@IRJ said in AVG deleting data:

Setup FIM to see what is causing it 100%

FIM?

@scottalanmiller said in Policies vs Network Access Control:

@Dashrender said in Policies vs Network Access Control:

@IRJ said in Policies vs Network Access Control:

This is not a problem that can be fixed with compensating controls. It needs to be nuked from orbit and rebuilt properly with employee buy in.

At this point - that seems very unlikely if you have users who are willing to nuke their own machines and reinstall. They'll likely demand or at least attempt to demand local admin rights.

Really just becomes the same as BYOD. Easy enough to manage. Not ideal, but doable.

Exactly - better model in most cases anyhow.
Just change how you (the OP) deliver services.

@JaredBusch

There is a current issue with the SSL let's encrypt that I just submitted to them to resolve (they are using an outdated version with Acme 1 instead of the newer Acme 2):

FYI - we've resolved the issue, and I can only assume anyone else that has installed Postcards should have the same issue.

The problem is indeed an issue with Let's Encrypt, and specifically:

docker: jrcs/letsencrypt-nginx-proxy-companion

To fix this issue, please update the docker-compose.override.yml file during builds.

Row 35 should read: image: jrcs/letsencrypt-nginx-proxy-companion:latest

This will insure that the current version for the let's encrypt proxy is called and eliminate the issue.

@WLS-ITGuy give this a try, you may need to go back more than a year though.

@JaredBusch said in Can all phones read QR codes natively?:

You do not even take a picture, just put it in the camera sights.

yeah - that is pretty cool...

@Obsolesce

The thing there is market place for this since VirtKick turned there back on the supporters, and we need simple front end with simple installer (yes looking at you OpenStack)

Discussion on the policy side of this is over here:

https://mangolassi.it/topic/20894/policies-vs-network-access-control

@brandon220 said in Voip.ms Fax To Email:

@JaredBusch What I'm referring to is that I can take a physical piece of paper that I want to fax to a Xerox copier (in this instance). Instead of using the built-in fax machine function (no phone line attached) I can "email" the document to [email protected] and in the subject line is the actual fax number. When I email from the copier, it comes out as a fax to the receiver. Not as an email. The receiver has no idea that it did not come from a conventional fax machine.

Yeah, this can definitely be done - but man, changing the subject line from a Xerox machine is generally a HUGE PITA - no normal user wants to do that ever.

I've used Graylog previously. We used limited amounts of the dashboards in Graylog and we mostly created our own in Grafana to display things we needed. The advantage to Graylog over Elastic Stack is RBAC is included out of the box, you don't have to purchase X-Pack or custom build anything to get that functionality.

But I don't believe it works natively with Wazuh like @IRJ mentioned.

FWIW we've never had problems with HP's lifetime warranty for switches regardless of where they were purchased. New, used, refurb....

Yeah I got an announcement in my email about it. I was reading about it here:

https://aws.amazon.com/about-aws/whats-new/2019/12/announcing-new-amazon-ec2-m6g-c6g-and-r6g-instances-powered-by-next-generation-arm-based-aws-graviton2-processors

Yeah I'd probably just do loopback

@Dashrender said in How do you find duplicates from Windows SMB shares using Linux:

@JaredBusch said in How do you find duplicates from Windows SMB shares using Linux:

@Dashrender said in How do you find duplicates from Windows SMB shares using Linux:

@IRJ said in How do you find duplicates from Windows SMB shares using Linux:

@Dashrender said in How do you find duplicates from Windows SMB shares using Linux:

I wonder if this would run faster directly on the server in powershell instead? I'm assuming with doing this over SMB you have to download all files, run the hash - if ran locally, you get to skip the download time, I assume.

I gathered that the SMB shares are hosted on Linux, but I could be wrong.

If they are hosted on Windows like you are assuming, then I would agree that PowerShell would probably be most performant for this.

The title says - Windows SMB Shares.

My guess is that Dustin is a lone wolf running a 'nix OS as his machine - and the rest of the company is using Windows. Nothing wrong with that, just my guess.

His company is significantly Mac.

aww, that's right - he has been asking a lot of MAC questions lately.

Unix questions to be more precise, but yeah we are a heavy Mac shop.

