Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Locked thread
DGK2000
May 3, 2007

Hotel Soap is super proud of his little perfumed balls that never get dirty or stinky
So I just got this from the helpdesk for me to travel out to the site, and I cannot believe this.


quote:

Some computers have fallen out of the casing and are awkwardly on the floor

Adbot
ADBOT LOVES YOU

Kyrosiris
May 24, 2006

You try to be happy when everyone is summoning you everywhere to "be their friend".



KillHour posted:

Nope. I just found out it's for a "chain restaurant" so they can make sure their menu videos are playing correctly and switching over for breakfast/lunch.

:downsgun:

Please never stop posting about this project, good god.

Gunjin
Apr 27, 2004

Om nom nom
It's a loving food chain, can't they have any one of their dozens of low paid employees go outside and just check visually?

Kyrosiris
May 24, 2006

You try to be happy when everyone is summoning you everywhere to "be their friend".



Gunjin posted:

It's a loving food chain, can't they have any one of their dozens of low paid employees go outside and just check visually?

That's not "forensic" enough! :v:

stevewm
May 10, 2005

Lord Dudeguy posted:

Hi, it's me! The SysAdmin for your local bank!
......



I just thought it was so asinine... They send me empty documents with zero information that would even need to be secured. But requested I just scan the filled out documents (now with every single bit of my personal information on them) and send them back via regular mail. What exactly was the point of using the "secure" thing in the first place?!?!

They obviously have trouble with customer's not understanding this system too.. As the email notifying me I had a secure message was immediately followed by a cut and pasted email from the same person several pages long with detailed step by step directions for registering, logging in, and using the "secure" email website.

EoRaptor
Sep 13, 2003

by Fluffdaddy

KillHour posted:

Nope. I just found out it's for a "chain restaurant" so they can make sure their menu videos are playing correctly and switching over for breakfast/lunch.

:downsgun:

Are these the interior menus, or external ones?

Interior, and you can replace the camera that watches the line and cashes with a wider aspect one that can see the screens because you only need good enough to confirm, not be 100% readable at all times. Dump the images up via local DSL or cable connection to a nearby S3 instance, then have that scripted to aggregate together somewhere for possible review.

Reduces onsite flaky store video recording equipment, and you can give store management a website where they can review the footage easily, and export it for law enforcement if needed.

Just using it for screens is idiotic, but a side effect of a centralized security system would actually be worthwhile and provide a bunch of side benefits (efficiency measures of layouts, training on problem situations, facial recog for customer profiling, etc).

Dragyn
Jan 23, 2007

Please Sam, don't use the word 'acumen' again.

stevewm posted:

... obscenely complicated password requirements setup on it....

At least it had obscene password requirements. We use them frequently to hand off patient data, and one system I found doesn't allow special characters to be used in the password.

We do a similar thing, but it doesn't check the entire subject line, just the first word. So if you reply to a securemail and change the subject to "RE: *keyword* subject", you're screwed if you forget to remove the prefix.

It also checks for a list of keywords in the body, which gets me a lot when I'm sending out dummy data that doesn't need to be secured.

Lord Dudeguy
Sep 17, 2006
[Insert good English here]

stevewm posted:

I just thought it was so asinine... They send me empty documents with zero information that would even need to be secured.

If the user used a keyword, that's a training issue.

quote:

But requested I just scan the filled out documents (now with every single bit of my personal information on them) and send them back via regular mail. What exactly was the point of using the "secure" thing in the first place?!?!

If you (the customer) send me (the institution) a sensitive document, it's not my responsibility if it gets leaked. If I (the institution) send you (the customer) a sensitive document, it's on me if it gets leaked (until it reaches your server, then it's on you).

quote:

They obviously have trouble with customer's not understanding this system too.. As the email notifying me I had a secure message was immediately followed by a cut and pasted email from the same person several pages long with detailed step by step directions for registering, logging in, and using the "secure" email website.

The folly of e-mail security appliance deployment is that companies like to blanket-deploy it. Instead of intelligently handling e-mail if the recipient does/does not support TLS encryption, they just say "gently caress it" and throw everything at the appliance.

