@scottalanmiller said in Using IP Addresses - CompTIA A+ 220-1001 Prof Messer:

@connorsoliver said in Using IP Addresses - CompTIA A+ 220-1001 Prof Messer:

When using an SSL VPN, if the VPN concentrator decrypts the data being sent, wouldn't it be possible for someone to capture the data and also decrypt it?

Possible, sure. But very, very hard. The VPN concentrator has the keys, someone intercepting the traffic presumably does not. The point of VPN encryption is to make it so hard to decrypt the data that you don't care if they see it. It's about making something safe enough that we assume we will send it in the open and not worry.

So we assume that people capture that data constantly - but we have made it so hard to use, that they can't do it.

We more than assume that - we pretty much know the NSA is doing that after the Snowden leaks.

Cool very interesting!

taking a few mins to watch this!

@scottalanmiller said in Network Services - CompTIA A+ 220-1001 Prof Messer:

@valentina said in Network Services - CompTIA A+ 220-1001 Prof Messer:

are proxy servers used for security purposes? do they have other functions?

Yes, very much so.

They are also very commonly used to allow a single IP address to be used for many services. The most common example... a single proxy server with a single (expensive) public IP address can handle requests for hundreds of thousands, or even millions, of websites. Behind the proxy server can be one or one million separate web servers each serving out applications or web sites or whatever and the proxy server can look at the incoming request and determine, based on the URL used, which server and port to send the request to behind itself.

Because of the above, they are often used for load balancing because they can send requests to different servers for the same application or site.

Proxy servers often have caches in them, too. So they quite often store simple, static information "at the edge" to deliver it faster while the application servers behind them do the heavy work for database requests and stuff.

Proxy servers are sometimes used to "hide" the true location of a server. Cloudflare famously does this so that attackers have no idea where a web site actually comes from, all they see is Cloudflare's proxies.

A proxy can also do things like handle SSL security so that web servers behind it (or other servers, proxy doesn't imply web) don't have to do that work, as well.

Hrm, I only have around 20 subdomains pointing to the same IP so far. If my home lab box was a little beefier I'd take this as a challenge. (Scott might as well be describing my home lab environment here.)

Interesting

@Osvaldo said in Wireless Network Technologies - CompTIA A+ 220-1001 Prof Messer:

I wonder if there is a tool for radio hacking zigbee?

Many of the devices that use the protocol are never updated, therefor quite a large target for hacking.

The radio protocol itself I doubt is much use to "hack" (Any cheap software defined radio will be able to imitate a Zigbee device.)

I made this safe for work

test.png

Done with this one!

@Dashrender said in Installing a SOHO Network - CompTIA A+ 220-1001 Prof Messer:

@scottalanmiller said in Installing a SOHO Network - CompTIA A+ 220-1001 Prof Messer:

@Dashrender said in Installing a SOHO Network - CompTIA A+ 220-1001 Prof Messer:

@scottalanmiller said in Installing a SOHO Network - CompTIA A+ 220-1001 Prof Messer:

Think about a thermostat that you can connect to online. The thermostat IoT device is in your home. The IoT vendor has a server. You work with the thermostat through the hosted server somewhere. If that server was compromised, bad guys could run up your AC bill.

To bad most cameras don't work that way - instead they use uPNP to open ports and just spew your video feeds to the world.
https://www.insecam.org/

"Most" of anything is crap. No good camera does that. What a bizarre system.

Agreed - but it's very likely type of equipment they'll run into out in the wild.

I've never seen that with a client in the wild. I'm sure it happens, but it's not something we really run into. Common with home users, for sure. As business class routers don't allow that, it limits it in the field a lot.

And it's not like we don't see cameras, worked with a security company just today!

Also, lots of customers on cheaper or less "business" equipment often have double NAT which while awful, stops UPnP.

Done with this one too! Reading the comment section : - )

@scottalanmiller ahhhh the S.A.M.

One of the clear problems with the CompTIA A+ has always been that it clearly caters to promoting Microsoft products and not being vendor neutral as it has always claimed to be. With the latest release, literally half of the exam is Windows only. There is no section for macOS, any Linux, iOS, Android, Chromebooks, nothing, nada. It's become a Windows exam, which means that they don't just skip the underlying principles that they claim the exam is about, and skip the neutrality for the industry that they claim it is about, but they also leave people going into entry level positions totally unprepared for the real world where running into non-Windows OSes is common. If you were learning from nothing but the A+, you might not even be aware that non-Windows exists. Let alone non-PC hardware, which appears to also be completely skipped.

This was very informative, I like the simplicity of the explanations. Also @scottalanmiller thanks for the extra feedback! I watched this a week ago btw

Congratulations Mangolassi 😀

Welcome guys.

Registration is by form submission. Then you'll be emailed with payment details. It's getting updated to explain that, now.

FFS that is when I was planning to tag all my old threads.

@dafyre said in NYC Mango Meetup June 23, 2017:

@scottalanmiller said in NYC Mango Meetup June 23, 2017:

@travisdh1 said in NYC Mango Meetup June 23, 2017:

@scottalanmiller said in NYC Mango Meetup June 23, 2017:

@travisdh1 said in NYC Mango Meetup June 23, 2017:

@scottalanmiller said in NYC Mango Meetup June 23, 2017:

@travisdh1 said in NYC Mango Meetup June 23, 2017:

@scottalanmiller said in NYC Mango Meetup June 23, 2017:

Who is recording the talks?

Well, we all did a little talking.... and I actually had my first drink in a couple of months.

Did someone record everything?

Yes, @Minion-Queen had the phone recording for most of the time.

Oh no, did anyone make her hold it correctly or is the whole thing shot vertically?

It's all vertical.... so far as you know. Also, I'm tipsy, thanks to everyone at aetherstore!

Best way to be. About to open some wine here myself, while I make some tater tots.

Tater tots... cooked in Wine... There's an idea.

I have more of both...