The Comms Room

Jacob

00:59

@RyJones What?

Mark Henderson

@Jacob My uniFi AC access point arrived today, along with an external UniFi 2.4Ghz AP

I'll let you know if it's any good

Jacob

@MarkHenderson Poo! I need to order one!

Mark Henderson

(although I don't have any 802.11ac stuff. yet.)

Jacob

@MarkHenderson Do you really use anything that would warrant it?

Mark Henderson

@Jacob Negative

I just wanted a new roof-mounted AP and it made sense to buy the best I could afford

Jacob

01:09

I mean, I'll have a gig pipe(not bragging) so it is useful.

Mark Henderson

And the uniFi's are not-ugly which is a huge bonus

Jacob

@MarkHenderson I need to make sure that my router has the cpu to transfer

Michael Hampton

I bought a $25 router, stuck OpenWrt on it, and let 92 of my closest friends beat on it for a week. I think I'll pass on UniFi... :)

Jacob

@MichaelHampton but I have a 1gbps WAN connection.. I need something that can keep up

Michael Hampton

@Jacob Hm, in that case, you need to spend a few more bucks.

Jacob

01:17

@MichaelHampton got any suggestions?

Michael Hampton

@Jacob Um, no, as much as I would like to have this problem... I don't.

Jacob

@MichaelHampton Believe me.. I'm happy I have a problem.

Michael Hampton

@Jacob I know you pretty much need 802.11ac, and that's about it.

Jacob

@MichaelHampton but I also need a router that can NAT that fast

Mark Henderson

@Jacob I got a MikroTik RB2011UiAS-RM (dumb fucking name I know) and I benchmarked it to a full 1gbps

Michael Hampton

01:19

@Jacob You got a 1Gbps pipe and no IPv6? WTF!

Jacob

@MichaelHampton Unfortunately IPv4 is still around

Michael Hampton

@Jacob Yeah I know. I'm just saying. The sooner we kill IPv4 the better.

Mark Henderson

@Jacob Admittedly this was not 1Gbps of NATting power, this was 1Gbps of routing

I should try a NAT and see how fast it goes

Jacob

@MarkHenderson I'll just see what Google fiber uses

Mark Henderson

I also have about 100 mangling rules and they didn't seem to make any difference to its max speed, so whatever I've got isn't taxing the CPU very much

Journeyman Geek

01:41

@MichaelHampton eh, not too suprising

the provider I have now is the only one that seems to even have references to ipv6 anywhere on their site.

the better provider uses CGN unless you specifically ask for (and pay a very reasonable one off fee) for a static IP address

though, they might just not advertise it, they use the same opco as starhub

Mark Henderson

@JourneymanGeek Because average joe doesn't give two shits about ipv6

They want porn and they want it fast

Journeyman Geek

@MarkHenderson: true

@MarkHenderson: myrepublic is thinking about it

Mark Henderson

When we moved ISPs to our current one, they have no plans to implement Ipv6

And our DC that we're moving to said I was the first person to even ask

Journeyman Geek

I think singtel uses ipv6rd apparently, and starhub (my isp) has ipv6rd for cable and SLAAC for fibre optic. The support staff seem to think the latter isn't actually starhub's doing - she seemed to think nucleus connect is the one which offers it

@MarkHenderson: yeah, this seems to be a thing

one of my VPS hosts (who I need to move off of, it was free, but they got bought over ;p) was like "Oh, just set up a tunnel"

Mark Henderson

@JourneymanGeek Yeah say hello to massive latency

Journeyman Geek

01:49

yeah

I just run it on ipv4

anyway its just a small web server and a irc bouncer

BigHomie

02:25

0

A: What to expect in Detroit in terms of personal safety?

Sure. Stick to downtown and/or midtown Detroit during the day, or if you're going to a specific event, go there and don't venture too far away. Downtown/midtown encompasses the Woodward/Jefferson area, Tiger Stadium, Cobo Hall, The Joe, etc. There are plenty of festivals this time of year downtow...

@MarkHenderson no UniFi router?

Mark Henderson

@BigHomie No, not familiar enough with them. I know the Mikrotiks now.

Plus anything that is rack mounted gets extra points from me

> This should go w/out saying, but stay out of any neighborhoods

What does that mean? Isn't everything a neighbourhood by default?

Michael Hampton

@MarkHenderson Places where people live, or more likely, used to live.

