« first day (1425 days earlier)      last day (3842 days later) » 

15:00
@RyanRies That goes pretty much for other OSes as well.
Dan
Dan
@Bob Yeah, that's a fair one and it's something that worried me. I'm hoping that that it's such a niche that it's not a biggy, plus, these are thin-client locked down devices with write filters. EXCEPTIONALLY unlikely for anything to be able to do anything
@Bob Don't give the malware administrative rights?
@Bob Yes that is correct in this case an administrator has purposely weakened the overall security of the system... solution... fire the administrator.... LOOKING AT YOU, @DAN
@RyanRies nope, cause that way you can't do most of the stuff you want :)
Dan
Dan
@NathanC I think that's perfect. The toolbar icon won't be visible as they'll be in Kiosk mode, but at least something happens when an admin clicks it
Bob
Bob
15:00
@NathanC The whole point of this was so a program running within a user's session, presumably with the user's security token, has access to that API...
@Dan Even if it pops an about window when clicked...should suffice.
Dan
Dan
@Bob Once you've installed the driver, anything has access to the API because it doesn't require any kind of elevation
I haven't installed Java on one of my personal PCs in years, and it feels great.
Bob
Bob
@Dan Ouch. No way to whitelist?
Then again, if you're going to this extent... shrug
Dan
Dan
@Bob No, because the driver is all closed source etc due to signing.
15:02
yee, miniority report in germany live..
Predictive-Policing-Software for finding burgler before they do the crime..
Bob
Bob
@RyanRies I managed to avoid it on my laptop for... a year? :(
Dan
Dan
I guess I could ask him when I've purchased it
Or ask for the source and sign it with your own CA.
Bob
Bob
@Dan I suppose a whitelist wouldn't really be feasible anyway (how do you identify the caller? has the caller been tampered with? hm, actually, image path should work if that path was read-only.) :\
At least it's a locked-down machine, as you said.
Dan
Dan
@Bob Yeah, I'm not quite happy with it but I think the attack surface is tiny in comparison to the millions of other far more likely exploits.
15:05
Does this job spec sound off?
Hospitality technology company located on the Magnificent Mile in the heart of downtown Chicago is seeking a talented, self-motivated and goal-oriented candidate who is competent with Linux CentOS/Redhat, networking, VoIP, software engineering and troubleshooting. The right candidate must possess a positive attitude, willingness to take on new projects, strong intuition and an optimistic view focused on project completion.

Minimum abilities required to join our team:
- Competent understanding of Linux OS (CentOS/Redhat) including troubleshooting and tools
Dan
Dan
I don't think I've ever seen a virus or malware on Thin Client
Bob
Bob
@Dan User training (wasn't it ctrl+alt+end? or was that RDP?) out of the question?
Dan
Dan
@Bob User training is never out of the question, but this solves a huge problem for a lot of people
Bob
Bob
Train the user or hack the OS? bleh.
Dan
Dan
@Bob It's not a hack - it's a driver and an application
15:07
oh that is nice. i would hit that resume pretty good (expect the win part)