That's really all those appliances are for: If a recipient server only supports unencrypted SMTP, you use secure mail to force the recipient to retrieve their messages over HTTPS. The message never gets "transmitted" unless the wire is encrypted. Or, you set up TLS whitelists to avoid the whole mess.

Paladine_PSoT
Jan 2, 2010

If you have a problem Yo, I'll solve it

EoRaptor posted:

Are these the interior menus, or external ones?

Interior, and you can replace the camera that watches the line and cashes with a wider aspect one that can see the screens because you only need good enough to confirm, not be 100% readable at all times. Dump the images up via local DSL or cable connection to a nearby S3 instance, then have that scripted to aggregate together somewhere for possible review.

Reduces onsite flaky store video recording equipment, and you can give store management a website where they can review the footage easily, and export it for law enforcement if needed.

Just using it for screens is idiotic, but a side effect of a centralized security system would actually be worthwhile and provide a bunch of side benefits (efficiency measures of layouts, training on problem situations, facial recog for customer profiling, etc).

:downs: Here's the video of the perpetrator officer
:cop: This video is terrible
:downs: 320x240 2fps is the best we can do
:cop: don't you have better cameras?
:downs: yeah, but they're pointed at our menus

SEKCobra
Feb 28, 2011

Hi
:saddowns: Don't look at my site :saddowns:

KillHour posted:

16PB is a bit on the large side. The largest I've ever done is 2PB for a casino, and even that was a huge job. The issue is more about the throughput than the retention, though - all of these cameras are at different locations, and need to be centrally stored. Who do you talk about to get a 50gbps WAN connection, anyways?

Uplink providers. Since you are setting up a data center anyway, not really an issue.

Caconym
Feb 12, 2013

Dragyn posted:

At least it had obscene password requirements. We use them frequently to hand off patient data, and one system I found doesn't allow special characters to be used in the password.

We do a similar thing, but it doesn't check the entire subject line, just the first word. So if you reply to a securemail and change the subject to "RE: *keyword* subject", you're screwed if you forget to remove the prefix.

It also checks for a list of keywords in the body, which gets me a lot when I'm sending out dummy data that doesn't need to be secured.

My pet EPR has a VARCHAR(12) password column (in plaintext of course) in the backend, but a larger textbox in the GUI.
So users can change their passwords to whatever, but it'll get silently truncated to 12 characters in the DB.
So the next time they log in it compares the full pw in the textbox to the truncated one in the DB, and surprise! They don't match! :downs:

One of the few times I belive the users when they swear up and down that they typed the right password.

Inspector_666
Oct 7, 2003

benny with the good hair

Caconym posted:

My pet EPR has a VARCHAR(12) password column (in plaintext of course) in the backend, but a larger textbox in the GUI.
So users can change their passwords to whatever, but it'll get silently truncated to 12 characters in the DB.
So the next time they log in it compares the full pw in the textbox to the truncated one in the DB, and surprise! They don't match! :downs:

One of the few times I belive the users when they swear up and down that they typed the right password.

My father's e-mail provider does this too.

Thanks Ants
May 21, 2004

#essereFerrari


KillHour posted:

Nope. I just found out it's for a "chain restaurant" so they can make sure their menu videos are playing correctly and switching over for breakfast/lunch.

:downsgun:

I'm so happy this exists. What a fantastic idea.

Next up, cameras to check that the doors are unlocked when the store is supposed to be open. Better have a camera to check that nobody is tampering with the menu cameras as well.

TWBalls
Apr 16, 2003
My medication never lies

Caconym posted:

My pet EPR has a VARCHAR(12) password column (in plaintext of course) in the backend, but a larger textbox in the GUI.
So users can change their passwords to whatever, but it'll get silently truncated to 12 characters in the DB.
So the next time they log in it compares the full pw in the textbox to the truncated one in the DB, and surprise! They don't match! :downs:

One of the few times I belive the users when they swear up and down that they typed the right password.

UltraVNC (and possibly others) has a similar issue (not sure if it's plaintext or not). When you go to set the password, you can type more than 8 characters, however, when you try to connect to that system, the password box only accepts 8 characters.

Orcs and Ostriches
Aug 26, 2010


The Great Twist
TightVNC only allows 8, but it also only accepts 8 so it only has half the problem.

stevewm
May 10, 2005

Orcs and Ostriches posted:

TightVNC only allows 8, but it also only accepts 8 so it only has half the problem.

