What Are You Doing Right Now
-
Up early on a Saturday... not sure why. Coffee is brewing and we have a bunch of duck eggs, so I think I see brunch in my future. Also have to apply a code update to our fancy, new storage appliance.
-
My oldest is 9 TODAY! Last year of single digits
-
WOW..... our receptionist got spear phished hard... payed out $44k without confirming it with the owner. Granted, they did spoof the owner's email, but not his email signature. Should have caught it there. Does anyone know of a magic bullet to stop spoofing on O365?
-
@rojoloco said in What Are You Doing Right Now:
WOW..... our receptionist got spear phished hard... payed out $44k without confirming it with the owner. Granted, they did spoof the owner's email, but not his email signature. Should have caught it there. Does anyone know of a magic bullet to stop spoofing on O365?
contact them outside of the email and verify it was sent to them ..
-
@rojoloco said in What Are You Doing Right Now:
WOW..... our receptionist got spear phished hard... payed out $44k without confirming it with the owner. Granted, they did spoof the owner's email, but not his email signature. Should have caught it there. Does anyone know of a magic bullet to stop spoofing on O365?
Good question.
One think you can definitely do is turn on the notice - this email came from outside the company.
Then if this happened again - it would be a huge red flag that the "owner's" email came from outside the email system - and that should NEVER happen.
I don't know if O365 can be set to prevent the allowance of emails from the outside that appear as the same email address/displayname as an O365 user.
-
@wrcombs said in What Are You Doing Right Now:
@rojoloco said in What Are You Doing Right Now:
WOW..... our receptionist got spear phished hard... payed out $44k without confirming it with the owner. Granted, they did spoof the owner's email, but not his email signature. Should have caught it there. Does anyone know of a magic bullet to stop spoofing on O365?
contact them outside of the email and verify it was sent to them ..
This requires the person receiving the email to do something... which clearly they didn't do on this email.
-
@dashrender said in What Are You Doing Right Now:
@wrcombs said in What Are You Doing Right Now:
@rojoloco said in What Are You Doing Right Now:
WOW..... our receptionist got spear phished hard... payed out $44k without confirming it with the owner. Granted, they did spoof the owner's email, but not his email signature. Should have caught it there. Does anyone know of a magic bullet to stop spoofing on O365?
contact them outside of the email and verify it was sent to them ..
This requires the person receiving the email to do something... which clearly they didn't do on this email.
Ah I missed that part.
-
Writing a standard operating procedure document while I do a task.
-
I'm in "The little switzerland" today (Sugarcreek, OH). Also home of the largest cuckoo clock.
Like all tourist traps, it sounds more exciting than it is.
-
@travisdh1 said in What Are You Doing Right Now:
(
Running around my father's neck of the woods (aka "Downhome").
Also, if you are a golfer, you should definitely play Oak Shadows (in season of course) as the first hole is a doozy.
-
@hobbit666 said in What Are You Doing Right Now:
Thinking about getting up and setting my Soldering station to work on the Xbox and Switch
Well fix the switch and now ready for testing, well once I find all the screws
But the Xbox is still driving me crazy 🤪🤪
-
Just wrapped up D&D night.
-
@jaredbusch said in What Are You Doing Right Now:
Just wrapped up D&D night.
Can't really tell from the map, but I think Watt may be in trouble -- unless Grottshankes and Eldric are fellow adventurers.
-
an actual conversation this morning :
Me: Hey do you have the cybera email for support? i gotta open a call about Guest wifi at this site and they control that.
CW: Well what's going on?
Me: well, i told you, guest wifi is not allowing people to connect to it. AP is online and broadcasting the wifi - there's something fishy with the site.. so do you have that support email?
CW: well did you reboot the AP?
Me: Why would I do that if it's broadcasting the wifi? the AP is doing it's job..
CW: but did you ?
Me: I found the Email Address !no, I didnt because the AP is online and broadcasting the SSID - it is when the guest tries to connect to the wifi that it gets stopped.
CW: what the hell is broadcasting the SSID?me:
-
@wrcombs You still should have rebooted it. Just because it is broadcasting, does not mean it is passing traffic.
-
@wrcombs said in What Are You Doing Right Now:
an actual conversation this morning :
Me: Hey do you have the cybera email for support? i gotta open a call about Guest wifi at this site and they control that.
CW: Well what's going on?
Me: well, i told you, guest wifi is not allowing people to connect to it. AP is online and broadcasting the wifi - there's something fishy with the site.. so do you have that support email?
CW: well did you reboot the AP?
Me: Why would I do that if it's broadcasting the wifi? the AP is doing it's job..
CW: but did you ?
Me: I found the Email Address !no, I didnt because the AP is online and broadcasting the SSID - it is when the guest tries to connect to the wifi that it gets stopped.
CW: what the hell is broadcasting the SSID?me:
Not really sure why you care so much about the fact that it's broadcasting the SSID - that doesn't mean squat. It could still be stuck in a loop, etc...
A better reason to not reboot the AP is because it's also servicing production devices and those devices are working, and rebooting the AP would cause an outage for those productions devices. If it's not servicing production - then just reboot it.
-
@dashrender said in What Are You Doing Right Now:
@wrcombs said in What Are You Doing Right Now:
an actual conversation this morning :
Me: Hey do you have the cybera email for support? i gotta open a call about Guest wifi at this site and they control that.
CW: Well what's going on?
Me: well, i told you, guest wifi is not allowing people to connect to it. AP is online and broadcasting the wifi - there's something fishy with the site.. so do you have that support email?
CW: well did you reboot the AP?
Me: Why would I do that if it's broadcasting the wifi? the AP is doing it's job..
CW: but did you ?
Me: I found the Email Address !no, I didnt because the AP is online and broadcasting the SSID - it is when the guest tries to connect to the wifi that it gets stopped.
CW: what the hell is broadcasting the SSID?me:
Not really sure why you care so much about the fact that it's broadcasting the SSID - that doesn't mean squat. It could still be stuck in a loop, etc...
A better reason to not reboot the AP is because it's also servicing production devices and those devices are working, and rebooting the AP would cause an outage for those productions devices. If it's not servicing production - then just reboot it.
and the point was missed by all -
I ended up rebooting the AP 3 times with the site and it is still happening. -
@wrcombs said in What Are You Doing Right Now:
CW: what the hell is broadcasting the SSID?
Valid question, as any device could do this whether it is functioning or not, or the correct device or not.
-
@wrcombs said in What Are You Doing Right Now:
and the point was missed by all -
I ended up rebooting the AP 3 times with the site and it is still happening.What was the point? Rebooting was definitely the right thing to do. You had no reason to not reboot straight away, that's the right step in troubleshooting in that situation before discussing anything else.
That you have rebooted it and it is still happening in no way indicates that rebooting first wasn't the right course of action. Once you rebooted it and it didn't fix it, then it's time to report the issue and let them know that you've already done the first, critical, testing step of restarting the hardware.
-
@wrcombs said in What Are You Doing Right Now:
CW: well did you reboot the AP?
Me: Why would I do that if it's broadcasting the wifi? the AP is doing it's job..You never knew, and still don't know, this. You have no evidence that the AP even exists, let alone is doing its, or any, job based on what you've described. Unless you can connect and prove that it is working, you can't know that it is doing its job.
Broadcasting an SSID but not working beyond that is a fairly common AP failure situation.
