The Comms Room

Kevin Soviero

16:00

@DennisKaarsemaker Hm... Didn't know that.

Dennis Kaarsemaker

@BigHomie sizeof() is a compile time construct that can only give you the size of fully defined datatypes.

voretaq7

@DennisKaarsemaker Whelp, I've been doing it wrong for decades then

Dennis Kaarsemaker

such as sizeof(char) being 1 and sizeof(int) being 4 or 8

@voretaq7 TWSS

ewwhite

@DennisKaarsemaker :(

voretaq7

@84104 . . . but I'm NOT a gentleman (by any stretch of the imagination)

ewwhite

16:01

@MichaelHampton XO gave us a new IP block to use... but with no guarantees that it wasn't already tainted...

Dennis Kaarsemaker

@voretaq7 you're far from gentle. And hardly man anyway :P

BigHomie

@DennisKaarsemaker Reading SO it seems that one could sizeof(x) / sizeof(x[0])

voretaq7

@DennisKaarsemaker ...that's not what my exes say :-D

Michael Hampton

@ewwhite Weak...

Adam

Anyone know a decent DNS provider that allows root level CNAME for use with azure / aws etc?

Dennis Kaarsemaker

16:02

@BigHomie I can see how that might work, it'll still be evaluated at compile time, and only on fully defined types.

@Adam DNS doesn't allow root level CNAME.

84104

@voretaq7 Bah language (I'm used to ladies, gentlemen and children of all ages), but I'm going to go with "not all black things are ravens" in my defense.

BigHomie

@DennisKaarsemaker I agree, but that's why the need for a field like payload size

voretaq7

@Adam you can't cname the root of a domain, it's an RFC violation.

Go search the main site, we've yelled at people about this before :)

@84104 <inspects coffee carefully for signs of feathers and a beak>

84104

@voretaq7 What makes something the root of a domain? SOA RRs? CNAME can't co-exists with anything other than CNAME.

Michael Hampton

I am now officially tired of seeing heartbleed questions.

voretaq7

16:03

@84104 Basically having a SOA record in this context

Kevin Soviero

@MichaelHampton You're only getting tired of it now!?

Adam

@voretaq7 I know, thats why I asked in here! So you cannot have a custom domain on a CDN or anything, we just bought a cdn for our clients, but we have to serve using a subdomain instead of the top level domain :(

voretaq7

@Adam that's what everyone does. e.g. cdn.sstatic.net

84104

voretaq7

You could also have an A record that points to a machine that just serves HTTP/3xx redirects but that's ghetto and if you do it we'll all make fun of you :)

Michael Hampton

16:05

Noooo. Do not abuse the naked domain.

Nathan C

virustotal.com/en/file/… good to know forefront didn't pick it up...

voretaq7

@MichaelHampton Clothe the naked domains?

Nathan C

made it past clamav too

Adam

@voretaq7 I bought cdnx.net, so I'll have to use s.cdnx.net or something

cdnx.co *

voretaq7

@Adam for your current implementation, yup. For the future "cdn.example.com" is free when you already own example.com :)

HopelessN00b

16:07

@MichaelHampton Let's just start advising people to not use SSL. "Just do everything over http, so it can't be stolen from the server's RAM."

voretaq7

(clients like "free" -- cheap bastards)

Michael Hampton

And while we're on the topic... yes-www.org

Nathan C

Oh, that's cool. Thanks for disabling our antivirus, Kerio. -_-

Michael Hampton

@NathanC Really? Is there a .scr file anywhere that didn't come with Windows and isn't a virus?

Nathan C

@MichaelHampton yeah, I know. Forefront said it was clean...

Michael Hampton

16:09

@NathanC I'd just ban attachments with those extensions. Fuck that.

Adam

What about client.com pointing to loadbalancedclient.cloudapp.net, I know you can setup www. but then without www it doesn't work

Nathan C

@MichaelHampton It came inside a .zip file

And I can't ban those :(

Kevin Soviero

@NathanC Untangle extracts ZIP files coming across the network to scan the contents.

