what beats me a guy who runs sql server for ages got 0 clue about auditing? I mean for him to as sysadmin he too should be concerned about those logs as not all logs are for sec consumption, its different for different people.
yeah it doesn't happen now in an enviroment where i work as soc analyst analyzing around 200+ eps and on top i have to learn and teach the sysadmin about auditing as well.
it sucks:(
but thank you guys for your support.
at least i can talk about it, and know the other person would understand what i mean
Perhaps the most common reason I've seen proper separation of access in administrative circles (network, system, DBA, etc) is to limit each admin's potential exposure should something "happen". It's the same reason I don't want to know users' passwords, ever. If something happens to their account, it wasn't me if I don't know their password...
@ChrisS separation of duties , least privilege and job rotation they all work together as bundle with the intention of minimizing threats related to organized deliberate attacks on information systems
Hm. So I implemented the complex password policies (using FGPP) last week. I expected at least half a dozen phone calls today from people forgetting their new "complex" passwords, but nothing. Either people really remember them or the policy isn't applying correctly...
There is tooling that takes a stab at it, and is getting better (from the *nix world – Puppet, CFEngine, and Chef and from the Windows world – System Center Configuration Manager, Group Policy, among other third party application deployment platforms). These tools are all well and good, but they fall down when reaching across the OS divide. Puppet, Chef, and CFEngine (there are others as well, but these are some of the more popular) all have some cross platform support, but it feels unnatural (especially in module or recipe development). …
@Hennes I'm lucky enough to be in a industry that mandates basic computer skills, if not intermediate. So I get to mock people mercilessly who can't figure out the Change Password screen.
I have had two people ask when they can reuse passwords. It's set to 10 years. =]
The most 'fun' passwords we had where for things like SAP. A few of the rules were: * Change password every 6 weeks * Password changes limited to one per day (so no easy rotating back to the ealier password * No letter in the same place as the previous password
The last is an issue
How the F... do they know which letter where in a location ?
That means they needed to store the password either as plain text or decryptable
It is just for testing... I am not system administrator then I cannot clone machines etc. I will create a snapshot. If I get some problems I will post them hire. — kmxillo1 min ago
@ChrisS Yep. Even when I worked with DoD we had to change every 150 days. For the sys admins we had to make it a password that we could regenerate consistently
@Hennes I just posted the other night here, my brokerage doesn't allow anything but letters and numbers. At least they allow 32 characters. But that worries me more as I'm pretty sure they're storing plaintext in a char(32) field.
I can see the value in limiting the password length to something reasonable. Say 64 to 128 characters. It helps to cut down on weak hash collision possibilities. But 32 is too short, and almost certainly for the wrong reasons.
`Use no single snapshot for more than 24-72 hours. Snapshots should not be maintained over long periods of time for application or Virtual Machine version control purposes.`
I've taken it as true, but never realised VMware themselves actually stated such short terms
Though I imagine the activity on the VM makes the most difference - if you're doing something that gets hit with writes then snapshots are going to kick you in the arse very quickly
I am sending small amounts of data (up to 100 bytes) every 10 minutes from devices to TCP server. In my case overhead seems to be huge (we pay for each byte). I found that I have at least 7-10 packets (three-way handshake (3), request with ack(2), response with ack (2, optional) and tear down(3))...
The old ScreenOS that they acquired from Netscreen was nice enough as well, but totally foreign to most folks that were used to IOS. JunOS is easier for a Cisco person to understand
Powershell question - I know I can pipe output of a get-* command to ` fl ` and get all the field name values, for all the objects. How can I just get a single list of all the field names themselves? Is there a reference or command to get that?
Doing a domain migration, and migrating from Exch 2007 to 2013. ADMT brings in the DLs in AD, but without the addresses, so I manually put those in. (only 10 groups.)
220 ProFTPD 1.3.3 Server (NETGEAR-WNDR3700) User (x.x.x.x:(none)): dir 331 Password required for dir Password: 230 Anonymous access granted, restrictions apply
Students see scientists as Lazyweb: cases which could almost have been some of my mistaken conversations/"gumbabies" http://phenomena.nationalgeographic.com/2013/05/31/an-open-letter-to-science-students-and-science-teachers/
I am helping my colleague debug his problem. Basically, there are two 10M devices, and only one of which we have control over (the other being a "black box"). Analyzing the Ethernet hardware signals with a scope shows that, when the two devices are directly connected to one-another (without going...
I'd like to download a large OS install ISO directly to my datastore. I used to be able to SSH to the ESXi terminal and use wget to download large files directly to the datastore, but it seems that wget can't handle https links anymore (wget: not an http or ftp url).
I'm wondering how others ha...
How can I get cURL work on a ESXi 5.0 server?
I know that cURL existed on previous versions of ESXi, for some reason there is no cURL in the latest ESXi.
I'm trying to find a way to run a statically compiled curl binary but I'm lost.
I know that a binary compiled statically on CentOS 3.9 would...
@DennisKaarsemaker well yeah... just apply the preperation H, cover up the rashs and the sores, put on a wig, and no one will know!
2
shit I just traumatized myself... I googled "hemorrhoids" to make sure I had the spelling right, and then for some god forsaken reason, I clicked "images"
tldr: summer school starts june 24, i had last registration date, therefore i got a class at a shitty far away campus thats m-th in the afternoon. therefore my last day here is june 21.
Win8.1 will be close to what Win8 should have been... I've heard some people talking about MS discussing a "rapid development cycle" where Win8.2 would be released next year or something like that. I doubt they'd switch, but I also suspect the idea has been kicked around.
@NathanC Typically "rapid dev cycles" means monthly or quarterly... This would be more likely yearly, which is close to what their SP schedule used to be. Not all that different really.
@NathanC "Hey...why is the map showing I'm 300 miles off the coast of Florida in the ocean?" When possible...make a u-turn....recalculating...when possible pull into nearest port in Haiti and make a u-turn...recalculating...recalculating
@David Oh - facebook integration - gotcha - yeah, adding some applications to your base system definitely should qualify it for a major bump, heck that doesn't even justify a minor bump to me... you're just adding applications!
@David yes, but I think the point @ChrisS is making is that all their changes are "swapped out one app for another" -- now if it were a real OS where those changes might break scripts or something I could see a major bump for it, but not for a phone OS.
@David Perhaps there were more major structurial changes, that aren't apparent, but changing apps doesn't seem like it should bump a major version. Why doesn't Apple bump the iOS version every time Angry Birds gets updated? <-- Seem ridiculous?
I'd like to download a large OS install ISO directly to my datastore. I used to be able to SSH to the ESXi terminal and use wget to download large files directly to the datastore, but it seems that wget can't handle https links anymore (wget: not an http or ftp url).
I'm wondering how others ha...
How can I get cURL work on a ESXi 5.0 server?
I know that cURL existed on previous versions of ESXi, for some reason there is no cURL in the latest ESXi.
I'm trying to find a way to run a statically compiled curl binary but I'm lost.
I know that a binary compiled statically on CentOS 3.9 would...
