#general

1 messages · Page 706 of 1

jolly aspen
#

i could give 20 hours of fries related content if you're keen

stoic quarry
#

Time to record CTF podcasts with ASMR keyboard typing

grizzled wing
#

like the sage smudge ceremonies?

karmic hemlock
grizzled wing
rapid merlin
#

I used to have that a lot

stoic quarry
#

Would be kinda funny

karmic hemlock
#

Baked potato content though? 👀

jolly aspen
#

🥔

grizzled wing
rapid merlin
grizzled wing
jolly aspen
#

sage prejudice going down in the chat

rapid merlin
#

The first time I lit some white sage my mum was coughing

#

Be gone demon

karmic hemlock
#

o7 everyone, I'll see yall back where it's warm and sunny instead of this winter hellscape

rapid merlin
#

😆

stoic quarry
#

Cya in 6 months I guess

jolly aspen
rapid merlin
#

Ergh why’s it so late already

grizzled wing
grizzled wing
stoic quarry
grizzled wing
#

R0n1n , we need to make a fries CTF

#

🌞

jolly aspen
#

need to make a potato utility

stoic quarry
#

PotatOS

grizzled wing
#

haha

#

i purchased a new 🪥

stoic quarry
#

Nice

jolly aspen
#

the trick to having a clean toothbrush is to never use it

grizzled wing
#

🤢

#

guess you kiss lots of people

jolly aspen
#

only once

stoic quarry
#

Omg who was it 🫢

jolly aspen
grizzled wing
#

classy comment 🤵‍♂️

rapid merlin
jolly aspen
#

changing my name to BR0n1n

grizzled wing
#

please dont

eternal timber
grizzled wing
grizzled wing
#

🍟 in 🛍️

jolly aspen
#

this is why h4xors use linux

eternal timber
grizzled wing
eternal timber
#

Perhaps

sand trench
#

inventing new nordic countries????

wooden totem
#

Yayy 4 whole hours of sleep and I can't fall back

sand trench
#

also @boreal scarab

#

if people specify the color to this level of detail it is better then the american way

wooden totem
rapid merlin
sand trench
wooden totem
sand trench
#

that is how you get hallucinations and delusions

wooden totem
#

Imma need to borrow a standard amount over a large period

stoic quarry
#

Yeah not recommended

mellow gull
#

I arrive at home

full jungle
#

When's the next competition? 😀

stoic quarry
#

Cool

grizzled wing
grizzled wing
rapid merlin
grizzled wing
mellow gull
#

In 35 seconds

grizzled wing
#

i have coded a terminal horoscope program for fun

blazing granite
mellow gull
#

Guess that means I lost

grizzled wing
#

i won 🎉

#

🏅

mellow gull
grizzled wing
#

zonfetti

eternal timber
grizzled wing
#

why z confetti? because its on the z-axis

opaque flax
#

so what is the benefit of teams in THM?

rapid merlin
mellow gull
eternal timber
opaque flax
#

hopefully they flesh the feature out

crude stump
blazing granite
wooden totem
grizzled wing
eternal timber
crude stump
grizzled wing
#

"saturn is in retrograde"

blazing granite
crude stump
blazing granite
#

the other one is it worked in my computer 😂

mellow gull
#

Me when I - me when, me when you, when, when your stars, me when I you, when mercury

wooden totem
strong sentinel
#

whats the best vpn u guys recommend for kali linux?

crude stump
#

How much de deedicated wam for da server

crude stump
grizzled wing
#

man vpn if it were so simple

blazing granite
grizzled wing
#

Kali is a VPN, she destroys all packets you do not want, she destroys all malware instantly

crude stump
#

Unless it breaks free weeee

mellow gull
#

Kali has evaded the sandbox, I repeat, Kali has escaped containment

strong sentinel
#

i just realised that 😂

blazing granite
strong sentinel
#

forgive my naivety

mellow gull
#

Anyways

#

Serious answer

#

If you're using Kali through a VM that uses your native internet, then just use any well remarked VPN through your host machine

loud galleon
#

hi /verify

sharp citrusBOT
blazing granite
#

@loud galleon read the link above

mellow gull
#

Although I am obligated to mention that you shouldn't be using any of Kali's tools on websites that are accessible through the open internet without express permission, VPN or no VPN.

strong sentinel
grizzled wing
mellow gull
#

Uh huh?..

strong sentinel
#

they scam people to download some trojan apk which hijack android phone provide remote control functionality like msfvenom's meterpreter payloads

grizzled wing
strong sentinel
#

i am trying to install the apk in sandbox environment and see which ip and port they outbound to

rapid merlin
#

vpn companies have been getting a lot of hate lately. I've used airvpn for over 4yrs and found them great, suppose you just have to do your research

mellow gull
#

Playing a dangerous game there...

#

You do know a vpn won't obscure your IP once the program is on your device, right?

rapid merlin
stoic quarry
#

What are you doing by hiding your IP too?

mellow gull
#

Like, sure, I guess it'll occlude if they're tracking IPs that download the initial file

polar shale
strong sentinel
mellow gull
#

But everything after that you're not getting any help.

solemn parcel
#

Hello
I'm from Europe and I was thinking of going through a Russian proxy or vpn to hide from the laws in Europe is that a good idea?

half girder
rapid merlin
half girder
#

no empiric reason for, just a feeling its a stupid idea atm ^^

mellow gull
half girder
#

i should have taken vpn / proxy for the bingo chart -.-

mellow gull
#

Also entering the territory of stuff we can't talk about.

solemn parcel
#

Specifically me. I go to the site and use the discounts to get a new customer and I'm afraid they'll find me and track me down one day. I just can't find any proxy or vpn that would offer the other side of Slovakia. Because they will find it strange that I am connecting from Russia.

mellow gull
#

Don't recommend it, everyone here will tell you to just report the scammer

mellow gull
rapid merlin
mellow gull
#

Also yeah gimme the chart if it's done

half girder
rapid merlin
#

getting offensive without the green light from the platform is a bit iffy and I'd personally stay away, as @mellow gull says just report it

solemn parcel
strong sentinel
clear jackal
rapid merlin
mossy river
rapid merlin
wooden totem
half girder
crude stump
crude stump
mellow gull
strong sentinel
#

i am like wanna start a blue vs red situation with the black hat 🤣

crude stump
#

Best to not waste your time on scum

rapid merlin
crude stump
#

Oh really? I had no idea

rapid merlin
crude stump
#

Ah but the difference is mine is a water horse

drifting stirrup
#

On network fundamentals unit the intro to LAN course is required premium. is that room super duper important

stoic quarry
#

Water Lloyd's

rapid merlin
#

😆

crude stump
#

Smh

blazing granite
#

jesus horse

crude stump
#

Did it have an ace of spades ironed into its side too???

rapid merlin
boreal scarab
boreal scarab
sand trench
rapid merlin
rapid merlin
boreal scarab
#

hmm

sand trench
crude stump
rapid merlin
crude stump
#

Networking is like the key

boreal scarab
blazing granite
drifting stirrup
sand trench
rapid merlin
crude stump
drifting stirrup
blazing granite
drifting stirrup
crude stump
#

@mossy river yooo when was the soc simulator released? I had no idea

rapid merlin
oak river
#

So if Discord has a blank screen

#

Just delete cache

#

Was wondering how to fix this problem

rapid merlin
#

Are there any good courses on reverse engineering ?

