|
PBS posted:Ours requires a waiver from information security, but not a lot of trouble beyond that. If anything more people have it than should really need it. Our InfoSec guys completely cave in to the whims of the various auditors that pass through without so much as a whimper. It's pretty frustrating.
|
#
?
Feb 24, 2016 03:45
|
|
|
|
| # ? Jun 3, 2024 11:39 |
|
|
SeaborneClink posted:"Your honor it's not my fault that the idiot admin who still thinks it's okay to run Novell and Server NT decided to wire the whole school with hubs" He told the board of education that "He was crashing the hard drives. I could hear them crashing." I know he said those words because I was there while he said them. It was at that moment that I realized he was making an example out of me and I was well and truly hosed.
|
|
#
?
Feb 24, 2016 03:46
|
|
|
KillHour posted:You're lucky as poo poo. When I was in high school, I messed with the computers. The next thing I knew, I was sitting in a small room with a cop asking me questions in front of the school's lawyer. I was arrested on charges of illegally accessing a restricted government network (a class E felony in my state), and was lucky to walk away with 48 hours community service and a 2 year probation. Oh, and I got to sit in front of the board of education while they expelled me in front of my parents. I feel like if the network admin had been on vacation that week then I would have gotten in real deep poo poo. At the time the group of school administrators came and got me I was reading a comedy thread in GBS that was something like "What if computer viruses were like real viruses?" where people were posting a bunch of dumb jokes. The assistant principal thought I was attempting to find viruses to load on the school computers and I think police got mentioned. Thankfully they put me in a room with that assistant principal and the actual network administrator who was pretty annoyed with me but seemed like a nice enough guy. At the time I was really young and stupid and didn't understand how a network administrator could let a computer network with those kind of security holes exist, but he explained to me that he had inherited the network and that all the holes I had identified were scheduled to be fixed over summer break. So he recommended the computer ban, and then told me to apply for that Cisco course. Then during that Cisco course the part-time network admin, who we rarely ever saw, got escorted off-premises and brought up on child pornography and child abuse charges. KillHour posted:We laugh about the dumb poo poo we did when we were kids, but people's lives get ruined by pissing off the wrong person. I flew too close to the sun and got burned. This is real true, and unfortunately the approach to computer misuse hasn't really changed. The UK government just recently started some dumb campaign about "How to tell if your teen is involved in CYBER ACTIVITY." ErIog fucked around with this message at 03:56 on Feb 24, 2016 |
|
#
?
Feb 24, 2016 03:51
|
|
|
I dumped the password hashes for all the admin accounts in high school using a Linux boot on a floppy disk. Cracked them using some website. I never actually used them but another kid did and got in trouble. Also thought it was fun disabling Norton AV during computer class and messing with my friend using Sub7. Those were the days.
|
|
#
?
Feb 24, 2016 04:17
|
|
|
We didn't have much in the means of computers when I was in high school--I took word processing my senior year using Word Perfect 5.1 on probably a 486 SX. I do remember one kid getting fired from the help desk in college for win-nuking computers while on the clock though.
|
|
#
?
Feb 24, 2016 04:51
|
|
|
Back in college, someone made a program that allowed people to message each other by directly with net send. It was a great program, we could chat in class without even talking, and it be private. Except the idiot who created the program made a * option. Guess what that did. Someone (not me) sent a message of "gently caress OFF!!!!" using * Guess how many computers that went to. Hint: A lot. Ah thems were the days
|
|
#
?
Feb 24, 2016 05:07
|
|
|
loving hell I feel so glad to be old and have had my computer classes where - when we figured out how to send false system messages to people in my class - the teacher laughed and got me to show him how I did it and then used same technique to troll the other class. Oh the glorious 90's where you could write up a macro that would paint a giant dick on the screen when someone pressed a certain combination of keys (cntrl-s being a favourite). We would hack anything not nailed down (in a completely naive 'kids fooling with poo poo' way) and mess with computers in every way possible and the only trouble I saw anyone get into was for eating a pie in the computer lab. Even the kid who bought porn in got told "you should probably keep that at home". I got told by my younger brothers that "It's YOUR fault we're not allowed to do anything fun on the computers!" years later so I guess they got fussy after that. Over the years working software support I've found there's two kinds of computer illiterate, those who know nothing about computers and actively avoid them and want nothing whatsoever to do with them and those who know nothing but freak the everliving gently caress out about every single tiny thing like it's the end of the world.
|
|
#
?
Feb 24, 2016 05:32
|
|
|
I almost feel like I missed out. First LAN I was ever on was at college. But we had some fun playing counter strike and got to fool a few people with sub7. And I think the majority of my music collection is still from the Linux server someone hosted on the network.
|
|
#
?