Nathan C

@KevinSoviero Yeah...it's not exactly something I can drop into our network to filter this sort of stuff

I mean, our sonicwall does have antivirus built-in, but it's not activated ($$$)

Kevin Soviero

@NathanC Untangle is sort of free... At least the ClamAV based AV is...

Nathan C

16:13

I have clamav on our mail server, but the kerio update overwrote my config file for it

so now i have to reactivate it...yay

Michael Hampton

I love email.

HopelessN00b

What's that site we've been using in here to check for heartbleed-yness?

84104

@MichaelHampton I love email, and printers, and users. I especially love users who print their emails.

Michael Hampton

@84104 And scan them back in.

84104

@MichaelHampton So that they can fax them.

ewwhite

16:19

@MDMarra fix it!

HopelessN00b

@ewwhite Just gotta redomain it to the join. Or some combination of those words.

Kevin Soviero

@ewwhite I'm not a Windows guy. What does that even mean?

ewwhite

@HopelessN00b It's a domain controller

Kevin Soviero

@HopelessN00b Tired?

HopelessN00b

@KevinSoviero Means the computer account isn't found in AD, or the computer account password is wrong. Typically happens when someone joins a new machine to a domain using a machine name that's already in use.

@KevinSoviero Nope, I stand by it. Redomain the computer to the join.

@ewwhite Oh, good times. Mark's really gonna earn his money on this one. (Probably... could just be a simple DNS eff up too, I suppose.)

84104

16:25

@ewwhite This is why we don't clone domain controllers?

Kevin Soviero

@HopelessN00b Difference between computers (today) and humans? I still understood what you said the first time I read it.

BigHomie

@ewwhite Replication might be busted

HopelessN00b

@KevinSoviero Good, you passed my Turing test. :)

BigHomie

On the authenticating DC

ewwhite

@84104 I called the client... and he cloned the domain controller in VMware to create a server for Spiceworks.

4

I don't know how to recover. Now the Spiceworks server is a GC.

HopelessN00b

16:28

@ewwhite You gotta start revoking some of your clients' admin rights. That's just... oh my god. Have fun with that.

ewwhite

and there's another domain controller, but this impacted Exchange and a bunch of other things.

@HopelessN00b he called me yesterday to ask about cloning VMs... and I said, as long as you don't clone a DC...

HopelessN00b

Probably gonna have to go to backups... you know, provided they haven't decided to overwrite the backups with the Spiceworks installer ISO.

ewwhite

I didn't think he would use a DC as the source of the clone!

84104

@ewwhite I wasn't expecting to be so on the nose with that comment. =(

ewwhite

So what do you think... DCPROMO the Spiceworks system? Rebuild dc1? Is there any nice recovery process?

HopelessN00b

16:29

@ewwhite "From now on, let's make this simple. No computering of any kind by any of you!"

ewwhite

he's the IT director for the company!

HopelessN00b

@ewwhite Well, is that company just in great hands, then?

Nathan C

That's fun...Kerio is regenerating its config file when I restart it

BigHomie

@ewwhite even more of a reason for him not to do IT work

ewwhite

Remember the cocaine bananas from yesterday?

84104

16:30

@ewwhite Those are for the customers, not internal use.

ewwhite

It's an honest mistake... maybe?

costly to fix

and my time is limited.

HopelessN00b

@ewwhite Only thing I'd be comfortable doing is going to the backups and doing an authoritative restore of the whole active directory, honestly..

May as well pimp Mark out to do that and collect a cut. :)

ewwhite

I'll call @MDMarra

Nah, he's not picking up the phone... he knows

pauska

You should start a twitter alias

"Stuff my customers do"

Joel E Salas

@ewwhite Are you starting a drug running business? If so I'm in

HopelessN00b

16:35

@JoelESalas I think it's more that his client are all on drugs...