boreal scarab
rapid merlin
boreal scarab
blazing granite
opaque flax
#

resident resident evil?

boreal scarab
#

IDFK what time it is across the damn pond

blazing granite
rapid merlin
#

Yeah but Scrubs has college tomorrow

#

Or uni or whatever

finite basalt
#

I just got my BTRFS drive to appear in my windows server vm yippee!

rapid merlin
#

I don’t know what I’m looking at soz

#

👁️👄👁️

blazing granite
finite basalt
#

The BTRFS file system in use on a drive and loaded successfully within windows which doesn't natively support it

opaque flax
#

just a casual amount of data

finite basalt
#

Only catch is that they don't appear valid within disk management but I don't need that functionality

finite basalt
#

That's what's available while in said raid 5

opaque flax
#

im gonna reccomend it to my next client

finite basalt
#

😭

#

it can be unstable so I did it the best way I could based on the advice out there

#

RAID 5 the contents, RAID 1 the metadata

#

9tb total storage 6.7tb usable roughly

karmic hemlock
#

Can't sleep

rapid merlin
#

I’m tired af actually gn

#

gn @rapid merlin

#

Cyas tomorrow

eternal timber
eternal timber
keen light
#

brtfs snapshots for the win

#

btrfs

#

gotta use BTRFS + LUKS + TPM2.0 for optimal laptop

blazing granite
rapid merlin
stoic quarry
#

Space

#

Big fan of that thing

grizzled wing
#

Astronauts hangout at the [ Spacebar ]

stoic quarry
#

Damn

#

Nice

#

Is THM chugging or is my laptop just slow

keen light
#

computers eat [Micro] chips

blazing granite
blazing granite
sand trench
#

welp timey whimey bleepo bloope sleep sloop to meep moop time

stoic quarry
#

Oh no!

jolly aspen
#

laaaaaaaaaag

stoic quarry
#

Painful stuff

#

I guess I won't be doing rooms today 😅

crystal mauve
#

does the vm have caido?

crude stump
tame bane
#

pop push!

#

(i can hardly understand registers)

muted rock
#

hi

rapid merlin
#

haven't touched assembly or C for a long time. Day to day it's just python, I have a few tcl scripts and bash

crude stump
stoic quarry
#

I'm sticking to Python and bash until I need to relearn C

#

Actually I need to relearn Java soon

rapid merlin
fervent cove
#

yo why do some labs say 'x days of access left'

#

are they removing those labs or does that just have to do with my subscription

narrow heart
#

As long as it's not Java Beans...

stoic quarry
#

Might be to do with your subscription, does it coincide with when your subscription expires?

fervent cove
#

my sub says renewing on jan 30th, no idea

#

guess ill just sit down and focus on getting em done o7

rapid merlin
fervent cove
stoic quarry
#

Yeah I think it's you subscription

fervent cove
#

ah word, interesting

#

cheers mate

stoic quarry
rapid merlin
polar shale
ionic wolf
knotty pendant
#

Do i need this long piece in pc

crude stump
blazing granite
#

google it, with don't help with homework, work stuff, etc

plain carbon
twin ridgeBOT
#

Gave +1 Rep to @crude stump (current: #64 - 132)

lone hornet
#

yo @crude stump how u doin

crude stump
#

Wby

lone hornet
#

pretty good myself changed jobs gotta raise lifes good

lone hornet
crude stump
#

That’s great

lone hornet
#

bruh have been off thm for almost a year now

boreal scarab
#

T-80 UD

grizzled wing
lone hornet
boreal scarab
lone hornet
grizzled wing
#

loving all of the GI Joe gifs

#

how are your special ops?

lone hornet
#

yah fr its awesome

lone hornet
grizzled wing
lone hornet
grizzled wing
#

airgrapped grapes

lone hornet
#

yes but even more than that

grizzled wing
#

super duper classified 1337 level

lone hornet
#

we work in the night to save the dawn

grizzled wing
#

🌶️

narrow heart
#

Tf did i miss yo what is this 5 minute scrollback

grizzled wing
#

Wing Commander and I have a history regarding GI Joe ops

knotty pendant
#

blud got caught

narrow heart
#

That feels more like documenting the what than the why

grizzled wing
#

the why, because it is fun

narrow heart
#

No.

grizzled wing
#

WALL OF TEXT much?

narrow heart
#

Wow he joined in November just to spam that now?

grizzled wing
#

reported

lone hornet
lone hornet
grizzled wing
#

wrong way to go about it

lone hornet
narrow heart
#

"Milan Jovanovik" is the only matching account for QiangWang's Skype ID in their profile, so seems triply fake

lone hornet
crude stump
#

@mossy river

narrow heart
grizzled wing
#

wall of text that had no connection

lone hornet
#

well u were right

grim sparrowBOT
#

Done!

grizzled wing
#

thanks Jabba

lone hornet
#

top notch sleuthing

#

ya thanks @mossy river

twin ridgeBOT
#

Gave +1 Rep to @mossy river (current: #6 - 1412)

woeful cypress
#

i'm green :o

sullen remnant
grizzled wing
#

hi Orion

#

congrats on being green 🎉

woeful cypress
#

bless, thanks!

lone hornet
grizzled wing
#

0xLegends club

woeful cypress
#

woot woot

grizzled wing
#

[ 15% discount coupon applicable everywhere]

fossil merlin
#

Mad about Google slyly introducing predictive text.

You are a computer, I am a human, you are a lesser entity, I do not need to be told what I'm saying.

How dare you tell me what to say in my very own holy tongue.

grizzled wing
weak nest
#

hey so can anyone correct me if I'm wrong on this:
I heard replay attacks against cars don't work on modern cars because the car rf receiver and the car keys have some cryptographic algorithm that generates a new unlock signal every unlock/lock so that if it gets recorded it can't be used again,
is the way this hack (here https://www.youtube.com/shorts/3a1T8v5eFC0) works by jamming the signal so that the attacker's device gets the unlock signal and makes sure they keys don't send it to the car so it doesn't expire?

chilly veldt
#

I shouldn't be awake at these hours

blazing granite
chilly veldt
blazing granite
lone hornet
#

every dammn time

grizzled wing
#

the seinfeld movie?

lone hornet
#

commonly used to troll

boreal scarab
#

@lone hornet I am bush. I am patted.

grizzled wing
lone hornet
grizzled wing
#

what if Bella drifts into work at 7am?

coarse moth
#

hi

#

sorry somebody knows what is the price of student plan

#

the mont

#

month*

finite basalt
#

goes hard

coarse moth
#

im listening the new bad bunny album

lone hornet
boreal scarab
chilly veldt
#

Gosh dammit, 7-eleven opens 1 minute after my train as driven off the station

storm storm
winged summit
#

i'm back in the matrix

#

lol

sinful moon
#

Fixed another issue for the SO with our new Proxmox install. The “real hardware” disc drive access is just data and not raw drive access. So I was very happy to find this solution at the bottom of this post which worked perfectly:

https://forum.proxmox.com/threads/how-to-do-a-scsi-passthrough.111505/

winged summit
#

gonna probably pickup an intel nuc

sinful moon
#

Can’t recommend it enough. I had a Proxmox… um laptop server before this, before we got some big iron with ESXi, but that fell through after VMUG Advantage changed their licensing terms. Back to Proxmox with no looking back

winged summit
#

nice

#

yeah. i just want something low power consumption, but lots of resources and portable. so i figured nuc

finite basalt
#

I just realised how late it is

#

🤦

winged summit
#

how late is it?

finite basalt
#

half four in the morning

winged summit
#

oof

finite basalt
#

A minor fuck up

winged summit
#

lmfao

finite basalt
#

I was jamming to S3RL and playing war thunder, may have lost track of time

winged summit
#

haha nice

#

i am currently exploring windows 11 because i just got an IT support / engineer role and need to brush up on windows since my daily driver is linux lol

#

in a VM right now

finite basalt
#

congratulations 😄

winged summit
#

thanks man

finite basalt
#

good luck too, enjoy

#

I'm currently looking at places for when I graduate

#

I've filled out one application so far because that application was the longest I've ever had 🤣
got to the end of it and literally said to my dad on the phone, "what the fuck was that"

winged summit
#

lol

finite basalt
#

Like you had to give all your qualifications one by one and state which organisation, which professional bodies they're members of etc.

