Posts made by marcinozga

I just did an upgrade from 2.4.5 to 2.5.1 few minutes ago, it was flawless. As far as disaster recovery, if it hits the fan, just install from scratch and restore backup from xml file. It really is no different that rebuilding docker containers for example.

@dustinb3403 said in Proxmox in production questions:

@itivan80 said in Proxmox in production questions:

I am using a promox server with the following raid-RAIDZ-3. A variation on RAID-5, triple parity. Requires at least 5 disks. It works awesome for my VMs. It protects me fully if one disk goes down.

Raid 5 does this natively, how is this some amazing feature?

This is ZFS RAIDZ3, probably the only implementation of RAID7. It protects not from just one disk failure, but from 3, at the cost of rather severe performance penalty. Not something one would put production loads on, even with all flash array. Probably better used for storing backups.

Wireguard with RDP, but that might be too high tech, and requires forwarding port.

@justin867 said in Domain Controller Question:

@marcinozga said in Domain Controller Question:

FSMO roles.

what roles should my onsite DC has so it will function properly even the main branch is down? I have an onsite DC and an onsite Print Server. But I don't want any other branch to be dependent on my branch DC server either.

RID, PCD and Operations Masters. These 3 roles are domain wide, each domain should have these roles. We don't know how's your domain setup, whether it's a forest, or just one domain for all sites. If one domain, these roles were probably held by domain controller at main data center, so you're sol. You could seize the roles, but once main site comes back, you're in a world of hurt.

@justin867 check if your onsite domain controller hold any FSMO roles. If not, things like permission control won't function properly if main branch is offline.

There's not enough info here to give you accurate answer. How are printers deployed? With group policy?

And don't forget, this is a company that wired millions to scammers, and only learned about it from FBI. And they failed to disclose all the details then too. So there's a pattern of covering their screwups.

https://www.forbes.com/sites/nathanvardi/2016/02/08/how-a-tech-billionaires-company-misplaced-46-7-million-and-didnt-know-it/?sh=41b9aa3550b3

One fact that Pera and Ubiquiti did not disclose at the time was that Pera only learned about the transfers of vast sums of money, 10% of Ubiquiti’s cash position, after being notified by the Federal Bureau of Investigation.

@scottalanmiller said in Ubiquity breached, downplayed the issue:

@marcinozga said in Ubiquity breached, downplayed the issue:

Does that sound like a trustworthy company? Or one trying to cover their asses to protect stock prices?

Can't go by the quote of someone we already caught lying a few sentences before. Bottom line is either Adam and/or Krebs (my money is on Adam) is just looking for some attention here. And it worked. Make a claim, don't substantiate it, don't even make it plausible, and no one checks. You can read the quote right on Krebs from Ubiquiti that clearly doesn't say what Adam claimed it said. So.... what's the bases for the whole complaint?

So whatever company says is absolute truth, right? Give me a break. Whistleblower has a name for a reason. And Krebs wouldn't publish the story unless he vetted the source thoroughly. But why do I even bother replying, since you already know UBNT tells the truth and any conflicting statement is automatically a lie.

@scottalanmiller said in Ubiquity breached, downplayed the issue:

If you read the claims by "Adam" and then read the statement made by Ubiquiti, you can see from that alone that he was lying. The entire premise of his claim is that UBNT downplayed something and tried to blame Amazon. But there is nothing of the sort in the statement that UBNT made. Nothing. This "Adam" character fabricated it completely just to get attention. And Krebs didn't do any verification, even bothering to read his own story. He just published something he already knew to be false to get a headline.

How do you know it's Adam who's lying? What makes you so sure UBNT are telling the whole truth? In the end, the company has more to lose here, not the whistleblower.

“It was catastrophically worse than reported, and legal silenced and overruled efforts to decisively protect customers,”

Ubiquiti has not responded to repeated requests for comment.

“Legal overrode the repeated requests to force rotation of all customer credentials, and to revert any device access permission changes within the relevant period.”

Does that sound like a trustworthy company? Or one trying to cover their asses to protect stock prices?

https://krebsonsecurity.com/2021/03/whistleblower-ubiquiti-breach-catastrophic/

From article it seems this was pretty serious.

@jaredbusch usually upgrades are smooth. On occasion I had to drop to shell and do upgrade there because web interface seemed stuck.

@JaredBusch said in Reset Synology admin account:

@marcinozga said in Reset Synology admin account:

Can you boot it into single mode? I found this article, it's a bit dated but perhaps still relevant:
https://wrgms.com/entering-single-user-mode-on-a-synology/

Did you actually read that? Not happening. This is a business and not a hobby.

