Root Access

tereško

12:00 AM

sounds shady

Ben N

Of course that requires attending an institution that has DreamSpark

tereško

I might as well start using my Arch boot as the primary OS and leave Windows purely for gaming

Bob

@BenN s/DreamSpark/Imagine/ now... MS loves making names hard to search for

Ben N

Huh. I guess it's been a while since I used it ;)

Bob

yea someone on this chat told me

can't remember who

Michael Frank

12:02 AM

> This server could not prove that it is www.dreamspark.com; its security certificate expired 4 days ago.

Bob

@MichaelFrank why are you going there

@MichaelFrank imagine.microsoft.com/en-us/catalog

Michael Frank

It was a link from a Microsoft article about the University of Auckland being included in Dreamspark

I didn't just type the address in....

Bob

huh, TIL about RemoteFX

so. RDP does more or less what X forwarding does (but betterer)

and definitely much smarter than VNC. which I already knew.

Burgi

nn

Avery

rdp is great

bwDraco

12:32 AM

yesterday, by bwDraco

The alarm is set for 5:45 am tomorrow morning.

Realized that this wasn't viable.

At the start of the day, things seemed okay, but wound up with a dizzy spell by about 10 am and got very cranky as I tried to do housework.

Bob

@bwDraco You never did give me that coffee suggestion :P

bwDraco

No matter what the benefits of waking up early are, even if most highly-successful people wake up early, my body just isn't going to accept this right now.

I'm going to do 7:30 am tomorrow (with alarms set as early as 7:15 am).

Bob

1

Q: The Presently Slow Refresh Rate of 4K Displays

I know there is not yet a 4K monitor offered for consumers that is 144 Hz, but are there any 4K monitors out there that offer a separate mode that runs at a higher refresh rate with a lower resolution, because supposedly this one does: PRISM Korea M280PU Pro It supposedly offers an option to ru...

^ could do with a good answer (@JourneymanGeek?)

bwDraco

Edited title.

Michael Frank

Oh goody! Another "Wannacry" is out there, but this time it uses 7 NSA tools!

bwDraco

12:39 AM

@MichaelFrank The best defense is not opening suspicious attachments in the first place.

Also, make sure your systems are up to date. Disabling SMBv1 also greatly reduces your attack surface.

Bob

> There i sent you message last week? Please I'm waiting for your reply so I can start the process of presenting you as the appointed beneficiary to enable our bank transfer to your account the Thirteen million seven hundred and twenty three thousand dollars. I Am Watling your Reply for more details. Regards, Collins

Sorry, Collins, you're going to have to Watl a bit longer.

Michael Frank

Somewhere out there is a company that has actually figured out how to enlarge penises, and it's helpless to reach potential customers.

And Collins is just sitting there like:

Bob

lol

oh wow

it got sent to git@vulpin.com, which probably came from bob+git@vulpin.com I used on GitHub.

scraper fail?

I wonder how often people with <commonsubaddress>@gmail.com get spam not really intended for them...

Michael Frank

You actually check your catchall email?

Bob

@MichaelFrank I have it redirected to the primary mailbox.

Avery

12:47 AM

same ^

Bob

Mostly because Office365 doesn't support subaddressing properly yet :(

bwDraco

@Bob I also have a similar redirect at fierydragonlord.com (through Namecheap), but I've gotten very few such emails.

Avery

I get more spam on my hotmail than on my catchall on my domain.

Bob

office365.uservoice.com/forums/264636-general/suggestions/…

^ votes pls :P

office365.uservoice.com/forums/264636-general/suggestions/…

^ there too

there used to be one office365.uservoice.com/forums/273494-outlook-and-calendar/…

:\

Journeyman Geek

1:28 AM

@Bob done

lol

I need to set up email on my server ._.

Bob

@JourneymanGeek lol. I'd half-written one but then cbf'd

> There are many factors that go into the maximum refresh rate, and any one of them can be the limiting factor.

* The physical panel refresh rate
* Input processing on the monitor
* Connection bandwidth
* Output hardware
* Rendering hardware
* Software support

Gypsy Spellweaver

@Bob @JourneymanGeek do any of the standard open source linux-based email servers support dynamic (+subs) email address routing?

