Working in IT 3.0: xp_cmdshell

The Something Awful Forums > Discussion > Serious Hardware/Software Crap > Working in IT 3.0: xp_cmdshell

CLAM DOWN: Feb 13, 2007

H110Hawk posted:

"We've always done it this way!"

It's been 20 years. They can use some old busted rear end OpenSSL with their old bustedass product. We shouldn't be giving people a loaded gun trained squarely at their foot.

You clearly don't work for a large enterprise that's been around a long time.

# ? Mar 1, 2016 18:15

Adbot: ADBOT LOVES YOU

# ? May 26, 2024 02:30

Collateral Damage: Jun 13, 2009

Token ring, how archaic. Everyone knows FDDI is the future.

# ? Mar 1, 2016 18:16

3 Action Economist: May 22, 2002; Educate. Agitate. Liberate.

CLAM DOWN posted:

You clearly don't work for a large enterprise that's been around a long time.

Or a ski resort.

# ? Mar 1, 2016 18:19

Lord Dudeguy: Sep 17, 2006; [Insert good English here]

CLAM DOWN posted:

You clearly don't work for a large enterprise that's been around a long time.

Or have a lot of customers who think that Windows ME is still "perfectly okay".

# ? Mar 1, 2016 18:32

1000101: May 14, 2003; BIRTHDAY BIRTHDAY BIRTHDAY BIRTHDAY BIRTHDAY BIRTHDAY FRUITCAKE!

Foe Hammer posted:

I have a fairly good background in network security but I have gotten to the point now where I feel like I have to learn C++/ Python to further myself. Now I have self taught myself by downloading various training movies via torrent and have even used http://www.professormesser.com/

I seem to have a way harder timer learning programming as my ADD keeps kicking my rear end whenever I sit down to learn it I end up going 10 different directions and learning a lot but very little about programming. Anyone have an ADD friendly way to learn programming?

also where in the world do you change the picture that appears under your name? I have gone through everything in the control panel and can't seem to find it.

I would pick one language and focus on that or you'll go mad. I'd say start with Python as you'll find it helpful to pull data from devices to generate reports, etc. I found the best way to actually learn it is to actually have some kind of simple projects.

When I was learning python I basically went through some basic stuff at Coding Academy and a few youtube videos. I then went right to work on writing a script to pull a list of hostnames and IPs from a system and output a CSV via it's REST API. I went from that to building a little tool to provision virtual machines out of VMware's vRealize catalog via their REST API, then generating reports from different areas, etc.

You'll find yourself on Stackexchange an awful lot but that's probably fine as long as you try to understand what the code you're shamelessly stealing is doing. After a few months of doing that I'm pretty comfortable and finding myself googling less. I can also mostly follow other folks code.

I always felt that without something to apply it on, trying to learn basic programming would be nigh impossible.

# ? Mar 1, 2016 18:34

Aunt Beth: Feb 24, 2006; Baby, you're ready!; Grimey Drawer

Thanks Ants posted:

What awesome connectors

As with conventional plumbing, joints were the weakest points, where it was most likely the token could leak out of the network. Sturdy connectors were an attempt to mitigate this risk.

# ? Mar 1, 2016 19:07

H110Hawk: Dec 28, 2006

CLAM DOWN posted:

You clearly don't work for a large enterprise that's been around a long time.

My thought is that if OpenSSL had stopped shipping new versions with SSL2 as an option, then that same old janky software would use said old janky of openssl but not open new applicaitons to said old cruft. Win-Win. Basically what happened eventually with IE6.

Edit: As in, the same mentality which lets you use Old lovely System From The 90's can let you continue to use Old lovely OpenSSL From The 90's.

# ? Mar 1, 2016 19:51

anthonypants: May 6, 2007; by Nyc_Tattoo; Dinosaur Gum

H110Hawk posted:

My thought is that if OpenSSL had stopped shipping new versions with SSL2 as an option, then that same old janky software would use said old janky of openssl but not open new applicaitons to said old cruft. Win-Win. Basically what happened eventually with IE6.

