@edmicman I'm not sure if it's possible, but I'd say it depends on where you're doing the processing (if the exchange server is doing it and you have to be an Exchange admin to create the rule it would be OK here. If you're doing it through Outlook as an end user it's probably better on SU)
Like @ChrisS said I think it's not something you can do with stock Exchange/Outlook - you'd need to feed it through some external program
@voretaq7 good point....I'll have to point that out although the system in question is fairly locked down, that's why we're entertaining this idea. I think they'd limit it to only internal addresses as it is
@edmicman those trigger Exchange/Outlook add-ins if I remember correctly (so you'd need an add-in that does what you're talking about and you'd need to get your exchange admin to unlock the feature & install the add-in)
Been using Sage for a few months and only now we find out that one MOS has been patiently waiting 1-2 minutes for requests to complete (that should take ~1 second)
All,
Any advice in this matter is much appreciated. I am currently being investigated at work for accessing files from my computer that I was not supposed to access. As I was browsing for a document that I could not find, I thought it might be in a certain folder. I double-clicked a shortcut and...
@voretaq7 I recently found a user who was scanning images in to a folder in Citrix, using a print to TIFF printer to kick it out to the local desktop in TIFF format, then pulling it back in to Citrix and then copying it to a remote workstation (by using remote desktop inside of Citrix) and then importing it to a document imaging system. Not even gonna touch that process...
@DS not really much any of us can say except "If you shouldn't have been able to access it a technical restriction should have been in place to prevent such access (file permissions, share permissions, encryption, SOMETHING)"
ok, what do you think about this reply though? it scares me
The "innocent until proven guility" won't protect him from being fired for accesing information you shouldn't have accessed. After all he did access the information, the fact he wasn't aware it was restricted, is inmaterial to that fact.
There's no way we can prove the state of the environment that allowed you to innocently access restricted data (just like we can't prove you hacked anything to do it, absent audit logs showing such evidence)
@DS they're correct - if you're in an at-will employment state you can be fired at any time for any reason (or no reason)
you can sue for wrongful termination, but they could charge "unauthorized access" (a delightful felony) in retaliation -- honestly (assuming you really did do this without malice or intent) if the company doesn't believe you and take this as a wake-up call to fix their completely fucked up lack of security on sensitive information you really don't want to be working there anyway.
@DS Bottom line I agree with the guys on IT Security - YOU did nothing wrong. The problem is access to sensitive data was not properly controlled by (a) IT or (b) the user who owns the data. It's the equivalent of putting a list of everybody's bank account number on a bulletin board in the break room and saying "This is for the payroll department only, nobody else is allowed to look at it"
@DS Innocent Until Proven Guilty is a criminal thing. Labor laws would be civil, probably contract law, where generally the rule is "Preponderance of Guilt". It's not that hard to be found Not Guilty in a criminal trial and Guilty in a civil one.
@voretaq7 Depending on corporate policy. Don't forget the whole "unauthorized use of authorized access" thing.
@ScottPack it would be trivial to be found "not guilty" in this civil trial - it's obvious there's no malicious intent, and any expert witness worth their fee will say something to the effect of "There was no lock on the door, and nothing was posted about the area being off limits"
My argument would be it's reasonable to assume that if you have access to a tool you're allowed to use it, absent specific instructions not to (though if the employee handbook says "And stay out of the boss' porn folder!" that would be specific instructions :)
@ScottPack I think the new turn of phrase is "exceeding authorized access" (which is less precise, but also doesn't make you sound like an idiot when you talk)
I wonder what happened to my adopted wayward hacker kid from Tennessee? Damnfool kid probably kept violating his probation arrangements and wound up in prison.
@ScottPack a while back I got hooked up with the kid who leaked the Miley Cyrus shower pictures (among other stupid stunts) - couple of friends and I were trying to help keep him out of jail since he had the Futurama Hyperchicken as his appointed public defender
he had a serious problem with Rule Zero (if you're going to commit a crime, KEEP YOUR DAMNFOOL MOUTH SHUT ABOUT IT)
@DS whenever they get around to it - once it's on the internet you can't really get rid of it. (You can ask google to delete content but I forget the exact procedure for it)
@lynks depends on how aggressive the company's lawyers are, and if they go that route -- Personally I don't think there's anything untoward in there @DS but I'm only an armchair lawyer
@DS "deleted" also isn't "gone forever" on SE for the most part so if things settle out you may be able to have it restored (it should show up as a deleted question in your user history)
Meme: Sec.SE
Originator: Rory Alsop
Cultural Height: practically the official site name since July 2011
Background:
<offtopic> does anyone else think our shortened site name sounds kinda cool, or is it just me...