depending what they pay it might be a bit much, but if i would search, i would at least ask them a bit arround.
@RyanRies I'm no Microsoft admin, but how do you get around users not being able to "do stuff" on their computer?
Bob
Bob
@ewwhite The same way you get around Linux users "not being able to 'do stuff'"?
@ewwhite What do you mean?
@BigHomie Most sites I see just give their users local admin. How do you avoid that?
Heh he he he he he he he
Bob
Bob
15:09
@ewwhite Why do they need local admin?
@Bob so they can install Weatherbug
Bob
Bob
What part of their daily job requires being able to modify system files/install programs/etc.?
At $oldjob the policy was give them admin if they asked for it.
Jeez, I'm not even a local admin.
I would use group policy for that
15:10
so in what cases will someone need local admin?
I don't know.
Dan
Dan
@ewwhite Like most things in IT, this shit is all political and all depends on how much the IT Dept is able to say no
Install print drivers on their laptop for their home printer
so is there a SUDO equivalent?
Dan
Dan
If senior management are on side you can lock things down fantastically and still give a great user experience. If they're not and people are loud/impatient then you wind up handing out admin to fucking everyone
I mean, how can these users do what they need WITHOUT admin intervention?
15:11
@Dan Which is why most stuff runs like cap in political environments
Bob
Bob
@ewwhite Probably not your typical accountant, laywer, produce manager, etc., as far as need goes. Want? Yea... "Need" (manager/executive)? ... ...
@ewwhite No. Only run elevated or run as a different user.
@ewwhite depending what you need: setuid?
@ewwhite Because people talk, and windows will tell you so
@Bob firefox updates!
15:12
@ewwhite Runas
Bob
Bob
@DennisNolte I thought they changed that to not require elevation?
@DennisNolte The update service doesn't need the user to have admin rights.
It's fine on a terminal server, because it's easy to make the case that it needs admin management
@ewwhite OH, FUCK NO. First thing you need to do is set the AV solution to detect and eliminate weatherbug as the malware piece of shit it is.
but what about individuals' PCs.
@HopelessN00b I was kidding about weather bug... I really meant Yahoo Toolbar.
and MalwareBytes/McAfee/Norton
Bob
Bob
15:13
@ewwhite Or Ask Toolbar? Incidentally, fuck off, Java.
@ewwhite Charge $100/hr for fixing PC bullshit and point out every time that they'd have saved $x if their users didn't have admin.
right.. i forgot about that, just remembering having exactl that issue,
local user, no admin rights, firefox nagging about updates, nogo cause it wanted admin rights.
@ewwhite Heh. First GPO I wrote here was actually one to detect and silently uninstall Yahoo! toolbar (and about 3 others).
Applocker was designed for that, and group policy would have allowed users with laptop to install drivers for printers. Also, some archaic applications require the user have perms for the file system folder and/or certain parts of the registry
Bob
Bob
@DennisNolte That would've been a while ago.
15:15
@BigHomie You can also allow hardware class GUIDs to install drivers as limited user.
@Bob a year or two, might have messed up the install though.
Bob
Bob
@BigHomie Most of those work fine with file system virtualisation. I forgot what they called it. UAC virtualisation?
@jscott Yep yep
@DennisNolte I got 200 in 1 hour... I use the default port
that might (at least if someone complains) give you legal trouble.
at least here (germany) you are not allowed to change stuff like blocking specific spam mails as sysadmin if your boss does not explicit tells you to.
15:16
fail2ban is active now tho ... now to wait for a bot to test it :D
@Nick expect that to rise :)
@Nick should i do?
or post the IP at 4chan
im sure they will find anything else you have missed :)
@Bob App-V does file system virtualize ti on when you sandbox an app, I'm not sure if there's something else that specifically virtualizes the file system though
Bob
Bob
@BigHomie I was referring to the virtualisation introduced with UAC: blogs.technet.com/b/mrsnrub/archive/2008/10/25/…
Oic
@Bob Interesting, didn't know that existed, maybe I should grab that MCSP after all.
@DennisNolte I have enabled firewall logging and set it to drop and log any incomming connections except established ones... ohhh the spam in there
15:24
@Nick ah ye :)
Now question is ... rkhunter or chkhunter
@Nick i would logg established ones aswell, and send them to a loghost, that way you at least know after a break..
I already have tripwire
@Nick I've got some tripwires too, and some cheesewire too
@Chopper3 ... -_-
Bob
Bob
15:27
It's a pain in the arse trying to find the actual docs :\
I can find the ones for the registry virtualisation, but not the file system one. Pretty sure I found it before, but it's MIA now :\
There's a kb article on compatibility issues, too.
So weird they don't broadcast those things
Bob
Bob
@Nick It's fun seeing what usernames turn up :D
55ding
Adraste
Akiro
Csaba
D-Link
Dinyak
Dzsudi
IMMMMMMFAKKKE
Jaka
June
Kelana
Kosztyi
Kristof
Mate
My_Private
NuMerge
Pabon
Phoenix
PlcmSpIp
PlcmSpIp2
Rim
Riverview
Rupesh
Sorin
Test
Tits
Zaki
a
a4abroad
abela
acc
ace
acogec
ada
adam
adm
admin
admire
adraste
adrien
af1n
agata
agnieszka
ahmed
airadmin
ajay
akim
akiro
alan
alex
alexandre
alfresco
aline
all
allan
allen
alma
alok
alvin
aman
amandabackup
amine
amix
anders
anderson
andreas
andrei
andrey
andy
anne
annulee
anon
anton
antonio
apache
app
> dirtydave
raspberrypi looks like they like a potato server
Bob
Bob
@BigHomie yea, just google "virtualstore" and see how many confused questions you get :P
Or "my saved files are missing!"
took me a couple weeks to figure it out the first time
@Bob XD
15:35
@ChrisS BREAKING NEWS: Fox likes vague headlines
:p
Was't there already an Ebola patient in the US?
Great I accidentally enabled UFW and now my iptable rules have been spammed by it
@jscott Yeah...there's two total.
Ah, so they could try breeding them to see what happens.
Dan
Dan
15:38
@jscott Babies which poop ebola
Bob
Bob
> WILL THE LOONY LEFT GIVE HOUSE PRICES CANCER?
> HAS FACEBOOK MOLESTED HARD-WORKING FAMILIES?
@jscott This was from the first one, there's two now, both were infected in Africa and flown here for treatment.
16:02
0
Q: RAID Controller and non-server mono

