The Comms Room

ewwhite

13:01

@DanilaLadner I have 10 Base-T at some of my locations.

Danila Ladner

@ewwhite yeah, it is quite bad.

ewwhite

I have some places with printers and devices (machinery controllers) that don't work well on modern switches.

Danila Ladner

@ewwhite yeah, that is actually true.

ewwhite

But I see plenty of sites that still have 100Mb gear, too

Danila Ladner

i had client where there were some cnc machines with 10BASE-T, but they also had 100BASE-T, but did not work with cisco switches.

Basil

13:03

morning

HopelessN00b

@NathanC It's publish printer, actually. But close.

TheCleaner

Well well well...let's just say I now have a certain deleted question bookmarked for posterity. It was definitely a fun read...

Dennis Kaarsemaker

BigHomie

@TheCleaner I'll do you one better, I capitalized on Heartbleed, now that question has 7.5k views

HopelessN00b

asked
2 days ago

viewed
16957 times

active
today

(The original heartbleed question on here).

TheCleaner

13:08

@BigHomie the askdifferent one?

BigHomie

@HopelessN00b That was @Jacob 's genius, I didn't want to capitalize, but I gave in

@TheCleaner Yep, the original was funnier, but of course they always butcher my creativity

TheCleaner

Mine was the fun meta post.
I'm thinking I'll ask on main "Is my DVR subject to Heartbleed?" and capitalize on the trends.

3

BigHomie

Apparently it's a thing, but why would a dns server need to send a heartbeat? — BigHomie 7 secs ago

@TheCleaner You got my upvote

Or bombard SO, they hardly had any heartbleed questions yesterday

I think the only one was from a 50 year old woman w/ no computer skills

TheCleaner

@HopelessN00b - nice answer on that network mapping question. I had always seen that over the years and never bothered to ever mess with it. I wonder how much detail you'd really get though.

@WINADMINS: I have a side client I need to migrate from a native 2003 domain to 2012 R2. I haven't bothered to research it much, but is the process still the same as 2008 days? domain and forest schema prep, add the dc, replicate, migrate roles, move FSMO roles, dcpromo remove the old 2003 DC, change functional levels, done?

BigHomie

@TheCleaner Sounds right from what I've read, haven't actually done it though.

HopelessN00b

13:21

@TheCleaner Only gone from 2003 to 2008R2 because of the damned compatibility with the migration tools (2012+ not being compatible yet). But in that case, yeah, same process you outlined.

ewwhite

I need to choose a TCP port for a web GUI to bind to. How do I choose?

My birthday? Favorite lottery number?

TheCleaner

Thanks fellas

@ewwhite 666

ewwhite

@TheCleaner :(

HopelessN00b

serverfault.com/questions/588080/…

:/

TheCleaner

@ewwhite well you can't have 80085

BigHomie

13:26

@ewwhite today's date in nanoseconds (starting from 1970?) modded with 65535

ewwhite

nope

HopelessN00b

@ewwhite Pretty much. Just pick something above 1024.

ewwhite

1977

Dennis Kaarsemaker

dennis@spirit:~$ python
>>> import random
>>> random.randint(1025,65536)
5233

BigHomie

@DennisKaarsemaker We all know that function doesn't generate truly random numbers ;)

TheCleaner

13:28

I would go with 11111, then make the url: 'https://lllllllllllll.ewwhite.org:11111/llllllllllll'

Dennis Kaarsemaker

ok...
>>> import struct
>>> struct.unpack('!H', open('/dev/random').read(2))
(42422,)

BigHomie

@DennisKaarsemaker much better!

TheCleaner

@HopelessN00b "restart our modem" ... nice!

BigHomie

@TheCleaner tied for 49th highest voted question on the site: pwned.