(hint say out loud SEC.SE)
we did write a script & DB backend that handled the config updating, but that was more convenience than difficulty (when you're changing the damn thing every day...)
@Cole read tutorials instead - rsyslog isn't bad but it's documentation is... well... Linux documentation.
I would like to display a specific warning when visiting a phpmyadmin on a staging server ( EG banner on top, different background, other mouse pointer, etc.).
What are my options?
Is it possible to plug a MB WE NAS in to a windows sbs 2003 server as an external hdd with raid?
if so can I just plug it in or do I need to do some extra setup
I guess I could actually answer that. Or point to some webpage where they describe how to do precisely that in Linux. (USB drive detected on mount, made part of a previously degraded mirror. start resync)
Apparently someone never considered 'just a drive' and triggering rsync
He seems to be but I haven't read all the way back - really he should have kept his mouth shut till after he'd spoken to a lawyer - even this is scraped by google
@Iain I hear that a lot, but what good is a lawyer gonna do the guy? Just gonna cost him money and probably won't be able to do anything at all, let alone anything worthwhile.
@Ted Just something to consider (and ask) before spending any money on one (because I've seen a lot of "get a lawyer" advice)... but what is a lawyer going to be able to actually do for you?
@tombull89 Not that I don't feel for the guy but either 1. His company was crazy before this happened.... and he's still there. 2. They were looking for an excuse to get rid of him and this is it.... in which case we're not getting all the details.
@ChrisS It can be both 1 and 2, as well. In any event, the best approach is to find a sane workplace, as no good comes of staying... even if you're not being made to take the fall for something, for whatever reason.
I agree with 'a good standard", but I will happily settle for a good standard from our ecomic would leaders and owners of large parts of the US of A (aka the chinese)
Sadly that sounded more fun when I wrote it. Real world is getting to darn close to that as it is
@voretaq7 Not just OSS; Microsoft and the other closed-source vendors are just as infuriating WRT the shit not working the same as it should, according to the docs, tutorials and so on.
Developers. <grumble> ...If only we could find away to develop software, without developers...
@Cole I do an 8-4:30 salaried thing, too. If I had to work on the weekend I'd definitely ask about an unofficial "adjusted work schedule", otherwise known as "I had to work on Sunday, so can I take Friday off?"
"The static route is placed in /etc/sysconfig/network-scripts/route-p4p1 according to the Red Hat documentation. 10.43.205.0/24 via 10.43.133.1 dev eth0"
i am doing a simple command script that is using pushd to access a script on another server. The script on the remote server has a drive reference in it for a program call and i can't get the script to run? any ideas?
I barely remember any C++ or Java.. I program in C enough that I'm fairly proficient, remembering the names of standard functions still gets me from time to time.
@PeterGrace we chose it temporarily meta.serverfault.com/questions/5147/… and we'll choose a better one when the UI is created to allow us to change it
Meme: Sec.SE
Originator: Rory Alsop
Cultural Height: practically the official site name since July 2011
Background:
<offtopic> does anyone else think our shortened site name sounds kinda cool, or is it just me...
(hint say out loud SEC.SE)
I would like to display a specific warning when visiting a phpmyadmin on a staging server ( EG banner on top, different background, other mouse pointer, etc.).
What are my options?
Is it possible to plug a MB WE NAS in to a windows sbs 2003 server as an external hdd with raid?
if so can I just plug it in or do I need to do some extra setup
i am doing a simple command script that is using pushd to access a script on another server. The script on the remote server has a drive reference in it for a program call and i can't get the script to run? any ideas?
Does anyone know how to add a NAS that is attached via esata (using ISCSI) to an ESX5.1 Hypervisor ?
Thanks,