pmac89So recently I just bought an Intel RAID Controller RS3DC040 and a MB GIGABYTE|GA-Z97MX-GAMING 5 MATX motherboard. I was told by Intel Support that the RAID controller would most likely not work on the motherboard I just got. I don't see why it wouldn't. It is a PCIe 3.0 8x RAID controller and the...

Oh god, there are so many things wrong with this I hardly know where to start.
Bob
Bob
@MichaelHampton The edit made it worse...
> The server I'm building is with 15 drives for the RAID.
Yeah, and RAID 5 too. I think we're just going to put an end to this.
Bob
Bob
@MichaelHampton Sounds like a great experiment. "How many days can we go before corruption occurs?"
I'd bet 100~200... just enough time to think it's safe and start using it heavily. Assuming it survives the first few days, with 15 (probably consumer) drives...
Heart attack mode engage
Broadcast message from root that ctrl+alt+delete was press and server is going down
Bob
Bob
16:14
O_O
@Nick yeah, @ewwhite has experience with this as well :)
Point is... did someone from the DC did it... or something else
@MichelZ "experience with it"?
pressing ctrl+alt+delete on the wrong terminal
42
Q: Isn't Ctrl-Alt-Delete on Linux *really* dangerous?

ewwhiteIs the default Ctrl-Alt-Delete shutdown -r functionality on Linux systems a dangerous feature? Years ago, when I deployed physical systems with attached keyboards and monitors, I'd sometimes modify the /etc/inittab on Red Hat systems to disable the reboot trap. This usually happened after a loca...

I should go around and disable that.
@MichelZ but I didnt press ctrl alt delete... and AFAIK no other sysadmin was logged on
16:21
a KVM switch, ILO, wrong console...
it's an easy mistake
does control alt-delete work even if youre not logged in? cause noone knows the root password its randomly generated
@Nick yes
Oh crap... I forgot to add in a back door and now that it kicked me off SSH im locked out... I was in the middle of configuring iptables dangit
Which Windows DNS question... Can I find out when/if a record was modified?
@ewwhite I believe you need to enable auditing
16:28
In WIndows?
Yes
oh poo
well, okay
@cole Thanks.
I wish I had that before
@ewwhite I wish Windows would enable a lot of that auditing stuff by default :/
16:32
@cole Then people would complain, "why does Windows log all this shit that I don't care about!?!?"
@RyanRies true that.
@RyanRies Maybe we need multiple editions of Windows for that
@MichelZ Well you can turn all the audit logging on or off as granularly as you want, it's just a question of what's turned on by default out of the box
@RyanRies Yes, multiple editions. One "Audit enabled" one "Audit disabled"
else you can't please everyone :)
@cole: There's GPO for that...
For instance, some of my environments literally generate a Security event log entry every time a process starts and every time a process is terminated
16:36
@RyanRies holy crap
@MichelZ Yeah
16:50
@RyanRies I like the 2008R2 security audit defaults...log all the successful logons but none of the failed ones
it's like...uh...okay...
heh, I just got 8 rep from a 0 point answer- I guess I'm being controversial:
0
A: How to aggregate small storages and make a big one?

BasilYou shouldn't do this, even if you can. It's not robust because PCs regularly shut down (users, patches, etc), and as long as a single PC is unavailable on the network, any shared storage it provides becomes unavailable.

