@Dashrender said in PS to download latest microsip version:

@JaredBusch said in PS to download latest microsip version:

@Dashrender said in PS to download latest microsip version:

I just installed it on a test machine with chocolatey - it installed it into the local admin profile - so any normal non admin user can't use it.

You can run chocolatey without admin rights just fine.

It warns you, but that is because most software is designed to be installed with admin rights in the windows world.

It seems that Microsip does not require that, so run chocolatey as the user itself.

interesting - something else to test then.

will the choco update scripts catch both admin and non admin installed items?

It depends on whether or not it was installed with elevated privileges and whether or not a given software is installed to a location that requires elevated privileges to modify.

@JaredBusch I have a file that exports the username and password in the script, so I am using a password. Sadly this error just fixed itself with no changes and everything is working as intended now so I won't know what the root cause of this was. Thanks for replying though.

@krzykat said in What did you have for lunch or dinner today?:

@scottalanmiller What makes nachos breakfast nachos ?

Eggs

@JaredBusch said in Gaming - What's everyone playing / hosting / looking to play:

@Obsolesce said in Gaming - What's everyone playing / hosting / looking to play:

@JaredBusch said in Gaming - What's everyone playing / hosting / looking to play:

based on the word voxel is the world completely buildable and detroyable?

Not in the same way Teardown is, (another awesome game by the way), but you can build/destroy.

@JaredBusch said in Gaming - What's everyone playing / hosting / looking to play:

based on the word tycoon is it a sim?

Yes, along the lines of a Sim City type game, but more fun.

I had time later and looked at the steam store. looks interesting.

I actually had it in my Steam wishlist for like a year or something. I had constantly ignored it because the name doesn't do it justice, and never really bothered to look much. I had added it back when I was playing more Teardown and searched for other voxel based games out of curiosity. I wish I would have looked at it closer a long time ago.

Examples in known open source worlds...

If you run ProxMox with DRBD on the Debian (host) layer, it's RLS assuming ProxMox has local disks.

If you then make that block storage available over the network, it becomes a SAN (a traditional / physical SAN.) A SAN with replication for resiliency.

If you run ProxMox and make a VM of Ubuntu and in that VM install DRBD it may or may not be RLS depending on where the host is getting its storage from for that VM. To the VM it will appear as if it is RLS, but we really don't know unless we check the stack. It's just the replication piece here.

If you then make that DRBD block layer in the VM available over the network, it becomes a vSAN.

@scottalanmiller said in ZeroTier rules to limit freelancer access:

@Pete-S said in ZeroTier rules to limit freelancer access:

Or you can just rely on authentication and authorization for every service and have no network segmentation. More risky but less work.

To me this is what makes more sense. I get the value is DOUBLE protection. But at a minimum this should be there first, ZT only as a completely additional layer of protection.

I agree. Network access control and segmentation is just to make it freakishly hard to traverse for malicious actors and software.

just updated my instance to current and they still work.
1579617f-7dc9-47f9-93fa-ae1c18fed158-image.png
95300b7c-a57e-4724-bf66-ba5a25a78edf-image.png

@dagors said in Configure ZTE F670L for NAT on LAN Ethernet Ports:

This was it. What a dumb way to have that worded!!

Sorry, google translate.
But it's good that it was fixed.

I mean dumb way that ZTE worded it.

We find that if we rename the PC, then allow more than a day to go by before restarting, this can happen.

Also, if we rename a PC, then the user allows the PC to go into Lock mode (screen saver timeout with login required to return) they will encounter this upon wake up/re-logon.

In the above two cases a reboot usually resolves it, when it doesn't, we go in as local admin and disjoin then rejoin the domain to resolve it.

Also, in the above two cases, we did not lose the computer in active directory, so after the disjoin/rejoin you'd want to remove the orphan computer from AD.

There's an article online somewhere about why you should NOT disjoin and rejoin the domain in this case, but we have always done it this way and have never experienced ill effects.

@Pete-S said in WordPress Site Lost Its Mind - Ten Minutes of Maintenance Over and Over Again:

This is how you do that:
https://developer.wordpress.org/plugins/cron/hooking-wp-cron-into-the-system-task-scheduler/

Nice, good info. Thanks.

@scottalanmiller said in Bind Linux Process to Well Known Web Ports When Not Root:

If you have ever tried to run a user space program on Linux with a port below 1024 you know that this is a security problem and you are not allowed to do so. There is a simple fix for this, but it is not well known.

Once you know the binary that you will be using to open the low number (well known) port you can use this command to grant it permission to use these ports without otherwise compromising security.

setcap cap_net_bind_service+ep /my/binary/file

Now you can run your application. This is most commonly used for user space web applications that want to use port 80 or 443 without requiring that you run a reverse proxy in front of them.

Good to know!

I found this as an example of how to use it and also commands to remove the permission:
https://cwiki.apache.org/confluence/display/HTTPD/NonRootPortBinding

The setcap utility seems to be available in the libcap2-bin package on debian distros.

I haven't checked if it's installed by default.