Journeyman Geek

@GypsySpellweaver the setup I saw for postfix probably dosen't

@Bob this feels like its mostly hardware and interface

Bob

@GypsySpellweaver I think all of them do. At least all the major ones.

@JourneymanGeek Yea I was going to write a long answer going over all of them, but ... lazy. See my deleted comment :P

@JourneymanGeek Trivial: cweiske.de/tagebuch/postfix-plus-addressing.htm

@GypsySpellweaver 'cept I specifically went Office365 because I didn't want to deal with the complexities of email... IP blacklists, spam filters, reputation, etc., are all a massive pain.

Gypsy Spellweaver

@Bob I'm wanting to setup a web & mail server, eventually, on a dedi, eventually. Just casual research here and there for now.

Bob

1:42 AM

If O365 gets bad, I can pretty easily migrate my domain to a different provider.

@GypsySpellweaver My personal opinion is that email is too important and complex to DIY.

Just about my entire online presence depends on email in some way. Most accounts, logins, password recovery, etc..

Journeyman Geek

ah

Bob

I have a bunch of servers, but no real redundancy between them.

The chance of my server going down is so much higher than most hosted email services.

Gypsy Spellweaver

@Bob It'd be a personal domain, and more experimental than production. I've got plenty of spare emails to play with anyway.

Bob

It was a toss-up between O365 and Google Apps, but I ended up going O365 at the time. I can still switch at any time.

@GypsySpellweaver Yea, I did it with a personal domain - I'm trying to migrate most important things away from gmail.

Google can shut down Gmail at any time.

I own my domain. It'd take a non-trivial court case with good justification to take it away from me.

I don't think there's any reason that'd happen, let alone succeed - it's not a trademarked name anyway, and I'm not using it commercially.

@GypsySpellweaver But, yea, email servers are interesting to play with. But the few times I've played with them convinced me I really don't want to deal with them for anything serious :P

Gypsy Spellweaver

@Bob I own my domain as well, and it's based on my real name, so I can't see any court case costing me my domain.

Bob

1:47 AM

I've taken to using mailgun (etc..) for app outgoing email too.

Mostly because the last time I tried, the IP hosting my app was blacklisted.

@GypsySpellweaver Email reputation is a really finicky thing... maybe it all works fine, maybe a random email service will blacklist you, maybe you're on one of the major blacklists.

It's possible to get off them, but it's a pain.

And then it ends up in spam and you don't realise so the person you're emailing about something important never replies.

Gypsy Spellweaver

@Bob So I've read many a time. Sometimes as reason to not DIY, and others as reason to be very careful doing it right from the get go.

Bob

@GypsySpellweaver The biggest problem is there's just so much spam that major providers have to be pretty aggressive in dealing with it. Which unfortunately catches the smaller players in the crossfire.

But so many businesses depend on O365/GApps that if they're blocked it's a huge issue. So they're relatively safe.

Likewise for using public email (Gmail, Outlook.com, etc.), but they don't usually allow custom domains on the free service.

@GypsySpellweaver Oh, here's a fun read: reddit.com/r/talesfromtechsupport/comments/39iued/… (like most of Bytewave's posts :D)

Gypsy Spellweaver

2:11 AM

@Bob I'm not now, and likely not anytime soon, setting up email for a business, or a client. Sometime in the future it might happen that I need to. If/when that occurs, what are the reasonable options for setting up a system that can handle a mid-sized business environment? GApps, O356, Outlook, or something else?

Bob

@GypsySpellweaver If you're alright paying per-user, then O365 and GApps are the common hosted solutions, yes. There's others too.

O365 especially if you want to get an actual Office subscription too :P

Alternatives are ISP email (varies in quality...), etc.

But GApps probably has the best spam-filter if only because they host the most email addresses (incl. GMail) with O365 coming second.

Many larger businesses use O365 for its Exchange integration.

Now, if you're hosting your own email server: if it's a Windows/AD network, Exchange is typical. If it's a *nix network, idk... Postfix, etc., I suppose.

It comes down to what you can afford.

But at something like $10/user/month for email and $20/user/month for email+Office (O365) or $10/user/month for email (GApps) -- these are very cheap for any business.

That's like 1-2 hours of wages.

If you can't afford that, one has to question your cash flow and how you can afford to pay the employee...

