Leaked through their API, well that's just great hey!

@reid-cooper said in Exchange Shell command not working:

Did this become a... wait for it...

PowerShell bash session?

@reid-cooper said in Exchange Shell command not working:

Did this become a... wait for it...

PowerShell bash session?

lol, that has to be the pun of the day

Haha I don't know 1 IT person who likes dealing with printers...

@mlnews said in Miscellaneous Tech News:

Disable the Windows print spooler to prevent hacks, Microsoft tells customers

The third serious Windows print flaw in 5 weeks prompts new Microsoft warning.
Microsoft hit yet another snag in its efforts to lock down the Windows print spooler, as the software maker warned customers on Thursday to disable the service to contain a new vulnerability that helps attackers execute malicious code on fully patched machines.The vulnerability is the third printer-related flaw in Windows to come to light in the past five weeks. A patch Microsoft released in June for a remote code-execution flaw failed to fix a similar but distinct flaw dubbed PrintNightmare, which also made it possible for attackers to run malicious code on fully patched machines. Microsoft released an unscheduled patch for PrintNightmare, but the fix failed to prevent exploits on machines using certain configurations.

What an earth is going on at Microsoft. Too busy with UI changes to get the basics sorted/working

Would make a great mess around VPS, probably not best for production, but thought I would share this find...

Here’s the deal:

1GB RAM
20GB RAID10 Protected Disk Space
1500GB transfer
100Mbps uplink
1x IPv4
20x IPv6 (free on request)
DDoS Protection powered by QuadraNet Vest
OpenVZ / SolusVM
$7/year

https://lowendbox.com/blog/black-friday-deal-alpharacks-1gb-openvz-7-year/

Been watching the series Chernobyl..very good

@obsolesce said in Miscellaneous Tech News:

@scottalanmiller said in Miscellaneous Tech News:

@stuartjordan said in Miscellaneous Tech News:

@mlnews said in Miscellaneous Tech News:

Disable the Windows print spooler to prevent hacks, Microsoft tells customers

The third serious Windows print flaw in 5 weeks prompts new Microsoft warning.
Microsoft hit yet another snag in its efforts to lock down the Windows print spooler, as the software maker warned customers on Thursday to disable the service to contain a new vulnerability that helps attackers execute malicious code on fully patched machines.The vulnerability is the third printer-related flaw in Windows to come to light in the past five weeks. A patch Microsoft released in June for a remote code-execution flaw failed to fix a similar but distinct flaw dubbed PrintNightmare, which also made it possible for attackers to run malicious code on fully patched machines. Microsoft released an unscheduled patch for PrintNightmare, but the fix failed to prevent exploits on machines using certain configurations.

What an earth is going on at Microsoft. Too busy with UI changes to get the basics sorted/working

What is going on with companies that would intentionally continue to deploy this crap in a "business"?

Yeah really. Especially crap with 7 year old privilege escalation vulnerabilities that was totally open for anyone to find at any time...

https://github.blog/2021-06-10-privilege-escalation-polkit-root-on-linux-with-bug/

Yeah fair enough, not great for privilege escalation. Someone will need access to the system shell already. No different then renaming the accessibility app in windows then launching a system shell user to be able to create a administrator account.

At least ssh with keys provides is a lot more secure management then leaving port 3389 open for example with the amount of exploits for RDP. Or linux hasn't had all these printer issues with these current windows updates being pushed out. Linux is far from perfect but I would trust it tenfold then windows.

This project looks so promising for previous xenserver users.

Be great to see an option to import xen-orchestra built into the project, wherever that imports the VM for you or installs on the host itself.

@DustinB3403 said in What Are You Doing Right Now:

@StuartJordan said in What Are You Doing Right Now:

Just cooked on barbie, too hot to cook anything in the kitchen...nice bit of chicken and burger..

Not gonna lie I thought you were saying

"Just cooked meth, to hot to cook anything else"

I suppose with america's problems with meth, I could see how you managed to mistake what I was saying lol

@bbigford said in Office 365 Account Deleted While Using:

@dbeato said in Office 365 Account Deleted While Using:

@bbigford said in Office 365 Account Deleted While Using:

@jaredbusch said in Office 365 Account Deleted While Using:

@bbigford said in Office 365 Account Deleted While Using:

@jaredbusch said in Office 365 Account Deleted While Using:

@minion-queen said in Office 365 Account Deleted While Using:

@jaredbusch said in Office 365 Account Deleted While Using:

@minion-queen said in Office 365 Account Deleted While Using:

@dbeato said in Office 365 Account Deleted While Using:

@minion-queen said in Office 365 Account Deleted While Using:

Mine went down too. So an old MS Concierge person that connected O365 to AD 2 years ago that was"disconnected" ... wasn't.

We are both back up now. WHAT A FREAKING PAIN!

So were any of the accounts using AD SYnchronization by any chance?

Yeah and we deleted some workloads on Azure today I will let you guess what one of them was...

So user caused issue.

Did no one check that AD sync was still active?

Well The Concierge person did something funky back then (remember scott's issues from way way back?), and we thought that the disconnection was done. But they had to repair things on their side still for both our accounts (I didn't have issues last time but I did today), but no one else on the team did. So weird.

Well, I didn't say you caused the issue.

Failure to verify, but something that should not have needed to be verified.

Same issue I had with a Dell tech that replaced a drive and rebuilt an array for me 5 years ago. I found out 2 years ago that he rebuilt it as a RAID0 .......

Lmao!

...I don't have anything constructive to say. That's just funny as shit.

Trust, but verify....

RAID0 though. I am at a loss for words.

There are many worst things like not having backups

Who needs backups when you have RAID... backups are overrated. :smirking_face:

Be careful saying that, some people will believe that lol...

Webmin 0 day exploit:
https://pentest.com.tr/exploits/DEFCON-Webmin-1920-Unauthenticated-Remote-Command-Execution.html

Hey everyone, got an instance of Freepbx running on a dedicated server as a VM instance. all working well, I've just wondered are most people here just connecting endpoints(phones) using UDP/TCP or are they using TLS for connections. I know it would pretty hard for someone to intercept packets anyway using UDP/TCP but was just curious if people are using encryption?

@eddiejennings said in What Are You Doing Right Now:

Netplan

Getting the formatting correct can be a nightmare, prefer the old way of editing the ip address settings.

Hi, can anyone show some light on this though not connecting to FreePBX TLS doesn't work, tried UDP and only getting one way audio using UDP. This phone is at another location.

SNOM 300 at another location works, no problem. Ideas?

Heavy wind and rain last night in the UK.

@jaredbusch said in RAID5 Still The Go-To Setup For SSD?:

@hobbit666 said in RAID5 Still The Go-To Setup For SSD?:

@nashbrydges Nice looking rack

old school actually with round holes. do not see that much.

Great for the nuts and screws...

Doing a Dist upgrade from 18.04 to 20.04 on my nextcloud server

I've been using synologys built in surveillance app, works quite well for me, using a hikvision poe camera with it.

Just had my first jab today, was given the Pfizer one