foo | OpenAI | Page 1

clever juniper Dec 19, 2022, 1:18 AM

#

Let me Google Salesforce lol...it's vaguely familiar

#

The Shadow Realms proposal mentioned it

#

Ayyyyy, no slowmode

little hinge Dec 19, 2022, 1:20 AM

#

Both are low-code platforms, basically allowing you to build business-line logic apps without having to code the entire thing - kind of like dynamic forms. Don't like it personally, not as a developer.

clever juniper Dec 19, 2022, 1:21 AM

#

little hinge Both are low-code platforms, basically allowing you to build business-line logic...

Sounds weird

#

"Dynamic Forms" reminds me of the form a certain college district has for K-12 dual enrollment

#

and I hate that too

little hinge Dec 19, 2022, 1:21 AM

#

lol

clever juniper Dec 19, 2022, 1:22 AM

#

Anyways, why do you want to commit exported XML?

#

Shouldn't that be treated like...a build artifact or a database?

little hinge Dec 19, 2022, 1:23 AM

#

It's funny though, because I was working on a dynamic forms app prior to the reorg at my current job, but it was custom built. Basically allowed powerusers to create new forms for data collection and there's a mobile app so like, let's say you have a house inspection company and they go through and inspect the house, they can have a custom-built form and be able to enter all the data as they walk through, and it uploads to the backend and is stored in the database.

#

In source control (i.e. Git) you definitely want to commit changes to the CRM so you have versioning control. Also in those scenarios, typically you're using a CI/CD pipeline that automates builds and deploys to the environment, so it's more iterative and controllable rather than randos just making changes directly in the platform.

clever juniper Dec 19, 2022, 1:26 AM

#

little hinge In source control (i.e. Git) you definitely want to commit changes to the CRM so...

Does CI/CD update the XML files?

little hinge Dec 19, 2022, 1:27 AM

#

Well I'm not sure exactly for Dynamics, but we use Jenkins to automate deploys to the platform and yea it's all the XML files and stuff. So whatever changes are in the solution that are stored in source control get deployed to the actual environment after code reviews.

clever juniper Dec 19, 2022, 1:27 AM

#

little hinge It's funny though, because I was working on a dynamic forms app prior to the reo...

As long as the UI looks good and the data is structured properly, I'm happy

clever juniper Dec 19, 2022, 1:27 AM

#

little hinge Well I'm not sure exactly for Dynamics, but we use Jenkins to automate deploys t...

in the solution
Is this C/C++/C#?

little hinge Dec 19, 2022, 1:28 AM

#

Yea it's just that in order to extend functionality, the base platform doesn't offer it but does offer plugins that let you run a variety of languages to do sort of middleware operations. We're using C# and Java mostly.

clever juniper Dec 19, 2022, 1:28 AM

#

C# and Java

little hinge Dec 19, 2022, 1:28 AM

#

The platform solution, basically all your Dynamics entities, forms, views, etc. are represented in XML.
Any plugins you might use can be in any language.

#

If the platform supports.

#

And yea I don't know why they're using both C# and Java.

clever juniper Dec 19, 2022, 1:29 AM

#

little hinge Yea it's just that in order to extend functionality, the base platform doesn't o...

but does offer plugins that let you run a variety of languages
Out of curiosity, is this...GraalVM?

#

Or are you using WebAssembly?

little hinge Dec 19, 2022, 1:30 AM

#

Not that I'm aware of. It's an out of the box thing with Dynamics. You just supply the code in the plugin and Dynamics will do the thing.
We're also using Liquid templates for transposing data into client-side views/portals. Think of it like a templating engine.

clever juniper Dec 19, 2022, 1:30 AM

#

Weird

#

It seems unclean

#

I think my school district might have used Dynamics...

#

It's a Microsoft thing, right?