Mark Henderson

@MichaelHampton So, avoid anywhere that people live...?

Is that what @BigHomie is saying?

BigHomie

@MarkHenderson eh, people live in midtown, but yeah kinda, don't venture too far away from downtown

Mark Henderson

@BigHomie So only downtown has neighbourhoods?

I'm guessing "neighbourhood" has different connotations to what it does here

I live in a neighbourhood. It's really nice. Lots of trees.

Michael Hampton

02:36

I think the meaning is to avoid other neighborhoods than downtown.

Journeyman Geek

bleh. Rather silly question - anyone else got a centos 7 system handy, and can check for me if guake is in the repos? According to their site, it is, but I can't seem to find it.

Michael Hampton

@JourneymanGeek I have a CentOS mirror...

Journeyman Geek

@MichaelHampton: close enough!

(maybe better)

Mark Henderson

Although the man who came to give me a quote on my roof restoration was quite rude. He told me that "My job is warrantied for 20 years. More than enough for you to move to a nicer suburb"

Fuck you, I like this suburb

2

Journeyman Geek

I could compile it, but that seems a bit much for a test vm.

Michael Hampton

02:38

$ find /srv/www/mirrors/centos/7 -name guake*
$

Journeyman Geek

ahh, so no

bleh. THE DOCS ARE A LIE.

Bob

@MarkHenderson Roof warranties... bah.

They don't come back most of the time.

Mark Henderson

@Bob No, I'm well aware

Bob

Or it's suddenly outside the warranty.

Michael Hampton

@JourneymanGeek It's in EPEL 6 (which I also have mirrored)

Mark Henderson

02:39

I've only got referrals from people who were happy with the work that they had done

Michael Hampton

Doesn't seem to be in EPEL 7 yet.

Journeyman Geek

yeah

meh, I'll take a look at it later. This is a throwaway VM for something, so no point in me compiling it until I actually throw it on something I'm keeping

"yet" >_>

BigHomie

@MarkHenderson they're making lofts in midtown, trying to get people to move back, so far it's actually working. Downtown is a little bit further 'down', and doesn't really have any neighborhoods, it's all business and tourists sites, though the baseball, football, and hockey spots are down there w/ plenty of restarurants

Journeyman Geek

thats a new concept to me

Mark Henderson

@BigHomie I see. So your designation of neighbourhood is a residential area vs a commercial area

Whoah, I just logged into World Community Grid after not logging into it in years and saw that a bunch of nodes that I installed at a company I worked at almost 10 years ago are still online and returning results

Michael Hampton

02:48

Too bad they weren't mining bitcoins. You'd be rich.

Mark Henderson

@MichaelHampton Bitcoins didn't exist back then. Also they were P4 2.4's. Single core

Whoever is using them is probably complaining about why their PC is so fucking slow

And that they're on Windows XP probably not patched in 8 years

Michael Hampton

@MarkHenderson Oh, in that case they're probably also mining bitcoins for six different people, and dogecoins for two others.

Mark Henderson

Actually now that I think about it that company went into liquidiation 5 or so years ago

So those PCs were probably bought at auction

They're probably in Africa or somewhere

Michael Hampton

Bizarre.

Mark Henderson

Those Africans are helping to fight AIDS, apparently

Seems suitable

MDMarra

03:11

I think Server Fault is broken

Michael Hampton

03:44

Fear the Puppetmaster

Bob

04:05

@MarkHenderson Yay for not wiping them when bought? Heck, not wiping them when sold? There's two big fuckups.

Then again, the people who sold them probably didn't care.

Journeyman Geek

@Bob: or just taking out the drives

Someone did that with my old dumpster diva...

Michael Hampton

05:03

I just went on a downvoting and closing spree. Because of something I read on The Daily WTF.

MichelZ

good morning you crazy basterds

Mark Henderson

@MichaelHampton I stopped reading thedailywtf - too much emblishment of stories and things that just didn't make sense or weren't wtf's at all

Bob

> This reeks of Windows thinking.

...uh no?

Michael Hampton

@MarkHenderson Yeah, I've noticed some of that. Still a few gems to be found.

MichelZ

0

Q: SALE in highly concurrent environments

In an online web portal, a sale is offered for XXX product that first 1000 customers who buys the product, will get 50% discount. How you design and handled this scenario where millions of orders are executed per second and high throughput is expected.

respect

Mark Henderson

05:09

@Bob yeah shit like that too

@MichelZ Millions of orders per second? I bet Amazon wishes they could do millions per second

MichelZ

company that trusts such a dev/admin/consultant/whatever to design their "millions-of-orders-executed-a-second-system".....

