@scottalanmiller said in Hard disk encryption without OS access?:
If they steal the drives containing the operating system too, no more encryption.
Not with full disk encryption, unless you steal the entire server. Full disk encryption is tied to the TPM for example, so you'd need the entire thing to decrypt a hard drive or virtual disk.
@scottalanmiller said in Hard disk encryption without OS access?:
@Obsolesce said in Hard disk encryption without OS access?:
@scottalanmiller encrypted at rest is just full disk encryption, like all modern Android and Apple phones do, Filevault for Mac, BitLocker with Windows, FDE like when setting up Ubuntu.
With Android or iPhone, they require human intervention to unlock. So that's exactly what I just described. That's why you can reboot a phone to keep the police from just getting into it, because it can't be decrypted without the human.
Which is what I'm talking about when doing it correctly in the case of PCs and servers.
In the case of servers where you may not want to have a human unlock at startup, the main benefit in that case is drive theft protection (or virtual disk theft), the drive would still be encrypted and protected from access in that case, but pretty much ends there.
@scottalanmiller encrypted at rest is just full disk encryption, like all modern Android and Apple phones do, Filevault for Mac, BitLocker with Windows, FDE like when setting up Ubuntu. Set up properly, e.g., encryption startup PIN, among others, definitely provides a lot of benefit and is a defacto standard these days. The issue is that so many do not do it correctly, for the wrong reasons, and with the wrong idea.
An easy way to see it in practice where it works, imagine if everyone's smart phones were not encrypted at rest, they are, which is why authorities have such issue with it (I mean if samsung/apple weren't forced to create back doors for the government).
@gjacobse said in Inconsistent output from PS script:
I mentioned that I was building another convenience script, It needs to only look at a servie running on four remote computers. This service runs to accept CC/Debit cards on a POS station. But sometimes the service borks and has to be restarted.
I have a simple batch file that does it now, but figured at some point I would move it to PS using a menu type system... and thus I have started doing so.
Oddly, I am seeing inconsistent output when it's ran. The syntax of the line didn't / doesn't change - so not sure why this happens.
Get-Service -ComputerName pc1, pc2 SERVICE | Select name, MachineName, StatusRun it once and I get nothing back, run it again and I get listed twice, run it a third time and I get what I want to see the first time.
Additionally, I have a 'title line' that I ass the
-Foreground colorand it skips the first one or two letters before applying the color. seems odd, and comparing my formatting - it's no different then others I have seen...
Does that above command work properly by itself in the script, without anything else in the script? Can you share the output of just that part by itself (you can blur any sensitive info).
@RojoLoco said in RojoLoco gets a new kitchen....:
Here's a quick pic of the actual countertop:
C'mon man, everyone knows you should always use a banana for scale.
@RojoLoco said in What Are You Doing Right Now:
Has anyone here made cold brew coffee with a vacuum funnel? Seems like it might be an interesting method.
Just looked into vacuum brewing coffee... Definitely looks very interesting.
@nadnerB said in What Are You Doing Right Now:
@Obsolesce said in What Are You Doing Right Now:
Just finished collimating my telescope. It needed done badly now that I got a new mount and tri-pier.
I've been meaning to ask how your setup is going.
Have you been able to get out with it lately?
It's going well now. My main interest is astrophotography, and with what I had, my biggest limiting factor was tracking (mount/tripod). I don't have a big aperture scope, so of course that doesn't help, but it's way more than enough to fulfill my needs with the proper foundation.
The camera I have is absolutely amazing, I'd get it again. The downside is compatibility with numerous astrophotography tools (as well as the fact it's not a dedicated astrophotography camera). It's working mostly fine on Linux (Astroberry rPi), thankfully, but still has it quirks. We use the camera for regular photography all the time so it's definitely worth it aside from that. Maybe I'll get a cheap ZWO sometime in the future.
But yeah, it's going well now... has been cloudy literally for the past few weeks straight until clear two nights ago and tonight, maybe tomorrow night will be okay (we'll see), but after that more clouds. Not exactly normal for here at this time, but whatever. I'll make the best of it one way or another.
Just finished collimating my telescope. It needed done badly now that I got a new mount and tri-pier.