TheCleaner

@BigHomie Nice...I just flagged it for repwhoring! :evillaugh:

;)

Nathan C

13:33

lol

BigHomie

lol

Kevin Soviero

Morning

Nathan C

hmm, unsecure content

pauska

their CDN isn't running SSL

Nathan C

ah

Oh boy...our CEO's personal email was compromised by spammers

i lol'd

TheCleaner

13:37

They've talked for years now about SSL on SE...

pauska

doing full-blown SSL isn't as easy as you'd think

CDN's rarely support it.. Google Analytics didn't use to (not even sure if they do now)

EEAA

@NathanC I finally convinced ours to enable 2FA on his account and his wife's just a couple weeks ago.

pauska

and I'm really unsure why SE should be running SSL at all, except for their logins..

Nathan C

@EEAA And it's an AOL account of all things

EEAA

@NathanC Of course it is. :)

TheCleaner

13:39

Sweet...glad I use LastPass!

lifehacker.com/…

LastPass Now Tells You Which Heartbleed-Affected Passwords to Change

EEAA

I'm about halfway through a crusade to get all of our employees to turn on 2FA on their accounts. It's a hard sell for some...

HopelessN00b

@TheCleaner Not sure if that hacked webserver/restart modem thing is worse, or the following is... but it's already been a morning full of fail.

0

Q: Layer 2 QoS for Windows Server 2012 service

We have an unmanaged Cisco SG102-24 switch which supports layer 2 QoS (IEEE 802.1p). Because we're installing VoIP at our office, we would like to prioritize VoIP packets from our voice server which is running Windows Server 2012 R2. How can we realize this? I've already set the DSCP value for t...

VOIP, with unmanaged switches! Why won't that work out just great?

TheCleaner

0

Q: How to create a proxy to access sip which is IP locked

Here is what i want to do , I have a sip phone configured on my home system which only works on my static IP , Using zoiper soft phone. I want to be able to connect to my system remotely and be able to use my IP phone remotely . Can you please tell me how I can go about doing that.. ? From the r...

windows proxy sip

EEAA

@HopelessN00b I actually do that in several places. For a small shop w/ reasonable expectation-setting, it's not all bad.

@HopelessN00b For my own purposes (and that of my company), though, I insist on managed switches.

Nathan C

EEAA

13:44

@NathanC You got a problem with Spam? That's a fine Minnesota product! :)

BigHomie

@EEAA I thought it was made in China

CWIDT

TheCleaner

@HopelessN00b QoS is a myth.

EEAA

@BigHomie en.wikipedia.org/wiki/Austin,_Minnesota "Hormel Foods Corporation is the largest employer in Austin, where its factory makes most of North America's Spam tinned meat."

HopelessN00b

@EEAA I'll have to take your word for that. I've had nothing but horrible headaches trying to combine VOIP and unmanaged switches.

EEAA

@BigHomie So it looks like it may be manufactured elsewhere, but Austin was the original site.

BigHomie

13:50

@EEAA Ahhh, you didn't catch that, allow me to elaborate:

@HopelessN00b I only use unmanaged switches in the lowest of the budgets.

I know very little about VOIP, I hope to have time to change that soon, but a managed switched would be included in any network bundle to my customers

Nathan C

@BigHomie I checked on the date of the PS3 launch because I was like "no way it's that old" ...PS3 came out in 2006. 8 years...

Kevin Soviero

@BigHomie I don't share other's love of managed switches... The only thing I like them for is link aggregation and VLANs. Oh wait, I love managed switches!

EEAA

@BigHomie If you stay away from the proprietary VoIP vendors, I've found it actually a lot of fun to work with.

BigHomie

@NathanC Yep, that's about the time I decided to shelf video games pretty much. almost took off work to stand in line @ meijer that night too.

HopelessN00b

@BigHomie Honestly, anyone coming to me who wanted me to set up VOIP on unmanaged switches would suddenly find that the added fee for having me do that would vastly outweigh the cost of putting in a managed switch. :)

BigHomie

13:59

@EEAA Yeah, I don't think it was avoided at $job, do you use * ?