Bob

@MarkHenderson perfectly possible, if your customers are primarily botnets

Mark Henderson

05:26

@ewwhite how reliable is 2nd hand HP networking gear likely to be?

Namely a 2610 PoE Switch

ebay.com.au/itm/HP-2610-24-Port-Full-POE-switch-j9087a-/…

Falcon Momot

their revenues last reporting year were just under 75 billion. This means that if they did on average a million orders per second, the average transaction size would be $2378.23. So, I think it's fair to say that at peak load they do more than a million orders in a second.

assuming "transactions" comprise nearly all their business activities and that there aren't disproportionate outliers.

but since they tend to bill AWS charges as micropayments I think this might be a fair assumption...

then again though, commonly stated numbers give 35-450 orders per second, so there must be some other major revenue-generating activity.

Mark Henderson

@FalconMomot Well there are a lot of people paying a lot of money on AWS so their average monthly bills would be in the order of tens of thousands of dollars

But I don't know how many of them there would be. Enough to justify those numbers?

Falcon Momot

yeah it depends on what you deem to be a transaction though

Mark Henderson

@FalconMomot This is true

Falcon Momot

and if a transaction requires shipping something or an individual billing action being transacted with an outside entity most "orders" aren't

Mark Henderson

05:39

@FalconMomot $2,378 in revenue every second though is still nothing to be sneezed at

Falcon Momot

@MarkHenderson it's amazingly impressive

ewwhite

@MarkHenderson pretty solid. Update the firmware.

Falcon Momot

though for perspective the gross world product last year was 2.693 million US dollars per second, which is the amount of money in purchasing power parity with US dollars that changed hands in the form of specie, liquid assets, and goods over that period

Michael Hampton

@ewwhite Can you still do that?

ewwhite

@MichaelHampton yep. The firmware is freely available. Remember, HP ProCurve switches have lifetime warranties.

Mark Henderson

05:43

@ewwhite Will I need an xmodem terminal to do it? ;)

ewwhite

@MarkHenderson Just web browser or tftp.

Michael Hampton

TFTP? I think I can still whistle that...

Falcon Momot

I'm trying to find a good way to frame the per capita amount of that, but I'm having trouble. it's like... the approximation of the cost of living as we do, collectively each second, with consideration of only the past year, and as though resource distribution were equal but inclusive of the artifacts of unequal distribution.

@MichaelHampton That, I'd love to see.

my friend thoughtphreaker impressed me last toorcamp by listening and translating DTMF into spoken digits

I'm now trying to imagine how someone might go about whistling a phase-shifted keying line protocol

Mark Henderson

@ewwhite Ok, cool. Well if I can nab it for $100 not much to lose

ewwhite

@MarkHenderson what will you be powering?

Mark Henderson

05:48

I only actually need 9 PoE ports so there's also a 24-port half-PoE for $50 that I might aim for

@ewwhite Polycom VoIP phones. 9 of them.

I tried to find their consumption numbers, but it only says "class 2" which is 3-6w per phone

MichelZ

@FalconMomot I don't know how you calculate, but I get to 0,057$ per transaction

1 mio * 60 * 60 = 3.6 billion transactions a day

* 365

no, 3.6 billion per HOUR

= 86.4 billion a day

Journeyman Geek

@FalconMomot: eh If you're old enough...

I used to be able to do that in the dial up days

MichelZ

it's actually 0,0032$ per transaction

Journeyman Geek

(only the the numbers were 1 2 3 5 and 9, since our local up number was 3211951....)

and naturally I remember it as the sound it made, not the number

Mark Henderson

06:04

@MichelZ I did 74,000,000 / (60*60*24*365)

Got the same number as Falcon

MichelZ

yeah, that's the transaction amount per second

Falcon Momot

`that's revenue per second though

divide by 1 million

I was in error

MichelZ

now he does 1 million of them

Mark Henderson

Ah oops

Falcon Momot

yup.

Mark Henderson

06:05

I missed that too

Falcon Momot

so we can infer from this that even amazon doesn't do that much per second, or even close to.