#

even including when they were given that membership I believe, it was ridiculous

winged summit
#

damn dude, rip lol

dusty drum
#

How’s everyone doing?

finite basalt
#

but if I can get it, it'll be worth it

#

good thanks man, bout to head off shortly

#

just putting things away first

winged summit
#

yeah, doing good abraham, how are you?

dusty drum
#

I’m doing great. What do ya talk about on here?

finite basalt
#

bit of anything really, can be tech/non-tech related

#

just sort of wherever it goes unless there's a channel/thread for it in which case it goes in that channel normally

sinful moon
winged summit
twin ridgeBOT
#

Gave +1 Rep to @sinful moon (current: #34 - 262)

finite basalt
#

I actually have been playing a little with proxmox today

sinful moon
#

vs my big iron server, not getting another of those, but nice to just still be able to cluster less powerful machines anyways

finite basalt
#

I've got it set up on my old desktop because it's still more than capable
I've got a vm with windows server 2022 and am trying to sort out btrfs compatibility on it so that I can have it as a proper active directory share, it's currently being a bit patchy though

blazing granite
finite basalt
#

I install the driver and it works, I reboot, it does not.
I uninstall the driver and reinstall, it works, repeat 🤣

sinful moon
#

yeah Proxmox is just lovely, no complaints

finite basalt
#

I love proxmox because of it's containers etc.

sinful moon
#

One sec speaking of that, I have a site you’ll enjoy

finite basalt
#

I hated it because I was familiar with docker but I do quite like it now

#

is it perchance the proxmox script site?

sinful moon
#

yes lol

finite basalt
#

Yeah they're really handy

#

I really should've used it when setting up my mqtt server today

sinful moon
#

I do mostly prefer VMs vs the idea of LXC everything do to larger amount of sandboxing away from the core Linux server but I’ll have to think about it

finite basalt
#

I setup a container for it and forgot about the scripts

#

I mainly use it because it has the extra performance I want or is lightweight

winged summit
finite basalt
#

Like I'm running a minecraft server in an arch container and a discord bot in an alpine container

winged summit
#

i saw someone online use it to configure proxmox vms, like set them up

sinful moon
#

as some have said, it makes sense for base networking stuff such as DNS but nothing much larger

finite basalt
#

I've never heard of ludus before

winged summit
#

yeah, i'm not super familiar. like, i don't know who created it or the background, if trustworthy, etc. but it seems pretty powerful

sinful moon
#

But I saw they had a Unifi LXC on there, and if it can get my SO to stop complaining about his Unifi controller server I’ll be more than happy lol

chilly veldt
#

Eyyy Noir

finite basalt
#

I mean it runs a minecraft server very well, a very overspecced container haha

chilly veldt
#

Been a bit

sinful moon
#

Heya Bella

winged summit
#

my brain is struggling to remember what LXC == ?

sinful moon
#

I’ve been sick with covid

winged summit
#

oof

sinful moon
#

still am but slowly getting over it

chilly veldt
#

Oof, not good

sinful moon
#

yea it sucks

chilly veldt
#

Explains the not being awake when I'm awake

sinful moon
#

mhmm

chilly veldt
#

But now I wake up early today

sinful moon
#

or just silent and playing Steam Deck when you are awake lol

chilly veldt
#

That too

sinful moon
#

Did upgrade to a Steam Deck OLED so my LCD model could be passed down to my SO’s family member who has no PC while theyre all playing Minecraft Java lol

#

I was half thinking about upgrading for a while but that was a good enough reason

idle ridge
#

just got these 2

chilly veldt
#

Sweet

#

I am drawing a lot lately

cloud quiver
sinful moon
twin ridgeBOT
#

Gave +1 Rep to @sinful moon (current: #34 - 263)

idle ridge
twin ridgeBOT
#

Gave +1 Rep to @cloud quiver (current: #4 - 1913)

winged summit
#

man Elizabeth, i'm giving you mad credit today haha

sinful moon
#

lol I guess so, I’m suprised the timeout didn’t kick in

winged summit
#

well earned that is lol

#

thanks

#

LMFAO

#

@sinful moon thanks 🙂

sinful moon
#

But yeah Proxmox is real neat stuff

winged summit
#

oof, test failed lol

sinful moon
#

lol there you go

winged summit
#

for sure

chilly veldt
#

I have to draw flowers 😭

#

Gonna take such a long time

finite basalt
#

I removed my dhcp allocation by accident earlier, sorted it but they're the specs for the minecraft server container haha

#

for reference, it is a modded minecraft server not vanilla

sinful moon
#

I did straight up emulate my work servers with literally getting a PowerEdge and going going with ESXi, but Broadcomm made ESXi not an option for home users anymore either sadly

#

that does seem excessive RAM wise lol but lol, what do I know, Java is crazy

finite basalt
#

I've a poweredge downstairs actually but it's a bit loud, power hungry and not half as powerful as this machine

#

the modpack recommends at least 8gb minimum, 12gb recommended

sinful moon
#

That’s why I’m super happy with the tower, it’s designed to run very quiet for small/medium business deployments

finite basalt
#

Yeah, same here, I mean one of the fan bearings has gone slightly but it's still quiet

#

it's an nzxt hush case if you remember those

sinful moon
#

lol fair enough

finite basalt
#

with the sound dampening in the panels etc.

#

I actually swapped the machine into it because the case it was in was more for gaming so only fitted 2 drives and I wanted more

#

So now it's a sleeper-build server

sinful moon
#

lol wait you recased it? Oh nevermind this is “this machine” instead

#

looks a bit gaudy but can’t complain

finite basalt
#

it's ancient, that case is from 2012

sinful moon
#

lol even in 2012 I would have slapped your hand

finite basalt
#

it could even be from earlier

#

hang on

#

nevermind it'll have been around 2008 maybe

sinful moon
#

always been one for more minimalistic cases

finite basalt
#

but the case doesn't have an rgb front anymore and the power button leds actually have electrical tape over them as it runs in my room in the corner haha

chilly veldt
#

Like, this needs some flowers right?
At lest to fill some of the spaces

finite basalt
#

I think you should

#

they're the server specs and I've got a GT710 for regular graphics if required and a 1050ti for transcoding

#

It's essentially my old desktop with more storage now

sinful moon
#

lol one moment

finite basalt
chilly veldt
finite basalt
#

That could be nice, what sort of flowers?

