Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Locked thread
Chris Knight
Jun 5, 2002

me @ ur posts


Fun Shoe

Shaggar posted:

anyone who doesn't lock their comp @ work leaves themselves open to being hosed w/

that's how we started the "James buys everyone a coffee" club

Adbot
ADBOT LOVES YOU

Salt Fish
Sep 11, 2003

Cybernetic Crumb
Your computer should be impossible for a lay person to use regardless if it's locked or not. If someone can walk up to it and accomplish any task it's a sure sign that you need to get a weirder window manager or keyboard layout.

Doom Mathematic
Sep 2, 2008

syscall girl posted:

i don't have anyone who cares enough about me to try to read my correspondence :cry:

Cheer up, there's always someone! :) :nsa:

leper khan
Dec 28, 2010
Honest to god thinks Half Life 2 is a bad game. But at least he likes Monster Hunter.

Salt Fish posted:

Your computer should be impossible for a lay person to use regardless if it's locked or not. If someone can walk up to it and accomplish any task it's a sure sign that you need to get a weirder window manager or keyboard layout.

I always use an external keyboard, so I've considered disabling the built in board on my laptops. the keyboard I ferry around to work/coffee shops/etc only has the colemak layout on it, so the population that can use it is fairly small.

I don't do this specifically so that no one else can use my computer, but it's a nice side benefit.

Salt Fish
Sep 11, 2003

Cybernetic Crumb
I use the rarely seen "double" dvorak in which you both set dvorak on the OS and use a keyboard that outputs dvorak to give you:

-wvlfuijpn
ar.gcedybo
s'htqxm,k;

BangersInMyKnickers
Nov 3, 2004

I have a thing for courageous dongles

Farmer Crack-rear end posted:

what's the possibility of the robot's batteries discharging into the water and shocking/electrocuting whoever went in to try and haul it out

Individual cells are going to be in the 6-14v range and I doubt they would be doing anything more than 100vdc in one of those. It'll discharge to itself more than anything. Bigger risk would be the batteries exploding from the rapid discharge

haveblue
Aug 15, 2005



Toilet Rascal
plus wouldn't it have discharged immediately upon falling in and be fully drained and safe by the time a human got there

lord of the files
Sep 4, 2012

Super neat.

https://www.sc0tfree.com/sc0tfree-blog/optimizing-rubber-ducky-attacks-with-empire-stagers

BangersInMyKnickers
Nov 3, 2004

I have a thing for courageous dongles

Salt Fish posted:

Your computer should be impossible for a lay person to use regardless if it's locked or not. If someone can walk up to it and accomplish any task it's a sure sign that you need to get a weirder window manager or keyboard layout.

I use OS X

BangersInMyKnickers
Nov 3, 2004

I have a thing for courageous dongles

haveblue posted:

plus wouldn't it have discharged immediately upon falling in and be fully drained and safe by the time a human got there

Depends on where the water hit first. Batteries are all going to be in one place down low-ish, if they're all tied in series you could have a lot of voltage and assuming it goes in head first the whole power bus could short out instead of individual cells. Hard to really know without seeing the insides of one but I doubt there's enough Ah in whatever batteries it uses to be on full short discharge for more than a minute

post hole digger
Mar 21, 2011

Salt Fish posted:

Your computer should be impossible for a lay person to use regardless if it's locked or not. If someone can walk up to it and accomplish any task it's a sure sign that you need to get a weirder window manager or keyboard layout.

Wells
Sep 21, 2008

THIS IS A BIZ!!!
Lipstick Apathy
I was migrating some of our clients to o365 from this other hosted exchange service I've never had to personally log in to until today and I noticed this very quickly:



Sadly I do not own butt.com

Grace Baiting
Jul 20, 2012

Audi famam illius;
Cucurrit quaeque
Tetigit destruens.



hunter2 posted:

I was migrating some of our clients to o365 from this other hosted exchange service I've never had to personally log in to until today and I noticed this very quickly:



Sadly I do not own butt.com

Noticed what? ❔❓:confused:❓❔

mrmcd
Feb 22, 2003

Pictured: The only good cop (a fictional one).