@scottalanmiller said in Windows 11 versus 10:
In the Linux world you have heavy workflow innovation with new workspace and interaction design taking the lead with experimentation and improvements in how people work with their operating systems.
The Windows world has that too, but we don't say Windows has improved because Adobe Reader improved, versus saying Linux improved because Gnome improved... or are you just referring to the Linux kernel?
@JaredBusch I figured it out after creating a WIn10 VM (same issue in Win10 22H2 by the way)
Edition Windows 10 Pro
Version 22H2
Installed on 10/22/2022
OS build 19045.2006
Experience Windows Feature Experience Pack 120.2212.4180.0
Get-ChildItem -Path ~\Documents -Hidden | ForEach-Object { (Get-Item -Path $PSItem.FullName -Force).Delete() }
Maybe you can shorten it:
Get-ChildItem -Path ~\Documents -Hidden -Recurse | ForEach-Object { $PSItem.Delete() }
@JaredBusch said in How can I remove these items with powershell?:
What version of powershell did you have on your test?
The system I just tried it on was a clean new install of Windows 10 21H2.
PowerShell:
Name Value
---- -----
PSVersion 5.1.22000.832
PSEdition Desktop
PSCompatibleVersions {1.0, 2.0, 3.0, 4.0...}
BuildVersion 10.0.22000.832
CLRVersion 4.0.30319.42000
WSManStackVersion 3.0
PSRemotingProtocolVersion 2.3
SerializationVersion 1.1.0.1
Windows:
Edition Windows 11 Enterprise
Version 21H2
Installed on 10/19/2022
OS build 22000.856
Experience Windows Feature Experience Pack 1000.22000.856.0
@JaredBusch I did not use an elevated ISE window:
And it worked for me:
@JaredBusch Are you sure it was with just using Remove-Item like in your example, and not doing anything else first?
@JaredBusch If it throws a UAC prompt when doing through Windows Explorer GUI, then the script may need elevation. If you run it from an elevated PowerShell window, does it work then?
@WrCombs said in Blue Stacks:
@JaredBusch said in Blue Stacks:
@WrCombs said in Blue Stacks:
Anyone use Blue Stacks for gaming?
I use it for work but was looking to get into some more gaming in my free time.
Never used it for gaming. Only for getting android apps on a computer
thats my current use for it - but I see games are available and was wondering how the games play.
I've used it for Billiards in the past because it made aiming a whole lot easier than with my finger on a small phone screen. It works just like it does on a phone, but you can use your mouse and keyboard. It works well.
I also use it for a few non-game apps and works well.
@scottalanmiller said in Miscellaneous Tech News:
Jaja, yay I got sort of referenced
The "weird systems users": hobbyists who offer virtualization to non-profit and charity users, using old, out-of-maintenance hardware that had been inherited or passed on to them. Enthusiast users, with no funds to buy licenses?
@scottalanmiller said in Send an Email via SMTP from Command Line with cURL:
--user '[email protected]:password'
Might not want to put username & password in a script if scripting this. At least put them as environment variables if nothing else. Also not a great option, but better than plain text in script.
@gjacobse said in PS ISE: Unsaved Projects:
Right now, I'll have to pencil GIT onto the project list. I just don't have the bandwidth to investigate it right now. If the unsaved scripts are lost,... they are lost - my own fault and I recognize that. I had some hope that I could recover them.
I just have to much going on to take on another project I can't truly invest time into. If I start something, I'll just have to ensure I save it - I think I saw something about making PS:ISE autosave....
Thank you for the suggestions and recommendations.
Just use vscode. Hell, even notepad++ does autosave more reliably than ISE. But I've never lost anything I didn't save while working in vscode.
@scottalanmiller said in Miscellaneous Tech News:
@Obsolesce said in Miscellaneous Tech News:
Uber Breach 2022
The critical vulnerability that granted the attacker such high levels of access was hardcoded credentials in a PowerShell script
Argh, why the heck is there Windows development on a platform like Uber? And who approved THAT GIT checkin?
No idea. Android and ios only AFAIK. No need for Windows. But I have a feeling that one who bakes credentials into scripts would do it in any scripting language. You'd also think a vulnerability like that would have been found during scanning. They must not have any devsecops or code scanning tools in place.