EEAA

@BigHomie You bet.

@BigHomie Well, actually we use elastix, which is a purpose-built asterisk distro.

I used to run vanilla asterisk and edit configuration by hand. Don't have time for that now unfortunately.

Kevin Soviero

@EEAA Is elastix the one with CRM built in?

BigHomie

@EEAA Okay Okay. Allow me to pick your brain, I'll limit it to one question (for now): Is it possible from your experience w/ * to setup a fax server, where by email <--->fax??

EEAA

@KevinSoviero Maybe - it has a bunch of crap built in that we don't use.

BigHomie

I'll have to check elastix out

EEAA

14:02

@BigHomie It's possible, yes. I haven't done it, though. The last time I looked into VoIP+fax was ca. 2006, at which point the compressions algorithms really didn't make fax feasible. The situation likely has changed, though.

BigHomie

@EEAA Gotcha, elastix looks decent btw

EEAA

@BigHomie At the very least, you could connect an FXO ATA to your asterisk server and send your faxes via POTS.

BigHomie

<== rtm I guess elastix.org/images/elastix_uc_en.png;

Nathan C

I have fax working with a Digium product

TheCleaner

@BigHomie If your existing PBX doesn't already support this the easiest and cheapest is to go with myfax.com or similar. Easy, cheap, and works.

EEAA

14:03

There ya go

@TheCleaner Agreed. We use, ummm, some competitor of theirs, and it works great.

...and I don't have to muck around with supporting the infrastructure. :)

Kevin Soviero

@EEAA I'm about to say something sacrilegious: The more I can outsource to the "cloud" the better.

BigHomie

@TheCleaner Yeah, but this would be for 1) $sidecompany, whereby I don't want to leech $10/month when I'm not receiving clients, or 2) just plain getting rid of fax machines period.

EEAA

@KevinSoviero For certain things, 100% agreed.

BigHomie

primarily #1

@KevinSoviero Cirrus? or Cumulonimbus?

Kevin Soviero

@BigHomie Not that again... Um... Whichever one brings thunder and rain!

Dennis Kaarsemaker

14:08

@KevinSoviero me.

TheCleaner

@EEAA yep...what I did was an actual redirect to another redirect lol, and cheated the system for $20/month. We kept our fax line #s in Call Manager. All incoming faxes are redirected back out to the "fax #" at myfax. Then myfax emails all of them to "[email protected]" where Exchange rules look at the original "sending #" (which now is one of our original fax lines) and that determines which internal email address gets the fax. :D

EEAA

Cumulonimbus incus

A cumulonimbus incus (Latin incus, "anvil") is a cumulonimbus cloud which has reached the level of stratospheric stability and has formed the characteristic flat, anvil-top shape. They can form into supercells resulting in severe storm phenomena such as tornadoes. A cumulonimbus incus is a sub-form of cumulonimbus capillatus. Hazards A cumulonimbus incus is a mature thunderstorm cloud and can produce many dangerous elements. *Lightning; this storm cloud is capable of producing bursts of cloud to ground lightning. *Hail; hailstones may fall from this cloud if it is in a highly unstab...

Kevin Soviero

@EEAA That one then.

TheCleaner

@BigHomie a lot of new fax machines/copiers have it built in. Incoming fax comes in, fax has wired/wireless network access and emails it out to an smtp relay.

Kevin Soviero

The weather in Austin is sunny 300 days out of the year, but the other day it poured, hailed, and thundered like I've never seen before (and I've lived in NC)... I loved that day... I even went driving around just to be able to appreciate it better.

EEAA

14:12

@KevinSoviero I'm somewhat of a weather geek (trained wx spotter), so I love this kind of thing. We get a decent amount of Severe WX here, but not like they do in OK, MO, etc.