Joel E Salas

@HopelessN00b That's where he's starting obv

BigHomie

@pauska You mean... Something like this ?? At least there they won't immediately suspect him should they find themselves topics

ewwhite

well, no @MDMarra So I'm going to dcpromo the spiceworks server

Joel E Salas

@ewwhite HAHAHA

BigHomie

ewwhite

16:38

So, AD people... this is a duplicate-SID problem. If I remove the duplicate server, what happens then?

MDMarra

rejoin the one that got booted

sorry, cant talk I'm already supposed to be in two places at once :|

ewwhite

@MDMarra I can't log into it.

Michael Hampton

If @ewwhite were calling you, would you answer?

MDMarra

Not even with a local admin account?

Dennis Kaarsemaker

Budding

Budding is a form of asexual reproduction in which a new organism develops from an outgrowth or bud on another one due to cell division at one particular site. The new organism remains attached as it grows, separating from the parent organism only when it is mature, leaving behind scar tissue. Since the reproduction is asexual, the newly created organism is a clone and is genetically identical to the parent organism. Organisms such as hydra use regenerative cells for reproduction in the process of budding. In hydra, a bud develops as an outgrowth due to repeated cell division at one spe...

time to grow another @MDMarra

2

ewwhite

16:41

@MDMarra He can't find the Post-It note with the local password.

cleaning lady removed it

Dennis Kaarsemaker

►

Nathan C

@ewwhite A whole lotta fail there

BigHomie

@ewwhite Serious?

Nathan C

ultimate boot cd -> nuke the local admin password

ewwhite

@BigHomie no, not serious...

MDMarra

16:42

@ewwhite Then break into it with some boot disk :) or restore the old AD object from backup on the DCs

ewwhite

A giant produce rat scurried away with it.

MDMarra

gotta run. good luck! :D

ewwhite

Backups?

Dennis Kaarsemaker

@ewwhite this is why I like the comms room. Gold comedy :)

BigHomie

@ewwhite Wow. Better use Nutcracker then.

ewwhite

16:43

C'mon... I'm better than that. I know how to break into servers.

doing all of this through a VMware window to the VM

Nathan C

I had to submit a support ticket to Kerio to figure out why it's rewriting the configuration file and removing my edits...

ewwhite

So the spiceworks server was demoted. If there's a duplicate SID between a member server and DC, that's still bad, right?

MDMarra

@ewwhite Download something from Tucows

Nathan C

Didn't happen in the previous version :(

Dennis Kaarsemaker

@MDMarra is tucows still a thing?

HopelessN00b

16:46

Grrr... I have a fucking conference call about fucking printers in 15 fucking minutes. Fuck, FUCK, FUCK!!! Gonna miss all the good parts of this trainwreck.

Nathan C

I think @MDMarra did clone himself if he's still chatting here

Joel E Salas

tucows is still alive unfortunately

ewwhite

@MDMarra @DennisKaarsemaker Yes, Tucows lives. That's where I found this gem.

Dennis Kaarsemaker

> Printers were the problem.

Printers are always the problem.

@ewwhite on the thumbnail that looks like "twerking.com"

ewwhite

I'm okay with that, too!

BigHomie

16:49

@ewwhite NuT Cracker, bootable iso?

Joel E Salas

@ewwhite Oh my god what are you doing.

3

ewwhite

@BigHomie I just use a Linux live CD

Dennis Kaarsemaker

@JoelESalas TWSS

ewwhite

(downloads NuT Cracker...)

HopelessN00b

Alright, I'm off to ask a new question on the main. "Is my DVR system that runs on Windows and uses an Oracle database back-end vulnerable to Heartbleed?

BigHomie

17:00

@HopelessN00b On-topic, because Everything is vulnerable to hearbleed.

Nathan C

@HopelessN00b No. proceeds to hax

Dennis Kaarsemaker

mossy

Anyone here do network admin at a uni?

BigHomie

@mossy What you need cuz

Sorry @Jacob, the first SE Question on heartbleed is on page 7 right now, and that's Security.SE

HopelessN00b

...and repcrapped. But I don't wanna go back to work.. I'm dealing with printers. <sobs>

ewwhite

17:15

trying to reset this dang password

84104

@mossy Yes.

pauska

urgh... trying to figure out why our custom erp app doesn't want to run on fresh pc's

it has some old VB portions inside it, and of course the installer spreads dll's and ocx files around the filesystem like it was powered by ebola

there must be literally 500 different dll's here.. most of them end up in syswow64..