finite basalt
# finite basalt

those wires also include wires for my audio, monitor, router, tv and switch hence why there's so many, I actually have 12 plug sockets at my desk currently

sinful moon
#

although ignore the storage space reported

#

it's actually got 64TB

chilly veldt
finite basalt
#

Very nice 😎 I want to get more storage at some point and maybe move to proper server-specced CPU(s) and RAM but as a student this was free more or less
I paid 80 quid for two 3tb drives off a friend and an emotional toll having transported the desktop by train 😭

finite basalt
upbeat seal
#

Morning to all guys 😀

chilly veldt
#

Time to freehand some

finite basalt
#

good morning 😄

sinful moon
#

Yeah lol I probably wouldn't recommend an SAS driven RAID setup like this on that sorta budget lol

chilly veldt
#

All stickers are freehand drawn, the text is generated

finite basalt
#

Yeah I'm currently using a less than ideal mix of drives

sinful moon
#

we also have a 48TB NAS on the side as the actual main storage 🙃

#

for media and etc at least

finite basalt
#

I've a seagate 2tb, a wd green 2tb and x2 WD Red 3TB in BTRFS (data raid 5, metadata and system raid 1)

#

Once I've graduated uni and am getting full time income again it may be a case of each month treating myself to a new 12tb drive 🤣

sinful moon
#

Nice yeah I just very dumbly have my server's raid broken up between RAID1 on two drives and RAID5 on the rest because I couldn't get a good solution for the OS back when I spun this server up.

finite basalt
#

that's fair, if it works though

sinful moon
#

but thank you hardware RAID controller for letting me do silly things like this

finite basalt
#

my dad has something similar I believe

#

I think it might be raid 6 though he's using

sinful moon
#

Yeah it's this guy we have

#

T430

finite basalt
#

think he's got most drives in raid 6 and a couple of smaller drives in raid 1/0 within that

#

see I like that but I know I won't like the price tag 🤣

#

is it relatively quiet?

sinful moon
#

With the first two 5.25" drives populated with custom firmware Blu-ray drives for ripping

#

it's super darn quiet actually, only ever hear it upon reboots

finite basalt
#

hmm fair enough

#

I'll probably just try and build my own but find a nice tower case that's better suited for it

sinful moon
#

but fair it lives in our work from home office with dozens of other computers and fans which are made to blow at humans which are much louder

high dragon
#

Guys my openvpn file isn't working, it's giving an HMAC authentication failed error, any idea what's happening?

sinful moon
#

Yeah your idea of NUCs or whatever are a better idea

finite basalt
#

I'm debating moving the server downstairs to behind the TV in the living room, it's not very loud so with the TV on you won't notice it but it means I can have true silence in my room

sinful moon
#

but I just wanted iDRAC (lights out management) and hands on the servers I worked on remotely at work badly

finite basalt
#

when my fans not running anyway

finite basalt
#

so i see no benefit to me using older, slower hardware without the drac

sinful moon
#

ah rip. Yeah iDRAC is just lovely. I jsut have the Proxmox installer ISO on my SD card which is mounted as far as the server is concered as a SCSI CD

finite basalt
#

although, ipKVMs are absolutely rising in popularity so if I wanted to I could DIY it

rapid merlin
#

Hello world

#

How do I get verified?

sharp citrusBOT
rapid merlin
#

ty !

finite basalt
#

🫡

#

Have you seen any of the RPi based IPKVMs?

sinful moon
#

Yeah I have, neat stuff, but still not everything an iDRAC can do

#

Okay maybe I didn't know they could do mass storage too lol

finite basalt
#

Yeah it's maybe not quite everything but it can do a lot more than they used to

sinful moon
#

Although yes admittedly not as cute as one of these

rapid merlin
#

Let's go ?

#

Yeah lets go

#

🙂

sinful moon
#

Good stuff, congrats and welcome!

finite basalt
#

oh for sure but as far as cost and flexibility goes it's incredible

#

the fact that any regular desktop can now have nearly equivilant to a drac and it's open sourced and accessible is amazing

sinful moon
#

Meanwhile speaking of hardware modules, I do need a physical TPM model for my PowerEdge at some point 🙃

finite basalt
#

ahh yes

#

I'm just using FTPM on mine or whatever the AMD version's called

#

I also ordered these recently, that's why I was setting up the mqtt broker I mentioned earlier

sinful moon
#

yeah most are just in software and are trivial but nah not this PowerEdge lol

finite basalt
#

the lightbulbs were not needed but the plugs are gonna be so useful

sinful moon
#

Ehh just be careful since some cheap smart bulbs are a pain in the butt

finite basalt
#

I want to be able to turn my amp on and off with a remote control (because I can turn the volume up and down with the remote control)

finite basalt
sinful moon
#

like not turning on the first time or needing several tries before they connect

finite basalt
#

ah yeah but worst comes to worst, I get a refund or cry about it 🤣

sinful moon
#

I’d probably go more name brand instead of going all in on the ones my SO did

finite basalt
#

well yeah but I wanted tasmota which you can't get on named brand really

sinful moon
#

also good to VLAN then and etc obvs

finite basalt
#

yeah of course

#

you heard of tasmota at all? it's actually really cool, allows you to home host it all

sinful moon
#

nope, I don’t trust IoT as far as I can throw them which… actually wait I guess that could be pretty far

finite basalt
#

essentially any smart plug/bulb etc. with an ESP32 can run tasmota and it's designed to allow you to configure it to control it as you want so you can do it through a web UI, serial or MQTT

hot cairn
finite basalt
#

it's open sourced as well so you can actually audit and build it yourself

hot cairn
#

But some PPSK stuff can fix that

sinful moon
#

we do have both a seperate VLAN and SSID for them

hot cairn
finite basalt
#

that's what's handy about tasmota as well, the MQTT broker is the only thing that needs to be accessible by the devices controlling or being controlled by it

hot cairn
#

i have it setup so different passwords on my main SSID give dif vlans

#

so things "think" its the same

finite basalt
#

so I can have an IOT access point which is locked down to the MQTT broker and then have the MQTT broker also accessible on the main network for it to receive inputs from a phone etc.

sinful moon
#

Fair enough, I’m just salty about not always being 100% in control of the home network anymore with my SO also being into tech and me moving in with him

#

so I have to make do with like “I’m the admin of the server while he futzes around with the network and IoT” lol

finite basalt
#

haha, that's fair, I like this as an option because it's not propietary or third party

hot cairn
#

my SO is non-techy which means i have more to manage 😂

sinful moon
#

I do think I would be a better network and IoT steward but oh well

finite basalt
#

I manage the network in our house at the moment, we're all on the same course at uni but I've set up multiple routers in mesh etc. so I just manage them out of convenience

sinful moon
#

but fair he keeps our Unifi mesh running and Synology going so meh. The Synology is up to 48 TB now

#

I’m just glad he did finally come to me when he was stuck with our new Proxmox server saying “these threads are telling me to install a bunch of stuff on the server” and I’m glad he didn’t go ahead

#

since I found so much more of an elegent solution

finite basalt
#

Yeah my thought behind the plugs was that I could do it myself with a relay etc. but then I'm doing mains wiring and that sounds like a bad idea as much as I could do it correctly with research and talking to my dad to confirm things with him first