@cole WORDS.
@adamcodega all the words
all the words I can't even
Oh yeah?
You literally can't even word right now.
16:53
lol
I'm going to Maine and Nova Scotia end of this week.
Apparently I get like, a lot of vacation time.
Nice dude.
Yeah just visiting people, hanging out and stuff not going out of the house very much.
@adamcodega Up towards my territory...be careful of the meese :p
@adamcodega I've never been to Nova Scotia
@cole me niether!
We aren't even sight seeing, just visiting family, but they have nice property and a golden retriever.
16:56
Nice - sounds awesome
I'm going to ComicCon on Saturday.
@NathanC you just cursed me cause I haven't seen a moose yet and I've been up to Rockland a lot.
Nice!
@cole
yes?
lol I meant to tag you on the @cole
I mean
whatever
stupid keyboard
lol
uhhh can iptables drop ping packets?
Cause if yes I think the people at the datacenter though the server was down because of me configuring iptables -.-
17:00
@Nick of course it can if you tell it to
@JennyD Well... theres where that mystery reboot came from
@Nick heh :-)
Lesson learned: alert datacenter staff before dropping ping packets or you'll summon them to reboot your server
@Nick They'll just.. reboot it?
@ShaneMadden Reboot it, see if works fine, then act appropriately
17:03
@Nick That's awful
@ShaneMadden yup, Greek datacenters suck
46
Q: What is the difference between Terminal, Console, Shell, and Command Line?

AkivaWhat is the difference between Terminal, Console, Shell, and Command Line?

lord
392
Q: What is the exact difference between a 'terminal', a 'shell', a 'tty' and a 'console'?

LazerI think these terms almost refer to the same thing, when used loosely: terminal shell tty console What exactly does each of these terms refer to?

