SSLlabs is good. I recommend selecting "Do not show the results on the boards" on each run, otherwise your result can get displayed there for the world to see, which can be pretty bad if bad guys are watching and you've only started your security project.
Posts made by TAHIN
-
RE: July 1st, TLS migration
-
RE: I can't even
@dashrender said in I can't even:
@eddiejennings said in I can't even:
@scottalanmiller I do not see that ending well.
Actually I don't see it starting at all.
It started sounding like he wanted to be a sales person, but then he doesn't know the specs needed for any of the sales - so he's have to hire that part out.. so what value does he bring?He's the idea guy! You don't have to know sales, computers, or how to properly punctuate if you have the ideas. His staff will flock to him because he has the idea and they'll work for free because they believe in him. And it will all work out and he will be rich before 2018 hits and he will buy a boat and retire from his fortune 500 company in 5 years.
-
RE: Password Managers
I would recommend LastPass right up until LogMeIn bought them out. Their business model is to double, triple, then quadruple the price while simultaneously removing features from their free product. In fact, it's already happening.
-
RE: Scripting install - help
@BBigford said in Scripting install - help:
We took them on as a client. So whoever setup their stuff in the beginning looked like they were just lazy and careless.
Might have been a gov't organization at some point? Some places in my town were run sort of like that when they were connected up with the state.
-
RE: Microsoft Teams ready for Production ?
Teams and Slack both set out to solve an incredibly big problem with email: conversation-based collaboration. I really want to love it because if you run analysis on the type of email that flows between users of an organization, 70% of it is 'read once and delete' or one-liners. It's like supercharged IM. It took a while to wrap my head around the whole idea, but now I can see the overall potential, and it's staggering. But the OP comment regarding external user limitations is why we're not pursuing it. Having project collaboration for our internal users on Teams and having to import emails from external users would add too much overhead and confusion, and be a training nightmare.
Other reasons we're not using it:
- A lot of documentation doesn't exist yet. Such as if we roll this out, we'll have archiving / legal hold requirements.
- Doesn't have the kind of 3rd party product integrations that Outlook has, which we rely on.
We're actually fully licensed for it, wouldn't cost anything, but the use case isn't quite there until it can include everyone. We'll probably re-visit it in 12-18 months.
-
RE: Non-IT News Thread
Gotta feel a little bad for them. Regardless, they already lost my business after years of being Samsung loyal. 80% of my phone choice is dependent on removable battery, headphone jack, and SD card slot. Might go LG next round - the V20 looks like a pretty fun phone to nerd out on.
-
RE: SANs in the Enterprise?
A pair of Dell EqualLogics. 4 TB 15k SAS on one and 8 TB 7.2K SATA on the other. I call it manual disk tiering Housing Hyper-V CSV's for about 100 VM's. Most of the data is in Windows file servers for roughly 500 users.
Luckily these are aging out soon - as will this architecture.
-
RE: Do you track medical records?
@Dashrender said in Do you track medical records?:
@TAHIN said in Do you track medical records?:
Oh yeah HL7, it's coming back. Man you can make big bucks as an EHR integration coder.
Why is this?
Does HL7 not have all the (I'm going to talk out of my ass because I'm not a programmer and I have no clue what I'm talking about) tags it needs to identify all of the possible incoming/outgoing data points?Or is it even worse than that - it's a jargon problem - where different areas of the country some call is soda, some call it pop, and the worst, some call everything a coke, even Dr Pepper - it's just a coke. LOL
All I remember about HL7 is that we paid someone a bunch of money to deliver something they already built for someone else. I'm not sure how hard it is but it sounds like a cushy gig. EDIT: And I know that's how software works... but this was an interface. Usually highly customized.
-
RE: Do you track medical records?
Our database guy and our web guy built an application that converted our whole system to ICD10 since our EHR didn't do it natively. This app saved our finance folks about 1000 hours of work. Our CIO, who was always good at converting ideas to cash (very good quality for a non-profit) started selling it to other clinics who used the same system. eCW eventually caught wind and wanted to buy it. He gave them a price about as ridiculous as what they would have charged us for it... they refused haha. It was a good shoe on the other foot sort of story.
-
RE: Do you track medical records?
Oh yeah HL7, it's coming back. Man you can make big bucks as an EHR integration coder.
-
RE: Do you track medical records?
I worked with an EMR for a few years and fragmentation definitely still exists. You can securely transmit EMR data to other hospitals, but there's no standard. The other hospital receives it and has to add it as an attachment to their chart data. There's a lot of discussion in those circles around standardizing EMR data sets and it's just a matter of time. Our EMR was highly XML so it's definitely possible.