Its actually a problem with all of the VNC forks. The VNC protocol itself is limited to a 8 character password.

citywok
Sep 8, 2003
Born To Surf

KillHour posted:

A request came in - storage for 10,000 1080p cameras. Does anyone have a SAN with 16,135.2 TB of usable space and 49.8 Gbps of write speed?

We are doing this with tens of thousands of cameras right now, but we don't use san storage we use servers with direct attached. lots of them.

16,135? How much retention is that? We average a few weeks of retention and can get 35 cameras in 15TB. That's only 4285TB for 10,000 cameras.

KillHour
Oct 28, 2007


citywok posted:

We are doing this with tens of thousands of cameras right now, but we don't use san storage we use servers with direct attached. lots of them.

16,135? How much retention is that? We average a few weeks of retention and can get 35 cameras in 15TB. That's only 4285TB for 10,000 cameras.

1 month at 15 FPS, with 20% overhead.

citywok
Sep 8, 2003
Born To Surf

KillHour posted:

1 month at 15 FPS, with 20% overhead.

15 FPS for signage? crikey. We have a use case where we are using 1 frame every 5 seconds, which sounds like it would be something you could do. The rest of our cameras are 1080p/10fps (2mbit). 21GB/day/camera.
We use Cisco's VMS, it's pretty decent.

Edit: We use 2% for overhead

citywok fucked around with this message at 20:28 on Nov 8, 2013

ookiimarukochan
Apr 4, 2011

notwithoutmyanus posted:

Oh drat, I didn't even catch that he was reporting it. I would expect significant bad tidings for MS as long as they fail to compete.
Unfortunately it looks like the grognards are back in control at MS (they certainly hosed up the XBox One enough) and I'm expecting their insistence that the future of MS is in the butt to come back and bite them hard (Because they're basically re-inventing that Netscape OS stuff that had them making GBS threads themselves in the mid 90s where they actually realised what it would lead to)

KillHour
Oct 28, 2007


citywok posted:

15 FPS for signage? crikey. We have a use case where we are using 1 frame every 5 seconds, which sounds like it would be something you could do. The rest of our cameras are 1080p/10fps (2mbit). 21GB/day/camera.
We use Cisco's VMS, it's pretty decent.

Edit: We use 2% for overhead

Do you know who you buy from? Not a lot of resellers are ATP Physical Security authorized.

citywok
Sep 8, 2003
Born To Surf

KillHour posted:

Do you know who you buy from? Not a lot of resellers are ATP Physical Security authorized.

Cisco direct.

AllTerrineVehicle
Jan 8, 2010

I'm great at boats!
An email came in!

I have a user who works from home 4 days a week. His first day in the office, I gave him a laptop, set him up with VPN access, showed him what to do, etc etc. I find out the next time he's in the office that he couldn't log in to Windows at home, and so has been unable to work the whole week. Uh, ok? I have him log in while connected to the domain, thinking maybe there was some weird sync issue, we test it, it all works, I think it's done.

Fast forward two weeks to today. I get an email informing me that he has been unable to log in from home since then, and they're just telling me now. He's also leaving his laptop in the office to have it fixed for when he comes back in next Friday.

Really? He's only been able to work 1 day a week and you haven't said anything until now? Or even had him come in to the office until we can resolve the issue*?


*I highly suspect that this is user error

Knormal
Nov 11, 2001

Lord Dudeguy posted:

If you (the customer) send me (the institution) a sensitive document, it's not my responsibility if it gets leaked. If I (the institution) send you (the customer) a sensitive document, it's on me if it gets leaked (until it reaches your server, then it's on you).


The folly of e-mail security appliance deployment is that companies like to blanket-deploy it. Instead of intelligently handling e-mail if the recipient does/does not support TLS encryption, they just say "gently caress it" and throw everything at the appliance.

That's really all those appliances are for: If a recipient server only supports unencrypted SMTP, you use secure mail to force the recipient to retrieve their messages over HTTPS. The message never gets "transmitted" unless the wire is encrypted. Or, you set up TLS whitelists to avoid the whole mess.
Yep, our secure email method is terrible, and a lot of the recipients have real trouble getting it, but it's basically the only way to cover our asses when sending data out. On the other side when our people receive encrypted mail notiications, our Websense usually blocks the site they have to log in to as "webmail", and then we have to deal with that. There's really an untapped market out there for anyone who can come up with an easy way to do secure messaging over the Internet.