HopelessN00b

@ewwhite Remember that you gotta boot into Directory Services Restore Mode mode to use that local account...

Jacob

@BigHomie huh?

HopelessN00b

I fucking hate people.

No cant log in and the server log showed Winlogon errors but its vague... — Sal 40 secs ago

ewwhite

17:22

@HopelessN00b oh?

HopelessN00b

Nevermind, I hate printers more. WHY THE FUCK WON'T YOU SHOW UP IN THE DIRECTORY?!?!??! DIE!!!!!

Jacob

Dammit PHP. Why do you have to suck so bad?

HopelessN00b

@ewwhite Yup, no local accounts on a domain controller... exception being when in DSRM, you can access the "local" Administrator account... that's only usable in DSRM.

BigHomie

@Jacob I would have liked to see your SF question on google above the fold, but now it's clogged with..... news articles

That's just googling heartbleed though btw

@Jacob In stark contrast to this

ewwhite

@HopelessN00b how do i DSRM?

BigHomie

17:31

F8 @ boot I believe @ewwhite

HopelessN00b

@ewwhite At boot time, you hit F8 to get the Windows startup options... and select it from the list.

BigHomie

jack be quick....

F8 F8 F8 F8 F8 F8 F8 F8 F8 F8 F8 F8 F8 F8 F8 F8

Kevin Soviero

I'm trying to help my dad get a job where I work... Is that unprofessional?

ewwhite

No option for it

HopelessN00b

@KevinSoviero Why do you ask? Is he incompetent, or something?

Kevin Soviero

17:34

@HopelessN00b No, just seems unprofessional to do favors for family...

ewwhite

FInally!

HopelessN00b

@KevinSoviero As long as he knows what he's doing, there's nothing wrong with it. Employee referrals happen all the time, and generally people refer their friends and family.

ewwhite

Jacob

@KevinSoviero Where do you work now?

@BigHomie Yeah NPR fucked the story hard

HopelessN00b

@ewwhite Roight, that one.

Kevin Soviero

17:36

@Jacob A place you've never heard of

Jacob

"if a site has the padlock, it's affected"

ewwhite

I didn't know that DCs had no local admin

<- ig'nant

HopelessN00b

@ewwhite No local accounts at all, in fact.

ewwhite

So I'm in Directory Recovery mode

what now.

Ctrl-Alt-Delete

then what?

still not allowing me to log on

BigHomie

@ewwhite It's been so long I forgot what you were trying to do. Which account did you reset?

ewwhite

17:40

Administrator?

I guess

BigHomie

@ewwhite guess? Uh oh.

HopelessN00b

@ewwhite Which Administrator account? There's also a Domain account, named "Administrator," by default.

ewwhite

I just need to get into the DC

not sure how or what's necessary to do so

that's what I get

Do I need to create a computer account?

do I need to just blow away the DC?

BigHomie

@ewwhite I probably would

Jacob

@BigHomie Have IM? Need someone's opinion on something.

pauska

17:44

Let me get this right.. the customer had a single domain controller, and he cloned it?

ewwhite

@pauska Two DCs

this was a @MDMarra build from last year. Stable

BigHomie

@Jacob hangouts, Cyborg G+

Everything is compromised from Heartbleed, not even Tor is safe.

ewwhite

client cloned one of the DCs so he could save time building a server for Spiceworks

Same SID

I don't know why he did this

Jacob

@BigHomie Not found

ewwhite

so a day later, Exchange breaks... And DHCP is probably down for the environment, too

HopelessN00b

17:46

@ewwhite Yeah, nuke it. Walk through removing all the pieces from AD, then stand up a new one in its place.

