« first day (1237 days earlier)      last day (4030 days later) » 

18:00
Um, Wow.
@Achu There may be other reasons for this other person to get fired of which you are not aware. Consider that as well. You may not have the whole story.
That's far more uncomfortable than what I was going to post.
@Achu I think he was saying that there may be performance reasons or other issues leading to this person's termination that you may not know about. The latest "team mistake" may just be the last straw.
^ that. Perhaps he's just not satisfying the company's demands(… in bed</levity>).
@MikeyB we may approach directory services from opposite ends of the universe, but when it comes to our jobs - we ain't quittin for no one! :D
18:01
wow. i just keep want to say thank you gusy. I don't even think about that!
Yup. I know someone who was fired for giving away cookies. Literally. There was a bowl of cookies that at the receptionist's desk, free to take, and this guy got fired for taking 3 (and giving 2 of them away to visitors).

Obviously, the "reason" for firing this guy was just the excuse they used - they had wanted to can him for a while, so they took the first little thing they found.
@HopelessN00b actually, at that point my wife asked that if she slept with the boss's wife, would I get a raise?
2
@MikeyB And more importantly, would you be allowed to record the encounter?
BTW, everyone that hasn't seen this Joe Biden gif needs to see it, so I'm gonna go ahead and be "that guy" that posts an animated gif in chat
@HopelessN00b Exactly.
@MDMarra Hah. Nice upstaging.
18:04
This is how I imagine it:

"Today, we're going to grow our economy"

"heh grow"
Alright... can anyone think of a good reason why someone might keep a password history of 48 in Active Directory? It's so specific, I keep thinking I must be missing something.
@HopelessN00b 4 years of monthly password changes?
@HopelessN00b that's the min and max age?
@Magellan 90 days, actually, so... 12 years of quarterly password changes.
@HopelessN00b that's annoying.
18:08
@HopelessN00b That sounds a little extreme...
I think you're looking at it wrong. Usually history is used in combination with minimum age (not maximum age) to guarantee that the same password can't be used within X timeframe
Well, Security people aren't necessarily sane either.
@MDMarra Yeah, pulling that now.
@HopelessN00b If an attacker or an unenlightened admin could crack (or, better yet, simply intercept via some SSO login page) all 48, he/she could learn an awful lot about how each user chooses passwords.
Some users will change their password once a day (if min age is 1 day) over and over until they're allowed to use their old password again so if you have a 1 day minimum age and only remember 5 passwords, they can use the old password as early as the following business week
18:10
Oh, well, nevermind. Minimum age of 0 days. annoyance factor, maybe.
...wtf
hilarious then
@Skyhawk ☑ Store passwords using reversible encryption
@MDMarra Yeah, be funnier if I didn't have to untangle this, I think. :)
It's a sad thing when you're going through Linkedin cherry-picking all the good people out of a previous employer that's folding up shop. =/
Dec 18 '12 at 18:33, by MikeyB
I'm doing work right now for a telecomm provider whose security people can be a little… overzealous.
Shredding disks from decommissioned servers? That's pretty standard.
They shred RAM.
18:12
@Magellan Sad, but also fun? I like hiring and placing people.
@MikeyB oh my. Then again, that was actually a discussion we had at my job.
@MikeyB Is there any evidence that there is anything at all to be learned from used RAM?!
@Skyhawk you can learn the serial number from the sticker on the outside
@MikeyB Make sure they shred the motherboards too. Electro-static, residual.... well, whatever, it would just be nice to be able to say "Guess what I convinced a bunch of morons to do for 'security'..."
@Skyhawk that too. Plus they're kinda staggering along in a zombie state, so I'm not sure if I'd get sued or not. Once they completely shut down, I'm fine. Startups seem to stagger along on almost no resources for a long time, unfortunately.
18:13
Um, WOW. I think my both eyes are wide open now. Thank you so much again guys. Have a good night! Its 1AM late night here, Good Night!
@Achu Good night, and bless you!
@Skyhawk none.
Thank you!
@Achu Good luck!