BigHomie

@TheCleaner ahh, I didn't know that

Kevin Soviero

@TheCleaner I've never seen that, are you talking about those big $10,000 monsters?

pauska

This looks legit.. ocxocx.com/ocx/M/mswless.ocx

TheCleaner

@KevinSoviero my Brother MFC-7860DW desktop printer/scanner/fax machine can do it...and I think it was only around $200.

Kevin Soviero

@TheCleaner Really? I have a Brother MFC-7460DN, and mine can't... I may have to upgrade soon.

HopelessN00b

14:14

@pauska How could it not be? There's a picture of a Microsoft certified professional right next to the tool.

BigHomie

@pauska legitimately phony.

EEAA

@HopelessN00b His name is Kevin apparently: ocxocx.com/images_1/Kevin.jpg

Kevin Soviero

@EEAA Don't look at me!

EEAA

Oop, and there's the stock photo: istockphoto.com/stock-photo-13863692-it-worker.php

BigHomie

Here he is again! zlib1dll.org/privacy.html

HopelessN00b

14:16

@EEAA Actually, I checked. It's verified 100% legit.

TheCleaner

@KevinSoviero yeah on mine they call it "i-fax" instead of fax to email, which is dumb. But for yours: support.brother.com/g/b/… is about as close as it gets.

Kevin Soviero

@TheCleaner I use Linux at home... So, can't.

:-(

EEAA

@TheCleaner iFax. I'm surprised AAPL didn't sick their dogs on them for that.

TheCleaner

@KevinSoviero you might look into the i-fax option. Your model and mine share the same user manual. Here's a helpful link: coderwall.com/p/u9hlzw

@EEAA it has a hyphen. :D

EEAA

@TheCleaner I don't think Apple cares. :)

ewwhite

14:23

Hee-hee... I'm immature.

Starfish, San Francisco

1.4k 8 20

linux apache-2.2 windows remote-desktop debian windows-server-2008 dns

But this user found a way to LUKS-encrypt ZFS disks...

2

A: ZFS RAID and LUKS encryption in Linux

One of the servers that I administrate runs the type of configuration that you describe. It has six 1TB hard drives with a LUKS-encrypted RAIDZ pool on it. I also have two 3TB hard drives in a LUKS-encrypted ZFS mirror that are swapped out every week to be taken off-site. The server has been usin...

EEAA

@ewwhite Yah, that's not a great idea IMHO.

As you said, though, bravo to him for sorting it out and providing examples.

BigHomie

@ewwhite Yeah but you're not the one who chose it for a user name. They knew what they were doin'

ewwhite

Oh, San Francisco :)

Michael Hampton

@ewwhite I did the same thing. The performance was horrible. But the whole setup failed for many other reasons...

Dan

Who do we recommend for a wildcard cert?

ewwhite

14:31

@MichaelHampton I should probably care more about security

DigiCert

Michael Hampton

@ewwhite I don't think most of what your clients do really needs data encrypted at rest.

ewwhite

@MichaelHampton (I do work with HIPAA systems, too)

Dan

Fucks sake, didn't realise how expensive they were. Too much for dev

Michael Hampton

@ewwhite Well, not the produce companies anyway. When they're actually doing produce.

ewwhite

I called my former cloud employer to see how they were handling Heartleak, er... Heartslob...

HopelessN00b

14:35

"Those people would get locked inside a grocery store and starve to death!"

I've known this about my users for a long time, but it's satisfying to hear someone else say it too.

@ewwhite And? They told you their cardiologist couldn't find anything wrong?

pauska

@Dan if cheap is all you care about then godaddy..

Kevin Soviero

@HopelessN00b If I got locked inside a grocery store, I would die too, but it would be due to a bacon and muffin induced stroke more than anything...

ewwhite

@HopelessN00b @MichaelHampton They were like, "We haven't had anyone call about it."

BigHomie

@KevinSoviero massive brainfreeze here

massive.

HopelessN00b

@ewwhite <headdesk> Well, at least you got out of there.

Dan

14:37

@pauska Good point

Michael Hampton

@ewwhite ROFL. What a bunch of fucking morons.

ewwhite

They actually said that their load balancers took the brunt of it... No big patching effort was made.

