@travisdh1 said in Cannot setup Google Drive on NextCloud:

@IRJ said in Cannot setup Google Drive on NextCloud:

Unfortunately I am using a hosted CPanel install of NextCloud. Which means my host has restricted large uploads from their level and changing the htaacess file and user.ini file in Nextcloud has no effect.

So I pretty much have to have Google. I was able to setup Dropbox within seconds, but they only give free users 2GB. Google gives you 15GB and 100GB for $2.99 a month.

So you do not have access to your php settings file? Could you ask them to increase that limit? Seems like a standard thing.

Also, vultr.com offers a full VPS and 50GB of storage for $5/month, might think about going that way if the current host is so limited.

HOw does this help anything. Can you try a google config ?

From what I am reading now, it appears that the OVF uses compression level 5. It is possible to gain extra compression by using a tool like 7 zip but the gains are very minimal. On a 4GB VM you may see it drop to 3.9GB if you compress it again using 7zip. The minor gain isn't worth having to compress it twice IMO.

@Kelly said in Where do you see Microsoft in 5, 10, and 15 years?:

Well, this will prolong the lifespan of Windows on the desktop: http://news.softpedia.com/news/nsa-approved-windows-10-cleared-for-classified-use-512841.shtml.

If the NSA has cleared it, it'll likely still be there is 2040.

@scottalanmiller said in ZeroTier Performance?:

That's interesting. We see horrendous lag from X2Go via Mint. Maybe it is the Ubuntu base, we've not tested with Fedora. I wonder if that alone would make a difference?

Ya I don't have any Ununtu based systems with a GUI. I had that Kali system and gave it 4 CPUs and either 8 or 16 GB of RAM and it was still laggy virtualized (didn't try it physical).

But I've never had any issues with NoMachine or X2Go with a RHEL based system. I've also managed client sites with NoMachine on Windows and not had any issues.

There are great alternative schools out there, SUNY Empire is my favourite. Great education, very non-traditional. But it isn't an end run around the college education, either. It's a real college, harder than a normal one, rather than easier. But still completely alternative so you have a lot of flexibility. I don't want to make all colleges sound bad, shop around and there are great options. I am just warning against a certain category of colleges that are very risky.

@scottalanmiller said in Sales People HOF:

That Matt Wien guy really wants us to avoid his company! Damn.

I am not going to recover one of the emails to show you all, but he basically hit reply to the prior sent mail and then pasted in shit again.. each email contained all the prior email text.

I will absolutely never do business with Dashlane unless there is no other viable option.

@Dashrender said in Cyber Security Business:

@JaredBusch said in Cyber Security Business:

@Dashrender said in Cyber Security Business:

@JaredBusch said in Cyber Security Business:

@Dashrender said in Cyber Security Business:

@JaredBusch said in Cyber Security Business:

@Dashrender said in Cyber Security Business:

@JaredBusch said in Cyber Security Business:

@IRJ said in Cyber Security Business:

@scottalanmiller and @JaredBusch you guys see alot of SMB customers. It it a safe statement to say that most are not IT security focused?

Gods no. Security is a joke to them. I am talking to my boss about paying for you to come in to one of our clients to prove how much should be done as proof of what we have been saying.

Sadly, the client isn't inclined to believe that anymore than they believed you - and why should they? you bringing in another vendor to prove what you've been saying?

Really, if they want a real possibility that they'll believe something that client needs to go out, find someone completely on their own, give that security company as little information as possible and simply say - we want a security audit, and then see if those results come back the same as what you've been suggesting.

What? No.

I am not a vendor. I am a consultant. they pay me to recommend people. I am not bringing in a vendor. I am bringing in a specialist.

Why would they believe a specialist over you - they are already paying you as a specialist in IT.

They are paying me for the truth. I tell them that they need to have a specialist in Security look at things.

@JaredBusch said in Cyber Security Business:

I am talking to my boss about paying for you to come in to one of our clients to prove how much should be done as proof of what we have been saying.

