Posts made by travisdh1

@EddieJennings said in What Are You Doing Right Now:

Watching Ansible Automates presentations.

I'm taking another look at AWX, I'm told it's made huge leaps in usability since I last tried it out.

@travisdh1 said in Weekend Plans:

I just got a ticket for Ohio Linux Fest. I'll only be able to attend Saturday, but looks like some interesting things happening.

https://olfconference.org/ if anyone else is interested.

Well, after the conference, I think it's time to give tower another look. A lot has changed, and it should be stable now.

@dbeato said in What Are You Doing Right Now:

@travisdh1 Sophos XG or XGS firewalls have it that way as well with no GUI.

Yuck!

@scottalanmiller said in What Are You Doing Right Now:

@nadnerB said in What Are You Doing Right Now:

@travisdh1 said in What Are You Doing Right Now:

Cursing the existence of SIP-ALG.

The only way to disable it on a FortiGate is the command line. I'm fine with that, but most people won't even be aware it exists and is turned on!

Interesting choice to exclude that from their interface.
Even an alert to confirm that you want it left on would be better than completely excluding it.

This implies to me that they are getting paid by ISPs or similar vendors to create problems on their behalf.

Wouldn't surprise me. They're pricing structure reminds me of Cisco, you have to license the most basic stuff.... 2fa, that's an additional license!

Cursing the existence of SIP-ALG.

The only way to disable it on a FortiGate is the command line. I'm fine with that, but most people won't even be aware it exists and is turned on!

I just got a ticket for Ohio Linux Fest. I'll only be able to attend Saturday, but looks like some interesting things happening.

https://olfconference.org/ if anyone else is interested.

@JasGot said in SAMIT: Should You Still Be Using Disk Partitions:

@scottalanmiller
Can you do a part two that goes more in-depth?
For example...
Is Windows Disk Management a Volume Manager or Partition Manager?
Is Windows (command line) DiskPart a Partition manager or a Volume Manager?

It appears Microsoft uses the terms interchangeably.
In Disk Management, they are listed as Volumes, but their status is Partition
In DiskPart they are listed as Volumes with "Type" of Partition?

Those are both partition managers. Microsoft's Volume Management is handled in Storage Spaces.

Also, Storage Spaces is the least reliable storage system I know about.

DBAN covers just about any data wiping requirement, and it's free.

@Obsolesce said in Anyone have a decent 3D printer?:

@gjacobse said in Anyone have a decent 3D printer?:

Holy crap - yea,.. that's a burnt print.

I have an Ender 3 Pro and it does a decent job of things... As long as, as with anything, you pay attention to a number of factors. Sadly I don't have photos of some of the prints I've done, and the photos I do have are ones I can't release.

Filament, speed, flow, temp and bed adhesion are may factors to deal with. I haven't been able to print ABS as it just peels right off. I do decent with PLA and TPU...

There is a lot that I don't know how to do and don't know if I want to try,.. but I've learned a bit also.

Here is a file I printed for a friend:

I thought since they had a decent 3D printer (Makerbot Replicator+) it would have turned out to be a least usable. I'm not sure how they let come out like that. It was printed in PLA, but I don't really care what's used, so long as what prints out is usable. I've never 3D printed anything, so I don't really know a whole lot about it, but given they have what seems like a decent printer and they operate a printing service, I thought it'd have at least turned out a bit better than it did.

Makerbot Replicator+ is a good printer, it's just that it will never get the attention it needs for good prints at a public library. At least if it's anything like the public libraries around here that offer a printing service.

@Obsolesce said in Anyone have a decent 3D printer?:

I'm wondering if anyone have a decent 3D printer that works decent for precise printing and knows how to use it so it doesn't look like it was printing during an earthquake.

I attempted to print something for free using a local library, but when I picked it up, seen that it was just totally butchered.

Here's what it's supposed to look like, the .stl file:

And here's what I got from the library:

As you can see, just totally butchered.

If anyone might be able to help me out, I'd like to see what it'd take to get something like this or similar printed and sent. There's another design I'm testing atm.

Your first problem was going to the local library, where I guarantee they don't have anyone who understands the machines they got with the grant money.

Find a local maker space, or just shell out the $100 for a small one of your own. (Micro Center)

@scottalanmiller said in Miscellaneous Tech News:

@travisdh1 said in Miscellaneous Tech News:

@scottalanmiller said in Miscellaneous Tech News:

AMD Genoa announced...

https://www.nextplatform.com/2022/11/10/amd-genoa-epyc-server-cpus-take-the-heavyweight-title/

AMD, turning it up to 11!

