I just received a notification here... wait, two notifications that a message was flagged as offensive. I thought, why, what did I say? I couldn't even understand the context, until I found out the message apparently refers to a chat in Math Stack Exchange. I'm not even registered there, and I've never been there. This must be a bug
@Gregory, I'm not experienced enough with that stuff so you should expect an answer from somebody else, but I'm wondering who/what needs elevated privileges in your case. Are you talking about other users, or are they programs/deamons?
I don't like questions like "how's it going?". It's like asking "is this app secure?" You don't really know, and if you think about it the answer is probably "NO IT SUCKS"
@reed i have a user who's daily life is as a developer so i'd stick them in the dev group, but they also would need to dbo the database. If i just stick them in the dbo group then their dbo privileges would be always on, but if i build a dbo account we could track the usage for this account which would be tied to that user and should only have a hand full of logins per month
@Gregory A service account for dbo should be a good idea
I could ask co-workers (pentesters) that know windows architectures better than me, but since counsel is a service sold by my company, it would be akin to freely give you access to something my employer sells. I can freely give counsel when I speak for myself, but not from my company.
@MechMK1 fighting the corporate support guy asking me to start hiper-v manager on LINUX... I tell him I am on linux and don't have hiper-v... he asks to command my computer (corporate support, they have access), and open the menu and search for hiper-v... I tell him AGAIN there's no hiper-v here, it's linux, and he asks me if I can install hiper-v...
The Cyber Wire (podcast). Bleeping Computer is okay. Krebs on Security. Schneier on Security covers most things, but a little bit later and a little more focused on privacy and government overreach.
ZDNet and Ars Technica break some stories, but those sites aren't focused on security. Also tend to be more aimed at general public. Sophos Naked Security does focus on security, but the dumbing down is a little annoying.
It appears that the source of this massive data stems from a security breach at Houston-based web hosting company 'Netsential Inc,' where the webserver for National Fusion Center Association (NFCA) is hosted, security blogger Krebs reported.
My dad's classic answer to "How's it going?" was always "Haven't shot anyone yet but the day's still young!"
@Gregory Create a separate user with elevated privileges that they can switch to. That's how it works for us at work (although we use AWS). By default we have a low-privilege role, but we have the necessary permissions to switch to an admin role as needed.
@ThoriumBR I just had an experience just like that. Was on tech support for a product I've been using for a few months (because it was seriously broken) and the tech support engineer was like "X Y and Z", and I said (I quote), "I know you're going to think I'm crazy but everything you just said was completely wrong". We were talking about an inter-cluster feature we use in production and he was convinced that VPC peering was required to make it happen.
I told him we don't have VPC peering turned on and he didn't believe me. I finally had to connect to one cluster, install netcat, and prove that they weren't connected. Up until the moment netcat timed out he was convinced I just didn't know my cluster. It turns out the real issue was that he didn't know his product... it's bad when me (with just a few months of experience) has to correct the technical support engineer...
It's funny when it happens... devs hate when we point out they know less than us, the "user"...
one of the installations I did last year, the main dev of a product was fuming because he told me that I didn't knew how to install the software they sold to a dozen orgs, and when I replied that I used strace and his software was searching for some authorization file on the wrong hard-coded place, and he hang up on me... half an hour later we got an email with a new release... he never talked to me again.
The guy on the support call was so obnoxious. He kept insisting that he knew what the issue was, even though his solution only explained (at most) a tiny part of what we were experiencing.
To be fair my manager had just reamed them over email over slow and insufficient technical support and questioned their products quality... so he may have been on edge and looking for an answer that involved us doing something wrong.
PSA: If you need to attend meetings (like me) with a diverse set of English accents (American English, French English, Welsh English, Indian English and so on), it helps to listen to podcasts and youtube videos from all around the world...
your ear won't be depending that much on the accent, and you will be able to understand when an American, a French, a German and a Brazilian are on the same call...