Feb 24, 2016 08:20
|
|
|
My dad was a teacher at my school so I spent a lot of time messing around on the library computers. This was late 90s so Netscape was on there, and it was manually configured to use a proxy server. The proxy blocked 2600.com for "illegal content" so I sent them an email with a screenshot and mentioned I was able to bypass the proxy by changing the settings, but it still seemed dumb. They printed my email with my real name. I think I got called into the vice principal's office like a month later.
|
|
#
?
Feb 24, 2016 09:15
|
|
|
It was so much more fun in the 80s when no one knew what security was and the Librarian kept his as/400 login on a sticky note on the monitor right on the front desk.
|
|
#
?
Feb 24, 2016 09:55
|
|
|
Migrated the Domain Controllers yesterday in our testing enviroment. The basic stuff works. joining computers to the domain, creating new users, logging in with a resetted password, folder rights. our intranet single sign on and assigning exchange mailbox work aswell. Some servers needed additional configuration. I just had to point them to the new domain controllers and they work beautifully. But not everything works as it should. When you login, it says that windows 7 isn't activated, so I assume the kms host needs some configuration, i'm not really sure how to fix this one. Single sign on stopped working for topdesk. I assume that it has something to do with kerberos. Tried looking in the login settings for it. but I found nothing out of the ordinary I kept the DNS ip's the same, only changed the computer name. If I can fix those 2 things, then I can call this a successful migration. Edit: Turns out the windows 7 licensing error isn't related to the Domain controller Migration. Currently configuring kerberos authentication for topdesk. Hope it will work. Edit2: Yup, that did the trick. Migration is a succes Sefal fucked around with this message at 15:34 on Feb 24, 2016 |
|
#
?
Feb 24, 2016 11:16
|
|
|
I wrote assembly to work around the cold freeze software on my highschool computers, I injected it into the computers using a word to write out a batch file via macro which then got run on boot. I made absolutely sure to sign it using my very well known nick (my ICQ/AIM/IRC handle) that every single person involved in my high school's IT department knew. Only teacher knew I had another handle I used for  IRC rooms.I told a few buddies of mine and apparently someone snitched to get back at me for something. When they asked me about it (dean, principal, head IT guy, computer teacher) all I said was: "Why the hell would I sign it with my handle that everyone knows if I did it? I am not that stupid."
|
|
#
?
Feb 24, 2016 15:34
|
|
|
When I was a student for the school system I now work for : we had 233mhz PPC macs. running system 8. All that was required to gain full access was to hold the shift key down on boot, move the "foolproof" extension to the "disabled extensions" folder, and reboot again. Nobody ever got in trouble for any shenanigans at that time. ...other than in the science computer lab, showing some dudes how to get the computer to speak what you typed in SimpleText (and not showing them the keyboard shortcut to stop it from speaking). A few detentions were served to them when they typed up this very long obscene string and had no clue how to stop it.
|
|
#
?
Feb 24, 2016 15:58
|
|
|
My junior high had a security program that saved its password in plain text in win.ini. I "broke" that on the day of parent-teacher interviews. In retrospect, I should have waited a couple more days before letting the staff know.
|
|
#
?
Feb 24, 2016 16:10
|
|
|
I only remember one kid in my high school getting into trouble for messing with school computers, and he was of the 'mindlessly destructive shithead' persuasion. Popping all the keys off the keyboard and walking away. Starting defrag in Windows and powering off the computer to see if it killed anything. Putting staples in the CD tray and opening and closing it over and over until something jammed. I wonder where he is now...
|
|
#
?
Feb 24, 2016 16:27
|
|
|
Customer came in yesterday. They were upset that they got the "message from microsoft" redirect... after disabling the ad blocker I installed. Re-enabled it and sent them on their way. Now I just got a call from them and they're still upset because they can't access "inboxdollars," which appears to be some survey site. I'd love nothing more than to tell the lady (this is a husband and wife) to get a real job instead of sitting in front of the computer taking surveys all day gathering lovely malware through ads.
|
|
|
#
?
Feb 24, 2016 16:45
|
|
|
Migishu posted:Back in college, someone made a program that allowed people to message each other by directly with net send. It was a great program, we could chat in class without even talking, and it be private. My friend and I wrote a lovely little chat program in VB that did exactly this. We didn't include the wildcard address; you had to target the machine by IP address. Once we had mapped out the network (by physically walking around) and understood the IP scheme, it was pretty trivial to get people talking to the right address. Our downfall was that all of the traffic showed up in logs. Eventually somebody got pulled in with the network admin and asked about it; they just said "I dunno it's just some thing". Thanks for not throwing me under the bus high school bros.
|
|
#
?