HopelessN00b

FFS, we're looking at heartbleed, and we don't do anything IT-related properly.

ewwhite

The really fancy load balancers that LW uses are Riverbed... which don't use OpenSSL.

and everything sits behind them

Sysadmin1138 Expounds

SysAdmin1138 Expounds: Password sprawl and human brain-meats

posted on April 10, 2014 by SysAdmin1138

The number one piece of password advice is: Only memorize a single complex password, use a password manager for everything else. Gone is the time when you can plan on memorizing complex strings of characters using shift keys, letter substitution...

BigHomie

14:39

@HopelessN00b That sucks. I notified $securityadmin that same night via email, verbally the next morning, and only this morning did we have an 'emergency maintenance' downtime

In his defense though he is partially management now

pauska

@ewwhite that is a valid reason to not go all red alert about it, to be honest..

it means that all their backend servers run unencrypted protocols..

ewwhite

@pauska right... they weren't concerned. So in this case, an engineering decision they made worked out in their favor.

But I can say, that with the 4000-5000 servers they have now, they have NO way up updating something like openssl across the environment.

HopelessN00b

@BigHomie Mostly Windows stack, and mostly behind Riverbeds to mitigate still using T1's everywhere, so our exposure is likely to be pretty low...

pauska

Well if they're not using OpenSSL at all..

BigHomie

@HopelessN00b same here, however we use OpenSSL in a few places, OpenVPN being one

securelist.com/en/advisories/57755

HopelessN00b

14:45

<sigh> "Is a server running iis with a certificate issued by godaddy vulnerable to heartbleed" <sigh>

Dennis Kaarsemaker

‘Noah’ showing in England canceled by flood

3

HopelessN00b

I should have just said yes, and given him instructions on how to uninstall teh telnet feature on his server.

Dennis Kaarsemaker

I love irony.

HopelessN00b

@DennisKaarsemaker That movie was pretty "meh" anyway.

Kevin Soviero

@HopelessN00b Evan almighty was better

BigHomie

14:47

@HopelessN00b I would like to go see it, no rush though: I heard it wasn't Biblically accurate anyway.

Kevin Soviero

But I love anything with Steve Carroll anyway.

@BigHomie Isn't Biblically accurate an oxymoron?

HopelessN00b

@BigHomie Definitely not... I was more hoping for something entertaining, though.

BigHomie

@KevinSoviero lol there you go

@KevinSoviero Last time we had that convo in here, the entire chat was monopolized one Saturday morning

Kevin Soviero

@BigHomie About Noah, or religion in general?

BigHomie

@KevinSoviero Religion in general

Kevin Soviero

14:50

@BigHomie ah

ewwhite

can you guys do a reverse DNS lookup for apple.generalproduceinc.com ?

BigHomie

@KevinSoviero More along the lines of the Bible/Creationism/Evolution/Abiogenesis

Kevin Soviero

@BigHomie What, no ID for good measure?

Dennis Kaarsemaker

dennis@spirit:~$ host apple.generalproduceinc.com
apple.generalproduceinc.com has address 209.49.151.69
hdennis@spirit:~$ host 209.49.151.69
69.151.49.209.in-addr.arpa is an alias for 69.64/27.151.49.209.in-addr.arpa.

non-resolving CNAME

Jacob

ewwhite

14:52

The ISP seems to have lost the reverse PTR record

Dennis Kaarsemaker

also, /'es in labels are not allowed, I'm surprised your dns server doesn't barf on it

ewwhite

It used to resolve properly... oh, yesterday

so with that gone, mail is bouncing.

