Trouble Maker Chat Broom

How to fix or address plus my comments in the answered post: politics.meta.stackexchange.com/questions/6948/…. Am I just being a baby, trying to cheat, have valid concerns or what is the perspective if there is any insight regarding the SE Politics matter?

theguardian.com/us-news/2023/jul/26/…

Oh.... good enough for me. Luv ya brother.... keep being cool and awesome!!

ah, gotcha!

Seems odd to just disappear with so much content out there (and correlated rep), I'm sure the contributions are still useful to those looking for such topics. I'd be interested in seeing one of the answers and what it looks like now. I assume a greyed out account, etc.

Fair enough, curious if the content of the profile Q&A wise even exist any longer, or if that is gone too. I know Google changed Gmail policy and unused accounts get purged at that level if that has any relevance. @JourneymanGeek

What happened to John T profile? Anyone know.

@kindzmarauli ^

You're welcome, I guess my handle name changes in chat session eventually per some site global default thing I changed once to keep it the same handle!

This seems to spit out a whole lot of detail too (Get-CIMInstance -ClassName win32_process | Select-Object *).CimInstanceProperties @kindzmarauli

@kindzmarauli What about getting the PID of the process that is visible with get-process by it's name, and then plugging that pid as the number variable here: Get-WmiObject Win32_Process -Filter "ParentProcessId = 10872" so rather than 10872, make that be whatever the pid is of the alive and visible T-RAS.exe?

@kindzmarauli ^

What about playing with Get-CIMInstance -ClassName win32_process | Select-Object * and filtering it down with some Where-Object filters, does it give you anything rammap sees that Task Manager and Get-Process do not?

@kindzmarauli Does Get-Process | Where-Object { $_.HasExited } give you anything relevant output wise when you see those dead processes

The output is in bytes I believe though so format your output with math accordingly or use calculated value in select statement to format accordingly.

I'd have to look each of those up to confirm but based on intuitive name, if applicable perhaps that one or the resident bytes one

@kindzmarauli ^^

Maybe it is the free and zero list bytes?

Play with these two command but look over the listing on your systems with the first to plug into the second commands 1. (Get-Counter -ListSet memory).paths and example 2. (Get-Counter -Counter "\Memory\Pool Paged Bytes").CounterSamples.CookedValue... Play with that a bit, it may hold the main key you need to formulate your output.

Oh buried question different than context of the title also in a question format, I see.... Do all the multiple zero kb instances of R-TAS.exe show up in Task Manager when they show up in RAMMAP UI? Curious if Get-Process and Task Manager only show one instance (or none) whereas the rammap app shows multiple?

Yes but does the title of the question not imply you are looking for what is responsible though specifically which is focused on the question per the wording of the title of your question. The root cause is the app is not working with memory well or causing fragmentation of the memory on the operating system which you are running it on and I assume they have confirmed it is compatible with that OS. Also the hardware platform (or VM hypervisor) you are running it on and the vendor's compatibility may be applicable here too. Sounds like you're doing everything as I would too though, good luck!!

Where did R-TAS.exe come from? Is it a program you pay for with support, something developed in-house which you have developers and the source code, or is it something you allow users that access the server to download and run as they see fit? Sounds like you tracked it down to the app, but why it is doing this and what's causing it may depend on its code. Otherwise, pick a time and schedule a daily kill of the task during the best time the system is not in use to prevent it since not killing it over several days hoses the system for everyone all together.

For years, people have been informing moderators about various issues. However, moderators find their hands tied a lot, and they too still face the same scrutiny regardless of their status within this level (e.g. concrete evidence). In my opinion, the impact of advocating for movement or change is greater when reaching a broader audience, rather than confining the message to the limited scope of Stack Exchange community moderators.

It takes as much effort to find these as it does to find profanity within posts. I've seen racist content generated only by the SU flawed audit review system with their algorithms, reported it, and have everything saved with proof from long ago even though I'm a YT. They so worried about AI stuff, they still got their own flaws promoting racism and things like that to fix. IMO.... They need to give the mods access to fix the real problems of the system, that are threating to the community and world as a whole for that matter.

@Ramhound Here's a SU post where part of the effort code question part was gotten from ChatGPT superuser.com/questions/1808530/… .... It has been open for months on SU.... Another example of seeing these various mixes of content regardless of whether some "mod" has had time to manually do a search, etc. They so scared of AI, they won't use it to streamline rule enforcement is another perception. They use it for fighting spam, not allowed for X, or Y, or Z, and definitely not allowed in any A or Q, or just A?

Understanding the applicability of rules across various SE communities can be confusing. While I try to embrace emerging technologies, I also prioritize adherence to established rules. In the context of Q&A involving ChatGPT and similar AI, I recognize the potential perception of these advancements as a threat. IMO... Unsubstantiated accusations of ChatGPT usage can be seen as a threat, especially when wrongly targeted. Engaging in voting or flagging without concrete evidence is equivalent to making baseless accusations.