BigHomie

@Jacob [email protected]

ewwhite

@HopelessN00b I wanted to get back into the DC1 to see what the DHCP configs were

Jacob

@BigHomie got it

ewwhite

I already demoted the cloned SPiceworks server.

pauska

The issue here is that the cloned server has overwritten/created duplicate AD DS entries

I won't lie, you're in deep shit.. or the customer is rather

2

there is no AD DS backup? No system state backup of either domain controllers?

ewwhite

17:48

@pauska So it's more than SID.

BigHomie

Either a restore, or complete redoing I assume

pauska

@ewwhite Yes, a lot more

ewwhite

@pauska My access to VMware and everything (like backups) is limited

Kevin Soviero

@ewwhite Aren't you a Windows admin?

ewwhite

because VMware relies on AD

Nathan C

17:49

0

Q: Windows Firewall rule to mitigate Heartbleed

I have looked everywhere and I can't seem to find a netsh equivalent of the u32 module for iptables. I want to create a rule to Drop a packet that starts with a specific set of bytes. Similar to: # Block rules iptables -t filter -A INPUT -p tcp --dport 443 -m u32 --u32 \ "52=0x18030000:0x1803F...

nuuuu

ewwhite

So I can only get into the ESXi hosts... can't even do full vCenter work from here

pauska

@ewwhite Your access to backups? I don't get it.. elaborate

ewwhite

vSphere Data Protection

Nathan C

@ewwhite Local root vCenter account is disabled?

pauska

does the customer have a fresh system state backup of a domain controller or not?

ewwhite

17:50

It's vSphere Web Interface only

@pauska not that I can access

BigHomie

What if I told you... The One doesn't need firewalls? — BigHomie 17 secs ago

Couldn't help it

ewwhite

because the VMware backup software requires the web interface, AD and vCenter to be able to recover

pauska

that is the most stupid backup solution I've ever heard of

BigHomie

@ewwhite Cyclic dependency?

pauska

ok... can you somehow dig out the snapshot of a healthy domain controller when vsphere data protection last ran?

it must store them somewhere.. I'm guessing vmfs

ewwhite

17:51

@pauska I cannot

it's an apparent flaw in the product

pauska

You can't even log in to one of the esxi hosts with a local account?

ewwhite

@pauska I can. That's how I'm in.

but I can't do anything with the backup software.

so scratch any backup recovery options. I'm looking for another path forward.

Nathan C

@ewwhite Possibly stand up another DC and migrate roles?

Kevin Soviero

@ewwhite This is why I hate GUIs, they make people so reliant on them, that when they break no one knows how the underlying system works! No offence @ewwhite, just an observation of the IT industry as a whole.

BigHomie

@KevinSoviero +1 for shells all the world over

pauska

17:54

what roles did the cloned DC have? do you know if it held the FSMO roles?

ewwhite

I do not know

BigHomie

I smell a very expensive rework

pauska

can you get in on the other DC? the one that weren't cloned?

ewwhite

Yes, I can.

Kevin Soviero

@BigHomie If he's a salaried employee, than it's not very expensive at all...

BigHomie

17:56

@KevinSoviero Ed's a freelancer, they called him, which means he'll probably subcontract it out, $$$

pauska

@ewwhite netdom query fsmo

Kevin Soviero

@BigHomie Ah, ok.

pauska

on the not-cloned DC

ewwhite

has all 5 roles

BigHomie

@KevinSoviero If the FTEs do it, it still costs b/c that's time spent they could be doing other things, and we all know time == $

pauska

17:57

just to be sure, the not-cloned DC has all the FSMO roles?

ewwhite

@pauska yes. There was a DC1 and a DC2. DC1 was cloned to SPICEWORKS.

DC2 is on and was not touched. It has all the FSMO roles.

pauska

Ok, you've struck luck

just shut down DC1 and the spiceworks server

reboot exchange

ewwhite

those are off now

pauska

on the functional server

open up ad sites and services, and check ntds settings for dc02

does it have global catalog ticked?

ewwhite

yes

pauska

18:02

good, good

exchange should function..