@MDMarra You know, that Monopoly logo is true. If a potential partner can't play Monopoly without being a jerk, don't marry them.
18:19
@Magellan oh
hm
my wife won't play board games with me 1:1
@Magellan Huh. Before we got married, I played one game of Monopoly with my ILs. I got branded "slum lord" after that.
@MikeyB Well, if you lived here I could recommend an excellent divorce attorney. =D
Of course, my FIL had the same thing happen to him playing Risk. Got branded the "Mad Fag of Europe" and they wouldn't play with him anymore :)
Everyone knows that you should get the magentas and the oranges right after the jail, mortgage everything else to put hotels on them ,and win
Every time I play Monopoly, somebody cries...
18:21
I'm the kind of person that has a problem not making the best possible move. My wife, on the other hand, considers games that are long and drawn out where everyone has a billion dollars to be fun
hmmph
@MDMarra When I broke out the options, rent splitting agreements, and insisted properties be put up for auction it may have been too much.
wait, they don't play with auction?
savages
@MDMarra Yeah. I'd rather go (ride my motorcycle) or (read a book and drink a beer). But I've had quite a few people tell me that I'm not much fun.
the first two things you said are made up nonsense though
18:23
@MDMarra Thankfully my wife is NOT the person who wants me to play down to her (or vice versa)
@MDMarra "Give me the last orange and I'll give you immunity and ⅓ of the rent I collect from other players."
I grew up playing sports and was raised to be very competitive. She wasnt. Two different backgrounds. So, we avoid things that will end poorly based on that
What the hell is this?!?
Where's my xterm!??
@ewwhite Some Spanish guy logged into your Windows 8 computer!
@ewwhite Windows Vista 2.0
18:25
actually, it looks like 8.1 based on the desktop background
@MDMarra Sorry, Windows Vista 2.1.
Windows 6.3!
That's it. You're all on shrooms. I'm gonna go fix some breakfast.
I'm on LSD, not shrooms.
18:27
Microsoft is lying to us. 8.1 is 6.3!
@ewwhite What fuckery is that?
seriously I've not logged in to a post-7 Windows machine yet
I'm apparently going to hate it?
That's the start screen in 8.1
@voretaq7 how is this possible
@MDMarra This is exactly why I'm sticking with Windows 7. I don't want to downgrade 0.7 versions.
@JohnD I'm not a Windows admin, and I don't use it at home either.
you're all welcome.
18:30
@voretaq7 there's a little box to tick that says "boot to desktop" and then it looks like this
@MDMarra that's less hideous. Why can't less hideous be the default?
@voretaq7 Yeah, it's really fun having the touch interface on Server 2012.
@voretaq7 ClassicShell4Lyfe
@voretaq7 I'm going to start using those in my documentation around here. ... Think I'll make sure the ol' resume is up-to-date first, though.
@voretaq7 "The same interface on Phone, Tablet, Computer"
It's not very much fun on a regular monitor screen through. and I hate fingerprints on my screens.
18:31
@MikeyB Oh come on you fucking neckbeard. You can install Windows without a GUI and you're complaining about the GUI? Unity is a piece of shit too and you can install it on Ubuntu servers but that doesnt discredit Ubuntu as a server platform (the devs that write code for it do that themselves)
@ChrisS Fuck. That. Shit.
A phone is not a tablet. A tablet is not a desktop/laptop.
@MDMarra yes it does discredit Ubuntu. Who are you kidding?
@MDMarra I'm saying that it's a bit of a wacky design decision. I also think Unity is ass. Like, herpes-infected elephant ass.
@MDMarra DUNNA LIKE CHANGE CHANGE IS BAD
@Magellan So you think the optionally installable GUI is an important factor in choosing a server OS?
MS thinks that's the problem... If they put a touch interface on MS Word people will suddenly think their sh*t is worth a $10/mo subscription. It's definitely not the lack of innovation and stagnation Office has experienced for the last 20 years.
18:33
Once you get past the poor UI decisions, Win8 is not that terrible in my opinion and experiences.
