One of the more interesting arguments currently rumbling around the
office is the lack of backup for the HR person's laptop.
This contains a copy of the contract and other HR type info on every member
of staff we've got working here. It's certainly confidential
information, some of it contains NI...
I think we've said this before, and please dont take me for being arrogant - we usually find questions like this via the site itself
The chat would be pretty pointless if every question author would log on to the chat, link to their question and ask for answers :)
That being said - may I ask why you're allowing HR to store sensitive documents on a laptop wich is allowed to be taken off-site?
The basics here are: Drive encryption with strong authentication (fingerprint+password), centralized and secured document storage (like sharepoint in a separate and locked vlan for HR only)
@pauska You know they'll find some way to make it my problem, especially now i've voiced my concerns over it. This is why managers who have no background in IT should keep their fucking noses out, and just supply me with money to fix things.
given free reign, i'd just backup the laptop, nuke it, put truecrypt on, enable the fingreprint thingy, buy a 4TB nas, do encryption on there, and offsite it to iron mountain
but i bet they'd never see that it'd be a good investment.
Tom, please for your own sake send an email to somebody and get it in writing that they are unwilling to do anything. At least then you've done as much as you can.
lovely, hopefully the only thing hurt was your dignity
I'm quite pleased though, my nephew's birthday present was delivered with no mishaps. He's 8 tomorrow and its nice for kids with their birthdays close to Christmas not to have their birthday 'lost' in it
This is the problem with some people, they only like the answers that tell them what they wanted to hear instead of backing off and wondering if they need to re-think their whole approach
Sure, we all have bad days or get particularly wound up by a single question and post a terse reply, but his always seem very aggressive and "I am so holier than thou"
@RobertMoir Last week, i slipped and fell on one side, the bruise on my leg is iphone shaped, and the touch screen no-longer works in the top left corner
Unfortunately I think it's the nature of the industry... everybody's worked with people who could do with a little improvement on their... ahem... social skills.
Start off reading the stuff about tomtom and rajat (can't do data backup but wants to buy hardware recovery tools?) and then bring up someone dying known online.
Oh, hey Tom...sorry to hear you have someone working with sensitive data but don't have management that actually has you encrypt stuff before he goes toodle-looing offsite.
@Iain Yeah... I live in Doncaster (but work in Leeds) and we very rarely get any snow with it being so flat... but we had a foot and a half the other week.
I had to destroy 75 hard disks at $job[-3], ended up taking them to pieces by hand, and removing the fun stuff, then hitting platters with a BIG hammer in the carpark.
@TomOConnor Shocking little blood that day :) It did take a long time to find, and clean up, all the glass slivers that found all the disused corners of that room.
I broke the rear window of my old car once. We were finding bits of glass for the next 5 years. Recently sold the car to my father, who then sold it on, but decided to hoover it out, and found yet more glass bits.
Hey guys, don't mean to interrupt but I'm looking for some MySQL advice. I'm setting up my first linux server to serve php websites and am wondering what the best version of MySQL is to download for my needs. Closed employee-only access behind a corporate firewall, population ~300 and I'm looking to setup an Ajax Push Engine on the server as well
Im just not sure if the "Community" or "Cluster" version would be the best.....
yeah, just use community.. it'll be fine if you adjust the settings right. .get a copy of mysql-tuner.pl and that'll help you set it up after it's been running for a few days (it needs background info on the server first.)
"mysql-server - MySQL database server (metapackage depending on the latest version)"
but you've got to figure the rest out for yourself.. It's fun. :)
You're at the stage where it's perfectly acceptable to spend a whole day and do nothing but read documentation :P *(and drink beer, if you can get away with it)
@TomOConnor the sad truth is everything is still ftp in the real world ... scp is still only used for internal stuff when you have those 'linux guys' forcing you
also if you REALLY wanna learn how this stuff work compile from source @sadmicrowave
@Zypher If you've got a system with a decent package manager, and you're running a reasonably recent distro (ie, 10.04 LTS), then by using packages, you make the life for you, and your followers easier.
@Zypher True, but I've never had any problems personally. I don't run many Windows machines in a professional capacity, so it's not normally a problem.
Thanks RSA. Every fricken enVision SP gets pulled because of stupid things like hardcoded passwords. Why would a security company assume that the clients won't change the default password?
@packs Spoke with the State Ed attorney, by phone, twice now. The case has been rescheduled, so he may make the trip upstate, from Albany, to visit us in person.
Shortly after I started here, my boss had to do one of those. He came back about 4 hours later looking like he got run over, and them mauled, by a big cat. I certainly hope yours goes better
@BartSilverstrim LSS: I work in K12, a substitute teacher allegedly displayed inappropriate material to a class of 4th graders. Sheriff took the computer following the complain. Computer was returned many months later. My director asked me to "look at" the machine and see what was there. Cross-ref'd access logs from the date/time of incident with files on the [image of] machine. There were some "files of interest". Shared this with director.