#

Instead I thought I'll get a smart plug and hack it but it was weird trying to find ones which were compatible and easy to take apart so I opted to get ones that were pre-flashed

sinful moon
sinful moon
#

I do wish it was all up to me but yeah there’s upsides and downsides to having an SO who’s also into tech

hot cairn
#

instead of synology

#

😉

finite basalt
#

there's also the problem of trying to take networks down for planned maintainance when you live with someone else techy

sinful moon
#

ugh lol

finite basalt
#

because they don't have to understand computers to use them and suddenly it's "why's the internet out?", "how long for?", "did you have to do it now?" etc.

sinful moon
# hot cairn instead of synology

Realistically if more of this was up to me we’d be on Jellyfin instead of Plex, we’d be using FreeNAS instead of Synology, etc

finite basalt
#

makes me want to bash my head against a wall when I get complaints about wifi or I need to take it down briefly or restart the router

sinful moon
#

thankfully the ESXi and then Proxmox stuff and managing big iron server and especially anything Linux is my jam and not his at all so that’s all me

#

he still does every Linux VM with a full graphical enviroment instead of you know… a server but that’s cute, you’re trying

finite basalt
#

Thankfully, my server is for me and no-one else, other people may occasionally use the minecraft server etc. but it's only a few people and not all the time so I don't have to worry too much about taking it down temporarily

sinful moon
#

lol that’s also why I’m thankful for 256GB or RAM and more, we each have more than our own space

#

I also like laid down the law when we started using Proxmox saying what ID ranges where for what so it didn’t get messy

finite basalt
#

I fear the times when I visit my parents though as I remember times when I was on ethernet over powerline and someone disconnected the plug by accident and suddenly had no wifi upstairs (because I have a router in my room to reach the top floor) and ended up coming back from my parents early to find that there was no problem with the router but that someone had knocked my plug socket in the living room

#

Yeah no one gets to have access to my proxmox or routers 🤣

sinful moon
#

100 is for management and monitoring, 200 is media ripping, encoding and playback, 300 are utility servers, 400 are game servers, and 500 is testing lab for infosec and learning

finite basalt
#

See I kind of do that but only for the IP ranges

sinful moon
#

lol you just gotta for Proxmox with how inflexable the ID system is

finite basalt
#

new devices get assigned from 100 onwards on the subnet if they're not known and then there's different allocation ranges for things

#

I just use the groupings rather than caring about IDs for proxmox

sinful moon
#

we already have 200-205 accounted for

split compass
#

ID's are important if you want to use the automation API

finite basalt
#

I'm not running much on mine at the moment but I'll likely be setting up a home lab some time

sinful moon
#

Totally fair to both comments

finite basalt
sinful moon
#

But yeah without the nice folders and etc of vSphere I’m a bit more anal anyways about where things go

finite basalt
#

the home server at my parents is on esxi at the moment

sinful moon
#

Thankfully previous experience with Proxmox taught me to be a bit more conservative with ensuring these IDs were doled out right

finite basalt
split compass
#

Yeah it's a thing that exists and is there when you want to play with it 🙂

Hmm, I should pick up a JetKVM.

sinful moon
#

yeah meanwhile ESXi is just a mess that’s all alphabetical lol

split compass
#

I only use the API for power management integration with MaaS

sinful moon
#

Also I hope your parents aren’t on VMUG Advantage or else they’ll have the same rude suprise I had

#

can’t imagine they’re paying for an actual sub, but fair maybe they’re still on legacy perpetual

finite basalt
#

no it's legacy perpetual

#

It's an old-old version

jade wing
#

Good evening peoples of the internet

sinful moon
#

That helps but yeah sadly no future

finite basalt
#

I think it's like v8 or something

sinful moon
#

6.0ish era?

finite basalt
#

yeah

#

running on an fx8350

sinful moon
#

oh that’s darn near moden if 8.0

finite basalt
#

it'll be older then

#

I can't remember how new but it's not a subscription I know that

sinful moon
#

makes sense

chilly veldt
#

Soooo tireeeeed

sinful moon
#

yeah we have a ton of 6.5 and 6.7 that desperately need to be updated which now no longer can be at work

chilly veldt
#

Why did I have to wake up at 0430 😭

finite basalt
#

I was recommending proxmox to my dad actually; however, for what he's actually doing with the server, nethserver would be plenty

jade wing
finite basalt
#

he does occasionally run vms but because it's not lots continuously, I reckon he'd be fine using the built in functionality for that

sinful moon
#

Well if nothing else, the ESXi migration feature worked for me perfectly in Proxmox, you just add your ESXi server as a storage pool

chilly veldt
finite basalt
#

Oh that's cool

#

Didn't know that was a thing

chilly veldt
#

Cause I have to fix the lights before people get in

jolly parcel
#

for buying the comptia security+, what did you guys bought? the exam voucher only orrr?

sinful moon
#

Yeah it’s a newer feature but worked great

finite basalt
#

yeah, very handy

sinful moon
#

we ESXi migrated to a spare optiplex with Proxmox, installed Proxmox on PowerEdge and migrated back over after clustering the two

jade wing
# chilly veldt Had to be at the office at 0700

Not going to lie I was super tired from poor sleep and got off work at 1700, damn near instantly passed out while I was "resting my eyes" then woke up at 2200 freaking out because I had 1h left to shop before tomorrows snow storm hits. I just got back from that, it was... unpleasant. I'm thinking about just calling in tommorow and emailing out my reports tonight.

finite basalt
#

Very handy, I know my dad used to have plenty of poweredges 🤣 that's where I got mine, he got a series 2 and 3 from a business getting rid of them, then got another series 3 so he had a backup server he could spin up if the main one died

sinful moon
finite basalt
#

but unfortunately he got rid of all of them and I ended up taking the series 2 after visiting them

jade wing
finite basalt
#

I'm actually due to pick up a draytek router when I'm next there

#

so I'll be able to have proper vlanning setup as well

#

When I tried to setup vlanning/tagging on my current routers the network shat itself because it's not individual network adapters on the router but a switch and openwrt did not like that 🤣
after the third attempt I gave up out of fear I was pissing the housemates off having to reset and reconfigure the router

jade wing
#

Nowadays you can likely find the same classes, from the same instructors on udemy that are on cbt nuggets without the sub. But you will not have access to labs.

sinful moon
#

I just need to take my Sec+ already. I am certain I can pass without training, I’ve already done some studying in the past and it was all dead simple

chilly veldt
sinful moon
#

I mean I’ve been doing this professionally for four years now

finite basalt
#

I need to go over the PNPT content properly and buy the exam

#

I keep meaning to do it and I think it'd be a great first cert

chilly veldt
#

Tbh, I'll personally never take SEC+

finite basalt
#

I'm not too interested in the security+ but maybe the pentest+
I feel like if I tried to do security+ I'd zone out

#

Like I understand its importance but I think my brain would decide it was too dull and just go elsewhere

sinful moon
#

Yeah it feels below me but I at least want one cert under my belt to both give me cofidance and make me look better before I move on to bigger and better

chilly veldt
#

I mean, everyone else can, I just don't find it fitting for my situation and/or future work

finite basalt
#

I also need to do my foundation radio exam, I have no excuse with that cause I swear it's like a tenner and I can do it online

jade wing
# chilly veldt Tbh, I'll personally never take SEC+

This was the start of me taking certs, to get a specific job and pay increase at the time, they wanted the trifecta out of the support staff, I think this was like going on... well a long time ago to say the least

finite basalt
#

I also really should use my AWS CCP voucher that work gave me, I need to practice that first though cause I don't want to use it and fail

jade wing
#

I always tell people unless you are really new, and I mean it, skip the comptia certs if you already have experience in the industry in any fashion. They are expensive as hell, and though they give fantastic foundations, it is unlikely to help you if you are already established in tech.