Feb 24, 2016 16:48
|
|
|
Virus alerts from our ISP came in. We apparently have a Conficker infection somewhere on our network and AT&T is losing its poo poo over it. I told my IT guy to figure out where it is and get rid of it.  I don't even know what the AV server is. It's literally "AV-Server" Yeah, but what's the IP? tracert it and figure it out? Oh. I've never used this. [Previous TC] never showed me how to work the antivirus. You should probably get in there and poke around, then. Do a full scan of every computer. Might help to run Wireshark to see if you can find which computer it's coming from. What shark?What is google?  I know we just talked about XY problems, but god drat.
|
|
#
?
Feb 24, 2016 16:52
|
|
larchesdanrew posted:Virus alerts from our ISP came in. This guy probably got no training from the previous IT director. You're gonna have to take him under your wing.
|
|
|
#
?
Feb 24, 2016 16:55
|
|
|
DigitalMocking posted:It was so much more fun in the 80s when no one knew what security was and the Librarian kept his as/400 login on a sticky note on the monitor right on the front desk. This hasn't really changed.
|
|
#
?
Feb 24, 2016 17:01
|
|
|
Segmentation Fault posted:This guy probably got no training from the previous IT director. You're gonna have to take him under your wing. Betting on this. As long as he's willing to learn it should be easy to get him up to speed.
|
|
#
?
Feb 24, 2016 17:02
|
|
|
Segmentation Fault posted:This guy probably got no training from the previous IT director. You're gonna have to take him under your wing. That's what it seems like. The old tech coordinator seems like he was a lot like CE and would horde all his knowledge. At the same time, though. I appreciate him telling me he doesn't know how to work it, but at least give me some confidence that you can get in there and make a token effort to learn on your own. "I've never worked with the AV server before, but give me a little bit to familiarize myself with it." Don't just shrug and go RUHROH. I'll impart what I can, but I'm learning this stuff blindly the same way he is. A big part of being in IT is thinking and figuring things out.
|
|
#
?
Feb 24, 2016 17:03
|
|
|
larchesdanrew posted:That's what it seems like. The old tech coordinator seems like he was a lot like CE and would horde all his knowledge. https://www.sans.org/security-resources/idfaq/detecting-conficker-nmap.php
|
|
#
?
Feb 24, 2016 17:08
|
|
|
Bobulus posted:I only remember one kid in my high school getting into trouble for messing with school computers, and he was of the 'mindlessly destructive shithead' persuasion. Popping all the keys off the keyboard and walking away. Starting defrag in Windows and powering off the computer to see if it killed anything. Putting staples in the CD tray and opening and closing it over and over until something jammed. He's your CTO.
|
|
#
?
Feb 24, 2016 17:11
|
|
|
larchesdanrew posted:That's what it seems like. The old tech coordinator seems like he was a lot like CE and would horde all his knowledge. Eh, it's likely residual attitude from the last manager yelling at him for touching 'his' stuff. He's a shelter dog, you need to retrain him and inspire confidence. If you're a dick about his lack of confidence neither of you are going to have a fun time. String him along a little bit, "Hm I don't know off the top of my head but I'm sure there's a way to find this out...", and offer encouragement and praise when he gets something on his own.
|
|
#
?
Feb 24, 2016 17:17
|
|
|
Bobulus posted:I only remember one kid in my high school getting into trouble for messing with school computers, and he was of the 'mindlessly destructive shithead' persuasion. Popping all the keys off the keyboard and walking away. Starting defrag in Windows and powering off the computer to see if it killed anything. Putting staples in the CD tray and opening and closing it over and over until something jammed. Sales.
|
|
#
?
Feb 24, 2016 17:32
|
|
|
MisterOblivious posted:Sales. HR?
|
|
#
?
Feb 24, 2016 18:06
|
|
|
Judge Schnoopy posted:String him along a little bit, "Hm I don't know off the top of my head but I'm sure there's a way to find this out...", and offer encouragement and praise when he gets something on his own. Legitimately this. I've been on both sides of this, and its the best way. Encouragement and praise - you need to find out what he values. And what he wants to learn/where he wants to go. Work on things with him.
|
|
#
?
Feb 24, 2016 18:10
|
|
|
ChubbyThePhat posted:My friend and I wrote a lovely little chat program in VB that did exactly this. We didn't include the wildcard address; you had to target the machine by IP address. Once we had mapped out the network (by physically walking around) and understood the IP scheme, it was pretty trivial to get people talking to the right address. Our downfall was that all of the traffic showed up in logs. Eventually somebody got pulled in with the network admin and asked about it; they just said "I dunno it's just some thing". Thanks for not throwing me under the bus high school bros. There was a kid in my high school programming class who got banned from the school network for "hacking". Smart guy, really nice. I later heard that all he had done was make the message "Have a nice day!" pop up on every computer on the district network, must have just used netsend 
|
|
#
?