Edit: As in, the same mentality which lets you use Old lovely System From The 90's can let you continue to use Old lovely OpenSSL From The 90's.

You should check out this talk from Bob Beck about OpenSSL

https://www.youtube.com/watch?v=GnBbhXBDmwU

# ? Mar 1, 2016 20:02

H110Hawk: Dec 28, 2006

anthonypants posted:

You should check out this talk from Bob Beck about OpenSSL

https://www.youtube.com/watch?v=GnBbhXBDmwU

I'll watch this later. Checking the title I have a feeling it is a lot of the nightmare that is the OpenSSL codebase. (Hey guys lets re-implement low level malloc() so we don't have to deal with a handful of OS corner cases also heartbleed.)

# ? Mar 1, 2016 20:18

skipdogg: Nov 29, 2004; Resident SRT-4 Expert

I haven't seen token ring in about 14 years. Circa 2002 I took a Cisco course at a community college that had token ring and old school Cisco routers with serial connectors (DTE? 68pin stuff?) everywhere and that's what we labbed on. I think there was an old lab on campus that still ran on 10 base coax as well.

# ? Mar 1, 2016 20:20

H110Hawk: Dec 28, 2006

skipdogg posted:

I haven't seen token ring in about 14 years. Circa 2002 I took a Cisco course at a community college that had token ring and old school Cisco routers with serial connectors (DTE? 68pin stuff?) everywhere and that's what we labbed on. I think there was an old lab on campus that still ran on 10 base coax as well.

Those serial connectors cracked me up. (My CCNA course in 2001 had those, 1601's? Something?)

# ? Mar 1, 2016 20:22

alg: Mar 14, 2007; A wolf was no less a wolf because a whim of chance caused him to run with the watch-dogs.

Every conference room here still has token ring :cool:

# ? Mar 1, 2016 20:23

Judge Schnoopy: Nov 2, 2005; dont even TRY it, pal

alg posted:

Every conference room here still has token ring

like... for fun? for nostalgia? to oppress anybody trying to accomplish something on the conference room networks?

# ? Mar 1, 2016 20:26

Internet Explorer: Jun 1, 2005

alg posted:

Every conference room here still has token ring

Are you every company my company tries to do conferences with?

# ? Mar 1, 2016 20:30

DigitalMocking: Jun 8, 2010; Wine is constant proof that God loves us and loves to see us happy.
Benjamin Franklin

Foe Hammer posted:

I have a fairly good background in network security but I have gotten to the point now where I feel like I have to learn C++/ Python to further myself.

What? Why?

That makes no more sense than saying "I'm a pretty good automatic transmissions mechanic, but I feel like I need to make macaroons to further myself."

# ? Mar 1, 2016 20:30

Inspector_666: Oct 7, 2003; _{benny with the good hair}

It seems like scripting is becoming more and more of a mandatory skill for anything above helpdesk.

# ? Mar 1, 2016 20:33

Judge Schnoopy: Nov 2, 2005; dont even TRY it, pal

DigitalMocking posted:

What? Why?

That makes no more sense than saying "I'm a pretty good automatic transmissions mechanic, but I feel like I need to make macaroons to further myself."

Supposedly Python can be used by network admins to open SSH sessions, run config changes, output show commands to repositories, check for errors, and a bunch of other stuff. I briefly read about it and decided troubleshooting all of that would be a nightmarish hell and also decided that's why I'm not very likely to get into DevOps.

# ? Mar 1, 2016 20:33

Nerdrock: Jan 31, 2006

Judge Schnoopy posted:

Supposedly Python can be used by network admins to open SSH sessions, run config changes, output show commands to repositories, check for errors, and a bunch of other stuff. I briefly read about it and decided troubleshooting all of that would be a nightmarish hell and also decided that's why I'm not very likely to get into DevOps.

i just finished some deployment automation that (in a mac environment) was a royal annoying mess. Systems have to Join AD (easy) and then join a security group (not easy). I wound up writing a powershell script sitting on a windows box, and setting up freeSSHd in it so i can SSH into my windows server to run it during deployment runtime. Zero feedback at all from anything. That was interesting.

