@scottalanmiller said in What Are You Doing Right Now:

NextCloud 20.0.1 update now.

This system was migrated 2 weeks ago from CentOS 7 to Fedora 32. NC 20 has never been offered to it yet.

Laptop upgrade running.

@scottalanmiller said in Fedora 33 is officially here!:

First server upgrade is already underway.

Doing my laptop. It was recently installed clean with Fedora 32 Workstation (standard, not cinnamon).

As mentioned in the other thread, Fedora 33 is now available.

Like always, the process is straightforward.

sudo su -
dnf upgrade --refresh -y
dnf install dnf-plugin-system-upgrade -y
dnf system-upgrade download --releasever=33 -y
dnf system-upgrade reboot

Or on a single line (after you switch to root, because no one logs in as root right?)

sudo su -
dnf upgrade --refresh -y && dnf install dnf-plugin-system-upgrade -y && dnf system-upgrade download --releasever=33 -y && dnf system-upgrade reboot

@JasGot The T46S is not even the low end of the T4 series. So that doesn't help you.

The T53 (not T53W) is the bottom of the T5 series and is very comparable to the T46S when it comes to buttons (8 vs 10). The real difference there is no color screen. According to a supplier, the T53 still has Bluetooth, but I have not verified that. Edit: just checked the Yealink site and no, it does not include BT.

So far the Fanvil X4U I purchased for testing is working well. I'll likely be quoting the X4 and X5 lines along with Yealink phones for customers going forward.

The only problem I ever had with Fanvil was the lack of official support.

Client WP site got blowed up. I didn't set it up.

From what I can tell it was setup on a Vultr by someone using the WP App install method.
Custom theme was setup and their content added.
But nothing was ever updated after the fact. Surprise it was hacked...

Ubuntu 18.04 with Zero updates. No idea what the WP version was, I didn't note it down.

Updated Ubuntu 18.04 to current 18.04.
Blocked SSH.
Updated WP to current.
Removed unused plugins.
Updated all the remaining plugins.
Installed wordfence plugin with subscription.

WordFence cleaned the fuck out of things. All but one issue resolved within WordPress.

The index.php keeps getting overwritten. Immediately upon getting fixed. It also gets a chmod 444 by whatever process is fucking with it.

So I made a new file named index.php.lock with the default contents.
Then I copy it into place and mark set it immutable.

cp index.php.lock index.php && chattr +i index.php

That keeps the file safe and WordFence has no other issues.

But now I want to know where this is coming from so I can make sure it does not come back when I backup and restore this thing to a new instance.

A default WP instance from Vultr has phpmyadmin, cockpit, and XHProf installed. I assume one of these was compromised as WordPress itself seems clean at this point, but I want to be certain..

So I installed fswatch hoping that would help me. Well it shows me the file attempting to get fucked with. But not any details.

# fswatch -v index.php
register_signal_handlers: SIGTERM handler registered.
register_signal_handlers: SIGABRT handler registered.
register_signal_handlers: SIGINT handler registered.
start_monitor: Adding path: /var/www/html/index.php
add_watch: Added: /var/www/html/index.php
run: Number of records: 16 # <-- this one is when I put the right version in place.
preprocess_node_event: Generic event: 1::/var/www/html/index.php
notify_events: Notifying events #: 1.
/var/www/html/index.php
run: Number of records: 48 # <-- repeatedly afterwards. sometimes after a delay.
preprocess_node_event: Generic event: 1::/var/www/html/index.php
preprocess_node_event: Generic event: 1::/var/www/html/index.php
preprocess_node_event: Generic event: 1::/var/www/html/index.php
notify_events: Notifying events #: 3.
/var/www/html/index.php
/var/www/html/index.php
/var/www/html/index.php
run: Number of records: 16 # <-- repeatedly afterwards. sometimes after a delay.
preprocess_node_event: Generic event: 1::/var/www/html/index.php
notify_events: Notifying events #: 1.
/var/www/html/index.php
run: Number of records: 208 # <-- repeatedly afterwards. sometimes after a delay.
preprocess_node_event: Generic event: 1::/var/www/html/index.php
preprocess_node_event: Generic event: 1::/var/www/html/index.php
preprocess_node_event: Generic event: 1::/var/www/html/index.php
preprocess_node_event: Generic event: 1::/var/www/html/index.php
preprocess_node_event: Generic event: 1::/var/www/html/index.php
preprocess_node_event: Generic event: 1::/var/www/html/index.php
# and more and more...

@DustinB3403 said in What Are You Doing Right Now:

@JaredBusch said in What Are You Doing Right Now:

@DustinB3403 said in What Are You Doing Right Now:

On a side note, does anyone know if Ubiquiti uses Foxconn for their boards?

Who cares? Foxconn is one of the largest companies in the world. it would be a surprise if they did not have parts inside.

Looking to try and find a rogue AP according to a controller I manage, just looking to confirm what brand it might be.

How would the manufacturer matter? MAC address (a guess) can easily have nothing to do with manufacturer. Depends on the vendor.

@DustinB3403 said in What Are You Doing Right Now:

On a side note, does anyone know if Ubiquiti uses Foxconn for their boards?

Who cares? Foxconn is one of the largest companies in the world. it would be a surprise if they did not have parts inside.

@Dashrender said in What Are You Doing Right Now:

@JaredBusch said in What Are You Doing Right Now:

@Dashrender said in What Are You Doing Right Now:

@JaredBusch said in What Are You Doing Right Now:

@WrCombs said in What Are You Doing Right Now:

One will be in the basement and one will ne on the second floor.

You are talking 1-wall (floor) passthrough and 30' max.

With a UAP-AC-LITE you stick it on the ceiling in the middle of the main floor.

But again, no reason to use hardware like this at home for noreason. Use consumer gear, aka Amplifi.

UAPs are known to not have a great donut shape above them, they are designed to go more downward... it's not zero up, but might not be great for the floor above them.

They work perfectly well above them. Can you backup that statement?

Only by what my associate saw with them in his deployment.. no personal experience.

More correctly, Ubiquiti optimized them to go down/out from the mounting point.

But they do work perfectly well "behind" them.
Here is Ubituiti's specs.
https://help.ui.com/hc/en-us/articles/115005212927-UniFi-UAP-Antenna-Radiation-Patterns#lite overall

The worst spot it directly behind and center.

@Dashrender said in What Are You Doing Right Now:

@JaredBusch said in What Are You Doing Right Now:

@WrCombs said in What Are You Doing Right Now:

One will be in the basement and one will ne on the second floor.

You are talking 1-wall (floor) passthrough and 30' max.

With a UAP-AC-LITE you stick it on the ceiling in the middle of the main floor.

But again, no reason to use hardware like this at home for noreason. Use consumer gear, aka Amplifi.

UAPs are known to not have a great donut shape above them, they are designed to go more downward... it's not zero up, but might not be great for the floor above them.

They work perfectly well above them. Can you backup that statement?