MichelZ

yes

Falcon Momot

probably more like 500 per second peak, averaging more like 20

MichelZ

i think every store in the whole world combined does not even do that per second

Falcon Momot

hmm, well

see the GWP per second numbers

MichelZ

06:07

its 86 BILLION transactions a day

that means every human needs to buy 10 things a day

Falcon Momot

though a lot of transactions that would be included in gross world product are very large B2B ones

MichelZ

yes, and multi-sales

one thing gets sold through X channels and that adds up

Dennis Kaarsemaker

500 transactions per second is a lot. They might do that at christmas time.

20 transactions per second is too low though

Jenny D

morning

Journeyman Geek

though, by the time you hit those levels, you probably know how much hardware you need, how to squeeze the most out of it, and probably have a few dozen racks spare 'in case'

MichelZ

06:32

@JourneymanGeek woooot? My Pentium 4 can do 50 sales a second :D

Journeyman Geek

@MichelZ: dude. Tomtom's phone.

(and eh, my home 'server' is a single core atom with a cranky fan)

MichelZ

@JourneymanGeek My phone is actually more powerful than the Pentium 4

Journeyman Geek

;p

Falcon Momot

I'd hazard that most of the processing power needed at amazon deals with computing recommendations and determining stocking levels and pricing, not transaction processing.

Iain

G'day

dawud

06:43

morning

Mathias R. Jessen

06:58

Morning

faker

morning

MichelZ

07:12

morning

Falcon Momot

oi.

Dennis Nolte

yo

dawud

07:28

wicked: grooveshark.com/#!/s/Sumerians/6WCClw?src=5

Jenny D

08:26

Really, shouldn't someone who regularly boasts about his long (several decades) experience as a sysadmin and how good he is, know stuff like doing showmount -e before complaining that a network share has the wrong export restrictions?

Chopper3

hey

Jenny D

I seem to have a lower tolerance for stupidity after my vacation

Dennis Nolte

depending on the experience showmount might not have existed back then, and was not needed in the last few years.
obviously a bit of google should fix that issue (detecting the problem) without having to show you know nothing :)

Mathias R. Jessen

@dawud GrooveShark is blocked in Denmark :\

Dennis Nolte

in germany they seem to have stopped working because of fees for the collecting society "GEMA"...

if i would care i really should need a VPN outside of germany/europe..

Jenny D

08:31

@DennisNolte He's been working with solaris for years, and at this place for at least a decade. He bloody well should know basic troubleshooting procedures for NFS mounts.

Dennis Nolte

@JennyD true that.

mabye he is just using his own NFS clone, some sort of netcat or ftp "hack" :)

Jenny D

@DennisNolte nah, he's trying to move some of the client's old homerolled provisioning/config stuff over to puppet, which is laudable, and he's doing this on a new server. This morning he emailed the SAN people that he couldn't mount the NFS home directories and it must be a permission problem. Hint: it wasn't. I have no idea what it actually was though since the server doesn't allow LDAP logins.

Mathias R. Jessen

@DennisNolte Same here, their KODA (dk equiv to GEMA) costs were too high

Dennis Nolte

maybe just some bad coffee, sleep deprivation or something like that.

Jenny D

@DennisNolte I refuse to let reality get in the way of my righteous indignation

Dennis Nolte

08:37

@MathiasR.Jessen as i said yesterday, internet changes they way things are done, sadly the people in power without computer/internet need to die out first before everyone understands the consequences (and this will take something between 20-40 additional years)

@JennyD haha

Jenny D

@DennisNolte I had that discussion the other day with my husband, about self-driving cars. He thought they'll be available within 10 years. I don't - I think they'll be technologically available, but I don't think it'll be legal to not have a human behind the wheel that early.

Dennis Nolte

yep.. i just did read something about not before 2030, but this seems to be about the technical aspect.
So there is still a lot to do.

Jenny D

There's this huge forest fire in Sweden right now, bigger than anything I've ever heard of in this country. So firefighting airplanes have been sent from France to help out. Only they can't take off due to the smoke from the fires... This does seem like a slight error in engineering to me.

Dennis Nolte

fire in sweden ? wtf.. is global warming that far away already?

Jenny D

@DennisNolte Apparently so. Like I said, I've never heard of anything of this magnitude. We usually get a few small ones during hot summers, but this is huge.

Dennis Nolte

08:53

qoute: "It is now the largest fire in at least 40 years to affect Sweden." aha.

Jenny D

@DennisNolte About 65 square miles of forest destroyed so far

if I've got my conversion right

Dennis Nolte

@JennyD miles.. what do i need miles for, im euro..

