Leaving at 3 to go to one of our locations in KS

@scottalanmiller said in What Are You Doing Right Now:

Enjoying a slow day and hoping that tomorrow is truly a holiday.

You jinxed it......
Our VM's backup repository is down and trying to see if someone close to the datacenter can run in, or I will have to make the long trek in. I blame you.

@scottalanmiller said in What Are You Doing Right Now:

Already had one morning meeting. Gardeners are here. Working on a video. Drinking coffee. Working on MS SQL Server.

Whatcha doing in the Microsoft services? Do you know what you are doing with no command line?

Got home from the parents. Got roped into moving outdoor furniture for pressure washing patio.....

@scottalanmiller said in What Are You Doing Right Now:

Coffee time. Dealing with some office drama, as always.

Wasn't me!

@siringo said in What Are You Doing Right Now:

packing up, ready to hit the road to visit and terrorise the next victim, uh, client.

No, I think your first statement is more accurate!

Patching Exchange for critical March update. 45m into the 3h+ usual patching for the 5 servers.

Taking over a location from an MSP and I found that there were two accounts that were created in 2019 with only one login on that date in 2019, and the password was listed in the account description field..... Luckily this domain will only exist for about a week under our control before we move them to our domain.

Drafted an email for my management to review before I email the CEO of that MSP. Just to make sure it doesn't backfire on me. CYA since I am about to call out an MSP at horrible security.

@scottalanmiller said in I Cant Even...:

Oh wait, Windows 7....

mmmmmmm, Security....

@scottalanmiller said in I Cant Even...:

Today a large corporate "IT department" that uses DattoRMM (OMG, shoot me now) ask me if we needed these "apps"...

sc.exe and wmic.exe because DattoRMM was flagging them.

Um, that's WINDOWS. What kind of IT department that manages thousands of Windows computers opens a ticket to their upstream MSP to ask what sc and wmic are? Like, ever heard of Google? Or Windows? Seriously?

Do I need sshd on my linux servers? Can you remove it?

I cant even....Begin to see the breach data and lawsuits coming....
https://www.bleepingcomputer.com/news/security/godaddy-hackers-stole-source-code-installed-malware-in-multi-year-breach/

@siringo said in What Are You Doing Right Now:

@jt1001001 said in What Are You Doing Right Now:

Had a very rare earthquake this AM here in Western NY, USA, USGS says 3.8, Canada says 4.2; felt the who house shake for about 5-10 seconds. No damage

there's a new video up on Youtube about the Fukushima quake, tsunami, disaster put together from various sources by NHK.

I watched it the other day. some footage of the quake was horrific. it was very violent and just kept going.

the tsunami was just as horrific.

Youtube Video

You see the videos of the one that happened today in Turkey?

@scottalanmiller said in What did you have for lunch or dinner today?:

My chef just handed me breakfast nachos...

"My Chef" must be nice...

@scottalanmiller said in What Are You Doing Right Now:

@WrCombs said in What Are You Doing Right Now:

holy busy day.

Aka "everyday"

6 back to back meetings yesterday. It sucked.

@RojoLoco said in What Are You Doing Right Now:

@dafyre said in What Are You Doing Right Now:

@RojoLoco said in What Are You Doing Right Now:

So last week I rolled out DUO 2-factor authentication. Happy to say that I only had 1 user with any issues, and that only required a simple delete / recreate account. I feel safer already.

Duo. My place has been on it for 2-3 years now.

Hmmm... good to know. I might have to pick your brain if I run into any other problems.

We use the hell out of it. VPN, OWA, RDP, and working on using it to secure some 3rd party sites so they dont have to juggle 5 different mfa apps.

@scottalanmiller said in Miscellaneous Tech News:

https://www.bleepingcomputer.com/news/microsoft/microsoft-365-outage-takes-down-teams-exchange-online-outlook/?mibextid=Zxz2cZ

They had an issue on Friday that affected people with GEO blocking......After research we found some of the IP's trying to respond were based in India. Unblocking India from GEO fixed it. I imagine companies that are government or companies based in the UK would be able to sue the pants off them.

4+ Hour meeting that all I contributed is organizing the Zoom, a vendor is doing most of the work. Getting house chores done at least.

Looking through security alerts that were stopped.
How did they think this would have made it past the spam filter as a source email?
[email protected]

@Texkonc said in What Are You Doing Right Now:

Counting down the day before moving our sales spam filtering to OUTSIDE the wire.
This email security alert.....
"Email Subject : Like nature's Drano for your bowels?"

No thanks, I would like to continue living.

Thankfully it was blocked...

Counting down the day before moving our sales spam filtering to OUTSIDE the wire.
This email security alert.....
"Email Subject : Like nature's Drano for your bowels?"

No thanks, I would like to continue living.