Dennis Kaarsemaker

dennis@spirit:~$ dig NS 64/27.151.49.209.in-addr.arpa.
dennis@spirit:~$ dig NS 27.151.49.209.in-addr.arpa.
dennis@spirit:~$ dig NS 151.49.209.in-addr.arpa.
151.49.209.in-addr.arpa. 3600 IN NS ns2.hostingsvcs.com.
151.49.209.in-addr.arpa. 3600 IN NS ns1.hostingsvcs.com.
151.49.209.in-addr.arpa. 3600 IN NS ns4.hostingsvcs.com.
151.49.209.in-addr.arpa. 3600 IN NS ns3.hostingsvcs.com.

Jacob

Hey guys! I'm using Memcache as a Database because I need web scale for a project!

2

ewwhite

@DennisKaarsemaker Terrible... This goes back to XO Communications.

@DennisKaarsemaker So what... do you think it's just a DNS server problem on the ISP's side? I'm not even sure what to tell the customer to yell at their ISP about.

Dennis Kaarsemaker

14:55

@ewwhite no idea how you want it set up, but "it's fucked" :)

ewwhite

Heartbleed-related, maybe?

Jacob

No it's ok though, because it's not really important data, and it isn't transactional.

ewwhite

@DennisKaarsemaker nslookup 209.49.151.69 used to return apple.generalproduceinc.com

BigHomie

@KevinSoviero haha, forgot about that one, but yeah that too. It all started with this one comment see.....

Jacob

@BigHomie What did you say about me earlier?

Dennis Kaarsemaker

14:58

@ewwhite it looks like a broken sub-/24 reverse delegation setup

ns[1234].hostingsvcs.com. are missing NS records for 64/27.151.49.209.in-addr.arpa. - I guess they were removed today.

but doing slashes in labels is really dodgy

Jacob

@DennisKaarsemaker good catch, I think you're right

Dennis Kaarsemaker

we have a similar setup with some zones

dennis@spirit:~$ host 62.190.51.12
12.51.190.62.in-addr.arpa is an alias for 12.0.51.190.62.in-addr.arpa.
12.0.51.190.62.in-addr.arpa domain name pointer proxy3.activehotels.net.

but we use proper labels

BigHomie

@Jacob Something about using heartbleed to capitalize on REP on SF was genius. Looking at your screenshot, though, using it to capitalize on SU as well was double genius.

Jacob

@BigHomie I didn't capitalize on SU; that answer to 1.5 hours to write.

@BigHomie Though I always meant to write up an answer to the SF question, everyone beat me too it.

They deserve the rep too. So I choose not to write one

BigHomie

@Jacob Yeah but most of those who frequent SU and don't frequent SF didn't even know about heartbleed at that time, it's safe to say

Thus you used your sysadminny knowledge for...... rep gain.

Jacob

15:07

@BigHomie Like you're supposed too? Isn't that the purpose?

BigHomie

@Jacob exactly, it's call capitalism ;)

ewwhite

@DennisKaarsemaker why do you suspect they were removed?

Jacob

@Bob That's why you should sleep. You paste Passwords in the Comms Room.

Bob

@Jacob Noted.

ewwhite

(having to explain why Piggly Wiggly isn't getting its tomato orders due to DNS misconfiguration at the ISP level is The Suck)

Bob

15:09

@Jacob That wasn't a password, thankfully :P

Just an attempt at a search. Except, it's supposed to go in a search box, not chat. Whoops.

Jacob

@Bob Seriously, what time is it for you?

Bob

Uhh... 1:10 AM.

Yea, sleep sounds good.

HopelessN00b

@Bob All I aw was ********* anyway, so... it was a password, but thankfully the interwebs automatically obscured it for you.

Jacob

@Bob When you have to be up in the morning?

Bob

@HopelessN00b Oh, so I can type hunter2 and no one will know what it is? Yay!

@Jacob Oh, 7 tomorrow, so not too bad.

That said, I'm gonna disappear now.

Jacob

15:12

@Bob Like in 6 hours?

Bob

@Jacob Ya.

Jacob

@Bob Go to bed!