Its like they pick and choose what does and does not apply to rules. Here's a post when the answer posted was from the person that asked the question, waited 2 hours, then posted a self-answer referencing that they got the answer from ChatGPT: serverfault.com/questions/1150289/… This is on an SE community site too, it is explicitly stated that the answer is from ChatGPT, the post is still there. Uncertain example when the rules apply or not, what exceptions there may be, and just stating you got from AI is the workaround.

None of their detection methods work for detecting ChatGPT from the hundreds of human hours to their other undisclosed secret algorithms. This is an example of another flawed system IMO since there are rules that something is not allowed, you have trigger happy sheriff's that shoot first and ask questions later. If people copy and paste right from ChatGPT, then that's probably proof since it'll put a reference link in it. I suspect whatever they think is working, is only working to see the 1% of what is really out there by ID10T humans. They think AI is going take their purpose and rep IMO.

If you call Sophos support, ensure you understand your features, and ask them how to enable logging for DENY/blocked rules. Ask them too if there is anything common with any features blocking SOAP or XML requests via HTTP. Ask them where they'd suggest you start for troubleshooting to rule the FW out.

something then figure out how to allow.

@ArcanisGK507 Depending on your Sophos features, could be app control, web control, UTM features, proxies, filters, etc. Bypassing FW and testing, enabling verbose logs and creating them to inspect, and process of elimination to narrow down is the only way I would go about it. It might be FW so I probably would put focus there and try to find some logs showing a URL, an internal IP of the client machine, or the external/public IP of the URL showing it blocked

If you are using HTTP Proxy or filter rule in Sophos, see if there is a way to give it an exception list to skate through those unimpacted. I will do some more googling too.

Or if you have a laptop and can run it going through the office Internet through Sophos and also off the network getting the same results with error in office and works outside office, that too would indicate network and potentially Sophos

If you could get the client in the office onto Internet not going through Sophos at least even temporarily, that would be a good thing to test as well.

And Yes, that document is not very good or give any good examples that I saw but if you have it working 100% off the network, and all factors are the same otherwise (e.g. PHP versions, etc.) then I'd think that means the code is fine

If you are using the same PHP SOAP client 100% inside and outside the network, then it has to be somethign network related I'd think

If you have advanced UTM/IPS enabled on Sophos, see if there is something that needs opened for SOAP or perhaps XML there.

If you can enabled some form of SOAP advanced/debug logging, I would google and figure out how to do that and look over those logs.

@ArcanisGK507 Are you the Sophos firewall or network admin? Do you have firewall DENY rules set to log so you can look over the log. I would send some request and look over the logs. Try to get the public IP address of the URLs you are calling and search those

Do you have technical documentation such as API reference? Is it available on the Internet and do you have a link to share?

You're just making a web call to a URL essentially having the code build the URL to call with the token credential, etc. If the API answers in any fashion at a specific client host via any other connection method, then baby-step if through the SOAP and PHP with less code and build on to see where the issue starts pops up.

I may have misread your post reading it too quickly. Are you able to figure out how to just make a web call and start baby-stepping it through connection calls. Figure out what the minimum value will be for the URL and the values it needs to make a call. If it's working with non-SOAP call method such as web browser, PowerShell invoke-webrequest, etc. from the client then it's probably something with the code you need to adjust. I'd figure out if you can get the API to answer back in any fashion from your server, another Internet connection, etc. Wireshark traces never hurt though.

Are you able to see and access the new routers configurations, ensure that the DHCP is enabled and confirm the subnet configuration specifics. Ensure a machine you connect to it with Ethernet wire, is using a good known ethernet cable too and not a patch cable (maybe use the one from the machine that is working), and ensure that the machine is set to get an IP address via DHCP and does not have any static IPs defined, confirm it can get an IP address from the router's DHCP, do you see this and the settings. Set DNS to 8.8.8.8 or a public one or one your ISP provides, etc. Let me know results

wifi connections only or hard wired connections into the router. You have the correct ports connected where they need to connect

Setup the new wifi access point with the same name and the same password as the old wifi access point. Ensure that the DHCP is configured for the same subnet as well and then restart the computer and try again. Maybe you will get lucky here assuming it is just the wifi that is having connection issues and not the machines you hard wire into the new router via an Ethernet cable.

Why not just go with Each boost adds +1 to magic. Since it's a game and not a proper book grading technicalities and you just need it to be intuitive for a general audience, that should fit the bill. Shortening the wording will make it more concise too. The use of +1 seems like a logic choice that'd be appropriate for the environment it'll reside and the audience's intuitive understanding.

I say politics.stackexchange.com/users/18373/fizz for presidential moderation consideration. @Fizz sizzle!!

@Clamarc You are very welcome! Don't forget that nothing says "Thank you" more than Accepting an Answer and giving it an upvote as well if you found the answer helpful in solving your question you asked. Feel free to turn that gray check mark green and upvote it when you get a chance. You are very welcome, glad to help!

@Clamarc Just got to it, please refresh PowerShell (Option 1) again when you get a chance and see how it goes. It looks like if the after hyphen parsed song name is less than 36 characters that the command spits an error. I wrapped it in some conditional logic to only set the $musicNameRight if that length is greater than 36. I also put some additional resources for some of the new logic, etc. I added.