Paladine_PSoT posted:

:downs: Here's the video of the perpetrator officer
:cop: This video is terrible
:downs: 320x240 2fps is the best we can do
:cop: don't you have better cameras?
:downs: yeah, but they're pointed at our menus
Time to relocate all the locations' safes to be ceiling-mounted behind the video menu. Problem solved :pseudo:

Thanks Ants
May 21, 2004

#essereFerrari


AllTerrineVehicle posted:

*I highly suspect that this is user error

Not error, entirely on purpose.

MC Fruit Stripe
Nov 26, 2002

around and around we go

Caged posted:

Not error, entirely on purpose.
Yeah poo poo I could keep that up for months before basic human guilt and restlessness made me press the issue.

Hell I once stretched a one month rotation on night shift indefinitely so I could finish ST:TNG.

drukqs
Oct 15, 2010

wank wank you're a pro vaper I'm not wooptiedoo...
Welp multiple tickets and after-hours calls came in..

As it turns out, the new Haswell-equipped macbook pros poo poo the bed when you hold a GoToMeeting presentation and click "Share my Screen."

The problem is exacerbated if you have a PowerPoint presentation active on your screen.

GTM support says "It's an nVidia driver issue"

and

"A fix will be included in a future release"

Good thing we just dropped 9 grand on 3 of these pieces of trash. As it stands now, their company issued iPads are more capable of getting work done as they are still able to run GoToMeeting.

cname
Jan 24, 2013

by Lowtax
Gotta love some of the smarter users. The help-desk 1-2

Hear about an office-wide issue that takes 20-30 minutes to resolve. Figure out a way to replicate the issue (while avoiding it all week/day.) Call the IT department at 4:30pm on Friday afternoon, to report said issue.

When cname gets to your desk, have all your poo poo packed, then innocently ask "How long do you think it'll take to solve?" as you crane your neck around the corner to see which floor the elevator is on.

cname fucked around with this message at 22:54 on Nov 8, 2013

Rhymenoserous
May 23, 2008

MC Fruit Stripe posted:

Yeah poo poo I could keep that up for months before basic human guilt and restlessness made me press the issue.

Hell I once stretched a one month rotation on night shift indefinitely so I could finish ST:TNG.

If I'm in the building after hours doing some task that involves any sort of "Watching a task bar tick bye" I always bring a stack of DVD's or Blu Rays. Last week I forgot and ended up streaming on my Amazon Prime account.

I watched the Avengers while rebuilding an exchange server.

MC Fruit Stripe
Nov 26, 2002

around and around we go
I just spent more on replacement parts for a printer than it would have cost to buy the newer model of that printer because my boss did not want to "deal with it" - dealing with it apparently consisting of spending less money or having a newer printer.

GreenNight
Feb 19, 2006
Turning the light on the darkest places, you and I know we got to face this now. We got to face this now.

I bring in GOG games on a jump drive to play in a VM.

Agrikk
Oct 17, 2003

Take care with that! We have not fully ascertained its function, and the ticking is accelerating.

Caged posted:

Better have a camera to check that nobody is tampering with the menu cameras as well.

Cameras all the way around.


I've been having trouble getting the attention of the storage team to provision and zone some LUNs for a couple of physical servers I'm standing up.

It turns out that the whole storage team was dealing with an issue that originated when a storage tech kicked off a migration on Wednesday between two storage arrays. At 10 am on a weekday. This migration apparently slammed both arrays so hard that all of the VMs, hosts and physical servers became unresponsive. Over a hundred servers needed to be nursed back to health which of course slammed the arrays some more as they came back on line. Apparently the whole team have been working around the clock for the last two days to get poo poo back in order.

Who does poo poo like this? I mean seriously. Weekends were made for work like this people.


Also, the same storage team has just assigned 1TB of SSD storage to a file server I am building for a development environment that will have, at max, four users "because that's what the business owner requested". What an excellent use of resources.