sinful moon
#

So far I have 0 certs but 4 years of incredible sounding job experience doing it all

finite basalt
#

but the book I had for it was so dull, reading kernel source code while hungover was more interesting 😭

#

I started reading it backwards it was that bad

jade wing
#

Now with that being said, there are plenty of people I have met that are so technologically inept I 100% tell them to take that path first to ensure they get proper foundations

finite basalt
#

My problem with certs is the movement to subscription based models
I think it's scummy as fuck

sinful moon
#

It’s scary how many CS majors get into the field and when you meet them they don’t know the first thing lol

jade wing
#

I will change that to inept as to not be ableist unintentionally

finite basalt
#

it is safe to say they did not make it through the year

sinful moon
#

imho self taught peeps are always much more highly respected but I’m obviously bias

jade wing
finite basalt
#

It goes two ways, I'm mostly self-taught and will say that some people it works out great, they know their stuff and do it well
others, they know how to make it work

sinful moon
#

but peeps of your generation have largely been taught on tablets and more growing up which is just wild to me

#

we are shomehow backsliding as a society

finite basalt
sinful moon
#

I mean I’m in my 30s lol

jade wing
#

I'm about to be 40 lol

#

I'm 38 right now

finite basalt
#

I'm looking to go into cyber security but I'm actually thinking of starting in software dev and moving

jade wing
#

so I say about to be but you know

sinful moon
#

fair, but I was talking to James specifically

jade wing
#

its splitting hairs at this point

sinful moon
#

I can’t imagine someone of our generations struggling to turn on a computer at all

finite basalt
#

Oh me, I'm early 20s so just before they started using tablets

#

There was no excuse for people to be struggling, i will have been the youngest in the class as I'm an august baby

jade wing
#

Often time they interview with other people who don't know their ass from their elbow and land the job

finite basalt
#

yeah, lying in general infuriates me but lying on resumes etc. really angers me because there's stretching the truth without lying and then there's is outright lying

sinful moon
#

I saw that with a former “server admin” we hired

#

it was just painful

finite basalt
#

like if you say you write documents instead of letters it's open to interpretation but not lying, if you said you were writing to CEOS to negotiate deals when you wrote letters to the customer service team it's just outright lies

#

and that angers me purely on the basis that they've taken the job from someone else who knew their shit

#

not to mention the fact that much more training and handholding is then required

sinful moon
#

he had 0 motivation nor knowledge how to fix extremely common issues like, idk, just diagnosing low drive space on a server. I could understand if he needed help expanding the drive in ESXi but nah never went that far. He just asked if it was an issue and just kinda “left it”

jade wing
# finite basalt yeah, lying in general infuriates me but lying on resumes etc. really angers me ...

Oh dude, listen, I lied big time early in my career to land jobs. I had a fake it till you make it attitude, but I backed it up with skill and tenacity. I would apply for a job, research what they needed, learn it, then on the resume and interview make up scenarios that were really just me labbing them previously to back my experience up. Then I would stay up for hours on end once I landed the job learning and making sure I didn't dissapoint. I did this for many years learning various tech until I became a legit unicorn in the fields I would work because I knew so much. That to me is acceptable if you can pull it off. But takes a specific kind of person to do it and its only acceptable for entry level roles. You start bsing at high level roles, yea nah, no mercy.

finite basalt
#

Yeah I knew a lad who was lovely but coding wasn't his strongest skill, could do it but he wasn't particularly fast
I remember him actively refusing to read documentation at one point and I ended up saying to him, I'm not helping you till you read the documentation because you're obstructing me from my work.

stoic quarry
#

Sometimes it's just hard to understand

sinful moon
#

Yeah that’s a bit different from the guy who we experienced indeed, you more than put in the effort for sure

stoic quarry
#

Man pages are so bad to read sometimes

#

But it's gotten better

finite basalt
sinful moon
#

this guy just had an impressive af resume which never was reflected in job performance

chilly veldt
#

Welcome to reading manuals

stoic quarry
#

Mmhm

finite basalt
#

The worst I experienced was being asked to help and then as I approached they brought up chatGPT

stoic quarry
#

Yikes

#

I've seen that before

sinful moon
#

one second

chilly veldt
#

I've seen people at stores use chatgpt to help people asking for help

finite basalt
#

I turned round them and said, "while I might have limited professional experience, I have over a decade of personal experience with programming, you've asked me for help but expect chatGPT to give a better answer, don't ask me for help if you're gonna do that"

stoic quarry
#

Gonna be worrying in the next few years how common it is to use an LLM for basic searches, it'll be so over

stoic quarry
#

No one will know anything lol

jade wing
finite basalt
#

chatgpt is the bane of my existence, I absolutely hate it

chilly veldt
#

Same

sinful moon
#

bah let me just pull it from a .zshrc I have, that will be easier

jade wing
#

Often times in an interview I will just be like, it's ok to not know. Just say so. I will eben give you the answer and tell you why so you learn. I am not always looking for a rockstar.

stoic quarry
#

Don't trust a system that can't tell you how many r's are in strawberry with your codebase

finite basalt
#

I remember saying to that same lad, "what'd you do before chatgpt existed" and his answer was copy youtube videos and struggle

chilly veldt
#

It can give good generative ideas, cause that's what it is

finite basalt
#

not even google or documentation, youtube videos and struggle 😭

#

I'm like man, you're doing programming for your work, what do you mean struggle

sinful moon
# stoic quarry Man pages are so bad to read sometimes
# Colored man pages
export LESS_TERMCAP_mb=$'\E[01;34m'
export LESS_TERMCAP_md=$'\E[01;34m'
export LESS_TERMCAP_me=$'\E[0m'
export LESS_TERMCAP_se=$'\E[0m'
export LESS_TERMCAP_so=$'\E[01;44;32m'
export LESS_TERMCAP_ue=$'\E[0m'
export LESS_TERMCAP_us=$'\E[01;32m'
tight coral
#

The game

stoic quarry
#

Sweeet

finite basalt
sinful moon
#

put that in your ~/.zshrc or something and it will make everything blue and green in a pleasing way

stoic quarry
twin ridgeBOT
#

Gave +1 Rep to @sinful moon (current: #34 - 264)

finite basalt
#

To me lying is an attempt to take me for a fool and therefore is inherently disrespectful

jade wing
# jolly parcel is the exam face to face?