(assuming full-time employees though)

Gypsy Spellweaver

Setting it up on any kind of self-built system pretty much ties me to the client, since the server needs constant updates and monitoring. Unless they have their own network tech, in which case they wouldn't need me anyway.

I don't mind setting something up, but don't want to be tied to it forever.

Bob

@GypsySpellweaver It depends on what the client hired you for. If you're an external contractor, you'd have in the contract whether you provide ongoing support.

And at the end of the day it's the client's choice whether they want self-hosted or not.

If they want self-hosted, and you can't convince them otherwise, you can specify you only provide setup and no ongoing support. They can decide whether they take that or go with someone else.

But even with externally-hosted someone needs to manage it.

e.g. adding/removing employees

@GypsySpellweaver I think the major reasons for preferring self-hosted these days are a desire for control/privacy, or simply having a legacy system they don't want to change.

Or a very big company that has a large server farm already set up. Though even those are increasingly migrating to hosted solutions now.

You can find lots of discussions (by people who actually do this as a job, which doesn't include me :P), e.g.: community.spiceworks.com/topic/…

The cost analysis is interesting.

If you go with a bare-bones server, on-premises can be cheaper long-term. Much cheaper.

But once you add the complexities of proper redundancies, backups, etc.... ow.

Maybe it still works out cheaper? But you need to factor in employee time managing things, even if it's just taking backups every day.

Gypsy Spellweaver

At some point, once I can get some other irons out of the fire, I'm looking to do some contract work again. I'm mostly a programmer/developer, but I've learned that the client always wants a few extras included in the work. And with the Web being King now, it's sure to include something for that.

Bob

And of course lots of businesses find, say, $200/month (20 users, small/med) much more manageable than even a one-time $10000 cost. Even if over 5 years it costs 10x more. (numbers totally made up and not consistent)

Gypsy Spellweaver

2:25 AM

@Bob They almost always look at the now price, not the real price. Something their bankers love and their stock holders hate.

Bob

@GypsySpellweaver It kinda makes sense for cash flow though.

You can usually pretty easily pull out a couple hundred a month even if it costs more long-term.

Gypsy Spellweaver

I suppose the accountants like it since it gives them something to chuckle about too.

Bob

It's much harder to find a spare $10k kicking around.

And then you're betting against the hardware not failing.

What if it dies in two years?

And you also don't get constant upgrades to the latest-and-greatest.

Sure, you buy Server 2016/Exchange now. What about 2020? Stay, or upgrade?

How much does the backup storage cost? Maybe that's another ~$50/month worth.

The other problem with on-prem is most small businesses don't have great office connectivity or even a proper place to put a server.

I've seen servers in file closets. Not great airflow. Noisy, too, if you have to leave the door open.

There's photos of servers in kitchens (?!) and bathrooms (!!)

And often connected via DSL. Not the most reliable thing. Which works both ways, though... is it better if your email server is unreachable from the internet, or if you can't reach the email server hosted remotely?

Gypsy Spellweaver

I saw a company, leased what used to be a bank. Put their server rack in the old vault.

Bob

@GypsySpellweaver There's also interesting things like storage.

I think the base level of O365 gives you 50 GB for email.

Which you'll probably never need, granted.

Ha. I way overestimated pricing.

$5/user/month for basic email.

$15/user/month gives you the full Office suite in addition to email.

Gypsy Spellweaver

2:32 AM

I've been saving most of my Gmail in an account since I got it and haven't even touched my storage space. Even use it for some info backup myself.

Bob

There's really no one-size-fits-all here. I'm on the side of hosted most of the time though.

Mostly cause I've tried the small business server thing. It usually ends up a mess.

Michael Frank

Time to get my Powershell on!

The Leadership Team want a report on who has access to what files.

Bob

@MichaelFrank Ow. OW.

Michael Frank

@Bob Yup

Bob

@GypsySpellweaver Oh. Blacklisting also works the other way. There's the chance that O365/GApps gets blacklisted where your self-hosted one is not :P

Gypsy Spellweaver

2:37 AM

So far I've used 0.79 G in my 13-yr-old gmail account.

Bob

'cause obviously you're not the only one using that IP address.

@GypsySpellweaver Really depends what you're sending/receiving, no?

Also, 13 years already? O_O

Hm. I've used 2.6 GB on mine.