# ? Mar 1, 2016 20:44

ChickenWing: Jul 22, 2010

I had my ISP come in and install gigabit fiber and then he used a cat5 cable to connect the modem and router :psyduck:

is cat6 expensive or something?

# ? Mar 1, 2016 20:49

GreenNight: Feb 19, 2006; Turning the light on the darkest places, you and I know we got to face this now. We got to face this now.

ChickenWing posted:

I had my ISP come in and install gigabit fiber and then he used a cat5 cable to connect the modem and router is cat6 expensive or something?

Nope. Only cat6a.

# ? Mar 1, 2016 20:51

Bigass Moth: Mar 6, 2004; I joined the #RXT REVOLUTION.

he knows...

Turtlicious posted:

Teaching myself JavaScript right now and I've got the CompTIA A+ scheduled for June. I'm on my way out right now, it's just that I need somewhere to go.

The long and short of it is that the Company President doesn't want to hire a Social Media specialist, and is pretty up there in age. When I tried to talk to him about it he just yelled at me, as far as he's concerned he has a "Team of Technical Experts. You said you knew Computers so get out there and fix this mess!" I felt like pointing out for the third time this month that none of us are out of College, and make less then 15 /hr.

Not too mention I'm like 75% sure it's someone on the Tech Team doing it, I found Tor installed on one of the work computers. It's just a huge pain in the rear end to deal with. I'm going to ask them about it tomorrow, tell them to knock it off and delete the account. I'll try to spin it into a promotion or something saying the tech needs leadership bla bla bla.

I need out of this job.

e: Before I went home today, I sent out an E-mail that was just Reddit's privacy policy, pointing out that your IP is logged when you create an account, and Reddit hands that IP over when subpoena'd really quick. If the account and posts get deleted, we'll call that square. I have no idea what's standard, but I'm not dealing with Customers so I guess that's a win?

Do you really need 3 more months of study to take the A+???

# ? Mar 1, 2016 21:04

MC Fruit Stripe: Nov 26, 2002; around and around we go

Bigass Moth posted:

Do you really need 3 more months of study to take the A+???

One of my guys just asked me if he needs to fill out the PDF for the upcoming interview.

No, you already work here, that's what we're going to ask the guy to get the interview started.

My point is, people learn at different speeds.

e: "Share some of your work experiences and achievements that you believe make you the best candidate for this position"
My ability to already be employed by this company in this role makes me particularly suited for this position.

MC Fruit Stripe fucked around with this message at 21:11 on Mar 1, 2016

# ? Mar 1, 2016 21:06

Fiendish Dr. Wu: Nov 11, 2010; You done fucked up now!

Judge Schnoopy posted:

Supposedly Python can be used by network admins to open SSH sessions, run config changes, output show commands to repositories, check for errors, and a bunch of other stuff. I briefly read about it and decided troubleshooting all of that would be a nightmarish hell and also decided that's why I'm not very likely to get into DevOps.

Way to give up man.

It looks hard so I'll probably never devops

# ? Mar 1, 2016 21:12

Judge Schnoopy: Nov 2, 2005; dont even TRY it, pal

Nah it's just not my thing. I script anything I can in powershell, and have used Python for a few non-domain things, and enjoy that immensely. But trying to script network config changes on cisco ios, which is very user oriented (steps through series of commands and feedback instead of allowing piped one-does-all commands) tickles part of my brain that screams "no don't get out now!"

# ? Mar 1, 2016 21:18

Fiendish Dr. Wu: Nov 11, 2010; You done fucked up now!

Judge Schnoopy posted:

Nah it's just not my thing. I script anything I can in powershell, and have used Python for a few non-domain things, and enjoy that immensely. But trying to script network config changes on cisco ios, which is very user oriented (steps through series of commands and feedback instead of allowing piped one-does-all commands) tickles part of my brain that screams "no don't get out now!"