For being such a good employee, I was rewarded with a subpoena for a state Ed hearing.
In that case, I'm missing why you'd be asked to look at it after the computer was returned, you're working form an image, and now you're involved in a subpoena when they have the evidence.
Without knowing what the files of interest were I'd say I'd have a strong temptation to forget about it if it was reported to authorities. Depends on the file content.
Otherwise...well, you end up getting subpoenaed :-)
@BartSilverstrim SHeriff had the computer for many months. Director of IT asked me to look at it because the school's principal was getting anxious for information.
Oh, I totally stepped right into this pile myself.
Your board should have one on retainer available. And they should make arrangements for you to be considered the client so he or she is looking out for your interests.
There is NO TELLING how you might step into something worse.
A simple misspeaking and suddenly your evidence or your policies are called into question.
My boss came from your area, @jscott. After hearing his stories of what they had to go through for forensics work, I am very glad to be in Ohio. Hope it didn't involve any underage material.
It would be tough for me to say what is "inappropriate" or not, that is not my area of expertise, but I can't imagine the material would be considered "illegal". Perhaps 18/21 age restricted,.... idk.
I'm just saying that it's not their job to be nice to you, even if they're speaking informally and friendly in conversation. They're just doing their job.
And sure they can "let you off the hook" sometimes and have some leeway but overall, if you say something that can be useful in a case they're building, you might inadvertently say something innocent that comes back to bite you in the ass. I have no beef with law enforcement. They're just trying to make their paycheck like anyone else :-)
@BartSilverstrim Well, their job is to find people doing bad things (and sometimes what is worth pursuing), it is for the lawyers to decide. They're usually pretty lenient with people who genuinely try to help.
I'm not much of a redditor, @gregd :-) I read some of the stories but no more than a lot of other websites. I'm about as passive as the average information consumer in America. I also work k12, so it's easy to see how he can get into trouble with some of the stuff that goes on.
So I'm not trying to rant on "f@#$ da police" type things. They're doing their jobs. I just know that what you do or say can be taken out of context and may come back to bite you...after all, jScott was doing his job and now he's giving a deposition. Didn't see that comin' did you? :-)
It is particularly hard for people like us to be brief when answering questions. Especially when we are trying to explain technical concepts to non-technical people.
and if your answers contradict what the lawyers are asking you in your deposition because they've worded it wrong in a technical context, they'll scream and yell at you
I think I said this when jscott first brought the issue up, but I am very happy that all of my cases were settled before I would have gotten called up.
@GregD I'm within earshot of a lawyer and I get to hear him coaching people for various thing. The first thing is always "Answer their question, truthfully" and the second thing immediately after that is "Don't say anything more than is absolutely necessary to answer the question" - If "yes/no" is enough, don't say anything else.
@packs The only exception is when the question doesn't make sense, like "Have you stopped trying to kill your mom yet", when you have never attempted the murder of your mother... You should state 'the question doesn't make sense', or 'I can not answer', or 'I don't understand'; don't elaborate. The English language does not have a single word for 'the question has an incorrect premise', though "mu" has been proposed by some of my friends.
Jeff A, Zypher, and myself were talking about this on Friday. Zypher said how we need one awesome answer to link all of these too. This is really not unlike the subnetting questions
So here is what I am thinking, I will go make the question ... anyone want to have the first stab at answering it?
We can do this in a different format if someone has a better idea
But it is time the MOD_REWRITE to END ALL MOD_REWRITE
@KyleBrandt Link all of the mod_rewrite answers to? A sort of "everything you ever wanted to know about mod_rewrite but were too afraid to get answers for" type question/answer set?
How can I become an expert at writing mod_rewrite rules?
What is the fundamental format and structure of mod_rewrite rules?
What form/flavor of regular expressions do I need to have a solid grasp of?
What are the most common mistakes/pitfalls when writing rewrite rules?
What is a good method fo...
Someone in another chat room has just mentioned this. It seems like the ultimate in why netgear hardware is awful. http://wiki.lspace.org/wiki/Sam_Vimes_Theory_of_Economic_Injustice
http://www.youtube.com/watch?v=Ul97jWv2PKY
in above link if see he is changing head of HDD try if you can :)
I HAVE USED DIFFERENT INSTANCE NAME ON SQL SERVER. SO I WANT TO DELETE SOME INSTANCE NAMES. HOW CAN I DELETE INSTANCE NAME?
How can I become an expert at writing mod_rewrite rules?
What is the fundamental format and structure of mod_rewrite rules?
What form/flavor of regular expressions do I need to have a solid grasp of?
What are the most common mistakes/pitfalls when writing rewrite rules?
What is a good method fo...
