How about the free version of MS Teams until you get your licencing sorted out?

Don't forget about MS SQL licencing

CloudatCost is good if you want to learn how to design something resilient

@marcinozga said in FreePBX hardening ...:

@IRJ The scenario described above doesn't look like automated attack, and it's rather unlikely bots would be exploiting PBX to make international calls.

I think this is the first episode of the Darknet Diaries

@scottalanmiller said in Creating MangoLassi Podcast:

@dbeato said in Creating MangoLassi Podcast:

@scottalanmiller said in Creating MangoLassi Podcast:

We're going to have an official one up soon. Just waiting on the site to get made.

Oh okay, so then I should stop right?

Yeah, I think so, I'm trying to get one up by tomorrow.

Did this ever happen?

Security+ is not too hard and is very straightforward. It's the kind of certification I would recommend to all techs to get them security-minded so they don't do stupid stuff because they can think logically about it from a security perspective.

I believe all the other ones are more specific if you want to actually get into infosec.

In case you know anyone...

Work remotely, applicants in Canada only. Software development company.

https://www.jobbank.gc.ca/jobsearch/jobposting/30132644

It would be great to get someone willing to learning performance troubleshooting and learn ins and outs of the technical aspect of the software.

It depends. I often don't trust just being given a Docker image. I want to see the Dockerfile. Then I can decide whether or not I want to make my own based off of that Dockerfile, or use that one. So that means understanding it.

For example, if I was going to provide a MailCow hosted service, I'm not going to just build the stack and call it good if it works. As the maintainer of that service I need to know how all the components work together.

Now it could be a different story if that image/stack came with direct support. I would still have to know how my Docker Swarm/Kubernetes Cluster works, but is it much different than installing software? We have to know how the OS and networking works, but there can be a lot that the software is doing that is a black box to us. Docker just takes it up another level.

@Obsolesce said in Domain Trust Group Permissions:

I use Domain Local groups for access control to local resources. You can have other group types as members, as well as groups from other trusted domains.

Right, but you can't then add that Domain Local group that has members from the trusted domain to a local group on the server.

Just sharing my new realization in regards with dealing with domain trusts.

In my head I was kind of doing a short circuit where a local group is basically a local resource. Probably because we have treated them that way. i.e. creating a Domain Local Group is created to become a member of a Local Group on certain computer/s.

So I was confused when I was doing some external trust labbing and while I could add a Domain Local group which contained a Global group from the trusted domain to folder permissions, I could not add that same group to the local Remote Desktop Users group.

However, a Local Group is not a resource, it is it's own thing, a local group. This blog outlines local groups and trusts well https://blogs.msmvps.com/acefekay/2012/01/06/using-group-nesting-strategy-ad-best-practices-for-group-strategy/ The only group that can be added is a Global Group (which of course means it is a group from the trusted domain).

The Remote Desktop Users group, grants certain Remote Desktop Services permission https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc753032(v=ws.11)
So those permissions is where I would need to use Domain Local groups. Apparently those permissions can only be assigned if you have the Remote Desktop role installed, unless you plan on spending some serious time on doing some reverse engineering.

@Kelly said in Writing a good CV:

Posting a snippet here for the sake of the thread's value:

Old:

• Reduced organizational IT operating costs by moving from costly closed source software to internally supported Linux based open source platforms and software
• Transitioned key IT systems from ad-hoc, as-needed to standardized, centrally managed, and strategy focused; achieving improved uptime, customer service, and reducing overall costs

New:
System Transformation – Mapped existing, fragmented IT systems and benchmarked against industry standards. Redesigned and deployed a centrally managed solution that improved uptime by 20%, reduced support tickets and customer complaints, and increased our ability to effectively predict and manage costs while utilizing existing infrastructure.

If I'm reading your resume, I'm not sure if this tells me anything that useful. I guess it depends on how big of a company you worked for. It's like politics, of course you will say anything you implement was the best thing ever. I could take from this that you have experience with ways to measure uptime, but apparently that's not the case?

@IRJ 's advice is pure gold. I'm going to go update my resume now. Setting an overview and a context to read the rest of the resume can only have benefits.

If you get external DNS to go to the nginx proxy you could probably allow all traffic to the URL path that lets encrypt needs and then create a whitelist for everything else.

Dragging and dropping todos between notebooks - I really like that

I'm really excited to start using this at work on Monday. Admittedly, I've never used Onenote or Evernote, so I can't really compare, but it looks like this will be perfect my organizing my meetings, project roadmaps and todo's.

Also the web clipper is really neat, convert a webpage into a simplified markdown page.

The founder ran his family's unnamed sales training company for a couple years and sold it. Not exactly the greatest credentials, but I didn't see anything negative on Reddit, which is a first.

You could use WiX to wrap it, but I'm sure I've heard before of a tool more specific to the job

As far as I know, robocopy is still the best file copying/syncing utility included in Windows, and you have to parse the output to get any anything useful back to work with in Powershell.

^ another example of Windows administration mismatch

Offshoring junior Devs that will end up always being junior Devs is a good way to make your senior developers have to work harder and give them incentive to find a new company.

@JaredBusch said in Comparing PowerShell to Linux User Manipulation:

@scottalanmiller said in Comparing PowerShell to Linux User Manipulation:

And you conveniently left out that almost no Windows has this PowerShell stuff, it's non-standard! Only extremely current versions have this without having to go through hoops to install it extra. This isn't universally workable for PowerShell.

WTF? What version of Windows are you claiming here? Because PowerShell has been install by default since Windows 7 (PowerShell version 2.0).

And Powershell 2.0 is missing a lot of stuff that are taken for granted by Powershell users today. If WMF was made available through Windows updates, that would have made life easier.