Ah, well, if you can powershell then you can python. I do a lot of the same things in both depending on what os I need to do stuff in. But yeah, there's a certain point in which scripting is overkill and not worth it.

# ? Mar 1, 2016 21:21

Inspector_666: Oct 7, 2003; _{benny with the good hair}

Fiendish Dr. Wu posted:

Ah, well, if you can powershell then you can python. I do a lot of the same things in both depending on what os I need to do stuff in. But yeah, there's a certain point in which scripting is overkill and not worth it.

And then you loop back around into poo poo like Neti.

# ? Mar 1, 2016 21:24

alg: Mar 14, 2007; A wolf was no less a wolf because a whim of chance caused him to run with the watch-dogs.

Judge Schnoopy posted:

like... for fun? for nostalgia? to oppress anybody trying to accomplish something on the conference room networks?

Government. They just sit on the wall unused. We have wifi and copper ports too.

I've seen offices at IBM with token ring + 100M ethernet adapters

# ? Mar 1, 2016 21:55

Ugato: Apr 9, 2009; We're not?

GnarlyCharlie4u posted:

I might steal this idea but sub Apple for BestBuy.

So, I'm late on this, but as someone who worked at Best Buy and is a mostly competent sysadmin/noc... Please no. I've worked in 3 stores and know a grand total of 2 people I would trust for anything in IT. And they already had jobs to that effect. They just liked the discount.

# ? Mar 1, 2016 21:55

GreenNight: Feb 19, 2006; Turning the light on the darkest places, you and I know we got to face this now. We got to face this now.

We have twinax wall plates all over the drat place. Miles of twinax cabling hidden in the walls and ceilings from back when we had as400 terminals.

# ? Mar 1, 2016 22:12

Fiendish Dr. Wu: Nov 11, 2010; You done fucked up now!

Inspector_666 posted:

And then you loop back around into poo poo like Neti.

a dynamic iptables manipulation daemon, written in Python, and backed by ZooKeeper :psyboom:

# ? Mar 1, 2016 22:18

skipdogg: Nov 29, 2004; Resident SRT-4 Expert

ChickenWing posted:

I had my ISP come in and install gigabit fiber and then he used a cat5 cable to connect the modem and router is cat6 expensive or something?

Not really. Monoprice shows a 27 cent difference between two otherwise identical cables, but the guy is going to use whatever is on his truck. I doubt he knows or cares about the difference between a CAT5e or a CAT6 cable. The 5e patch cable is more than sufficient to connect your modem to your router at gigabit speeds. If it bothers you, you can get a 5 foot Cat6 patch cable for 1.39 plus shipping from Monoprice.

# ? Mar 1, 2016 22:25

Vulture Culture: Jul 14, 2003; I was never enjoying it. I only eat it for the nutrients.

Nerdrock posted:

i just finished some deployment automation that (in a mac environment) was a royal annoying mess. Systems have to Join AD (easy) and then join a security group (not easy). I wound up writing a powershell script sitting on a windows box, and setting up freeSSHd in it so i can SSH into my windows server to run it during deployment runtime. Zero feedback at all from anything. That was interesting.

I managed a four-digit fleet of Mac Minis for awhile. Anything related to deployment automation is a wreck. Missing commands, commands that don't work as documented, commands that don't return a correct error code, commands that sometimes return a correct error code. Apple's core philosophy is downright hostile to central management.

Inspector_666 posted:

And then you loop back around into poo poo like Neti.

The premise seems absurd, but a three-week zero-downtime migration of a property the size of Instagram is a seriously amazing feat.

Vulture Culture fucked around with this message at 22:42 on Mar 1, 2016

# ? Mar 1, 2016 22:40

H110Hawk: Dec 28, 2006

ChickenWing posted:

I had my ISP come in and install gigabit fiber and then he used a cat5 cable to connect the modem and router is cat6 expensive or something?

Why do you care? Next you'll find out they didn't use top of the line laser optimized "aqua" fiber.

# ? Mar 1, 2016 23:10

Internet Explorer: Jun 1, 2005

H110Hawk posted:

Why do you care? Next you'll find out they didn't use top of the line laser optimized "aqua" fiber.