@MDMarra Ubuntu is not a server OS. Anyone who tried to convince you otherwise is also on shrooms.
@Magellan ah, but everything that runs on Heroku runs on Ubuntu and that's a lot of stuff
Isn't Amazon's Linux for AWS also an Ubuntu fork? or no
@Magellan "but they have a server edition"
@Magellan Depends on your needs. Debian is awesome and super stable, Ubuntu is more palatable and convenient.
@MDMarra I've supported it as a server. The stories my liver could tell you....
18:34
@Magellan You could be talking about ANY OS. Except AIX.
@Magellan right but I guess my point is that the GUI doesn't matter, it's all of the other shit. I'm sure you had problems with it, but I'm also sure that 0 of them were the fault of the GUI
@MikeyB Well, yes. But Ubuntu is the only one I actively hate as a server OS.
@Magellan Gentoo?
We have a customer who insists on Gentoo on his servers. Oy.
Oh good, we're getting off of Windows bashing and into intra-distro wars. Carry on.
@MikeyB dumb fuck
18:36
@MDMarra It's a RHEL derivative. (I think that's the right way to put it...)
0
Q: postfix and exchange connection

PeterI have a local Exchange Server which has a dynamic internet ip. So I have setup a dynamicdns server for this server. The server is my main mail server. Now I have a public domain and a postfix server as email server for this pubic domain. I dont want to change the MX Records because the Exchange...

10 mins ago, by Chris S
user image
@MDMarra You see, Unity is a symptom of Shuttleworth's inate mental illness. You cannot discount the other poor decisions of a design team.
@MDMarra EL-based... yet all the cloud people STLL use Ubuntu
> I have a local Exchange Server which has a dynamic internet ip. So I have setup a dynamicdns server for this server. The server is my main mail server.
oh god, do I want to keep reading?
18:36
@Tanner nope.
Close: Not professional sysadmin related.
No email on dynamic IPs. Period. End. Over. Done.
@MikeyB FFS. I've been trying to forget about that for a couple years now.
I have a local Exchange Server which has a ***dynamic internet ip.*** <--- I found your problem for you. — HopelessN00b 30 secs ago
Fuck it.
NexentaStor installer blew up...
figures
@ewwhite Debian on AWS with a Chef infrastructure is really sweet.
18:39
@Magellan what makes it extra-sweet?
I'm familiar with the Chef-Ubuntu combo
as I install Ubuntu in the background...
@ewwhite filthy heathen.
@ewwhite Squeeze has a recent package set, works well for AMIs right out of the box without a lot black magic like RHEL, and Chef seems to be designed more or less for Debian. Pretty much just works from the work I've done.
And it's not as blasted unstable as Ubuntu.
If you have more than one person in your cube working on something - get a god damn conference room.
@cole it's hard to lug dual monitors into a room.
but, in general, I agree with you - I would phrase it as "don't work for companies with cubes or other open plans"
Projector!
Yeah they're going to be downgrading out full size cubes to half-cubes in 1-2 years.
18:54
our projectors are only 1080p :(
Just annoying when you're trying to concentrate - and not allowed to wear headphones
I thought you got permission to use headphones
@cole dude your employer is insane
@pauska I did until someone else complained, and the director lost his mind.
@cole Is this the same crazy employer from like a year ago that you evidently haven't left for some reason?
18:56
@RyJones I know
@HopelessN00b I left, and wound up in a worse place.
Came back
But - it's whatever. Short commute, good pay (for the area), and not working more than 45 hours even when on call? Sure.
Do I think I'll be here in another 1-2 years? Probably not, no.
Yeah, I get that.
But right now it fits me for some other life goals I want to accomplish.
In order for me to find a company I'll really like/fit in at - I'll either need to move in Boston/commute (~1.5 hours commuting time each way from my apartment) or move to WA/OR
"Life goals." Heh, I remember when I had those. Now I just want a beer, a blowjob and a good night's sleep.
6
18:59
@HopelessN00b Getting that tonight - girlfriend knows I had a shit day.
and a burrito, too.