-
RE: "Yes, it's snowing. No, we don't plow."
You were lucky enough to move there in an interesting year. Boise saw record snowfall last week, and it is true that a city only plans for 'the norm'. When planning for the norm proves ineffective, only then will they invest in new plows. Every city has posted evacuation routes in case of emergencies. Those evacuation routes (often residential side-streets that are otherwise not often used) are always the first to be plowed. Then they move to main arteries, then busy residential arteries. In a bad storm, most other residential streets are ignored entirely.
I'm in Montana. Our past 5 winters have been some of the worst on record. The first one was a nightmare; nothing was plowed. The plows the city did have were being run 24 hours a day on shifts, they were breaking down, etc... the breaking point was that they couldn't keep up with clearing evac routes. Over the next few years, our city has gotten VERY good at plowing. We have some seriously behemoth machines. Plows travel in pairs so they can clear an entire street in one pass, they usually run from 9 PM to 6 AM to not interrupt traffic and only spot check during the day. You almost never see them and the streets are always clear. It's amazing how far they've come. This winter has been nuts so far. Shovel 12" off the drive, shovel 10" the next day, then the wind picks up and drifts, so you shovel another 12" of wind packed ice. Rinse repeat for 3 weeks. My brother has been running his 4-wheeler up and down streets charging people to clear driveways.
tl;dr: They're right. If Boise rarely sees over 4", it's hard to justify new equipment in the budget. Buy yourself a 4-wheeler with a plow and charge $50 to clear driveways. It'll pay for itself in a week.
-
RE: "Yes, it's snowing. No, we don't plow."
My sister has lived in Boise / Meridian for about 10 years. This was her patio the other day:
-
RE: Do you track medical records?
Your healthcare provider doesn't do anything for you? EMR is making it pretty common practice for hospitals to host those services for patients. If I do something outside of their care, I can upload it or send it to them to upload to my chart.
-
RE: Exchange Student would like to Learn System Administration
What does "he knows nothing" mean? From my perspective, knowing nothing is what I did when I was 6. After that I always knew something about computers. On a scale from 1 to 10... 1 being "The cup holder in my computer is broken!" and 10 being entry-level job ready... how do you rank his current knowledge?
Teaching him about hypervisors would be pointless without a knowledge of system architecture. Teaching him about the OSI model would be pointless if he doesn't know what TCP/IP is. You need to gauge where he's at and go from there. Maybe have him pick up a (not too dry) A+ book. Maybe watch some videos about how TCP, IP, UDP work. Ethernet, switches, routers?
-
RE: Tell me if this is a legit idea
IBM used me as an example case for this a decade ago. One of the biggest controllers of my own data that there is out there.
So IBM collected real stuff or fake stuff?
-
RE: Tell me if this is a legit idea
It would almost have to be a subscription service where the program is regularly modified and sends stuff out on a continued schedule, to make it seem like more of a feed that emulates the real world.
-
Tell me if this is a legit idea
Source: this article about the ridiculous collection capabilites of data brokers: https://www.propublica.org/article/facebook-doesnt-tell-users-everything-it-really-knows-about-them
Idea: Data brokers, in order to capture something, anything, about you need to cast a very large net; they collect first and filter second. Because these systems are designed to capture information from thousands of sources at the same time, it's theoretically possible to feed bad data to the brokers. What I'm talking about is "privacy by obfuscation". Feed so much crap into your personal dossier that it is no longer valuable to buyers.
Short of a couple documentaries, I'm not completely up on how data brokers work, but tell me if this is possible: Someone builds an application that you can run, fill in a couple factual identifiers about yourself in order to map you to you, and the app will create troves of lies (bogus email addresses, past jobs, phone numbers, sibling names, likes, etc...). It will then spoof several known data leaking services and send it along. Based on how smart data brokers are, this can eventually be evolved to change or muck up your dossier beyond the point of recognition.
Say this huge long shot of a project actually works... nobody should notice: data brokers nor the sites that buy dossiers because their systems all recognize it as legitimate data. So you have to get the word out. Viralize it until someone like Facebook does some digging and recognizes that all this stuff they've been buying is trash.
Everything is hackable. Everything! It really isn't a question of if this can be done; it's a question of how much would it take. The work of an amateur programmer with deep knowledge of analytics... or more?
-
RE: Has Anyone Built a Computer Controlled Model Railroad
I agree with using Arduino + RP for machine application. Arduino is a great single-threaded "doer" while RP is a multitasking "thinker". I'm planning to start a program to manage my Christmas lights for next year. Nice simple project for a beginner.