Why wouldn't he care? If they are installing gigabit fiber they should be using at least Cat5e on their LAN-side equipment.

# ? Mar 1, 2016 23:38

Sickening: Jul 16, 2007; Black summer was the best summer.

Internet Explorer posted:

Why wouldn't he care? If they are installing gigabit fiber they should be using at least Cat5e on their LAN-side equipment.

Yes, it would make more sense to install a cat5e or cat6 cable for gigabit. Like someone else has said, the difference between a cat5 and cat5e at a short patch cable length is little to no difference on speed. Its not something to be outraged about.

# ? Mar 1, 2016 23:46

Virigoth: Apr 28, 2009; Corona rules everything around me
C.R.E.A.M. get the virus
In the ICU y'all......

Fiendish Dr. Wu posted:

a dynamic iptables manipulation daemon, written in Python, and backed by ZooKeeper

Sweet baby Jesus in a birchbark canoe.

# ? Mar 1, 2016 23:49

Internet Explorer: Jun 1, 2005

Sickening posted:

Yes, it would make more sense to install a cat5e or cat6 cable for gigabit. Like someone else has said, the difference between a cat5 and cat5e at a short patch cable length is little to no difference on speed. Its not something to be outraged about.

That's a silly joke.

You're paying a good price for gigabit. They shouldn't try to save 10 cents on cabling that is not up to spec.

# ? Mar 1, 2016 23:52

Sickening: Jul 16, 2007; Black summer was the best summer.

Internet Explorer posted:

That's a silly joke.

You're paying a good price for gigabit. They shouldn't try to save 10 cents on cabling that is not up to spec.

I am sure the installer isn't intentionally trying to save 10 cents on a cable. Goons always expecting the most nefarious of intentions I swear to god. :colbert:

The most likely cause was that the installer, just like a lot of shops, having tons of patch cables around for use and simply didn't take the time to read the quality because who really cares. I can't think of a single time I have used a patch cable and took the time to actually read the rating for the most mundane of things. Hell, who is to say that the equipment he was connecting wasn't old and included the cable with the installation kit?

# ? Mar 1, 2016 23:58

Japanese Dating Sim: Nov 12, 2003; hehe; Lipstick Apathy

I'm looking to dip my toe into WDS to get multicast and PXE boot working. Right now I just do MDT and boot off a USB stick prepared with the LiteTouch ISO file.

It works, but it could be better. All I really want WDS to do is serve up the MDT LiteTouch ISO, so nothing complex at all.

The only issue is that I work at a university that's very silo'd. We share the network and central resources and are all on the same AD, but our servers are our own, etc. So I don't want my WDS server responding to another school's PXE boot requests.

It looks like there's a way to restrict WDS to respond to specific subnets - https://social.technet.microsoft.co...=winserversetup - and I assume this would work for us, but I was curious if anyone's ever done something like this.

I'm just starting to look into this so it's entirely possible that my question is stupid.

Edit: Actually I think it is stupid. I'll probably still want to do this, but you can avoid any trouble by just only responding to known (prestaged) machines, I'm guessing?

Japanese Dating Sim fucked around with this message at 00:12 on Mar 2, 2016

# ? Mar 2, 2016 00:01

Adbot: ADBOT LOVES YOU

# ? May 26, 2024 02:30

Thanks Ants: May 21, 2004; #essereFerrari

It literally doesn't matter that it's a Cat5e cable because it's going less than 10ft into your router.

There's good reasons to use Cat5e if you're an ISP installing it into people's homes - it's easier to work with/put plugs on because it doesn't have that central spine, it's a smaller diameter so looks more discrete tacked to baseboards or whatever, and it can bend in a tighter radius so if it needs to take a turn around a wall then it doesn't look stupid.

# ? Mar 2, 2016 00:04

The Something Awful Forums > Discussion > Serious Hardware/Software Crap > Working in IT 3.0: xp_cmdshell

«‹›2906 »