Is that all it takes? Well then: I want a docking station with a fiber HBA card installed, connecting to 500gb of SSD SAN, so when I dock my laptop I'll have fast access to my itunes files while at work. Okay? Please run fiber to my cube ASAP.

waffle iron
Jan 16, 2004
Did you know that an essential DHS office was knocked offline for 6 hours because someone decided to update a switch at 2pm on a Wednesday? And this is an office that services inquiries from state and local law enforcement 24/7.

anthonypants
May 6, 2007

by Nyc_Tattoo
Dinosaur Gum

waffle iron posted:

Did you know that an essential DHS office was knocked offline for 6 hours because someone decided to update a switch at 2pm on a Wednesday? And this is an office that services inquiries from state and local law enforcement 24/7.
Similar things happen at the county I work for.

KillHour
Oct 28, 2007


One of the guys I work with is out for training for 5 days, and a TON of equipment came in all addressed to him. We built him a fort for when he comes back. :3:

coyo7e
Aug 23, 2007

by zen death robot
Got a (series of) email(s) in the wee hours of the morning which I didn't see util I got in to work and found another email asking "hey, can you check on [VIP who no longer works with the company]'s data plan while he's in China?" Which was precursed by a series of emails from AT&T saying that the number had been charged over $300 for data usage (over and over and over...)


...Sure enough, by the time I look it up, he's run up just shy of $6,000 in data overages (in less than half a day of arriving!) I call up, change his plan etc (although SUPPOSEDLY his people had taken the loving line over two months ago when he went to the university, but they never did so it regressed back to us,) they helpfully reverse the charges without me asking, etc. I forward the necessary info to the necessary parties.

The guy finally replies as I'm leaving for the day, "Thanks, much appreciated. It’s a little more complicated to figure this stuff out over here than in Europe!"

(Europe, where last year, he went golfing in Scotland for two weeks and then halfway through, sent an email to someone who sent an email to someone who sent an email to us, asking "why does his aircard say it's roaming? He's supposed to have unlimited data!" :downs: )

Yeah bro, you're really struggling to manage all this poo poo, aren't you? :fuckoff:

Paladine_PSoT
Jan 2, 2010

If you have a problem Yo, I'll solve it

coyo7e posted:

Got a (series of) email(s) in the wee hours of the morning which I didn't see util I got in to work and found another email asking "hey, can you check on [VIP who no longer works with the company]'s data plan while he's in China?" Which was precursed by a series of emails from AT&T saying that the number had been charged over $300 for data usage (over and over and over...)


...Sure enough, by the time I look it up, he's run up just shy of $6,000 in data overages (in less than half a day of arriving!) I call up, change his plan etc (although SUPPOSEDLY his people had taken the loving line over two months ago when he went to the university, but they never did so it regressed back to us,) they helpfully reverse the charges without me asking, etc. I forward the necessary info to the necessary parties.

The guy finally replies as I'm leaving for the day, "Thanks, much appreciated. It’s a little more complicated to figure this stuff out over here than in Europe!"

(Europe, where last year, he went golfing in Scotland for two weeks and then halfway through, sent an email to someone who sent an email to someone who sent an email to us, asking "why does his aircard say it's roaming? He's supposed to have unlimited data!" :downs: )

Yeah bro, you're really struggling to manage all this poo poo, aren't you? :fuckoff:

Nonprofits at work.

evol262
Nov 30, 2010
#!/usr/bin/perl

Rhymenoserous posted:

If I'm in the building after hours doing some task that involves any sort of "Watching a task bar tick bye" I always bring a stack of DVD's or Blu Rays. Last week I forgot and ended up streaming on my Amazon Prime account.

I watched the Avengers while rebuilding an exchange server.

It's almost like you work an in industry where you can walk away from that ticking bar or minimize the RDP window and work on something else.

GreenNight
Feb 19, 2006
Turning the light on the darkest places, you and I know we got to face this now. We got to face this now.

Ah yes, one of those who thinks there is always something work on, or study, or learn. Which I'm sure there is, but gently caress doing that on a weekend at 8pm.

Adbot
ADBOT LOVES YOU

Lord Dudeguy
Sep 17, 2006
[Insert good English here]
:edit: Never mind. Cranky as hell.

  • Locked thread