@HopelessN00b I'm in my mid 40's. I'm fine with the good night's sleep
@RyJones You're one step away from "Well, I woke up today!"
@MDMarra legit made me LOL
@MDMarra yeah, that's pretty much every morning, but you're right
@MDMarra I'm still waiting for my life to catch up with the realization that waking up is a highly over-rated activity I only wish to participate in on the weekends.
19:09
0
Q: Connection to Amazon AWS highly unreliable

jsnI have a Java application that connects to MySQL on an Amazon EC2 instance with JDBC (using official latest Oracle drivers, location specified by IP). It also connects to S3 using Amazon's given SDK. Problem is, while everything is fast and works great from any server, except for one server at a...

I do say this guy is blind...or something
pepperjack cheese scrambled eggs with peri peri sauce. Yum.
I should've posted that as an answer but @MichaelHampton beat me to it ;P
@NathanC It's black text on a green background. Hell, I missed it at first.
An odd color to choose for sure...
@MichaelHampton Yeah. My dog still can't read it, and he's been staring at it for the last 10 minutes. That's because dogs are colorblind, right?
19:13
And why is he running in US-East-1. Talk about decrepit hardware.
Sooo.... My client just forced me to allow THIS - I feel like a slut.
@NathanC Makes sense to me. I've been painting red traffic lights in my area green for years.
About half the medium instances I'd land on were using 4 year old chipsets and ran like dogshit.
@ewwhite So charge them double?
@ewwhite oh man
@Magellan Right, there's a word for that.... CLOUD.
19:15
@ewwhite hacked already? page is down :)
@MDMarra no it's not
@HopelessN00b also happens when you're going cheap on your instances.
@Magellan Yeah, I've had an instance running on antique hardware for ages there... but as soon as I created a new VPC and stuck a new instance in it, it's on new, modern stuff.
And if you're running lots of Java processes on mediums, well, you're asking for it.
19:16
@ewwhite You should feel unclean
@freiheit I'm posting this here because I'm trying to see what, if any, accounting I have for this
@ewwhite It's broken already.
shellinabox eh?
19:17
@MichaelHampton granted this was last summer, but we actually had to modify our service restart scripts to check for the chipset and issue a reboot off the offending instances to get a newer chipset.
@Magellan ugh that's horrible
@Magellan My instance is stuck... I stop and restart it and it just stays on the old hardware.
@NathanC yep :(
@MichaelHampton we had to wait about 5-10 minutes to get new hardware.
gross
19:18
At least require some generic basic auth known only to the people needing to access it....
@ewwhite That's just wrong.
@MichaelHampton on at least 4 levels
@RyJones Granted, I'm getting paid 30% more, but I miss that job even with all its warts.
@MichaelHampton it's incredibly dangerous
19:19
@ewwhite you have a liability rider and/or insurance, right?
of course, that won't help when they buy a contract to take you out.
We're talking about Produce here. It's all mob money.
Stutterer.
> Have you ever wished for a smoother way to log into the Produce Pro system on a mobile device or a Mac computer?
Wait - I though people interfaced with it via SSH
I think I can predict your next call about this system....

"I typed rm -rf into Google and now the server's down."
why the fuck do you need an easier way on a mac
19:22
serverfault.com/questions/571061/… something seems off ...a hyper-v guest with 48 gigs of RAM? wut
@ewwhite Now I feel horribly dirty from just having seen that page... I may have to disavow all knowledge of your very existence...
@MDMarra SSH is hard
@NathanC why
Unusual - maybe, but not necessarily wrong by default
@freiheit disavow knowledge of who? I already forgot him
@RyJones I forget
@NathanC The thing that seems "off" is running a Linux box as a guest on a Hyper-V hypervisor, IMO.
19:24
@RyJones I have heard there's an awesome collection of bikes (Titanium, Parlee, etc) in a house somewhere in Chicago with a deceased (to us) owner, though... ;)
@HopelessN00b totally supported, brosive
@freiheit you take the bikes, I'll give the house to my sister.
