to be friends with anyone on the other side of the argument "hey, it'd be nice if there were more games that don't portray women as subhuman".

or wieners

@MichelZ yeah, exactly. That's precisely what they are. nods

(in case you didn't notice, that was my sarcastic voice)

i did

:)

11:21 AM

Just checking :-)

@JennyD Oh, I just think games don't have to fit specific view.

If I don't like it, I don't play it, same with movies

@JourneymanGeek I think the general discussion is way past that :)

@MichelZ: Which I think is wrong

It dosen't need to be male douchbags against SJW feminist whiners ;p

I think that since games are works of art, they should be subject to critiques in the same ways as other works of art. And that includes content outside of pure game mechanics. this whole crapheap starts with people being upset that some woman has the temerity to speak negatively about stuff tehy don't like

@JourneymanGeek Since I'm one of those SJW feminist whiners, I'm dropping out for a while to cool down.

@JennyD: Oh, agree there. However I don't think the extreme there "We need to attack anyone who even has a slightly imperfect female charecter"

11:30 AM

how many SF rules is this breaking do you think? serverfault.com/q/639374/1435

@Chopper3: I lost count.

:)

Wierdly, the fact he's using a mac mini is probably the least of it.

yus

@Chopper3 42

11:43 AM

@DennisNolte no no no... 42 is a good number, not a bad one!

What is going on here?

@MichaelHampton the same thing as every day, pinky. we try to rule the world! muahahhahaah :)

3

@MichelZ numbers are not good or bad, it is your imagination or socially behaviour which makes you think that they are evil.. examples: 666/88/13 9/11

@DennisNolte everything can be devided into good and bad. Ask santa!

12:10 PM

He sees you when you're sleeping, he knows when you're awake, he's copied on /var/spool/mail/root, so be good for goodness' sake.

Morning

Nathan C

'elo

@JourneymanGeek Ha. I'm pretty sure they're reported to /var/log/auth.log (or secure depending on distro) ...but I like that better. :)

12:27 PM

/var/log/santa.log?

Dennis Kaarsemaker

@NathanC and /var/spool/mail/root or wherever mail to root goes :)

Huh. I'm the one that gets mail addressed to root.

12:41 PM

Hm, changing your question title to Swedish profanity and then deleting your content is not the way to make nice with the moderators...

Dennis Kaarsemaker

@MichaelHampton åsshøle!

Close enough

@MichaelHampton I tried to get a screeshot but missed it :(

b0rk b0rk b0rk

Migrating Graylog Servers - Part 4

@tombull89 It was kind of nonsensical anyway, even for Swedish

Secops Monkey

1:02 PM

posted on October 24, 2014 by Scott Pack

This is the fourth in a multi-part series where I explore the process of transforming an existing Graylog install into a resilient and scalable multi-site installation. Start here for Part 1. The MongoDB section actually gave me the biggest set of problems. Part of this is because of my utter lack of familiarity with Mongo and partially because of Mongo's design. Originally I hoped to go …

http://notalwaysright.com/ph-duh-part-2/19726

in case someone needs another wtf moment.

Is there some part in life when you learn too much of something that you loose common sense?

@MarkHenderson yeah those are always fun.

@RyJones lowest stock prices in a year, now is the time to buy.

Amazon will bounce back, they just gotta be persistent if they want to enter the phone game

not to mention they're coming after spotify and pandora now, so there's that

but they have to stick to what they're good at, content

@DennisNolte in the chair's defense somewhat though just coz he's a comp sci PhD doesn't make him a computer guru, typically he probably knows a very lot about something very specialized, like rewriting TCP/IP in assembly on a raspberry pi and how to tweak it for performance improvements, or other such uselessness*.

*uselessness of the topic is subjective.

1:26 PM

ofc, im not talking about he needs to be a skilled support/admin/whatever .
Instead i was mentioning common sense .. even some older relatives of mine do understand that (cat kept running over the keyboard, pressing more than 3 chars >beep, move cat = no beep.
and they could not even install or update anything (even pressing next was too much)

I once believed that there were some "normal" logical behaviour (aka. common sense) in all of us, only not used by drugs/insane people.
God was i wrong..

Q: How to implement a network fault tolerance on a Windows Server 2008 R2, Single Server - Dual NIC? Only Windows Services like DNS, DHCP, File Server

0

Diagram 1: Server, VIP IP Address, Network connections, Switches and Clients Hello There! We have an IBM x3650 M3, Dual NIC. We have Windows Server 2008 R2. In this Window we will have services like: Proxy: using ForeFront 2010 FTP: Using IIS IIS DHCP DNS Active Directory Any other Windows ...

windows-server-2008 switch nic windows-nlb

I'm a programmer not a sysadmin so I'll be honest I'm completely clueless on how to fix this the right way. Are you interested in taking a contract job to diagnose this for us? PM me your email if you're interested. — Jonathan 37 secs ago

Anyone want some work?