This question has been posted a few times
17:20
Uhh they are trying to replace iptables with NFTables?
Just read that
Does anyone want to install a CAPTCHA for me? - valleyproduce.com/contact.php
@ewwhite too much spam eh?
Dan
Dan
@ewwhite I could do one tomorrow morning for you easy enough
someone is telling me that the site is in Flash and makes sounds when you hover over things.
Cough Cough
17:26
@ewwhite Too many WTFs in that page source.
@MichaelHampton is it better than my wife's company? testaproduce.com
They had a professional site with a CMS... but the owner of her company let his "friend" make a new better site...
she said, "I made this site easy to modify... you won't need a CMS anymore. This is really easy HTML!!"
@ewwhite I did not see any obvious WTFs in there.
@MichaelHampton except of the fact that they have to edit HTML
@MichaelHampton Other than the 20 second load time....
the weird sized images...
17:29
@Nick Well, yes, there is that.
@ChrisS Was it 20 seconds? It wasn't here.
Its fast once its in the cache
BTW I was doing a freelance website over the weekend, and also did a little research and tried to figure out what I had done to jack up the Testa website a couple weeks back, and I realized that within Dreamweaver, it uploads everything associated with that page, not just that html page.
This page has 18 external Javascript scripts. Try combining them into one.
This page has 10 external stylesheets. Try combining them into one.
This page has 24 external background images. Try combining them with CSS sprites.
The page has a total of 66 components and a total weight of 3349.0K bytes
I don't know if I accidentally changed something within the page, or if the root file I was accessing wasn't the most current, or what happened. If its possible can you allow me to download Fllezilla it is a free server transfer program. By uploading just the html page through FileZilla it will not affect the css, or any other associated elements, making changes/edits easier and less error prone.
Because WordPress just isn't good enough?
@ChrisS Huh. Maybe I had it cached already.
17:32
My trusted web dev just says to use Wordpress
I prefer Drupal. But nothing wrong with a managed WP installation.
My manager "chose" to use joomla without asking anyone for our company
Now I have to manage a joomla website...
I'm not a webguy by any means - is Drupal fairly easy?
I think, and I can't believe I'm going to say this
that having 3 monitors as opposed to 2 is worse for my productivity
@cole I need a third monitor... not enough space :(
@cole Drupal is easy once you get over the learning curve
Like WP, there's a lot to it
Some GitHub Pull Requests really need this as a feature http://t.co/x8xUksfiZ8
@cole Webserver, PHP, extract Drupal source to www root, login and configure...
@ChrisS pretty simple.
Yeah, most distro's you can do something like "pkg_manager install drupal", "service_manager start webserver", login and you're off... But others are that easy too, it's not special.
17:39
@ChrisS do you do a lot of web-type stuff? (On the side or even at work?)
I need to start making money on the side
Not in my job. Just side stuff. I've had a few small/non-profits ask to get a website setup
I don't want to do PC support because then it'll just be hell
@cole ooooh! Let me get on that.
@ewwhite I figured you'd like that
and if you need someone local - I can get there easily.
I only do 2 levels of PC support: None or I control your PC and you do not get Admin access. Otherwise you'll just end up doing Virus cleanup 99% of the time.
17:41
Ah
@ChrisS you might well end up doing that anyway.
With a decent AntiVirus and Non-Admin access those PCs have never got a virus (yet)
Forgot to add: No Flash, Java, Reader, Shockwave, etc. :)
Shockwave - haven't seen that in a LONG time
more reason to not use java for anything:
(TL;DR: various factors, especially Oracle's lobbying, killed Aaron's law and leave US law to incriminate everyday internet use and copyleft)
17:50
They're still pumping out updates for Shockwave. Funny thing, they were still shipping Shockwave which contained a vulnerable Flash component.
So "go, go Adobe Security Team!"
They should all be held liable.
since they are negligent.
I'd love to see a responsible disclosure policy whereby you send one copy to the vendor, and one copy to the courthouse.
18:11
oh god
crying right not
wtf lol
@cole We are all groot.
I have yet to see GoTG
saw it yesterday, better than expected.
Ugh want to see so badly
18:31
Had a vendor complain they couldn't email us since switching to O365
...the mail server MS decided to make them use is in the UK
Client: I needed to log onto the DC to change someone's password and all I get is a white screen!!!!
and guess what the GeoIP filter blocks!
So I'm like: bullshit!
Hmm...
Weird
But Microsoft people... how should one change a user's password?
18:35
what's the right way to do it?
ADUC
and just give his account the rights to change passwords
@cole so I should tell the head accountant to log onto the domain controller as Administrator and go into ADUC?
@ewwhite get @mdmarra
Is there a list of specific rights needed to accomplish that task?
18:37
@ewwhite They would need to install the RSAT tools and you'd need to delegate the ability to change passwords for his account.
Is he currently logging in with a domain admin account?
@cole So I'd need to get the RSAT tools onto the guy's Windows 7 PC?
@cole yep
and delegate the right to password reset: community.spiceworks.com/how_to/show/…
This way he doesn't need to know or have a domain admin account and he doesn't need to login to a server.
@Iain @mdmarra likes to hit-it and quit-it - He doesn't do the high-touch stuff.
That's how we do it for our help desk guys.
but that's odd about the RDP connection being a white screen.
We've got a basic password reset tool that the IT teachers use to reset students passwords. You can change which OU it uses so they can only changes passwords in the "Student" OU rather than Staff, etc.
I've seen black screens on login, but not white ones.
18:40
@cole I just logged out and back in. It's fine.
@ewwhite weird.
@tombull89 same
@cole tell me more about this account delegation stuff...
Also @ewwhite if you just give his account the ability to only reset passwords - he won't be able to delete things or mess anything else up.
@cole how do I give a user password/user creation permissions?
and it's local to his box.
18:41
and today I found out SCCM does not support SQL Server Express - after nearly two hours of installing the server, getting everything ready, and then installing SCCM it nope'd out on me.
@ewwhite in ADUC > go to the top level of the domain, right click and delegate control. Add the account you want, ten next > Delegate the following common tasks
Because @mdmarra doesn't tell me this stuff.
then next and finish.
Done.
You can do it on specific OUs only too - stuff like that. You can do custom tasks, as well.
like dat?
Yessir
If you want him to be able to do all that.
18:45
he's the only important person there.
Those are all fairly harmless anyways
except the deleting of accounts but hey, you have AD Recycle Bin so
We don't so we're a bit more concerned :)
SOON
@ChrisS Darn. I was hoping for an ebola patient at Wall street stock exchange
@cole Yeah, marra says he enables the AD recycle bin
not sure what that does.
@ewwhite if you delete an AD object you can restore it without needing a backup tape/disk/etc
@ewwhite You should assign a group these delegations, and then add the user to the group. Else I'm sure Mark will give you shit about it. :)
18:49
I hate windows server so much
@Nick why?
@jscott I would normally, but this is the CFO/controller of the company
because it's easier to work with groups
@jscott I'm getting better at PowerShell btw
@cole not a fan of MS generally... im full time linux geek :p
@cole Go you. I'm getting worse as it would be. :)
18:49
@Nick but why particularly today?
@jscott just forcing myself to use it for even the most basic tasks. Takes longer, but I'm learning a lot more.
@cole not only today, I always hate microsoft :P
@Nick haha, I'm a multi-OS guy so I hate them all :)
Gah!. I just got 'promoted' from coding/modelling to 'coding/modelling and 3rd line support'
@cole I used windows for 5 years, I had enough crap from it and im never using anything created by microsoft again
@Hennes doh. Sounds like when I was 'promoted' to a Domino Admin earlier this week.
18:51
Yup.
@Nick my day to day is Windows, Linux and Solaris.
Now all I need is to become evil and abuse my role 10 (aka admin) powers
@cole solaris? People use that thing? Never met anyone using Solaris
@Nick I have used slowaris
@Hennes slowaris? LOL
18:52
I also wiped it and installed Linux, but ...
Slowaring on an Athlon-1333MHz ran slower than on a 50MHz 68030.
but..
The SUN (with the 030) simply felt snappier
@cole the recycle bin saved my bacon once :P
i accidentally the wrong user once and was able to recover it...
@NathanC accintally the wrong user? what
@Nick knowyourmeme.com/memes/i-accidentally ...meme that should've died a long time ago :p
19:02
@NathanC Naw. I accidentally is a classic.
oh hey, sudden downpour
It was bright and sunny a half hour ago
19:15
@NathanC we had someone in the UK delete a user this week - yep no AD Recycle Bin
@Nick yeah - we use SPARC for our SAP boxes
@nick I worked at SUN
@RyJones ah, fun
@NathanC sunny here, my coworker and i decided to walk to the main building outside and it started spitting out. Still sunny, but we're like wtf?
@cole Happens here all the time. Usually it's because there's a storm some miles away and the high winds carried the rain over
So apparently even a MS engineer didn't think to ask us if we were filtering non-US traffic ....the vendor was on O365 in the UK but they're US-based (how that makes any sense, I have no idea).
@cole Thanks for your help.
19:22
As soon as I unblocked UK traffic all the email that was lost came in at once lol
RSAT has been installed...
Permissions have been delegated...
bananas will be delivered....
@ewwhite no problemo
eWhite: Radioactive banana's ?
@cole (pssst... there's $$ in this)
@ewwhite did you email those peeps in Boston?
19:26
@cole I did, indeed.
Sweet - I was just scrolling through and I was like PRODUCE
I don't have a real answer for this...
1
Q: How can I deploy template-based VM from Linux?