Bob

:(

BigHomie

6 hours is respectable, 4 is redzone for me

Jacob

@BigHomie I got 6 and I feel ok. 4 hours is a terrible headache all day

ewwhite

15:13

Trainwreck...

0

Q: Consolidation failed due to I/O error on ESXi

I've posted a question on consolidating the VM on ESXi. Well, the answer was pretty much straight forward and it did worked except for one VM. That is what made me to post this back here again. Below seen are the errors I've got 1st error was and then it showed In any occasion, if the solu...

backup vmware-esxi snapshot

Dennis Kaarsemaker

@ewwhite because they're not there :)

ewwhite

@DennisKaarsemaker Why did they do this to me :(

Can anyone recommend a good smarthost service?

This ISP has caused too much pain.

Jacob

@ewwhite I know it doesn't make you feel better, but I've never had a good experience with XO.

ewwhite

@Jacob they're quite terrible... But my client can't get out of contract

Jacob

@ewwhite Really? That stinks. Contract doesn't have any SLA breach clauses to allow you to exit?

ewwhite

15:24

There are... but this is also an MPLS setup.

BigHomie

Alright, can someone run an applocker test for me

ewwhite

so the work to move is pretty heavy and disruptive

Jacob

@ewwhite It sounds like the disruption is being provided by them currently.

ewwhite

well, internal communication and site-to-site disruption is different than a few emails being bounced

Dennis Kaarsemaker

question for the UK people. If I want 3 vm's in the same broadcast domain with 3 IP address (1 per box and one on a heartbeat, failed over between them), which provider should I go to?

Jacob

15:28

@ewwhite Mandrill?

Michael Hampton

ewwhite

mmmhmm

Iain

@MichaelHampton is that fortuitous because they're running an old version I wonder

voretaq7

Posting again for those that didn't see it last night - https://storify.com/freebsdgirl/ladies-in-tech-shouldn-t-curse/ watch me get blasted on twitter for not being #ladylike

Tweeted by freebsdgirl on April 10, 2014 at 3:06 PM

What is this I don't even?

BigHomie

Now you can't find anything on the internet about OpenSSL or TLS Heartbeat w/out being drowned in old news.

Jacob

15:34

@BigHomie IMHO, that's why my answer is popular

Michael Hampton

@ewwhite I would be very, very unhappy with XO over that. If they aren't getting unblocked it's either because they are letting someone do some seriously bad shit, or they are so utterly incompetent that they shouldn't be allowed near computers.

pauska

Anyone here know how I can get some sort of output of what shared dll's/ocx my system has registered (and the path to them)?

digging through registry was a "bit" time consuming...

oooh maybe this will work

nirsoft.net/utils/registered_dll_view.html

Dennis Kaarsemaker

@ewwhite ip.seveas.net/dnsgraph/png/69.151.49.209.in-addr.arpa./…

BigHomie

@Jacob I want to find out if <tech> uses TLS heartbeat, or what TLS Heartbeat even does (I have a general idea, but I like details), and now I have to trawl through uninformed gossip and rhetoric (not referring to your posts) and it's quite exhausting so I've given up for the moment.

Dennis Kaarsemaker

hmm oneboxing fail. Anyway, XO screwed up.

BigHomie

15:41

Does heartbleed effect the gifts I'll get for Christmas?

> Heartbleed effects every site on the internet

^ uninformed gossip and rhetoric.

Jacob

@BigHomie I explain basically what heartbeat does. It allows you to keep the session open while no data is being sent.

84104

@BigHomie Does the tech use a TLS wrapper or STARTTLS? Then, yes. Otherwise, no.

HopelessN00b

@voretaq7 An argument in favor of my stance for not twittering? Too many twits on it.

BigHomie

@Jacob Yeah, that part I get (generic function of most heartbeats)

Jacob

@BigHomie Why is TLS so different then?

BigHomie

15:45

@Jacob It's probably not, but as a dev I like all the details I can get.

For example, Why does it echo what's sent in the first place?

