Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Locked thread
triple sulk
Sep 17, 2014



Last Chance posted:

if porn and gigantic publications have trouble getting people to subscribe to their stuff, why does windows nerd paul thurott thinks his premium subscriber model-thing is even remotely viable?

faux insider knowledge under the guise of actual insider knowledge

Adbot
ADBOT LOVES YOU

Linguica
Jul 13, 2000
You're already dead

mishaq posted:

also lol at riding the useless monorail in vegas instead of just walking
hey man it gets hot

Asymmetric POSTer
Aug 17, 2005

Last Chance posted:

lol

"check out these hot super sexy thurott premium vids, only $7 m'lord"

hot sexy uncle paul 😘😘😉

his milk n navel make me so hot in my pants

eschaton
Mar 7, 2007

Don't you just hate when you wind up in a store with people who are in a socioeconomic class that is pretty obviously about two levels lower than your own?

Phoenixan posted:

i'm starting to miss having a menu bar instead of tasks I want to perform being maybe on the left or maybe on the top or maybe even sometimes popping up on the bottom for some loving reason

literally the single worst idea from the Avalon/WPF/XAML world was to get rid of the menu bar in favor of "task oriented" interfaces that are entirely unique per application

after all you wouldn't want users to wind up with transferable skills would you?

Phoenixan
Jan 16, 2010

Just Keep Cool-idge
basically the global menu bar in macos rules but unfortunately i have to deal with win 10 at work

Dodoman
Feb 26, 2009



A moment of laxity
A lifetime of regret
Lipstick Apathy

mishaq posted:

hot sexy uncle paul 😘😘😉

his milk n navel make me so hot in my pants

Big windows, big life

Last Chance
Dec 31, 2004

mishaq posted:

hot sexy uncle paul 😘😘😉

his milk n navel make me so hot in my pants

lol this post made me feel physically ill

SupSuper
Apr 8, 2009

At the Heart of the city is an Alien horror, so vile and so powerful that not even death can claim it.
lol so much for end of support: https://www.theverge.com/2017/5/13/15635006/microsoft-windows-xp-security-patch-wannacry-ransomware-attack

who knew the 8% still using dead unpatched windows could still pose a major security threat!!

flakeloaf
Feb 26, 2003

Still better than android clock

the forensics and va shop here had entirely too much fun with an MFD that turned out to be a small bad computer, running winxp, that broke when they tried to patch it

Cybernetic Vermin
Apr 18, 2005

paul thurrot joins caitlyn jenner and amy schumer as people i only know of because people on the internet going out of their way to tell me that they are terrible

syscall girl
Nov 7, 2009

by FactsAreUseless
Fun Shoe

Cybernetic Vermin posted:

paul thurrot joins caitlyn jenner and amy schumer as people i only know of because people on the internet going out of their way to tell me that they are terrible

amy schumer is cool so by some kind of transitive property i want to buy membership to paul thurrot's internet clubhouse and watch jersey shore now?

anthonypants
May 6, 2007

by Nyc_Tattoo
Dinosaur Gum
lmao what the hell https://twitter.com/aarongreenberg/status/864239501383684096

Phoenixan
Jan 16, 2010

Just Keep Cool-idge
i can't wait to try downloading it 3 times because the windows store is a piece of poo poo

incoherent
Apr 24, 2004

01010100011010000111001
00110100101101100011011
000110010101110010

SupSuper posted:

lol so much for end of support: https://www.theverge.com/2017/5/13/15635006/microsoft-windows-xp-security-patch-wannacry-ransomware-attack

who knew the 8% still using dead unpatched windows could still pose a major security threat!!

i love my dead gay operating system

champagne posting
Apr 5, 2006

YOU ARE A BRAIN
IN A BUNKER


a security researcher on twitter posed a good question: What if the exploit hadn't been two months old but a 0-day?

BangersInMyKnickers
Nov 3, 2004

I have a thing for courageous dongles

then we'd have 2 weeks+ of this poo poo owning the gently caress out of every place under the sun until MS got something out but we at least it would help with SPF/DKIM uptake

infernal machines
Oct 11, 2012

we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

BangersInMyKnickers posted:

help with SPF/DKIM uptake

spf is easy as pie to implement, but the number of providers that either don't support or outright break dkim is loving ridiculous.

and there's still no native dkim support in exchange

flakeloaf
Feb 26, 2003

Still better than android clock

what would happen if the thing called code red/sasser happened

really make you think

infernal machines
Oct 11, 2012

we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.
i'm surprised no one managed to weaponize the mse/windows defender RCE

that could have made an amazing mess, since you could spread via email and the browser via compromised ad hosts

infernal machines
Oct 11, 2012

we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

flakeloaf posted:

what would happen if the thing called code red/sasser happened

really make you think

tbf, that was 13 years ago. half the posters here were barely starting kindergarten

