@jaredbusch Thank you

@momurda said in Blocking phone numbers:

rally i have found the numbers are sold or used in blocks of a few contiguous numbers like 123-1230 123-1231 123-1232 etc if the operation is serious about their fraud.
The portal for our voip provider makes this incredibly easy to do.

I do block some numbers and anonymous calls, but as stated above if they want to keep coming, it will come with the same 201-xxx phone number and they just randomize it. (That's my case).

My money on error 1603. Which means nothing but is usually the error in Windows Update logs.

@krisleslie said in Adding additional Drive to XenServer host, get error:

@black3dynamite i use 1 hdd 😞

I meant virtual disks. VM1 with virtual disk 1 = OS and virtual disk 2 = data

I want to go find the programmer who created ALG and throw him in a cage of lions!
#frustrated!

For those old enough, you will remember the big "Genuine Intel" and "AMD Clone" stuff of the 1990s and 2000s. Well, since AMD64 is the architecture now and Intel is the clone, they have a lot of their own marketing to live down. Now it's genuine AMD and Intel is the clone. So decades of mocking clones as being garbage and only the owner of an architecture is supposed to be any good, Intel is now the clone and will be for the indefinite future - no one expects a new architecture to come for a really long time. So now Intel tries to pretend that they are somehow involved in the architecture when they were so adamantly opposed to the idea when it was first introduced and would have nothing to do with it.

It should be called the "in spite of Intel architecture."

@mikah67 Glad that it is working!

As a general rule, just do a yum -y update before starting an installation to make sure you are fully updated, regardless of which CentOS 7 version you started with.

The PDFs linked in this article are quite detailed.
IP addresses, file names, file hashes, dns names.
Powershell script names, exe names with details of how it all works together.
Pretty damning stuff here.

A big rule is... no fluff. Keep it clean, simple, and on task.

@joel said in Giving out admin details:

@scottalanmiller Thanks all - I like the fees idea.
It would be a good idea if it was possible to create an account but on a timer. IE. This account will self-destruct in 3 days. Giving them a small window to do what they want. thanks all again

That is what AD account expirations are for. . . you set when they expire and an AD admin would have to go and extend the duration if needed. . .

@thwr Disk 2VHD always helps us in such cases. Here is the nice step-by-step guide on how to use it. Hope it helps. https://www.veeam.com/blog/how-to-convert-physical-machine-hyper-v-virtual-machine-disk2vhd.html

@irj said in Pentest - Who would you recommend?:

Security needs a top down approach in order to be successful

This is important for IT to understand. Business needs to drive security, and IT enable it. IT can't be the driver of security. If you have to convince people that they want to be secure, they don't really want to be secure.

@bnrstnr said in Lastpass stores all subdomains as entries for the main domain:

So I've set this up and it at least asked if I wanted to save the site for a new subdomain that I haven't already saved (instead of updating existing unrelated sites)... but it wants to save it as example.com still :pouting_face:

EDIT: It saves the "Name" field as example.com, but it gets the "URL" field correct with the proper sub.example.com and no longer suggests the other subs that don't match. So this is definitely a way better start, still not ideal IMO, but it does work correctly

But this is your preference. I don’t want this. I have a lot of internal things on *.domain.com that have the same credentials because of LDAP/AD linked auth.

I do not want all of these to be kept separately.

@jaredbusch Also, certbot doesn't have automatic DNS configuration.

@computerchip said in Spiceworks: Error message: An existing connection was forcibly closed by the remote host.:

@scottalanmiller "just toggle it back and forth" 🤣 🙄

Yeah, that bit was pretty funny.

@nikunjd05

If you want to continue down this path of PSEXEC, how about having an python agent that tracks your changes, check SaltStack, and salt minion, it will make your life alot easier, and it is much modern and supported than PSEXEC

AT&T is definitely blowing smoke. The new tenant will "own" that IP equipment and can charge both the existing tenant and AT&T for use of the facilities, or just cut it off. The new tenant will own that equipment and that connection.

@momurda said in Bad Addresses:

@jaredbusch said in Bad Addresses:

@nerdydad said in Bad Addresses:

My boss does.

So until you can show us what you are talking about, please answer this...

Why does he? As I illustrated in a prior post anyone can spam anything all day long. Why does he care about these bad accounts?

Yes, and arent these reports detailing hundreds or thousands of bad email addresses/day? Seems like they would be. If i received this report it would have tens of thousands of bad address bounce messages every single day.
In a large org i imagine it would be many millions.

Easily, for sure.

Content filtering comes to mind 🙂