Why not echo some generic data instead

or a timestamp

Jacob

@BigHomie Because that's how it was done?

BigHomie

@Jacob Thus, heartbleed

Jacob

@BigHomie tools.ietf.org/html/rfc6520#section-2

HopelessN00b

Hey, @pauska ... how do you guys handle the default printer in that printer GPO of yours? My printer-peoples keep bitching about the default printer changing, and I was wondering if there's a technological solution to that.

voretaq7

@HopelessN00b An argument that there are still some men who are cockwaffles, and this is why we have batshit-crazy feminazis saying all men are scum

84104

15:49

@voretaq7 Surprisingly civil for something so stupid. (Him, not her. She's fine.)

HopelessN00b

@voretaq7 Was that crazy responder a guy? I thought the crazy responder was another woman... though, I don't think it was revealed either way.

voretaq7

@84104 "ladies shouldn't swear"?

Seriously? Has the guy ever met a sysadmin?

BigHomie

> The Heartbeat protocol messages consist of their type and an
***arbitrary payload*** and padding.

84104

@voretaq7 Ladies should do whatever people should do because ladies are people.

voretaq7

@HopelessN00b crazy responder guy is named Ralph. I know some women named Michael, but none named Ralph.

Dennis Kaarsemaker

15:51

@84104 but sysadmins aren't people

BigHomie

@84104 He should have went with the unprofessional angle

voretaq7

@84104 NO THEY AREN'T! :-)

84104

@BigHomie He should have never said anything in the first place. He's a dumbass.

voretaq7

@DennisKaarsemaker that....I can't argue with. Now if you'll excuse me I need more ~~blood of newborn children~~ coffee ;)

HopelessN00b

@84104 No, ladies should swear, because I think foul-mouthed chicks are hawt.

voretaq7

15:51

@BigHomie It's not a "professional" twitter account

Jacob

@BigHomie So why not just send back what the initiating party sent you?

Dennis Kaarsemaker

@voretaq7 I don't drink either. My beverage of choice is green tea. Or scotch, depending on time of day.

voretaq7

@DennisKaarsemaker how about green tea with a little scotch in it? :)

BigHomie

@Jacob Because: Heartbleed. Seriously, that's why we are were we are

Dennis Kaarsemaker

@voretaq7 blasphemy. I wouldn't do that to a single malt.

Jacob

15:53

@BigHomie My point is it wasn't considered. It happens...

84104

@HopelessN00b I don't think I was disagreeing?

voretaq7

@Jacob I think @BigHomie's point is "FUCKING ARBITRARY PAYLOAD? WHAT THE FUCK?!?!" (which was about my reaction)

oh wait are guys allowed to swear?

84104

@voretaq7 Yes?

BigHomie

@voretaq7 Yeah more or less, it's not so arbitrary now is it

voretaq7

@84104 whew -- I was afraid I was doing it wrong and was gonna get scolded on The Twitters

BigHomie

15:55

Point from yesterday: A 'bunch' of people looked at this RFC and said: Looks good to me, let's make it a standard

Kevin Soviero

Why is there even a separate field for data size and actual data? Seems like a waste of space to me.

BigHomie

@KevinSoviero C is pretty low level stuff, that's typical

Kevin Soviero

@BigHomie Are you saying there's no C equivalent to len(s) like in Python?

Seems pretty simple

84104

@voretaq7 I don't think that's true. But, I suppose I've caused some confusion. In a attempt to clarify. Ladies are people. Gentlemen are people. People are allowed to swear.

BigHomie

@KevinSoviero remember python is object oriented c (not c++) isn't. So, while there's sizeof(), there's no len(s) that I'm aware of

Dennis Kaarsemaker

15:58

@voretaq7 no.

@KevinSoviero in C, strings are simple arrays of bytes without start or end markers. there's no useful len() (there's strlen(), but that only works on null-terminated strings). In python, strings are an object with meta info about the data, such as the length.

Transcript for