Gypsy Spellweaver

When I fist got it had a friend threaten to fill it up for me. Was only 2G back then. Told her "try". She sent/forwarded every joke/saying email she could. Saved em just because.

Used to get spam there, didn't save that. Get almost none now, however :D

Bob

Hm. Looks like I created this gmail account in 2010.

Michael Frank

My first GMail account got compromised and I could never satisfy the robot form that I was the owner.

Bob

I haven't signed in to my old one in years

Michael Frank

2:41 AM

It asked stupid questions like "What email address did you get your invite from?"

Gypsy Spellweaver

How'd you learn that? best I can do is find out when I enabled POP access.

Bob

@GypsySpellweaver sorted emails by oldest :P

Michael Frank

> Welcome to Gmail!

Bob

@MichaelFrank Oh god.

I remember the name of the guy who sent me the invite.

But idk what the address was

Gypsy Spellweaver

Wish I'd saved the Welcome, but that's so automatic I delete them w/o thinking

Bob

2:42 AM

I think ti was... 2005? 2006?

Michael Frank

I remember the forum handle of the guy I got it from... But that's not much use.

Bob

@GypsySpellweaver odd. I don't have the welcome.

But I also don't have any emails pre-2010.

Gypsy Spellweaver

Nice to see others that remember the early days of Gmail

Bob

gah

can't remember the password on my original account

oh, I keepass'd it to a random one at some point

Michael Frank

32.07 GB (31%) of 102 GB used

Bob

2:43 AM

oh hey, I updated it to my current phone number at some point!

Michael Frank

That's my Gmail usage ;P

Bob

@MichaelFrank shared with gdrive

Michael Frank

@Bob Yea, I know.

Bob

so if you have drive... it includes the files in there, no?

my gmail limit is only 15 GB :(

oh look my old account

ah it was 2006

back when gchat was a thing :P

O_O my facebook emails were going there?!

Gypsy Spellweaver

Don't have any Drive, etc. connected to that account. It's strictly a personal standby communications with long-time associates.

Bob

2:45 AM

000webhost forum summaries?!

oh lordy.

@GypsySpellweaver you have Drive by default

even if you don't use it

I don't use it on mine :P

lol, the spam has tapered off

used to get like 12 spam messages a day on that account

it's down to one every week

first email: "Welcome to Club Penguin"

3

-_________________-

I wonder if my older Hotmail account still exists

> Google Page Creator

ah those were the days

> It's easy to switch to Gmail!

> Did you know that Gmail was voted #2 in PC World's Top 100 products of 2005, right after Firefox? Why wouldn't you want to switch? Well, because it can be a pain to switch to a new email address. We know.

huh. I haven't logged into the old hotmail account since outlook.com was introduced. since way before, actually.

hm. all the folders are empty.

and it looks like it was compromised at some point

interesting

Rahul2001

@MichaelFrank man. I'm just going to sit back and watch the drama

Bob

@Rahul2001 Anyone with an unpatched system now is just asking for it.

<== as he says this, he has 3 unpatched systems

(mostly because I'm too lazy to boot laptops/tablets I haven't used in a few months. I'll update them on next boot.)

Journeyman Geek

3:01 AM

._.

VGA wall plate at one of the classooms broke

bwDraco

Looking at the UEFI patch notes on my laptop...

(flashed a firmware update as part of driver updates earlier today)

> Patch need twice press for power button action under RS1 OS.

(RS1 = Redstone 1 = Windows 10 version 1607)

That fixed the issue with the system refusing to go to sleep when I hit the power button. Fantastic.

Also...

> Patch for DCI security issue.

bleepingcomputer.com/news/hardware/…

Michael Frank

3:18 AM

@JourneymanGeek Replace it with HDMI!

Bob

np.reddit.com/r/flying/comments/31hgva/…

Michael Frank

@Bob That's quite the rant.

William

@Bob you did club penguin or was that spam? I miss CP no I don't want to play it on a stupid phone.

Bob

3:35 AM

@William I did. Back in 2006.

William

wow we must be close in age then is when I had an account

Bob

@William Eh... idk?

I don't think there was an age limit either way.