@MDMarra Well...he's complaining about half of it vanishing, which leads me to believe the host is stealing it back
Yeah it's probably ballooning
@RyJones deal
19:25
Were he to have enough memory - nothing wrong with a 48GB guest
@MDMarra I know, but it seems "off." Not having a guest with 48 GB RAM.
because outside of a enterprise you don't really see hosts with enough RAM to host multiple 48 GB guests lol
And why exactly is 48G considered over-provisioned? You fire up a Java process with a 30G heap and that's not too far off at all.
@Magellan True, but when the host can't handle it and balloons, it's not set up correctly
@NathanC Haven't visited my closet, obviously. RAM's cheap.
19:26
@HopelessN00b RAM is, boards that support large amounts of RAM aren't :p
@NathanC yeah, 48 is small for me nowadays.
@HopelessN00b Lots of linux workloads on Azure, which is all Hyper-V
I wouldn't call it "off" nowadays - it ain't 2008 anymore
heh
I have 2 48 GB hosts here...both of which are 90% filled with 11 VMs each...
no over-provisioning (outside of CPU, but that barely hits 25% at peak time)
@NathanC oh. those are your hosts. 48G VMs are small for me nowadays.
@MDMarra I wonder how they fix that insane time drift
or maybe I'm the only one with that problem
19:28
yeah...I figured.
There's also 608 "sleeping" processes on that system with 1 user.
@NathanC What, you don't have a used server that's not like 5 years old? My storage server tops out at 256 GB of RAM (I think, might be 512).
@MichaelHampton @freiheit @HopelessN00b @MDMarra - My clients are BUYING this module from the software vendor and insisting that I allow external access.
Can't wait 'til I start getting servers that run at full RAM speed with 512G.
@HopelessN00b I'm behind the times when it comes to servers, appearently.
the software vendor is selling SSL certs from Digicert to "encrypt it"
but there's obviously something wrong with this...
19:29
@ewwhite And they're signing off on the security risks?
<3 digicert
@ewwhite are they incorporated in Atlantic City, NJ?
@ewwhite (>_<)
@MichaelHampton I brought it up with the engineers there and they said, "if you want to secure it on your own, feel welcome. We're not changing our RPM"
The Dell r710s we have definitely support more RAM, but I dunno if I'd ever get the OK to shove more into them
19:30
@pauska I havent seen drift problems. There's a lot of conflicting recommendations for time sync though
@ewwhite Sounds cool to me. I've always wanted a free shell box. :/
@ewwhite Everybody there uses a 3-character password, right?
@MichaelHampton jose:jose
@ewwhite Is this hosted on Apache? Maybe use at least basic auth to keep out outsiders...
@MichaelHampton apple
19:31
@NathanC it is apache.. I asked them to add some basic auth in .htaccess and was declined.
I don't think people realize this is insecure
@MichaelHampton If they're anything like our company, i wouldn't be surprised...
our manufacturing software has a max 6 character password and most people have 3 characters
a root shell in a browser over the public internet is insecure? GET OUT OF TOWN
@MDMarra Nope. It's asking me to try again. :D
Oh yeah, it's produce. Everyone's password is Chiquita.
I really need to upgrade our office firewall. I had to blacklist someone for attacking our VOIP server and it took me a while to realize the "addresses" file isn't read in the version of pf we have on that box...
19:32
@ewwhite How could it be insecure; it uses the HTTP Secure protocol (HTTPS)?
@MDMarra Well...if you consider it a different way ...couldn't random people just fire up putty and go over SSH anyway?
@freiheit because it's opening a basic login shell... not SSH
[root@General /var/log]# last -10 bam
bam      pts/18       127.0.0.1        Thu Jan 30 13:37 - 13:37  (00:00)
bam      pts/67       wholesale-249    Thu Jan 30 13:17   still logged in
bam      pts/41       wholesale-249    Thu Jan 30 12:06 - 13:09  (01:03)
bam      pts/18       127.0.0.1        Thu Jan 30 10:54 - 13:37  (02:43)
bam      pts/28       127.0.0.1        Thu Jan 30 10:33 - 12:36  (02:03)
bam      pts/28       127.0.0.1        Thu Jan 30 10:31 - 10:33  (00:02)
bam      pts/18       127.0.0.1        Thu Jan 30 10:23 - 10:28  (00:04)
telnet was good enough for my great grandfather and it's good enough for you
2
@NathanC Denyhosts.