Jenny D

@DennisNolte 168 km^2 then

Dennis Nolte

i see. thank you :)

with 33 °C there as all-time high? wtf.. we had 40+ last year or so for all i remember.

but still strange.

and frightening

Jenny D

@DennisNolte It's not the temperature only, it's the lack of rain

there are pictures at dn.se/nyheter/sverige/se-bilderna-pa-den-omfattande-skogbranden

on the 2nd picture you see the smoke from the fire on a satellite image

Dennis Nolte

08:58

Qoute: "It’s burning deep down into the ground and across large surfaces,” fireman chief Per Hultman said in an interview with Expressen. “It’s going to take months to extinguish.” "
looks like the permafrost starting to melt actually.
Holy shit and i hoped it would happen in earliest 20-30 years.
If this is actually the beginning of the release of all the fuckin methan in permafrost, we get a hell of a century..

Mathias R. Jessen

o_O

Dennis Nolte

ye, i saw that picture, though a lot of fires in south america and in the states seem to look similiar..

Jenny D

@DennisNolte That area is quite a ways south of permafrost, really

dawud

►

Dennis Nolte

@JennyD so the usual FUD.. ok thx for that.

Jenny D

09:09

@DennisNolte I don't think you'd get a big forest to grow on permafrost, would you?

There are areas in Sweden with permafrost. They are very farth north and/or fairly high up. If the top layer thaws during summer, you'd at most get peat, not forests.

Dennis Nolte

totally true in hindsight :)
Though one of the article i did read about the forest mentioned that the permafrost might "swell" below the ground because of this fire, and this would take month to put out.

Mathias R. Jessen

@dawud I'm not a huge Hip Hop fan but they're pretty cool, I also enjoy the occasional Jedi Mind Tricks track ;)

Jenny D

09:37

@DennisNolte I guess if the fire reaches the fjälls that could happen, but it would be a local phenomenon not a global one. But the forest fire will take months to put out completely anyway.

Dennis Nolte

@JennyD i see. thanks for the info. so it seems not that cruicial on a global scale.

Jenny D

@DennisNolte I believe so.

faker

09:53

-2

Q: Universal solution for using a CNAME to redirect a top level domain (naked domain example.com) to a sub domain, www.example.com or www.cloudhost.com?

Note: This question has been repeatedly asked on SF, I believe tons of variants of the same question arose due to differing vocabulary; I've carefully worded the question and tags so the question will be easy to find. Also most previous questions attracted poor answers (out of date, shal...

cname-record dns-hosting cloud-hosting tld naked-redirection

can't wait to see his answer!

Dan

TLD = top level domain (as in example.com without the www

EPIC!

faker

yes, I commented that already :D

Dan

@faker Aw, you bea tme

Dennis Nolte

lovely..

VTC; minimal understanding

..

what the fuck is trying to do

the whole question is bullshit, cause the TLD fail..

Bob

> Math Teacher, who programs during summers off.

There's your problem.

Dan

09:58

Ah - though now i feel a bit bad about slating him

Dennis Nolte

so that is a math_dev_ops? Holy shit where will that end?

ewwhite

12:00

I remember seeing browser agents like Lynx in the logs for Brazzers.com. Never understood why until now! — ewwhite 22 secs ago

Jenny D

@ewwhite ...I still use Lynx occasionally.

ewwhite

Oh, same here. I learned on it.

Jenny D

Now that I think of it, I mostly use it from an ssh session where I don't have X forwarding.

faker

@ewwhite that could actually be a problem for people with a impaired vision who use screen-reader software

ewwhite

And when I need to download some horrible ISO to a server that's the result of a form link and can't curl/wget, lynx is my best bet.

faker

12:04

but not sure if they prefer your ASCII art then...

Jenny D

@faker yeah, a page that works for lynx will also work for screen reader software

Dennis Nolte

@ewwhite :)

for everyone using lynx, do not use it anymore. Rather use links2 (the sucessor)

ewwhite

Hey, I never said I was a geek. I'm just here to game Stack Exchange!