I didn't go into details there, but since Synology basically runs Linux, I see no reason not to boot into single user mode and changing root password there.
Edit: Nvm, I didn't realize you had to take it apart to hook up serial cable.

Can you boot it into single mode? I found this article, it's a bit dated but perhaps still relevant:
https://wrgms.com/entering-single-user-mode-on-a-synology/

@Dashrender said in Miscellaneous Tech News:

@travisdh1 said in Miscellaneous Tech News:

@nadnerB said in Miscellaneous Tech News:

@Obsolesce said in Miscellaneous Tech News:

Nuclear is really the best.

It's not.
Perhaps it's the most efficient, but at what cost?

Done correctly, very little cost. So much fuel can be recycled that there is so little waste (this is assuming 100% of power production is switched to nuclear) that a single Falcon9 could launch it all into the sun.

I'm wondering if the reason they don't do this, want to do this is because of the chances of the rocket blowing up, and now we have radioactive material spread over 100's if not 1000's of miles.

Nope. Cost is the most important factor. We can safely store all the waste on earth for next to nothing. And it's really hard to get a rocket launched directly into the sun. It involves multiple gravity assist flybys by Venus and Mercury. It would actually be easier to launch it towards Jupiter or Saturn and use their gravity to head into the sun.

@Obsolesce said in Miscellaneous Tech News:

@marcinozga said in Miscellaneous Tech News:

https://arstechnica.com/tech-policy/2021/03/report-indian-government-is-planning-outright-ban-on-cryptocurrency/

At least one country is doing the right thing. Mining crypto is just a waste of energy.

It sounds more like an excuse, to ban crypto to force everyone to use their government's currency, blaming it on electricity waste.

This will not go well.

Of course it is. But this actually has a good outcome for humanity.

Dyson Sphere was in one of Star Trek TNG episodes, where Scotty from original series made an appearance. Such structure would simply get destroyed by asteroid or a comet, so swarm is more plausible.

@Dashrender said in Miscellaneous Tech News:

@marcinozga said in Miscellaneous Tech News:

@Dashrender said in Miscellaneous Tech News:

@marcinozga said in Miscellaneous Tech News:

https://arstechnica.com/tech-policy/2021/03/report-indian-government-is-planning-outright-ban-on-cryptocurrency/

At least one country is doing the right thing. Mining crypto is just a waste of energy.

I wonder if there is a way to keep crypto currency without the mining portion? Of course you still need the blockchain updated... and that of course will use power... and if that's only done by big corporations, then it's no more decentralized than other cash at that point (of course that's not correct, but I can't think of how to word it now).

No idea, but until we build Dyson Swarm around the Sun, for close to unlimited energy, all crypto should just be banned. Last I heard crypto mining energy consumption overtook entire country of Argentina. Let that sink in. All that energy to produce... nothing. We could be using that to produce antimatter for example

What's a Dyson Swarm?

It's like Dyson Sphere, just not a solid sphere, as that simply would not work.
https://en.wikipedia.org/wiki/Dyson_sphere
https://en.wikipedia.org/wiki/Dyson_sphere#Dyson_swarm

@Dashrender said in Miscellaneous Tech News:

@marcinozga said in Miscellaneous Tech News:

https://arstechnica.com/tech-policy/2021/03/report-indian-government-is-planning-outright-ban-on-cryptocurrency/

At least one country is doing the right thing. Mining crypto is just a waste of energy.

I wonder if there is a way to keep crypto currency without the mining portion? Of course you still need the blockchain updated... and that of course will use power... and if that's only done by big corporations, then it's no more decentralized than other cash at that point (of course that's not correct, but I can't think of how to word it now).

No idea, but until we build Dyson Swarm around the Sun, for close to unlimited energy, all crypto should just be banned. Last I heard crypto mining energy consumption overtook entire country of Argentina. Let that sink in. All that energy to produce... nothing. We could be using that to produce antimatter for example

https://arstechnica.com/tech-policy/2021/03/report-indian-government-is-planning-outright-ban-on-cryptocurrency/

At least one country is doing the right thing. Mining crypto is just a waste of energy.

@DustinB3403 said in Raspberry Pi-based KVM over IP:

@hobbit666 if the host isn't responding to TCP/IP how is this IP based KVM working with the host?

It doesn't. It connects to video output, and probably usb for mouse and keyboard. Just like any other KVM. IP part is to connect to KVM device, not the host. See this video how it's wired. No network involved.

Youtube Video