Feb 24, 2016 18:25
|
|
|
We would drop a pickled pyhook application onto systems' startup folders. With our custom pyhook module, Ctrl-alt-del was a hookable keystroke. While locked out, a picture of Chuck Norris (his Delta force pic with a denim vest and two uzis) would bounce around the screen with Tk. This was all in a Cisco academic lab so it was all cool. Teachers liked that we were spending extra time in the mornings and afternoons building stuff. We had access to all the school's surplus IT equipment. I wish more schools had large IT workshop settings like that with someone overseeing you making sure you're not causing too much trouble. Our senior "prank" from the student government was lame, so we asked to deploy a new tame meme as everyone's desktop every day of the last week of school.
|
|
#
?
Feb 24, 2016 19:11
|
|
|
There is no cloud, this time literally.
|
|
#
?
Feb 24, 2016 19:35
|
|
|
I literally did not know until that article that Verizon had a public cloud offering.
|
|
#
?
Feb 24, 2016 20:21
|
|
|
the writing was on the wall when some hardware provider they used a shitton of went out of business
|
|
#
?
Feb 24, 2016 20:29
|
|
|
I thought the writing was on the wall when they had 2 days of planned downtime.
|
|
#
?
Feb 24, 2016 20:35
|
|
|
A keyboard came in... ... the dustiest thing I've ever seen, weighs about 90lbs, and takes around two minutes of its own to boot up. Plus the cooling fan runs a bit loud. It's a Kurzweil K2500X, an 88-key fully weighted synth/digital piano/MIDI controller from 2000.     And I just spent $30 on a cheapo 25-mini-key MIDI keyboard to learn DAW stuff on. This beast is worth a couple hundred bux.
|
|
#
?
Feb 24, 2016 21:24
|
|
|
So thanks for reminding me that nMap is a thing. Now I can't manage to get it to run scripts at all. It either just completely ignores that I have a --string command inputted, or says it can't resolve the script name. It'll just do a default port scan of whatever host I input and ignore the script. I've used it before with no problems but it's kicking my rear end now 
|
|
#
?
Feb 24, 2016 21:31
|
|
|
larchesdanrew posted:That's what it seems like. The old tech coordinator seems like he was a lot like CE and would horde all his knowledge. Different people learn and adapt different ways. Your guy may not be a self starter who will go after knowledge himself, he may require constant directives from you. Doesn't mean he can't be an asset to you, it just means he operates differently than you do. Hardest part of being a good boss is figuring out what makes your individual people tick and how to provide them what they need.
|
|
#
?
Feb 24, 2016 22:34
|
|
|
Tell him to give you $50.
|
|
#
?
Feb 24, 2016 22:53
|
|
|
Urit posted:I thought the writing was on the wall when they had 2 days of planned downtime. Saw Verzion and clicked "reply" to mention this. Anyone who gave a gently caress about their services would have moved to pretty much any other provider as soon as they announced a two-day shutdown.
|
|
#
?
Feb 24, 2016 23:06
|
|
|
|
| # ? Jun 3, 2024 11:39 |
|
|
larchesdanrew posted:That's what it seems like. The old tech coordinator seems like he was a lot like CE and would horde all his knowledge. Yeah, I'd place less blame on the tech and more on the previous coordinator. One of my clients has a guy like this, not quite as extreme with hoarding stuff but rarely showed anyone how to do anything and was super OCD and overprotective of the environment. We'd literally have to call or email him first about any work, with the exact server name and what we were doing, and he'd monitor us from his desk to make sure we did exactly what we said. We have an engineer that goes on site twice a week to help him and for the first month or so, the engineer almost quit because the IT coordinator was such a controlling rear end in a top hat, questioned everything he did, and went as far as to rage out red-faced when the engineer fixed something without telling him the details.  Thank goodness that coordinator is gone in a week and a half - when it takes 2 hours to fix a 20 minute issue because of someone's mental problems, then they complain about the time spent, it gets really loving old really fast.E: to shorten up Larches, the best thing for your underling is a little gentle encouragement. Get him on your side, easiest way is to be like "hey, if you're not sure about something, just ask and I can help you" or something. Maybe even point him in the direction of some self-learning for anything he's interested in, and see how he does. BOOTY-ADE fucked around with this message at 06:17 on Feb 25, 2016 |
|
#
?
Feb 24, 2016 23:41
|
|