Fair enough...workaround: .htaccess with "Deny" lines :)
even if you had to write a log parser yourself it wouldn't be difficult to mimic denyhosts for that shell...but, w/e :P
19:34
@RyJones rsh
Because installing an ssh app on my iPad is TOO DAMN HARD
@ScottPack need more dotfiles
@MichaelHampton yeah, iSSH was the previous way to do this
but people had to pay
I want someone at the software company to acknowledge the fault with this approach
am I crazy for thinking it's a little too open?
@ewwhite hey free lettuce for everyone
@RyJones Regarding that Adsense discussion the other night. I never received a letter indicating that my account was shut down for invalid activity. I'd never got it running and when i went to log in to get my key I'd been flagged for illegal click-buying for some reason. And to this day I still don't receive any kind of response whatsoever from Adsense, and they no longer allow Adsense accounts to be tied to non-Google accounts, so I can't fix it anyway.
19:36
@ewwhite When someone breaks into this system and ships the software company six truckloads of prison food, they might get it.
@Magellan ah bugger
I think the people who may have had questions were told, "we're using SSL... it's safe"
@MichaelHampton Or worse, elementary school food!
and nobody questioned it again
@freiheit Is cafeteria pizza as disgusting as I fear?
19:37
@Magellan Sorry... that scenario is almost impossible to get unbanned from.
@ewwhite Not from password guessing.
@ewwhite The word "secure" is right there in the protocol names!
Am I too fondly remembering those fantastic pizza rectangles? Is it the Tron of the food world? In reality quite terrible but carries amazing level of nostalgia?
@MichaelHampton yeah :(
@MichaelHampton Yep. Completely untrue, of course. Back then I was only getting about 50 page views a day anyway.
@ScottPack oh man that stuff was cardboard
19:38
I have four more of these to do this weekend
@ScottPack It's been a long time since I saw elementary school cafeteria food. I recall it being frightening, though.
@freiheit parent-teacher-student events
I saw an documentary about the "food" they serve in american schools
@RyJones Yet another good reason to stick with the "no kids" plan...
it's.. what's the word, bizarre?
19:39
@pauska It fucking sucks, barely fit for prisoners
@pauska bizarre works. So does "beige"
The cafeteria pizza at my school was cardboard drenched in grease. You could pour it off the pizza.
@ChrisS The tomato sauce counted as 2 serving of vegetables
That was supposed to be tomato sauce?
It does now... Didn't when I went to school. Thank you congress for counting a thin film of FRUIT as a two servings of vegetables.
19:42
@ChrisS You were privy to the nutritional guidelines at the time?
@freiheit I remember when those guidelines nixed my favorite lunch food, the Ranch Burger.
@ChrisS had to make sacrifices somewhere so that they had time to write all the corporate tax loopholes that they were paid for before the session ends, right?
ain't that the truth
@MDMarra I'm currently adding 1 billion dnsNode objects to an AD DS partition :D
@ChrisS Ranch Burger? When I went to school, they had barely heard of "burger", let alone ranch.
And worse, I think my school's idea of "burger" was the stuff that came out of the kids' noses.
19:50
It was something like a Burger King Whopper Jr, with ingredients they already had...
@voretaq7 do you remember what version of BIND came with FreeBSD 9.0?
Nevermind, found it 9.8.1
This is how I feel every time I open RegEdit
@ewwhite I can only imagine what their consulting division cooks up as well producepro.com/solutions/systems.php
@ScottPack It's the hivemind.
Oh, I totally failed on my duties, sorry guys. I just finished peeing.

« first day (1237 days earlier)      last day (4030 days later) »