Belmin FernandezWe are trying to provide our Linux engineers with a CLI to deploy VMWare vSphere VMs using templates. The vSphere CLI looks promising but the documentation doesn't mention templates. Does anyone have any suggestions on how to go about this?

Python SDK should work, no?
I'm not a believer
(but offer that as an answer)
I've used pysphere to do snapshot cleanup - it worked well
Done - probably get downboated but meh
Today I did..... nothing, I guess everything is rescheduled for tomorrow
@Nick that's how I feel
Hello, I got windows 3.11 in production‌​: /me hands out a stiff drink.
@DennisKaarsemaker "Cites disagreement over @wesley's ownership of a bike"
3
@cole I seriously did nothing today, well tried to do what I wanted(setup a new server), but right before I run the final config I managed to corrupt the system... I guess im starting again tomorrow
19:48
I did some stuff.
@Hennes I know people in that exact situation. They've been scrounging ebay for spare parts for a decade, knowing they can't replace the control system with a modern version
I have not had that problem in a decade. (1990-ish). I will be happy if I never have it again.
new TLDs .fail and .wtf go live today
@cole computer.fail nice idea for a site
Thinking about registering cole.fail
epic.fail
19:56
@cole im going for that domain! :p
I.will.not .fail ?
Seriously tho whou wants a domain .games .project, its way too long
@Nick bet it could be sold for $$
epic.fail taken dangit

« first day (1425 days earlier)      last day (3842 days later) »