@DennisNolte Oh absolutely, just talking about the OP there

I kinda get the feeling he probably put the book on the keyboard while the machine was off, then turned the machine on, so there wasn't an immediate cause<->effect thing there

but I am feeling ultra-sympathetic towards users today, so my scenario may be biased.

We are striving for redundancy. Take a server with two nics. One of the NICs goes to Switch-1 the other goes to Switch-2. If one of the switches fails, the server must be still reachable. — sparskter 4 mins ago

what's wrong with that? isn't that the way it's supposed to work?

Switch and NIC failure isn't that common

but sure, he has spanning tree options or just NIC teaming options...

with a port-channel between switches

ideal: switch stack + etherchannel

1:44 PM

@ewwhite regarding that >4TB volume question - we have a D6000 with 70 x 6TB disks carved up as 4 x 17-disk R6 arrays presented to a DL380p Gen8 over a P822 using ReFS as one single volume :)

pauska

funny, I was literally shopping for a new backup server like 20 seconds ago

can't decide if I want large 7.2k disks or 1.2tb 10k disks

everything is sequential, so 10k doesn't bring much to the table.. as long as the slow ones are NL-SAS?

@Chopper3 Wow.

@pauska the sweet spot in disk pricing here is for the 900GB SAS

$280/disk...

so they are definitely more reliable than the nearline drives.

but if you need nearline 3TB or 4TB are the way to go

it's just that there are fewer 3.5" disk options out there now

@ewwhite at $Job[-1] switches used to die all the time

@BigHomie any reason why?

depts didn't want to buy new ones for their offices, so IT was forced to reuse older EOL ones, they were Cisco, and in reality by all the time I mean like every couple months or so I'd hear about one dying

1:52 PM

@pauska backup server & 10k disks? isn't that too expensive?

2:06 PM

Mods... can you fix this one?

Coworker sent me this, kinda neat: bhami.com/rosetta.html

@cole it's useful

@ewwhite I thought so

2:41 PM

RAWR

@_@

Told anyone to suck your ass lately @ewwhite?

@Wesley in your butt!

@MichelZ Nerd!

Nathan C

@cole bookmarks

2:44 PM

Yasss

@Wesley no... last night, a truck crashed into a utility pole and blew a transformer that took out 40 of my produce systems in Los Angeles.

Whoa

I spent all night repairing systems, VMware environments, Exchange servers, print servers...

a few bad switches...

walking a warehouse manager through powering on a server en Español...

so I didn't sleep...

trying to figure out some LXC stuff now.

I don't know how you do it @ewwhite

@MichaelHampton I need my LXC containers in this environment to have a static IP... and the normal approach no longer works.

2:47 PM

Don't use Docker?

@MichaelHampton not using Docker... LXC commands instead

Don't look at me

I think it uses dnsmasq to assign IPs to the guest

lxc.network.type = veth
lxc.network.flags = up
lxc.network.link = br0
lxc.network.hwaddr = fe:6b:c5:ea:83:04
lxc.network.ipv4 = 172.16.4.21/24
#lxc.network.ipv4.gateway = 172.16.4.1
lxc.network.name = eth0
lxc.network.veth.pair = v-pms-dev1-e0
lxc.rootfs = /var/lib/lxc/pms-dev1/rootfs

but none of it works

@ewwhite :'(

DHCP works great... but client doesn't have DHCP on their network.

Which brings up the question... why do some people have static-only networks?

Nathan C

2:51 PM

@cole Because @ewwhite makes cash money, and cash money speaks to him

:P

@ewwhite Gentoo. — Wildling 17 secs ago

Q: Networking regarding creating a web server between two computers

3:03 PM

@NathanC :(

TheCleaner

-1

My mom has already really fast ethernet (28mb/s). I would like to share the ethernet connection from her computer to our desktop (only 15 feet away) without paying for another connection from the isp. I would like your opinions on how I might accomplish this and if it's the right way to network a...

networking webserver mac ethernet internet

^^ high tech stuff....and web server? What?//

damn

TheCleaner

That should be downvoted to oblivion and then some

And with the edit I'm starting to wonder if he's trolling or serious

faker

oh, it's already removed

TheCleaner

My mom has already really fast ethernet (28mb/s). I would like to share the ethernet connection from her computer to our desktop (only 15 feet away) without paying for another connection from the isp. I would like your opinions on how I might accomplish this and if it's the right way to network a web server.

The computers are both macs and I found that in system preferences you can share the connection from one to the other. However this would require that the ethernet cables would have to both go to the same modem. Thanks.

faker

3:10 PM

ಠ_ಠ

My mom has already really fast ethernet (28mb/s) <--- classic.

Troll surely?

This post was voluntarily removed by its author.