No kidding. Too bad these are so big I'll never need one of my own. But hopefully the datacenters see these rolling in soon.

Some of the press releases have confirmed the big providers already have them in use, so yes, they're already being deployed.

@scottalanmiller said in Miscellaneous Tech News:

AMD Genoa announced...

https://www.nextplatform.com/2022/11/10/amd-genoa-epyc-server-cpus-take-the-heavyweight-title/

AMD, turning it up to 11!

@gjacobse said in iOS and/or Windows WiFi heat mapping:

@travisdh1 said in iOS and/or Windows WiFi heat mapping:

Also Ubiquiti WiFiman.

Used to use WiFi Analyzer, but dropped it when it went add supported.

What are you using now?

Ubiquiti WiFiman

@Sawyer said in Raspberry Pi Zero W Bought for Testing:

I ordered Raspberry Pi zero W from https://robu.in/product/raspberry-pi-zero-w-with-raspberry-pi-zero-w-accessories-kit/.
What exactly does the NOOBS Software do?

NOOBS sets up your choice of OS for you. It's not needed, but is handy if you don't have another computer to setup an OS.

Also, if you have these sorts of questions in the future, just make a new thread.

@DustinB3403 said in What Are You Doing Right Now:

Death scrolling ML, been a while since I've had a chance to post here. How is everyone doing?

I got a new job around 6 months ago. I'm now a network engineer, and like the job/coworkers/manager.

@Pete-S said in Windows 11 versus 10:

@JaredBusch said in Windows 11 versus 10:

@Pete-S said in Windows 11 versus 10:

Or is it just the usual make-a-new-version-so-we-can-market-and-sell-upgrades?

You know they haven’t sold windows upgrades for years now right?

Sure but I didn't mean that. New OS often requires new hardware which means a new oem license for MS and also new opportunities to sell M365 and other services. I'm sure they have this down to a science.

There are artificial hardware requirements they threw in with Windows 11. The big one being "require" TPM2.0.

Doesn't actually USE any of the features added in 2.0 compared to 1.2, of course.

Also Ubiquiti WiFiman.

Used to use WiFi Analyzer, but dropped it when it went add supported.

@scottalanmiller said in Miscellaneous Tech News:

@stacksofplates said in Miscellaneous Tech News:

@Dashrender said in Miscellaneous Tech News:

@scottalanmiller said in Miscellaneous Tech News:

@Dashrender said in Miscellaneous Tech News:

@stacksofplates said in Miscellaneous Tech News:

For almost two years, Microsoft officials botched a key Windows defense, an unexplained lapse that left customers open to a malware infection technique that has been especially effective in recent months.

Microsoft officials have steadfastly asserted that Windows Update will automatically add new software drivers to a blocklist designed to thwart a well-known trick in the malware infection playbook. The malware technique—known as BYOVD, short for "bring your own vulnerable driver"—makes it easy for an attacker with administrative control to bypass Windows kernel protections. Rather than writing an exploit from scratch, the attacker simply installs any one of dozens of third-party drivers with known vulnerabilities. Then the attacker exploits those vulnerabilities to gain instant access to some of the most fortified regions of Windows.

It turns out, however, that Windows was not properly downloading and applying updates to the driver blocklist, leaving users vulnerable to new BYOVD attacks.

https://arstechnica.com/information-technology/2022/10/how-a-microsoft-blunder-opened-millions-of-pcs-to-potent-malware-attacks/

OK that's definitely bad that they don't block it - but since you're an admin - why do you even care? the article says that the attacker is starting as a local admin.

Installers are typically local admins.

let me ask this another way.
Yes - it's bad that MS isn't blocking something they said they would.

But does that make the situation any worse than it would really be if they did?

the attacker already has local admin - why would they need to install a driver that has vulnerabilities when they already have full local admin control - what advantage do they get they didn't already have?

Because they’re mostly things like automated installs. It’s not like someone is sitting at the keyboard as a bad actor. It’s an email with an attachment for a doc that when Sally opens it installs a valid signed driver that is vulnerable.

Exactly. Automated or confused users OR, don't forget, confused DEVELOPERS. It's not hard to get legit software, especially closed source, to think that MS signed drivers are safe (as that's the whole idea of the system is that everyone can trust them because MS is vouching for them) and trigger that they be installed, bypassing the expected security system.

I've seen that done by developers way to often.