@JaredBusch said in NextCloud Client Issues:

Looks like they found the issue.
https://github.com/nextcloud/desktop/issues/1292

Fedora workaround until it is released: sudo dnf install libgnome-keyring

I thought that issue was specific to Fedora GNOME. Ever since I started using the nextcloud app I've been including that package as part of my post install setup.

So no idea what the exact fail combo is, but I am fully updated, and working, on a clean install.

Installed Fedora 31 Cinnamon from USB. Rebooted, I have only kernel 5.3.7-301 Removed dnf dragora GUI sudo dnf remove dnfdragora* -y Rebooted. Upgraded all but grub2 sudo dnf upgrade --refresh -y --exclude grub2* Rebooted, not I now have kernel 5.3.13-300 available and default. Upgraded grub2 sudo dnf upgrade --refresh -y, I did receive the above SELinux errors again, they may be normal? Rebooted, system working normally.

@Dashrender said in How M$ shakedown stupid corporations:

@matteo-nunziati said in How M$ shakedown stupid corporations:

@Obsolesce said in How M$ shakedown stupid corporations:

@Emad-R said in How M$ shakedown stupid corporations:

@Dashrender

You have not seen much of "real business" then, I cannot disclose info, but I think this corp is like multi-million revenue.

Thats how it is ins real world, they get bloated and move slower, thats what happen when corp grow, if you keep it startup-ish vibe and "move fast and break things" you will be running the latest but not everyone is like that.

Besides windows painfull upgrading process helps you to stick to whats running.

And no on the client side, its all Win10 ... sadly we use Win10 to manage Linux machines 😞
I hate that mremote/putty shit

This is false.

Big business makes quite an effort to stay current in the Windows world, especially if they are multi-billion $$ company. They HAVE to. It's not a choice.

It's constant change going on, all the time. 2019 is current, when a server is needed at all. Most are really going serverless when possible, lots of SaaS, Cloud, etc.

You might be thinking of U.S. defense companies. I mean they run old shit and pay millions and billions to maintain OAF software support.

I have to disagree: I've recently started a job as a GE/BH oil and gas consultant and they proudly stick on win 7...
They also stick with old unpatched software of all kinds... Maybe it is their italian BU only... But it is rather embarassing...

Proudly? What is there to be proud about running 10+ year old software? What are the chances that they are still running on the hardware from back then? Granted you fairly easily still get OEM machines with Windows 7 Pro will into 2016, if not even early 2017 - but still... The writing was on the wall.

Even with the number of hacks that happen every day, clearly enough hasn't happened to people/companies to make the rest stand up and take notice that running old software on machines that connect to the internet - and really, how much doesn't these days - to update their equipment. Unfortunately, this might be one of the first things for business where they can't use it until it dies (I'm talking about IT based technology here) - and I think that is the hard point. Of course businesses that are doing well, and understand efficiencies have been upgrading as the tech makes sense to, well before things like EOL software/hardware come into play, but then many other businesses that run on a shoe string just don't.

Sorry for the late replay. Really busy days...
They are specifically pay extra money to MS to have extra support for win7.
The "proudly" is part was mostly a joke. Reality is that big corps in Italy have very unaware decision makes.

They stick with really unprepared supplieres/staff which fill companies with tons of useless gear and SW which easily became unmanageable and a migration nigthmare. so that they easily reach a tech debt in few years (use a phisical token to auth in a vpn used to access the private github repo. Which runs over https...).
On the other side they simply check the bill to be sure it stays well under a predefined threshold simply wasting that money.

My last effort is to maintain a ui written by the wrong guy in the wrong language and used to keep alive a software whose user manual has been published in 1988!

And this is the second big corp I've knowleged of. The other one buyed the company I worked in. I've friends there and the logic is the same...

We say that their IT depts are salary factories: they leverage the ignorance of decison makers to auto feed them selves and be sure to increase the amount of men hours required to housekeep the whole infra...

This is what I do when I use nohup.
I usually create a file with the current pid just in case I need to stop it.

nohup wget 'https://example.com/fedora.iso' > wget_fedora.log 2>&1 & echo $! > wget_fedora_pid.txt kill -9 `cat wget_fedora_pid.txt` rm wget_fedora_pid.txt