William

I guess that is true

Michael Frank

3:55 AM

@Bob So I've spent the last hour writing cases for BUILTIN, NT AUTHORITY, DOMAIN, S-1-*, and domain users that don't exist anymore, but still has a permission on a folder. :|

Bob

@MichaelFrank :S

@MichaelFrank community.spiceworks.com/topic/…

Get all groups, expand all groups, wait a year for the script to finish?

Michael Frank

I dunno if I wanna click that tbh D:

Bob

Depending on how many folders/files and users.

@MichaelFrank ?

Michael Frank

I already wrote the script, I don't want to just be handed a tool that does the same thing :P

Gypsy Spellweaver

NIH ?

Michael Frank

4:00 AM

Oh, actually... I've used that one. It didn't do exactly what I wanted, but I can't remember why.

Michael Frank

4:10 AM

But now I have to figure out why it won't translate our admin account format to DisplayName (samaccountname)

allquixotic

4:31 AM

@Bob ES2 is amazing O_O

incredible hero design and backstories, incredible race and ship aesthetic, battle scenes are awesome, balance is perfect

Bob

@allquixotic but 4X tends to be a bit more complex than I like :P

I'll probably look at it sometime over the next week or two

allquixotic

the battle scenes remind me of Battlestar Galactica, where there's a lot of weight to weapon impacts, and the weapons used are almost the same... kinetic driver "pew pew" (very fast rate of fire) guns, slow-firing lasers that tear up anything unless it's shielded, and hugely powerful torpedoes with long range and lots of punch

Bob

though I'd like to finish that soase game before starting multiplayer ES2

allquixotic

except BSG doesn't have lasers and this game does

Michael Frank

I played Endless Legend a bit... I could never get into the resource management though.

Bob

4:33 AM

being resource-constrained is the most annoying thing

in any game

@allquixotic how would you compare it to stellaris? :P

so I know what to expect...

allquixotic

Stellaris doesn't have turns, right?

or does it

oh. Stellaris doesn't have turns, but ES2 does. well, that has a potential benefit that you can take your time while you're learning

the tech tree is simpler than stellaris -- fewer techs overall and easier to learn

ship design is fairly standard for the genre, but they've just implemented it really, really well

Bob

@allquixotic that's good

I get lost in overly-complex trees

allquixotic

rock paper scissors on the weapons/defenses:
Kinetic weapons do decent hull damage at all ranges, but enemy armor really slows down the DPS; on the other hand, kinetic weapons attempt to shoot down incoming torpedoes, and if you have enough of them you can make torpedoes worthless

Lasers do decent hull damage but have weird mechanics: one laser type only fires at short range, and the other type is low DPS but fires at all ranges; lasers are great if your enemy has weak or no shields, useless if they have tons of shields

Torpedoes do tremendous damage if they hit but kinetic drivers can shoot them down

Bob

so, standard sci-fi? :P

allquixotic

pretty much

except for some fantasy concepts and the concept of Dust, but that's not combat related

the economy is different depending on what faction you play, but most factions have to keep a positive Dust income or slowly rot away; there's also Approval, but there are plenty of ways to keep approval high

Journeyman Geek

5:54 AM

man. today has been crazy

satibel

my skype account got hacked. they sent messages *in norwegian* to all my contacts -_-
(reminder: I am french.)

Bob

6:45 AM

@JourneymanGeek hm?

Journeyman Geek

came in early, stuff broken, printer madness...

and I can't go back early

so work's essentially gotten a few hours of extra work outta ma

Bob

-_-

@JourneymanGeek time in lieu?

Journeyman Geek

naw, I don't think they do that

Nick

6:59 AM

:( Facebook suspended my Samurai Jack RP account.

@satibel Any other info. I know some norwegian hackers. (Well, they're in norway, not technically norwegian, I think they're americans)

@JourneymanGeek That sounds like my computer lab XD

Journeyman Geek

@Nick its a 'school' environment

Nick

@JourneymanGeek Keep doing what you do, dawg. remember people love you for the work that you do. You are appreciated for the hours you put in :)

Journeyman Geek

so probably almost identical

naw, no one cares ;p

Nick

@JourneymanGeek I care. Your students care. Be satisfied, you ungrateful mut.

XD no offence

satibel

@Nick they just sent the classic baidu link.

Journeyman Geek

7:14 AM

.... apparently my boss was wondering why I didn't work saturday

Nick

@JourneymanGeek Did you inform him it was a saturday? He must have lot track of the days.