Grace Baiting posted:

Noticed what? ❔❓:confused:❓❔

When you fail login it prints the password in the error message. That's my guess what's happening. Either that or the person writing error messages is really bored.

anthonypants
May 6, 2007

by Nyc_Tattoo
Dinosaur Gum

Grace Baiting posted:

Noticed what? ❔❓:confused:❓❔

mrmcd posted:

whoooooooosh
also does anyone else hear that whooshing sound

mrmcd
Feb 22, 2003

Pictured: The only good cop (a fictional one).

anthonypants posted:

also does anyone else hear that whooshing sound

Oh well no fair editing the quoted image. :mad:

mod saas
May 4, 2004

Grimey Drawer

Grace Baiting posted:

Noticed what? ❔❓:confused:❓❔

:golfclap:

RISCy Business
Jun 17, 2015

bork bork bork bork bork bork bork bork bork bork bork bork bork bork bork bork bork bork bork bork bork bork bork bork bork bork bork bork bork bork bork bork bork bork bork bork bork bork bork bork bork bork bork bork bork bork bork bork bork bork bork bork bork bork bork bork bork bork bork bork
Fun Shoe
someone at my office is so bad at locking his screens that it's now a written rule that you can't gently caress with his desktop, because it literally will not matter

normal people get one free unlocked desktop with a warning, then it's fair game :getin:

anthonypants
May 6, 2007

by Nyc_Tattoo
Dinosaur Gum

mrmcd posted:

Oh well no fair editing the quoted image. :mad:
also changed the quoted user's name, no fair looking at their post

El Mero Mero
Oct 13, 2001

Salt Fish posted:

Your computer should be impossible for a lay person to use regardless if it's locked or not. If someone can walk up to it and accomplish any task it's a sure sign that you need to get a weirder window manager or keyboard layout.

I spread a highly toxic venom on all of my belongings that I have built up a resistance to via microdosing over the past decade. Additionally, anyone who approaches my desk from a highly probabilistic angle while walking with rhythm activates a series of strobe lights and livestream feeds.

ate shit on live tv
Feb 15, 2004

by Azathoth

RISCy Business posted:

someone at my office is so bad at locking his screens that it's now a written rule that you can't gently caress with his desktop, because it literally will not matter

normal people get one free unlocked desktop with a warning, then it's fair game :getin:

Ideally if you gently caress with someone's unlocked desktop you are immediately fired and blacklisted for being a terminal security gently caress up.

FAT32 SHAMER
Aug 16, 2012



ate poo poo on live tv posted:

Ideally if you gently caress with someone's unlocked desktop you are immediately fired and blacklisted for being a terminal security gently caress up.

that's what they did at my previous job

The MUMPSorceress
Jan 6, 2012


^SHTPSTS

Gary’s Answer
at my previous job just about everybody had direct access to customers live systems containing millions of patient records with phi yet id constantly see unlocked computers in empty offices with the door open. shameful. at some point you have to just fuckin enforce a screensaver+lock timing with gpo.

ultramiraculous
Nov 12, 2003

"No..."
Grimey Drawer

ate poo poo on live tv posted:

Ideally if you gently caress with someone's unlocked desktop you are immediately fired and blacklisted for being a terminal security gently caress up.

my old boss/director got real grumpy sometimes about the cultural practice of “jello”-ing people’s facebooks. his general thrust was that if you can’t trust your team to protect your unlocked computer while you grab a coffee, you shouldn’t want to be on that team.

ultramiraculous
Nov 12, 2003

"No..."
Grimey Drawer
i’m trying to conjure a direct quote but basically “if you’re going to stand by and let your coworkers openly futz with someone’s laptop, i’m within my rights to fire all of you”

goddamnedtwisto
Dec 31, 2004

If you ask me about the mole people in the London Underground, I WILL be forced to kill you
Fun Shoe

BangersInMyKnickers posted:

Depends on where the water hit first. Batteries are all going to be in one place down low-ish, if they're all tied in series you could have a lot of voltage and assuming it goes in head first the whole power bus could short out instead of individual cells. Hard to really know without seeing the insides of one but I doubt there's enough Ah in whatever batteries it uses to be on full short discharge for more than a minute

if it's designed to go outside wouldn't it have to be waterproofed to an extent? maybe not enough to survive total immersion though, now i think about it

hackbunny
Jul 22, 2007

I haven't been on SA for years but the person who gave me my previous av as a joke felt guilty for doing so and decided to get me a non-shitty av
question: we use openssl in our product, as a dependency of a dependency that would be hugely expensive to replace. is the switch to libressl worth it, and is it painless?

flakeloaf
Feb 26, 2003

Still better than android clock

ultramiraculous posted:

i’m trying to conjure a direct quote but basically “if you’re going to stand by and let your coworkers openly futz with someone’s laptop, i’m within my rights to fire all of you”

I didn't notice because I was working sir

spankmeister
Jun 15, 2008






hackbunny posted:

question: we use openssl in our product, as a dependency of a dependency that would be hugely expensive to replace. is the switch to libressl worth it, and is it painless?