BangersInMyKnickers
Nov 3, 2004

I have a thing for courageous dongles

flakeloaf posted:

what would happen if the thing called code red/sasser happened

really make you think

I'm betting future versions of windows will be tighter on the default firewall configs for home/domain/private zones to force you to manually configure things like inbound SMB/RPC/WMI to protect from lateral network movement. But will need some kind of wizard/tool to help with configuration because most windows janitors are hopeless

Chris Knight
Jun 5, 2002

me @ ur posts


Fun Shoe

flakeloaf posted:

what would happen if the thing called code red/sasser happened

really make you think

we got hit by sasser at my old job, made me lol the whole day

infernal machines
Oct 11, 2012

we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.
well they already prompt you to select a zone on a new connection, the default is public which blocks smb and network discovery, and drops icmp

infernal machines
Oct 11, 2012

we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.
the problem here isn't firewall defaults, it's unpatched machines on managed networks where smb would be allowed anyway

BangersInMyKnickers
Nov 3, 2004

I have a thing for courageous dongles

those three default zones I listed all allow SMB exposure client to client, which is bad enough on a small business network but absolutely stupid on a corporate one with the interface bound to a DC. the threat is propagating inside the zone, its only a matter of time before something gets inside it. the name of the game is endpoint isolation.

BangersInMyKnickers
Nov 3, 2004

I have a thing for courageous dongles

he was explicitly asking about 0-days you thick gently caress

infernal machines
Oct 11, 2012

we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

BangersInMyKnickers posted:

he was explicitly asking about 0-days you thick gently caress

lmao.

you got some issue mang

infernal machines
Oct 11, 2012

we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.
the default for "public" zone does not allow inbound smb, it also disables smb discovery unless you override it

BangersInMyKnickers
Nov 3, 2004

I have a thing for courageous dongles

I know your "thing" is not knowing anything about anything, but please stop.

syscall girl
Nov 7, 2009

by FactsAreUseless
Fun Shoe

BangersInMyKnickers posted:

I know your "thing" is not knowing anything about anything, but please stop.

crap is someone referring to my posts?

okay phew bullet dodged i thought you meant me

*gets all sweaty*

Shaggar
Apr 26, 2006

BangersInMyKnickers posted:

I'm betting future versions of windows will be tighter on the default firewall configs for home/domain/private zones to force you to manually configure things like inbound SMB/RPC/WMI to protect from lateral network movement. But will need some kind of wizard/tool to help with configuration because most windows janitors are hopeless

pretty sure both win 10 and 2016 disable a lot more inbound stuff by default these days. But all that leads to is people disabling the firewall cause they cant figure out how to turn on what they need.

BangersInMyKnickers
Nov 3, 2004

I have a thing for courageous dongles

Yeah, there should be a wizard in the GPO editor for the firewall config so you say "This is my CIDR for DCs, let them do DC stuff. This is my CIDR for administrative workstations, let them do the normal administrative stuff. Everything else is a client or server with inbound deny with exception for admin workstations and outbound allow". It's needlessly complex and intimidating as-is for people just starting with it and the default configs for domain/private zones are too lax to block worm propagation in a meaningful way.

Shaggar
Apr 26, 2006
yeah for sure. group policy is probably overdue for an overhaul in terms of the management side of things.

BangersInMyKnickers
Nov 3, 2004

I have a thing for courageous dongles

I should probably make some stub policies with zones defined and export them for the sec thread to use.

Shaggar
Apr 26, 2006
tbh for firewalls it should be a realtime management thing instead of gpo similar to how youd do it w/ other endpoint management systems.

qirex
Feb 15, 2001

rip thinkpads

quote:

Lenovo Group Ltd announced a plan to restructure its China business to cope with the changing personal computer (PC) industry.

Lenovo will be reorganized into two divisions, a consumer-focused division of PC and smart devices, and a data center group, Chairman Yang Yuanqing said in a blog post on Tuesday.

"China has the fastest-changing smart devices market. In order to take advantage of the opportunities in China, we take the step to restructure our business here," he said.

Liu Jun, who previously worked for Lenovo's mobile business group, will return to the company as president of Lenovo China and lead the consumer division, Yang said in the microblog post.

Lenovo, the world's biggest PC maker by shipments, posted a 67 percent slide in third-quarter net profit in February. Its PC division, which accounts for about 70 percent of revenue, saw revenue rise 2 percent after seven quarters of decline.

infernal machines
Oct 11, 2012

we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.
who will take up the mantle of clunky but functional business oriented laptops now?

hobbesmaster
Jan 28, 2008

dell is the only one close

even Apple laptops are garbage now

pram
Jun 10, 2001

qirex posted:

rip thinkpads

lol

quote:

67 percent slide in third-quarter net profit in February.

lol

Adbot
ADBOT LOVES YOU

qirex
Feb 15, 2001

I mean they'll probably still sell "thinkpads" but don't expect more than their consumer models with a matte finish

  • Locked thread