Dennis Nolte

haha

ye sure

totally. i hate when they generate an iso /file link based on IP , cookies and other crap.
fucking link stealers to thank for..

this was an issue for me on sourceforge a long time ago, before they had the "use this direct link" stuff..

as for IP "block" i only had that on a game release.. could not get it with my gbit connection.. had to download it at home, and upload with 2Mbit to my server.. ye great. fuck them

Nicolas Lykke Iversen

May I ask what pentesters use Virtual Machines for in practice ?

faker

12:13

@NicolasLykkeIversen probably better asked at security.stackexchange.com

Rory Alsop

@NicolasLykkeIversen Nicolas - you want the Security Stack Exchange chat room - chat.stackexchange.com/rooms/151/the-dmz

tombull89

@ewwhite wonder what that looked like...text-only Brazzers. B====D ~~~(.)(.)

Dennis Nolte

@tombull89 asciipr0n.com

in case you did not know

tombull89

@DennisNolte why am I not surprised that exists

Dennis Nolte

@tombull89 Rule 34 : urbandictionary.com/define.php?term=Rule+34 :)

Basil

12:51

morning

MichelZ

afternoon

Basil

heh

cole

morning

Stack Exchange

13:10

Standalone Sysadmin: Adam Moskowitz's video: The Future of System Administration

posted on August 06, 2014 by Matt Simmons

My friend Adam Moskowitz presented a topic at LOPSA-East this past year that is one near and dear to my heart - the Future of System Administration. I've written a blog entry with something very close to that title twice: The Future of System Administration - August, 2009 The Coming Future of System Administration - […]

Dennis Nolte

any quick answer for following:
do something for every 2nd variable
for a in A B C D E F
do
stuff
done

bash linux :)

nevermind, solved by rewriting the array.

HopelessN00b

13:29

Before I go ask on the main... does anyone around here have any insight into why the ESxi installer would be unable preserve my VMFS datatstore in doing an upgrade from ESXi 5.1 to 5.5?

All I can seem to find online is VMware saying useless shit like "Sometimes, an existing VMFS datastore cannot be preserved."

ewwhite

@HopelessN00b depends on if it was upgraded from 4 to 5 to 5.1 to 5.5

HopelessN00b

@ewwhite No, I put this one in myself. It went from nothing to ESX 5.1.0, 799733.

ewwhite

Depends on how you partitioned as well

no, not really...

a raw ESXi install should just work

@HopelessN00b You have more problems with VMware than you should

HopelessN00b

13:45

@ewwhite Yeah, we have more problems with everything than we should. Consequence of cheaping out on everything and caring more about keeping chairs warm than doing actual IT work.

ewwhite

@HopelessN00b but how did you break your vmwarez?

HopelessN00b

Beats me. I can't even find any docs on how/why this might happen (short of a jump from 3.5 or 4.0 to 5.x), or how to avoid or correct it.

And, of course, this is a site connected to the world via T1, so any sane ideas like just backing the thing up and pushing it back out once the install's done aren't options.

Ryan Ries

I've still got to make 4k more points to win @Wesley's 10k challenge >_<

Nathan C

14:01

@HopelessN00b What version is the VMFS on?

HopelessN00b

@NathanC Gotta be 5, since the server's only ever had ESXi 5 on it.

Nathan C

I've never seen that error before...when I went from 5.1 -> 5.5 it didn't even touch my datastores

And I was on 4.1 previously to that (so 4.1 -> 5.1 -> 5.5)

cole

this week needs to end.

Nathan C

@cole agreed

HopelessN00b

@NathanC Yeah, tell me about it. This will be the 12th host I've upgraded from 5.x to 5.5, and the first time I saw that.

ewwhite

14:07

Backup Archive Alert

8/6/14 9:06 AM - As part of it's routine verification process, CrashPlanPROe detected problems in the backup archive for computer Edmund’s MacBook Pro [629661100094259201] backing up to Elk Grove Village - ch1 [639370282347997376].
0 bad data block(s) were detected.
158 file(s) failed verification.
CrashPlanPROe will automatically back up these files again.
If you continue to receive these alerts, we recommend that you add another backup destination, because there might be a problem with the destination computer.

hmm...

Dennis Nolte

@ewwhite smells a bit like bit rod.

ewwhite

it's on ZFS

HopelessN00b

That does sound odd and unpleasant.

tombull89

Configuration Manager primary site and central administration site don’t support SQL Server Express Edition. well...fuck.

Josh Gitlin

If it's ZFS what verification did they fail?

HopelessN00b

14:15

@JoshGitlin CrashPlan Pro's file check... whatever that consists of.