use polarssl op

hackbunny
Jul 22, 2007

I haven't been on SA for years but the person who gave me my previous av as a joke felt guilty for doing so and decided to get me a non-shitty av

spankmeister posted:

use polarssl op

but is it source compatible with openssl? otherwise it's just more work for me which I'd rather expend on something else e.g. rewriting the openssl-dependent code to use native os ssl support

spankmeister
Jun 15, 2008






hackbunny posted:

but is it source compatible with openssl? otherwise it's just more work for me which I'd rather expend on something else e.g. rewriting the openssl-dependent code to use native os ssl support

no it isn't, I misread your post sorry

spankmeister
Jun 15, 2008






i think ratbert recently switched to libressl in their codebase

surebet
Jan 10, 2013

avatar
specialist


cinci zoo sniper posted:

here we just get hosed because from any of workstations in my dept you can access full records of every customer [of a company subject to strict regulatory compliance of bunch of countries including us of a]

ha, try working in small accounting shops; all of the regulatory burden, none of the money to hire people who know what the gently caress a computer is

we had an archival box that was setup by the friend of a friend of one of the kids of someone who left 5 years ago or something and no one had the admin credentials, and only one account's credential escaped the sands of time so pretty much everyone was using that

it was accessible remotely from inside and outside the network, so the second you checked the external ip there was nothing preventing you from remoting in from a starbucks and doing whatever

i did an internship there so i was gone after 12 weeks, but man, that whole thing scared the bejesus out of me

FlapYoJacks
Feb 12, 2009

spankmeister posted:

i think ratbert recently switched to libressl in their codebase

Yep. It works just fine. A small patch to NTP was needed, but nothing too huge.

Edit*

LibreSSL is API compatible with OpenSSL 1.0.x, but not OpenSSL 1.1.x... Almost (See below)
At least not yet. Looks like v2.6 is starting to work on that, so that's good.

99% of the applications that fail to compile against libressl I have found fall into two categories:

1) Packages that are compatible with both OpenSSL 1.0 and 1.1. Usually, they have macro checks like:
code:
#if OPENSSL_VERSION_NUMBER < 0x10100000L
Solution: Add a libressl check in there as well on the same line.
code:
#if OPENSSL_VERSION_NUMBER < 0x10100000L || defined(LIBRESSL_VERSION_NUMBER)
2) The package explicitly uses CMS and only CMS.

Solution: Switch to PKS and stop using CMS.

FlapYoJacks fucked around with this message at 16:39 on Jul 19, 2017

Powerful Two-Hander
Mar 10, 2004

Mods please change my name to "Tooter Skeleton" TIA.


one guy I used to work with would install a version of the office paperclip on any unlocked pc he found

he stored it on an open network share specifically for this purpose

pr0zac
Jan 18, 2004

~*lukecagefan69*~


Pillbug

ate poo poo on live tv posted:

Ideally if you gently caress with someone's unlocked desktop you are immediately fired and blacklisted for being a terminal security gently caress up.

the terminal security gently caress up is the person leaving their screen unlocked

that said, don't screw with people's computers in ways that makes it unusable for them, its straight up rear end in a top hat hazing behavior and its poo poo like that that makes tech culture as bad as it is

I work on a product security team, if someone leaves their laptop unlocked and someone else notices, we nicely lock it for them with no dumb pranks and the rule is the person who forgot gets to buy the team donuts the next day, themselves included

its helpful and we get to eat donuts together as a team the next day! (except for me cause I work remotely :smith:)

Ed: also cause I'm sure someones gonna bring it up, the donuts are expensible

pr0zac fucked around with this message at 14:53 on Jul 19, 2017

Blinkz0rz
May 27, 2001

MY CONTEMPT FOR MY OWN EMPLOYEES IS ONLY MATCHED BY MY LOVE FOR TOM BRADY'S SWEATY MAGA BALLS

pr0zac posted:

the terminal security gently caress up is the person leaving their screen unlocked

that said, don't screw with people's computers in ways that makes it unusable for them, its straight up rear end in a top hat hazing behavior and its poo poo like that that makes tech culture as bad as it is

I work on a product security team, if someone leaves their laptop unlocked and someone else notices, we nicely lock it for them with no dumb pranks and the rule is the person who forgot gets to buy the team donuts the next day, themselves included

its helpful and we get to eat donuts together as a team the next day! (except for me cause I work remotely :smith:)

Ed: also cause I'm sure someones gonna bring it up, the donuts are expensible

uh

do you work in the same office as me?

cinci zoo sniper
Mar 15, 2013




Blinkz0rz posted:

uh

do you work in the same office as me?

you both have 0s in nicknames, so

Mr SuperAwesome
Apr 6, 2011

im from the bad post police, and i'm afraid i have bad news
if the doughnuts are expensible, why not just do it daily and get free donuts all the time??? bet they didnt think of that one

Adbot
ADBOT LOVES YOU

Cocoa Crispies
Jul 20, 2001

Vehicular Manslaughter!

Pillbug

Mr SuperAwesome posted:

if the doughnuts are expensible, why not just do it daily and get free donuts all the time??? bet they didnt think of that one

because then they wouldn't have a ritual to use for punishment in a professional setting

  • Locked thread