Journeyman Geek

my contract dosen't say I need to. Apparently everyone on probation does. HR says she told me, but she didn't

Nick

@satibel Oh, I know that one! reddit.com/r/hacking/comments/5ab8s7/…

@JourneymanGeek Please stand your ground that HR didn't inform you about this work-culture thingy. If everyone's doing it, you should do it too. Just until your probation period is over.

Hey, where on the internet will I find "intelligent" people to skype with.

By intelligent people, I mean actual people who will talk to me and not the literal dicks on Omegle or Chatroullete.

Eelke

@Nick Right here might be some smart people :p

Nick

@Eelke Nah. most of these guys are allergic to video conferencing. I've asked many, many times.

Journeyman Geek

7:21 AM

@Nick if I do, they're basically exceeding my contractual hours

Nick

@JourneymanGeek Yes, you'll be working for free. Exactly like the interns at my new company.

Eelke

@Nick That might be because of the sticker over the webcam for security purpose, because you never know who's watching

Nick

@Eelke No, we are all aware of which government agency is watching me. And they are watching me. I've gotten a few confirmations. (not joking)

Turns out the government actually takes the e-mails I send them seriously.

Eelke

Never forget to say good morning to that guy in the NSA van

satibel

@Nick seems like it effects skype accounts and not microsoft accounts.

@Eelke nah, not NSA here we have 4 letters agencies. DGSE/DGSI.

Nick

7:26 AM

@Eelke No, no. they don't physically stalk me...not yet. I'm not that important but they do keep tabs on my online activity.

satibel

(hi anyways.)

Nick

@satibel weird.

Eelke

@satibel say JeeJfor the AIVD/MIVD

@Nick But do you know for sure they aren't following you, maybe you just haven't noticed

Nick

@Eelke I honestly don't care anymore.

Eelke

not trying to be paranoid, but they might be

Nick

7:28 AM

Let 'em. I'm an open book. Also, I love the attention.

* afk * : evacuation procedure #2

satibel

I am probably on several watchlists for my interests in chemicals, pentesting (lockpicking/hacking) and the deep web.

Nick

procedure completed. Hands sanitized. Time taken, negligable.

:) Hope they're reading.

@satibel Ooh, what kind of chemicals? I'm searching for nootropics.

satibel

what a fancy way of taking a company sponsored poop.

@Nick more like the saltpeter,sulfur,charcoal/ nitric acid,sulfuric acid,glycerin,cellulose kind of chemicals.

Nick

@satibel Sounds like an order for Walter White. What are you planning on cooking, doc?

Journeyman Geek

@Nick the hell woth that

Burgi

7:38 AM

morning

Journeyman Geek

actually, this is good.

Nick

Morning @Burgi

@JourneymanGeek how so?

Burgi

don't forget to register to vote before midnight!

Nick

@Burgi I will.

satibel

@Nick that's black powder and smokeless powder, if you substitute the cellulose for some type of earth in the second reciepe, you obtain dynamite.

Nick

7:39 AM

@satibel Ok, what are you going to do with dynamite?

Blow up a Nobel prize winner? (see the poetry in that?)

Journeyman Geek

@Nick if I play it right, it puts me in a situation where if they mess with me, it makes it look like they're doing it cause I wouldn

satibel

nah, mining.

Journeyman Geek

't work for free

Nick

@JourneymanGeek That's definitely the adult thing to do. So, do it. Play your cards right.

日日日日日日日日日日日日日日日日日日日日日日日日日日日日日日日日日日日日日日日日日日

satibel

@Nick Moon Moon Moon Moon Moon Moon Moon Moon Moon Moon Moon Moon Moon Moon Moon Moon Moon Moon Moon Moon Moon Moon Moon Moon Moon Moon Moon Moon Moon Moon Moon Moon Moon Moon Moon Moon Moon Moon Moon Moon Moon

Burgi

7:47 AM

i thought they were playing cards...

i was going to choose one!

Nick

@satibel Is that what it says? I think there's also an alternative translation.

@Burgi Me too.

@Burgi I choose Pokémon!

Also, note to all : Alt+130 = é

Remember that. Now, you can spell words like café and Pokémon

satibel

my bad, that's sun.