Josh Gitlin

@HopelessN00b yeah I trust ZFS more :-)

This is why I use rsync to a ZFS share

Nick

Checking auth.log and finding 200 login attempts to my SSH... forgetting to install fail2ban isnt fun at all

ewwhite

Right, the underlying storage is fine. But crash plan's archive is broken

Nick

Now I have to read the logs to see if any got through ... well I always liked reading walls of text

HopelessN00b

Could you provide me with some more troubleshooting tips please? Sure. Accurately and concisely identify the problem. Then share it with us. "Not working" is the kind of problem description that makes me throw things at people. — HopelessN00b 4 mins ago

ewwhite

14:23

Pruning!

faker

I increased the CPU usage limit to our vCloud via the vSphere client. Now the provider of that tells me that I probably circumvented a VMWare license restriction by doing that. lolwut?

HopelessN00b

Does pruning mean what I think it does, are are we talking about one of your produce companies, and actual prunes?

Dennis Nolte

@Nick 200, sweet , i guess that means you do not use the default port of ssh? :)

in case you guys need this: the average function of libreoffice is not able to calculate more than 30 fucking values at a time..

Dan

14:48

Morning kids

Architecture question - I'm writing an application that really should be a Windows Service, except it can't be because it needs to run in the users session (Needs to enumerate processes and windows).

What would you expect such an app to "look" like? What should happen when you click or launch the executable?

HopelessN00b

@Dan Is invisible (and therefore, somewhat protected from the actual user whose context in which it runs) an option?

Ryan Ries

@Dan Are you making an app to spy on your users so you know which ones are browsing reddit and porn at work?

Dennis Nolte

@Dan trojaner!

Dan

@HopelessN00b Yes, absolutely. It just doesn't feel quite "right"

Bob

@Dan Does it do anything visible to the user?

Dennis Nolte

14:53

@Dan make a small task bar symbol with a short describtion, and everything else invisible :)

Bob

Or that the user needs to care about?

Dan

@Bob No, I just can't quite shake that it's wrong to make an app which launches with no window

All it does is intercepts Ctrl + Alt + Delete commands and, if the user is running a Citrix window, redirects it

Bob

There's a whole lot of processes that run at startup without a window. Some have notification area icons, but I'm pretty sure a lot don't.

@Dan ...Intercept?

I'm sorry Dave, I'm afraid I can't let you do that.

Dan

@Bob Boom, it can

Michael Hampton

Just because the OS is called "Windows" doesn't mean that windows are required!

Bob

14:54

@Dan I'm curious how you're doing that.

Dan

@MichaelHampton Fair one - like I say, it should be a service really, but not much I can do about that

Bob

Pretty sure intercepting the SAK requires some rather low-level hackery (i.e. be part of the kernel).

Dan

@Bob After hours and hours of being told it's impossible, I found this: oblita.com/interception.html Works lovely

Going to cost me a few quid in licensing, but I'm passing the costs back on to the customer so there ya go1

Bob

...there it is.

> be part of the kernel

Ryan Ries

Nothing is impossible if you can install kernel mode drivers

HopelessN00b

14:56

@Dan I would just make a systray icon that indicates the status, honestly. Citrix CAD hack by Dan is [x] Running [] Not Running [] Doing your mother.

Ryan Ries

You can hack and hack until it's not even Windows anymore

Bob

@RyanRies It's also a nice potential security hole. What stops malware from using the same API to intercept the SAK?

Ryan Ries

@Bob It's not a security hole, you've already given the malware full administrative rights of the machine if you allowed it to install kernel drivers in the first place

jscott

@Bob If the malware is a signed kernel mode driver, what's the problem? :)

HopelessN00b

@Bob Maybe that's part of the business model being used to pay for licensing/a small island in the Caribbean.

Dan

14:59

I must admit, my vague concern is if some malware was set up to use the API but it's such an edge case

Bob

@RyanRies In this scenario, you (as in @Dan) have installed a kernel mode driver that exposes an API that allows interception of the SAK. So the "install a driver" step has been completed by a legitimate program/user.

Ryan Ries

99.9999% of Windows security issues are solved by not running as Admin/with elevated privileges.

3

Bob

Now there needs to be some way of preventing abuse of this legitimate API by malware.

HopelessN00b

@RyanRies Not that many. There's still Flash and Java all that nasty webshit to contend with.

Nathan C

@Dan Honestly, I'd just make it a toolbar icon...you can have a user-run program that doesn't have a visible window

Transcript for