No, if you test at a testing center, it's you, and the test machine. You are on camera though and make sure you read the rules. If you take it online it will be "face to face" in the sense that you will be on camera and have to be direct in front of it and they are very strict. I don't recommend taking them online. Def go to a testing center.

sinful moon
finite basalt
#

I'm very much like my mum though in that I won't immediately call out the lie but my face will 🤣

sinful moon
#

makes them a bit more nicely readable

finite basalt
#

there's also the web versions for some of them ^

stoic quarry
#

Oh no, I use fish

#

Might take some changin

sinful moon
#

it should work in fish as well even tho that's gross

stoic quarry
#

Lmao why's that?

sinful moon
#

it's changing the strings for less

#

because fish is using a web server just for config

finite basalt
#

if we're going controversial I have one question

stoic quarry
#

Seriously?

sinful moon
#

yes

finite basalt
#

I shall sow the seeds of chaos with three words

jade wing
finite basalt
#

nano or vim?

sinful moon
#

if you didn't know your shell is running a web server

jolly parcel
twin ridgeBOT
#

Gave +1 Rep to @jade wing (current: #265 - 24)

stray tapir
#

whats everyone been up to?

sinful moon
finite basalt
#

🤣

stray tapir
sinful moon
#

but I'm still more than happy with vim on most systems that aren't my mains

finite basalt
#

Neovim as a concept is actually really cool, I'll never use vi-derivatives unless I have no choice because I was raised with nano but it's definitely powerful

#

you seen the lazy-vim stuff?

jade wing
finite basalt
#

I knew a lad who actually did a lot of his programming work in lazy-vim which iirc that's a series of macros and scripts on top of neovim

sinful moon
#

fair but honestly I don't think actually learning vim is all that difficult compared to everything else you have to learn about Linux

finite basalt
#

oh no, I understand how to use vim I just prefer the ease of nano

sinful moon
#

I actually don't do much fancy in vim or nvim, I just kinda stick to the basics

finite basalt
#

I don't know some of the more fancy controls for it but I can edit a document in vim etc. it's just that nano is a much friendlier UI to me

sinful moon
#

if I need something fancy I will be a heretic and use (VS) Code

jade wing
stray tapir
sinful moon
#

nano I just can't stand the keybinds for personally

jade wing
finite basalt
jade wing
finite basalt
#

VSCode is elite

sinful moon
#

Yeah the vim extention for VSCode is very popular although funnily enough I don't use it

finite basalt
#

not the most memory efficient but it's surpassed atom, sublime etc.

#

I also love the extensions on vscode icl

#

there's the shittify plugin which is the opposite of prettify

#

I don't use it in production but it does generate some beautiful comments

sinful moon
#

Yeah while you can force (n)vim into being an IDE... why would you when VSCode exists lol.

finite basalt
#

I love leaving the occasional funny comment within my code

rugged kayak
#

mornin everyone

jade wing
sinful moon
#

vim is for quick editing of scripts

#

imho

split compass
sinful moon
#

perfection for such, but not an enviroment to live in

finite basalt
#

and then there's the vscode brainrot plugin

#

Where it throws subway surfers clips on the side of the screen haha

jade wing
chilly veldt
#

gotta love blue collar hours at a white collar job

finite basalt
#

or the one where it's mr incredible in varying states of anguish depending on the number of errors in your code

split compass
#

But yeah, I just graduated from Notepad++ to LazyVIM this year as my main code editor.
I'm not much of an IDE person. 😄

stray tapir
chilly veldt
#

it's so quite at 0645 at the office

split compass
jade wing
finite basalt
#
sinful moon
# stray tapir wait is that actually a thing?

well then there's always this launguage: https://en.wikipedia.org/wiki/Brainfuck

Brainfuck is an esoteric programming language created in 1993 by Swiss student Urban Müller. Designed to be extremely minimalistic, the language consists of only eight simple commands, a data pointer, and an instruction pointer.
Brainfuck is an example of a so-called Turing tarpit: it can be used to write any program, but it is not practical to ...

chilly veldt
finite basalt
#

I absolutely love it haha

jade wing
chilly veldt
#

we where streaming our screens on the scene, so everyone could see the plugins

finite basalt
#

And you've got the vscode server you can setup

chilly veldt
#

the same did my teammate at defcons live pwn

finite basalt
#

so you can have a web-based version that multiple people can write to simultaneously

#

absolutely amazing

sinful moon
finite basalt
#

wait till you try ✨ teams on linux ✨

sinful moon
#

Powershell stuff was working fine though

finite basalt
#

that's a great experience

jade wing
#

Right?

sinful moon
#

you all keep getting me to move back to a proper computer though, alright back to my iPad with a keyboard as I wind down for the night lol

finite basalt
#

Man we have a game where if you leave your laptop unlocked and don't keep an eye on it someone can write doughnuts on it and you owe the office doughnuts
I don't keep teams open and it takes that damn long to open that I'm impossible to get without me catching you

#

It's security by impracticality 🤣 in the 14 months I was in the office full time I never got caught

finite basalt
jade wing
#

Got a windows PC for gaming (only for gaming), a full apple ecosystem, and then my "pwntop" with linux on it

#

best of all three worlds right there

sinful moon
#

Can’t complain, I was moving from my M4 iPad Pro to my M4 Mac Mini to pull my ~/.zshrc and etc

split compass
#

Hmm neat tio[.]run (Try It Online)
Malbolge: Hello World


`CB]V?Tx<uVtT`Rpo3NlF.Jh++FdbCBA@?]!~|4XzyTT43Qsqq(Lnmkj"Fhg${z@>```
finite basalt
#

imma head off for a nap as it's 6am 😭

sinful moon
#

yeah I just have my M4 Mac Mini as my *nix machine for infosec and dev purposes at work as one of my three screens in my work from home setup

finite basalt
#

take care all of you

sinful moon
#

See ya James, great chatting as always!

stray tapir
#

I've never used macos before

sinful moon
whole yew
jade wing
#

I just mean my daily drivers.

sinful moon
#

Totally fair and yeah I was droning on about my Proxmox cluster ealier lol, love it after finally getting it off ESXi

sinful moon
whole yew
#

additionally, with default packages in repos, no need to worry about external dependency or connecting your local vscode instance to the devbox with ssh

stoic quarry
#

I gotta get proxmox set up once I move into my new place

sinful moon
#

actually yeah VSCode’s remote fuctions have been known to be an issue reciently infosec wise indeed

stoic quarry
#

Just need more time lmao

whole yew
# sinful moon Like change approvals just for extensions?

approval for the software itself, then approval for extensions - i get that many orgs will just be like 'well ok if you say so' but i've also worked in places where change management was a nightmare for needing/wanting unapproved software

sinful moon
#

I am all about vim and use it most of the time, but if I’m given a big project (honestly usually personal game dev) yeah I’ll more typically use vscode

whole yew
#

don't forget the multiple instances of supply chain attacks and namesquatting on popular extensions within vscode as well

sinful moon
#

No I totally get that, I think we’re just in completely different orders of magnitude in size of org

whole yew
#

used to be, maybe

#

these days i work for a startup

#

no more IBM for me

chilly veldt
#

and now, new lights are ordered for the office as well

sinful moon
#

sure just still not like 6 techs total c:

chilly veldt
#

gotta love working in IT, but also doing office management

whole yew
#

my big problem is getting people to adhere to the policy and standards my group writes

sinful moon
#

Interesting to hear you’ve moved on though and best of luck! That does sound exciting

chilly veldt
#

but ello Juun, long time

whole yew
#

we are required by regulation to have a 24-7 SOC, so my team is 7 people

#

i've been in startup world for over a year now

#

hey bella

sinful moon
#

ah fair enough

chilly veldt
#

it's me and another person doing night shifts

whole yew
#

7 people is including the director.... if one of our security engineers calls out, we have a coverage gap for the day

sinful moon
#

meanwhile we comply with regulations with our SOC being outsourced and I’m the internal manager for such, it is wild

#

less than ideal but oh well

chilly veldt
#

same here

whole yew
#

technically our soc is outsourced. but they work so closely with us, they are basically employees

chilly veldt
#

we are 6 analysts

#

luckily night shift is just on-call and not eyes-on-screen

whole yew
#

myself, the other senior engineer (who i am teaching pentest to), 2 2nd shift, 2 3rd shift, and 1 weekend staff

sinful moon
#

we have one analyst and infosec everything and that’s… me! lol

whole yew
#

i've moved mostly into management, right now coordinating and writing DFIR guidelines and procedures, and managing a couple of external processes

chilly veldt
#

we have 4 fulltime tier 1 analysts, and 2 part timers (me and another) and I do both analyst and escalation at time.
plus engineering

jade wing
# whole yew my big problem is getting people to adhere to the policy and standards my group ...