If you need to hire someone else to prove what you've been telling them they need to do, it sounds like they don't trust you, that's what I was saying.

I have been telling them things based on my own knowledge, but I am not a specialist in Cyber Security. Thus the recommendation.

I suppose if at the same time you are presenting the suggestions (not some time later to try to make them agree with you) that would be one thing, but it sounds like you are seeking this audit as a way to to say - see, I told you need this, now do it.

It is an "I told you so point" by now.

@stacksofplates said in Breaking into Ubuntu Server:

Did you figures it out? You've kind of inspired me. I kind of want to go through the OSCP now.

Yes I did figure it out. PM me and I can tell you the resolution.

COngrats!

@IRJ said in Local Guest Account:

@NattNatt said in Local Guest Account:

@scottalanmiller said in Local Guest Account:

@NattNatt said in Local Guest Account:

@IRJ said in Local Guest Account:

@NattNatt said in Local Guest Account:

@IRJ said in Local Guest Account:

@DustinB3403 said in Local Guest Account:

We disable it.

According to Microsoft that is a low risk and if you aren't getting alerts for local user account changes it can pose a much higher risk.

The local admin account is generally changed on a regular basis, but guest accounts are rarely touched. An admin or even a vendor could in turn enable the guest account and give it local admin privileges, and chances are you would never know.

Wait, you allow Vendors access to your servers without monitoring them to see what they're actually doing?

Internal IT poses a risk as well.

Depends who you work with...I trust all my team I work with. If I didn't, I wouldn't work with them...

Right, so why watch your vendor like that, they are part of your team.

Not always, we are told by clients to allow some vendors onto their systems, they were never recommended by us, therefore not part of our team, they're an external third party. Not saying sit there and just do that, but we are always on the server at the same time with a recorded session in those instances, can still do other tickets etc in the background, but keep an eye on for opening stuff they shouldn't be doing/have a recording to prove stuff that was done etc

You can give yourself a local admin rights in about 60 seconds through the GUI. If you script it, you are talking about 3-5 seconds. If you are going to let someone on your system, you better be auditing them.

That was my point, we do that, we record everything as well to make sure we don't miss anything/can play back and see exactly what was done, covering ourselves in case something they do breaks the system//creates a backdoor//loophole like this

ERL and Unifi AC Lites

This is a really cool course, unfortunately I can't share too much about it or it would ruin the integrity of the course for anyone who is striving for this certification.

Basically, you get a few attacker machines (Windows and of course Kali) that are used to perform the attacks. The network is segmented and secure like a business network would be. There is a firewall, IDS, A/V, and other challenges that are meant to trip you up.

I'm working today 🙂

I'm afraid not.

@Dashrender said in Cyber Monday Security Training:

I was assuming ec council was the company offering this deal.

yes, that is correct.

I grew up with my father working as an internal consultant in engineering and they would call their clients customers, even when they were internal. Never users. It's not an IT thing, it's a standard "service department" thing. And was common by the 1970s for sure.

@travisdh1 said in IT Security Update:

@JaredBusch said in IT Security Update:

@IRJ said in IT Security Update:

@dafyre said in IT Security Update:

@IRJ said in IT Security Update:

@nadnerB said in IT Security Update:

Good to hear. 😀
More time for fishing?

Unfortunately not. I have a much longer drive to work, but now I am able to listen to podcast and watch Udemy Training videos.

Um... perhaps you should listen to the udemy training videos? Even @JaredBusch doesn't watch videos while he drives... Does he?

I mostly listen and sometimes I glance.

I used to read entire novels on long drives with my e-reader and the font set to ludicrous size.

Did you wear plaid?

The most important question: Were you also at ludicrous speed?
Youtube Video

Lol, this is no different than trying to use a 8 GB Android device. Those things are super painful.

Im just playing devil's advocate here.

As Scott often says. When you choose to use a platform, you need to fully buy into it, or you just end up in a bad way. In this case, the mini tablet appears to need more storage than your device comes with to allow for updates, etc to work as intended.

I have one of these devices, different brand though. It does what I need...