#

Yeah

little hinge Dec 19, 2022, 1:31 AM

#

Yea I don't like it. It's too much abstraction. I'm used to working in entirely custom apps. And it's the reason I accepted an offer recently at another company (for a 42.8% increase of salary!).

clever juniper Dec 19, 2022, 1:31 AM

#

Amazing

little hinge Dec 19, 2022, 1:31 AM

#

Yea Dynamics is MS's version of basically... Salesforce

clever juniper Dec 19, 2022, 1:32 AM

#

Okay

clever juniper Dec 19, 2022, 1:32 AM

#

little hinge Yea Dynamics is MS's version of basically... Salesforce

Does the content presented to the end-user tend to look like crap?

little hinge Dec 19, 2022, 1:33 AM

#

Depends, you can use the default CSS and stuff but you do have the option to use stuff like Bootstrap or whatever custom stuff you decide to code in to the client side portals.

clever juniper Dec 19, 2022, 1:33 AM

#

Oh

#

I'm just wondering where the heck this UI came from

little hinge Dec 19, 2022, 1:34 AM

#

Could be anything. Maybe if you inspect with dev tools and look at how the elements are named, their classes, etc. you might get a hint.

clever juniper Dec 19, 2022, 1:37 AM

#

/bootstrap.min.css?1608294641000
/css/glyphicons-font-awesome-migrate.min.css
https:// content.powerapps.com/resource/powerappsportal/dist/preform.bundle-909d63d1c4.css
/theme.css?1641795017000
/customcss.css?1623048484000
/jquery-ui.css?1641795017000
/home/jquery.dataTables.css?1647500684000
/css/offlinenotification.css

#

A wide assortment of CSS files

little hinge Dec 19, 2022, 1:37 AM

#

Yea I see those exact libraries in our portal code

#

powerapps, as well, is MS Dynamics

clever juniper Dec 19, 2022, 1:38 AM

#

I definitely don't think that UI is made with Bootstrap

little hinge Dec 19, 2022, 1:38 AM

#

Might have a reference but not being used

clever juniper Dec 19, 2022, 1:38 AM

#

are you joking

little hinge Dec 19, 2022, 1:39 AM

#

App is definitely a Dynamics portal though, the "powerapps" gives it away.

clever juniper Dec 19, 2022, 1:39 AM

#

For context, last school year, all LAUSD students and probably teachers (2nd largest school district in the US by the way) had to use this web app to enter their school

#

Everyone signs in with their LAUSD Microsoft account and answers two questions

little hinge Dec 19, 2022, 1:40 AM

#

Yep, probably using Azure AD B2C

clever juniper Dec 19, 2022, 1:40 AM

#

And then, you get a QR code

#

and the staff scans the QR code

#

and then you can get in

#

Not very advanced

#

The QR code is just a UUID

little hinge Dec 19, 2022, 1:41 AM

#

Sounds like a custom user flow or policy.

clever juniper Dec 19, 2022, 1:41 AM

#

Overall, it's a very stupid system

little hinge Dec 19, 2022, 1:42 AM

#

I agree in a sense - the primary value of the platform is you can get business functionality without designing the entire system.

clever juniper Dec 19, 2022, 1:42 AM

#

clever juniper are you joking

Anyways, we don't need to do it this year, and apparently this is how they removed those options

clever juniper Dec 19, 2022, 1:43 AM

#

little hinge I agree in a sense - the primary value of the platform is you can get business f...

¯_(ツ)_/¯

#

It does what it's supposed to do

#

Is it great? No, hell no

#

I found where Bootstrap is used

#

Oh, the tables use it too

#

By the way, LAUSD suffered a ransomware attack earlier this year

little hinge Dec 19, 2022, 1:46 AM

#

Gotta say, whoever designed the UI was definitely not a UX expert. I mean, functionally it seems fine but whoever did it has no taste.

little hinge Dec 19, 2022, 1:47 AM

#

clever juniper By the way, LAUSD suffered a ransomware attack earlier this year

oof

clever juniper Dec 19, 2022, 1:47 AM

#

Even I have better taste lol

clever juniper Dec 19, 2022, 1:47 AM

#

little hinge oof

It was good and bad

#

The bad part is almost no one could log in to their LAUSD account

#

The good part is almost no one could log into the LMS, Schoology, using their LAUSD account

#

so almost no one could submit assignments

little hinge Dec 19, 2022, 1:48 AM

#

Weird. Not sure how ransomware would affect Dynamics or its login mechanisms.

clever juniper Dec 19, 2022, 1:49 AM

#

Don't ask me

#

LAUSD has some on-premises stuff I think

#

regular ol' organization login

little hinge Dec 19, 2022, 1:49 AM

#

Usually you see that via an email vector, running a malicious executable attachment and, the local user has file shares to critical systems where those files are then encrypted.