Need to have leadership backing often times, within your limits also sometimes you can't give a choice and have to enforce it. Just depends on circumstance. When people keep violating policies you need to write up a detailed document stating the risks, the causes, the outcomes etc. Send it up the chain. If they tell you it's ok, then they have acknowledged the risk and accepted it. Make sure you clarify in a follow up email by saying: "Just to clarify are you acknowledging the risk and accepting it?". This will do one of two things:

  1. It will force them to reconsider their position as now their name will be attached to a paper trail. This can result in them backing you.

  2. They say, "yes" in which case, you have done your job.

Sadly in the professional world often times it breaks down to you can only do so much. Just make sure you CYA and it's all good.

whole yew
jade wing
#

If its really egregious and it present a clear and present danger level of risk, you might be forced to loop in their boss on the email chain as well and restate your case.

chilly veldt
#

I have to write DFIR guides soon, have a meeting with one of the IR/Red teaming people on friday, and I will write guides and lists of what tools they should use for what and when

whole yew
#

I'm experienced enough that everythign gets documented at least 3 times: email, email export attached to secure ticket location, and then put into audit-able file storage

#

if my artifact goes missing, it's a canary situation and it's time to lawyer up

sinful moon
#

Also while we are concerned about internal threats, yeah much of our focus are on threats to our significantly less savvy clients as an MSP

whole yew
#

so much of the internal threat is accidental and not intentional

sinful moon
#

That’s not to say I haven’t prevented major internal issues before

chilly veldt
#

we had a client yesterday who tried to torrent god of war 😭

whole yew
#

even from employees who really do know better

#

when i worked for the BPO, we had a call center tech who loved to install steam and riot games on every machine he touched

sinful moon
#

freaking ouch

chilly veldt
#

lmao

whole yew
#

and that's not going anywhere near the epidemic of pirated content that the agents would bring in on USBs and plug in

sinful moon
#

just like use a non-work machine? I mean that’s literally what I do? It’s not on the VPN or anything

whole yew
#

for some reason the GPO couldn't disable the USB ports, I never got the full reason why. Just a thing we had to accept risk on because the system owners refused to remediate

chilly veldt
#

I mean, sure, I have malware laying on my machines, but that's because I have analysed it, and it's laying in a locked folder and can't be ran

stoic quarry
whole yew
#

"well sure, you don't have to fix it

#

.... But if we get popped for this, you are 100% accepting the risk for it"

sinful moon
#

I did catch a co-worker visibly sharing emulation ROMs with another via one of our internal technologies before though and was like what the heck

chilly veldt
#

yay, 3 people already decided to work from home today, more cake to me HYPERS

whole yew
#

that's a panda cheese moment for sure

sinful moon
#

but considering that’s the worst I ever saw, I wasn’t going to report them for that

whole yew
#

i would have absolutely posed the question, hypothetically, to legal about the consequences to the company if that didn't get locked down, Elizabeth

sinful moon
#

doesn’t help that I moderated emulation communities before so I understand but please guys, do it more on the DL than that

#

hah what legal team?

whole yew
#

also remember that your role may actually require you to be an obligatory reporter for DMCA at the very least

sinful moon
#

my boss is the CEO

whole yew
#

think about where the liability is

#

if they get popped, is it going to be your CEO that accepts responsibility or is he going to say it's you, because you are the SME and had demonstrable knowledge about the situation

chilly veldt
#

the worst I have seen at work is... idk if it's allowed by the rules to say

sinful moon
#

for sure, but yeah it never went beyond that, I just found it majorly sus and yes could potentially be indicative of further ill-deeds

chilly veldt
#

let's just say... homemade videos, on the CEO's laptop

whole yew
#

as security, if you knew about it and were deposed for a lawsuit you might be personally liable for the assessed DMCA damages

sinful moon
#

but yeah in a company under 15 employees, I’d be rocking the boat and could potentially get someone fired

whole yew
#

that's a misuse of company property, bella..... too bad they'll never face the same consequences if anyone else did it

chilly veldt
whole yew
#

you can always issue a warning in the abstract. "So I know it's super tempting to do this, and I totally get why you would.... but lets say this happened on the network. I can see that, and I am personally liable for this kind of thing that is legally defined as IP theft. If, purely hypothetically, I were to see this again I would have to do something about it"

sinful moon
#

You are most very not wrong juun and I know I am sounding rather causal about it but I’d also have to admit I was peeking into what my coworkers were doing which is not actually normally a part of my pervue. I may wear the security hat, but I am not supposed to monitor my co-workers what soever

chilly veldt
#

and as soon as I opened file explorer the previews popped up in the "often opened" page that you get when you just click file explorer

#

I talked with coworkers if we should report it when I closed the ticket, but they only asked if it was CP or not, and if it wasn't, then we didn't want to deal with it

whole yew
sinful moon
#

I was just curious why one of them was connected to their other’s machine and just saw in the logs what files they were transferring, I didn’t watch, but was a coincidence of me being like what’s going on here for a sec lol

#

My boss has been pretty clear that he handles our internal security, sometimes to our detriment despite my pleading lol, so I am mostly hands off there besides bugging him about critical updates

whole yew
#

if he says it's not your problem, i would definitely accept that and stay away from bugging him about it unless you need something updated

#

if he's not open to you being involved in that side of it, it's really absolutely not a good place for experimentation

sinful moon
#

Yep that’s largely what I’ve done, although I did have to warn him three times before something very bad nearly happened.

whole yew
#

and honestly, i'm surprised you are still there if this is the same place. you've been there forever, how haven't you run out of new things to do there

jolly aspen
#

When is the lifetime special of this scandal debuting

sinful moon
#

I’ve been putting out feelers so we shall see

whole yew
#

good luck

#

if it's worth anything, my current job is 100% remote, main office is 4500 miles away

sinful moon
#

whew that beats my 800 miles by a good bit lol

whole yew
#

i go visit HQ maybe once a quarter. Should be less now that the office got destroyed by Milton

sinful moon
twin ridgeBOT
#

Gave +1 Rep to @whole yew (current: #11 - 796)

chilly veldt
#

oh yeah, don't know if you have heard juun, I have a salary meeting next week with my manager

sinful moon
#

lol I have never been to our office which is just wild

whole yew
#

oh sorry, it's only 4k miles round trip. just under 2k

#

good luck on that too, bella

chilly veldt
#

I went down with stress in December, had to take 2 weeks off, and then contacted my manager and his manager (CEO) and asked if we could have a meeting about salary, expectations, and responsibilities

#

cause I am still in my apprenticeship

whole yew
#

pretty sure they aren't allowed to dock you for medical related

#

which stress is medical related

chilly veldt
#

yeah, idk if you remember the whole apprenticeship situation

whole yew
#

i knew you had one

#

i know that you decided to walk out on apprenticing/internshiping with a coworker a couple of years ago