@Dashrender said in TPM module - what is it used for?:

@pmoncho said in TPM module - what is it used for?:

@Dashrender said in TPM module - what is it used for?:

@scottalanmiller said in TPM module - what is it used for?:

@pmoncho said in TPM module - what is it used for?:

Bad guy steals just hard drives, no worries. Owner safe.

This is a big deal as this is how most people manage to make off with data.

You hear about HD's being stolen, but not the whole unit?

I have. 2U Rack unit They bad guys didn't have a screw driver handy. Pressed the power button, pop the drives and out the door.

LOL - stealing just to steal it sounds like - unless they were targeted...

It was a lawyers office so I believe it was.

@Dashrender said in TPM module - what is it used for?:

@scottalanmiller said in TPM module - what is it used for?:

@pmoncho said in TPM module - what is it used for?:

Bad guy steals just hard drives, no worries. Owner safe.

This is a big deal as this is how most people manage to make off with data.

You hear about HD's being stolen, but not the whole unit?

I have. 2U Rack unit They bad guys didn't have a screw driver handy. Pressed the power button, pop the drives and out the door.

@scottalanmiller said in TPM module - what is it used for?:

@pmoncho said in TPM module - what is it used for?:

Bad guy steals just hard drives, no worries. Owner safe.

This is a big deal as this is how most people manage to make off with data.

Should have mentioned, if the TPM module is put to use with encryption, taking the drives is useless. The need the entire system.

@Dashrender said in TPM module - what is it used for?:

@black3dynamite said in TPM module - what is it used for?:

I know with a Windows 10 desktop using Bitlocker, TPM makes it possible for us to not have to enter a password to boot into Windows. I do believe Hyper-V also utilize TPM has well.

Not using a password to unlock the TPM seems to make that situation almost, I'm saying almost, pointless.

Agreed.

From system owner perspective:

Bad guy steals just hard drives, no worries. Owner safe.
Bad guy steals entire systems, big worries. TPM is useless and Owner screwed.

@alex-olynyk said in Bed Bugs:

Anyone have experience with these? If so did you call a professional and spend 2,000 or use a DIY method? What were the results?

Dealt with this issue twice with my wife when she lived in an apartment.

First time - Apartment called Terminix and we paid for half. Had to throw out all mattresses, and a bunch of little stuff. Every single piece of clothing, blankets, pillows was washed and dried.

Used Saran wrap for all books, CD's, DVD's and bagged up all kids toys then stuffed in Zip Lock bags, and then put in large storage containers in my attic which gets pretty hot in the summer. They were left in there for 6 months.

Anything that could be sprayed with rubbing alcohol was, and then bagged and stored in the storage containers.

All of this took about two days to get done and the washer and dryer were put to the test. Probably about $400 worth of time and materials.

Wife bought all the bed bug covers for mattresses and pillows from WalMart. The decent ones are NOT cheap. Three beds and ten pillows came to $400. It is all about the zipper. Make sure the zippers have a fold over Velcro or something.

The second time, same apartment, Apartment paid all of Terminix Bill and we just washed stuff. I believe management made the other tenant who had the initial infection pay the bill (it was in the contract).

She was moving in with me in 6 months later so the 2nd time was no big deal.

If possible, I would go with the heat treatment as it was VERY expensive at the time. The pricing has come down somewhat. You are still going to have to clean though. Nothing you can do about that.

Start with bagging everything up and then move go whichever route you like.

@Dashrender said in You cannot fix stupid vendors:

@IRJ said in You cannot fix stupid vendors:

@scottalanmiller said in You cannot fix stupid vendors:

@IRJ said in You cannot fix stupid vendors:

@JaredBusch said in You cannot fix stupid vendors:

Instead you simply refuse to purchase form them when possible. When not possible, you do the absolute minimum required to implement and keep any change documented in order to prevent stupid shit they do from coming back on IT.

This is where it is nice to have policies in place that only allow secure apps to be deployed that meet a a defined criteria. This policy is then signed by CEO and CTO. So when they want the software, you show them it doesnt meet the policy they signed and is it creates unnecessary risk

Great idea.

Another thing to write on the policy is that if there are any exceptions to this they must be signed off and documented. You will find out how quickly the c levels or even directors will not want to sign anything off and accept responsibility for the risk.

My office wouldn't care..

My guess is they don't care because there are no ramifications. Most of what I have seen is all talk and no action. Add to that, even if you show the signed sheet, blame will be shuffled on down the line.

@JaredBusch said in What did you have for lunch or dinner today?:

okonomiyaki

That looks pretty good. Never heard of it. What all do you have on there?

@scottalanmiller said in Spinning rust, how long do you keep it spinning?:

@Pete-S said in Spinning rust, how long do you keep it spinning?:

Do you replace or upgrade disk arrays based on their age?

No, once they are healthy and spinning they tend to last and last. Replacing proactively rarely will help much and might actively make them less reliable. Not worth it.

Good to know.

@Pete-S said in Spinning rust, how long do you keep it spinning?:

Do you replace or upgrade disk arrays based on their age?
Or do you let them spin until they die?

This is the debate I have going in my head as you can see from my recent post about my dying Dell drives. Server is still under warranty but I keep double checking my backups to verify they are good.

@Dashrender said in Dell Hot Swap 2.5" drive in place of 3.5":

@manxam said in Dell Hot Swap 2.5" drive in place of 3.5":

It's not uncommon at all. Your other drives are most likely to fail during a rebuild due to the added stress of continual access during this process.
That's what makes something like RAID 5 on spinning rust so scary.

If all of the drives in the array are of similar age and from the same batch, I'd plan on swapping them all within the next while as each successive rebuild takes its toll on the remaining drives.

Agreed - and double check those backups.

I have doubled and tripled checked. Did a couple restores today with single files and also entire VM's. (Currently using Veeam)