If I were you I'd start AD cleanup and just wipe the old domain controller and the spiceworks server

there are lots of articles out there on how to do this

ewwhite

yeah, I've removed dead DCs before.

pauska

do you know if the old dc had any extra services? DHCP, dfs, CA etc?

ewwhite

DHCP

So that's missing

pauska

check the event logs on the functional DC

if you're lucky then it's not complaining about mismatched ad

ewwhite

Okay. Exchange is picking up dc2

pauska

18:05

yeah it uses whatever DC it can reach in the same site.. it just has a habit of crashing when said DC goes away

ewwhite

No eventvwr complaints.

so I need to build a new dc1

pauska

run dcdiag as well

ewwhite

and figure out DHCP

pauska

and NPS/radius/ca/bleh/blah if it had those running

ewwhite

DGDIAG only complains about earlier attempts of DC1 trying to connect

HopelessN00b

18:07

Oh, God, WHY?!?!?!

0

Q: store log files in the cloud, when servers are not in the cloud

We're looking at a long-term migration towards the cloud. The plan is to start small, and gradually move less essential parts of the infrastructure into the cloud. All good so far. Part of this migration includes log files from web servers and whatnot. Keep in mind that the servers are still in ...

amazon-web-services logging log-files cloud

ewwhite

@pauska Is there any way to get insight into what the DHCP ranges/etc. were on the old DC1?

And where should the DHCP service run?

I was always used to seeing it on one DC

BigHomie

@ewwhite It can be clustered

ewwhite

in 2012

BigHomie

technet.microsoft.com/en-us/library/hh831385.aspx

pauska

yeah, with 2012 you should aim for a dhcp failover setup

ewwhite

18:18

shouldn't need shared storage for DHCP :)

pauska

I don't think it stores the DHCP configuration in AD.. backups..

ewwhite

@pauska I'll just add a scope of some sort.

pauska

It doesn't use shared storage..

ewwhite

@pauska the link @BigHomie sent for 2008 does.

pauska

it's not a cluster either, it's just HA

@ewwhite Applies To: Windows Server 2012

It's not for 2008

BigHomie

18:20

yeah it's failover

pauska

don't bother with it now, you can add it later

just get stuff up again

BigHomie

Maybe you can bring dc1 up on a separate network, point dc2 to it for dhcp management and try screenshotting (!) the info

barbaric, but then again, who cloned the DC...

pauska

you can boot the dc1 vm with the network adapter disconnected

but it will probably crap out at the conflicts

HopelessN00b

@pauska Yeah the DHCP config and whatnot is stored on a local database.

pauska

maybe you can get in ad recovery mode...

seems like awful alot of work just for a dhcp setup.. did they use tons of reservations or something?

ewwhite

18:24

@BigHomie I can't log onto it.

remember.

@pauska printers

they just told me the range.

TheCleaner

I'm here to propose experts.serverfault.com - an exclusive q&a subsite of Serverfault for users with 1,000 rep or higher only.

Nathan C

Cool..the product key that we just spent $800 doesn't work on my existing R2 install

:(

HopelessN00b

@ewwhite See? Printers. Printers are always the problem, even when the problem is cloning a domain controller for a Spiceworks server.

BigHomie

lol

pauska

@ewwhite the domain controller was the print server?

BigHomie

18:29

@ewwhite I was thinking that it would use some domain account remotely (like network svc or something), it probably would use the account you logged in as, probably wouldn't auth though

@pauska Strike II

@TheCleaner Experts of the experts?

HopelessN00b

@pauska Sounds like it was the DHCP server for the printers. Still, printers.

TheCleaner

@BigHomie inner sanctum. VIP lounge, Million Mile Club...whatever you want to call it. A place where we can shut the doors and and promote IT classism.

BigHomie

@TheCleaner Bump up rep req on Comms? Is that even possible?

TheCleaner

I mean a Q&A place..not "live support" :D

ewwhite

and some clients can't connect because they only had one DNS server entry...