#

Yea that's definitely MS

#

B2C likely.

clever juniper Dec 19, 2022, 1:50 AM

#

clever juniper regular ol' organization login

they also used to have this Microsoft stuff

#

obviously with a different logo and all

little hinge Dec 19, 2022, 1:51 AM

#

Yea that's the org-side stuff, basically the identity provider. Custom page for the user to log in and authenticate to the directory (in this case probably Azure AD), then an SSO flow (whether OpenID, SAML, etc.) occurs and a token is sent to the application which authorizes them in.

clever juniper Dec 19, 2022, 1:53 AM

#

SAML

clever juniper Dec 19, 2022, 1:53 AM

#

little hinge Usually you see that via an email vector, running a malicious executable attachm...

I have no clue

#

I understood what you said

#

But as for how they got infected

#

¯_(ツ)_/¯

little hinge Dec 19, 2022, 1:54 AM

#

Yea, so that auth mechanism will send an AuthN response to the service provider (the app) for authorization. But the flow is a little different from the start depending on whether it's IDP-initiated or SP-initiated.

clever juniper Dec 19, 2022, 1:54 AM

#

The same credentials are also used for Google accounts by the way

clever juniper Dec 19, 2022, 1:54 AM

#

little hinge Yea, so that auth mechanism will send an AuthN response to the service provider ...

Now that I need to Google

little hinge Dec 19, 2022, 1:55 AM

#

If you search for SAML idp vs sp initiated you'll see a bunch of diagrams for it. I've had to implement SAML SSO for multiple apps / projects.

clever juniper Dec 19, 2022, 1:56 AM

#

little hinge If you search for SAML idp vs sp initiated you'll see a bunch of diagrams for it...

Why don't people use OAuth again?

#

Or, what, OpenID?

little hinge Dec 19, 2022, 1:58 AM

#

They do.

#

You can use whatever you want if the platform supports it.

clever juniper Dec 19, 2022, 2:00 AM

#

little hinge You can use whatever you want if the platform supports it.

Anyhow, how would a ransomware affect Google and Microsoft credentials (which are the same)

little hinge Dec 19, 2022, 2:01 AM

#

The only way I could see it is if it was on-prem. But that's not the case unless they're using a local Active Directory server versus Azure AD or some other cloud directory.

clever juniper Dec 19, 2022, 2:02 AM

#

little hinge The only way I could see it is if it was on-prem. But that's not the case unless...

They could very well be doing that

#

They even have their own AS number

little hinge Dec 19, 2022, 2:03 AM

#

Oh wow, as in routing?

clever juniper Dec 19, 2022, 2:03 AM

#

They have a block of IP addresses assigned to them

little hinge Dec 19, 2022, 2:03 AM

#

Yea my current co has their own block as well.

#

When you look at ARIN

clever juniper Dec 19, 2022, 2:04 AM

#

mylogin.lausd.net (which, since the ransomware attack, can only be accessed from within LAUSD's network) has an IP address of 204.108.65.79

#

Passwords are changed through that site

little hinge Dec 19, 2022, 2:04 AM

#

Yep, whois on that IP is LAUSD

clever juniper Dec 19, 2022, 2:05 AM

#

Indeed

little hinge Dec 19, 2022, 2:05 AM

#

But that would be the public IP assigned to the public interface of their edge firewall.

#

wat

clever juniper Dec 19, 2022, 2:20 AM

#

little hinge But that would be the public IP assigned to the public interface of their edge f...

I'm not sure if the firewall they use for public-facing services (if any) is the same as the one used within LAUSD's network (for compliance reasons)

#

LAUSD's network (accessible at each school through Wi-Fi and Ethernet as far as I know) uses some firewall from Palo Alto Networks

#

Funny thing

#foo