BigHomie

18:32

@TheCleaner lol good one

HopelessN00b

@TheCleaner Yeah, good luck with that. Also, since Evan Carrol's pretty close to 1,000 rep on ServerFault, I think your metric is fatally flawed.

BigHomie

@HopelessN00b is that your archnemesis?

TheCleaner

@BigHomie that would imply someone roughly his equal.

BigHomie

HopelessN00b

@BigHomie No, just the biggest, dumbest internet troll I've ever seen.

(I actually think he's legitimately got a psychiatric personality disorder, FWIW.)

BigHomie

18:35

@TheCleaner idk, the penguin had nothing on batman.

TheCleaner

Honestly, if I actually didn't know @HopelessN00b or @voretaq7 and read Evan's meta post and original main question I would have sided with Evan on at least keeping his question open. I made that comment to Hopeless in chat before those "comments started flying" about Evan's question. Evan needs to realize thick skin is a requirement online though. There are multiple users here that won't tiptoe around people and will call it like they see it, whether that's allowed by the rules or not.

HopelessN00b

@TheCleaner Yeah, you don't get to be a prolific troll without some skills. He's also obviously relying on people not knowing, or ignoring, his past history.

Nathan C

Doing an in-place upgrade to 2012 R2 datacenter...wheee

pauska

elasticsearch.org/overview/kibana

look at the video

cool mr hipster devops developer with his fucking hat and nerdy magazine

KILL

Joel E Salas

@pauska Fuck that fucking hat

Hats on men are NEVER ok

BigHomie

18:45

@JoelESalas that's debatable

pauska

elasticsearch.org/overview/marvel

HopelessN00b

@JoelESalas Maybe not that kind of hat, unless you're a gay Frenchman... but hats have their uses. I present to you, the beer hat:

pauska

Why are all their I's uppercase?

HopelessN00b

(Ignore the shitty beer, you can put good beer in it too.)

@pauska Because lowercase "i"'s are sooooo last year. Every hIpster knows thIs.

TheCleaner

@NathanC from 2012 R2 standard? so easy! :)

pauska

18:51

We've done lots of 2012 datacenter -> 2012 R2 datacenter

hasn't been an issue.. but remember to delete windows.old

Nathan C

@TheCleaner Indeed. dism did the trick, but it's refusing to activate the key now...

TheCleaner

@HopelessN00b Yeah, I don't know him at all...but I know that if you plan on surviving on SF you have to roll with what the masses lean towards on any given day. It's not as bad as Meta.SO, but you still can't come in thinking "OMG, everyone is going to love me for posting this" while you stare at yourself in the mirror while typing.

BigHomie

I've thought that on occasion.

TheCleaner

@BigHomie you know you've got a giant mirror next to your monitor... :)

BigHomie

@TheCleaner I keep the webcam on me at all times

Håkan Lindqvist

18:54

@pauska @HopelessN00b The i's are actually not uppercase. Not that it makes a great deal of difference

HopelessN00b

@TheCleaner ...or, you know, just not get butthurt about downvotes/closed questions.

pauska

@HåkanLindqvist What are they then?

BigHomie

lowercase l's

Håkan Lindqvist

@pauska Lowercase?

BigHomie

new hipster font

pauska

18:55

Lowercase I's without a dot over the line

really

TheCleaner

@BigHomie lol, there ya go. You need to leave it on for your entire career and then do a "time lapse" video of your entire life at work when you retire.

Håkan Lindqvist

@pauska Seems to be a font rendering issue or something. Copy paste the text somewhere or look at the source, it's not actually written in a funny way.

TheCleaner

@HopelessN00b yes, in summary.

BigHomie

@TheCleaner Sounds depressing actually, and I don't drink anymore

Watching myself get old in front of a computer monitor :(

TheCleaner

HopelessN00b

18:57

Sooo.... auditing our websites because of the heartbleed thing, and so far, of the 14 I've checked, 1 works, 5 don't resolve (or go to a parking page) and 8 have a certificate mismatch, because they use the certificate for the one working site. <sigh>

From a billion dollar company. I hate life.

Transcript for