Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Post
  • Reply
KillHour
Oct 28, 2007


The Fool posted:

Actually, I want to make a clarification:

Self-motivated learning is awesome and always good in all situations!

It's even better if your employer provides space for learning during work hours because it's the expectation that an employee does work related stuff outside of work where it becomes toxic.

This is a less severe (but still real) example of the 'game developer' phenomenon where you're competing with people who confuse their job with their hobby and are willing to work horrible conditions just for the 'privilege' to do so. And companies know this.

If a big chunk of IT employees are huge nerds who watch videos about new features coming out in the next version of Rust for fun, you're expected to also do that to keep up with them.

Adbot
ADBOT LOVES YOU

mattfl
Aug 27, 2004

The Iron Rose posted:


More importantly, life’s too short to spend it on a career that brings you no joy. It doesn’t have to be your overriding pursuit, and there’s many things you can find value and worth in outside of work. But if you’re gonna spend a significant fraction of your life working, you may as well try to find parts of it rewarding!


I don't need my job to give me joy, my joy comes from things outside of my job. My job is just a means to those things.

Things that give me joy in my life aren't going to pay me as much as my job does, so I will come here and put in my time and enjoy my life outside of this job and when I leave the building each day not think about it until the next day.

DACK FAYDEN
Feb 25, 2013

Bear Witness

KillHour posted:

This is a less severe (but still real) example of the 'game developer' phenomenon where you're competing with people who confuse their job with their hobby and are willing to work horrible conditions just for the 'privilege' to do so. And companies know this.

If a big chunk of IT employees are huge nerds who watch videos about new features coming out in the next version of Rust for fun, you're expected to also do that to keep up with them.
yeah, and there's no way for me to advocate "this poo poo should be illegal" without sounding totally tinfoil hat about it, but like, it's a way to discriminate in favor of people who absolutely have capitalism-induced brain damage and I hate it.

The Iron Rose
May 12, 2012

:minnie: Cat Army :minnie:

KillHour posted:


If a big chunk of IT employees are huge nerds who watch videos about new features coming out in the next version of Rust for fun, you're expected to also do that to keep up with them.

If you want to compete with those candidates, then yeah you kinda do. Fortunately there are many more engineering and IT jobs than people to fill them, so this only matters if you want to outcompete those people for the jobs they’re trying to get.

This is the free market doing exactly what it should be doing. If you’re happy with your employment situation, and if you don’t foresee a need to stretch in your career on your own time, then by all means rest and vest. there are many many jobs out there for you.

If you do want to put in that extra time, and you strategize effectively about where you work, then there are commensurate rewards that may or may not be worth it to you personally.

For example, I don’t want to work sixty hours a week at Amazon just to add an extra hundred K to my takehome, or study for months to leetcode my way past the entrance interview. as a result, I don’t work at Amazon, and work for other employers that don’t require me to do either of those things. But I did want to get out of IT/sysadmin work, so I learnt on my own time to code, cloud, and confidently negotiated my way to better paying work.

tl;dr: it is good that as a consequence of the free market you can self select the amount of effort you want to put in to achieve the employment results you want. If you don’t want to put in that time, great! Pursue things that have value to you, more power to you. If you do put in the extra effort, great! Organizations that do difficult poo poo will pay a premium for that and will want to hire you.


DACK FAYDEN posted:

yeah, and there's no way for me to advocate "this poo poo should be illegal" without sounding totally tinfoil hat about it, but like, it's a way to discriminate in favor of people who absolutely have capitalism-induced brain damage and I hate it.

I, too, think hard work, learning, and productivity gains should be penalized and not rewarded. Employers shouldn’t be able to discriminate based on what people know about the job they’re applying for. Laziness is a protected class!

I am indeed shocked that people think that this is crazy! Employers should never be able to require off hour work or study - but there’s no way to restrict them from hiring people who willingly choose to do so without saying “you can’t hire better candidates period.”

The Iron Rose fucked around with this message at 17:54 on Nov 8, 2022

BaseballPCHiker
Jan 16, 2006

I dont get how this is that hard.

Just lie if you truly dont want to learn anything off of the clock, read about industry news, etc. Just have an answer ready if you want to try and get the job. Ive never been pressed on this ever, and I interview and job hop all the time.

DACK FAYDEN
Feb 25, 2013

Bear Witness

The Iron Rose posted:

I, too, think hard work, learning, and productivity gains should be penalized and not rewarded. Employers shouldn’t be able to discriminate based on what people know about the job they’re applying for! Laziness is a protected class!

I am indeed shocked that people think that this is crazy!
Basically, I think it's lovely that the system is set up to continue the existence of the system (since the system is bad) (obviously this is not how we change it, because small situational improvements don't help these things)

But also it seems like these things can become de facto requirements even if they're not in writing anywhere. And I don't like that! I don't particularly think it's laziness to not want to do work you are not paid for, but if it is, that's fine, because laziness is not inherently bad. I mean, everyone in this thread automates, I should hope.

edit: and it's not hard, no, I just lie, it just pisses me the gently caress off.

The Iron Rose
May 12, 2012

:minnie: Cat Army :minnie:

DACK FAYDEN posted:

Basically, I think it's lovely that the system is set up to continue the existence of the system (since the system is bad) (obviously this is not how we change it, because small situational improvements don't help these things)

But also it seems like these things can become de facto requirements even if they're not in writing anywhere. And I don't like that! I don't particularly think it's laziness to not want to do work you are not paid for, but if it is, that's fine, because laziness is not inherently bad. I mean, everyone in this thread automates, I should hope.

edit: and it's not hard, no, I just lie, it just pisses me the gently caress off.

I felt a little bad about using the word laziness there, because you’re right, it’s not laziness to not do work that you’re not being paid for.

But at the same time, doing that work helps you get better jobs, that do pay more, because you are more effective at your job as a consequence of that study. I don’t see a regulatory solution to this, because I don’t think it’s a problem that needs to be solved. Laziness isn’t inherently bad, but self study *is* inherently good. Knowledge is its own reward - and I’m glad we have an economic system that rewards accumulating knowledge, however badly it fares in other regards.

The Iron Rose fucked around with this message at 18:04 on Nov 8, 2022

i am a moron
Nov 12, 2020

"I think if there’s one thing we can all agree on it’s that Penn State and Michigan both suck and are garbage and it’s hilarious Michigan fans are freaking out thinking this is their natty window when they can’t even beat a B12 team in the playoffs lmao"
If you want to be such a huge capitalist, get on my level of $$$ while doing as little as I do. That’s the free market right there

The Iron Rose
May 12, 2012

:minnie: Cat Army :minnie:

i am a moron posted:

If you want to be such a huge capitalist, get on my level of $$$ while doing as little as I do. That’s the free market right there

I mean yeah duh why do you think I’m in devops instead of being a SWE or a medical doctor. Maxing out my personal effort / reward ratio right here.

i am a moron
Nov 12, 2020

"I think if there’s one thing we can all agree on it’s that Penn State and Michigan both suck and are garbage and it’s hilarious Michigan fans are freaking out thinking this is their natty window when they can’t even beat a B12 team in the playoffs lmao"
I also literally don’t think about work or touch computers outside of my job except to play video games

xzzy
Mar 5, 2009

Someone I know actually buys computers to set up their home lab and evaluate software for use at work. C'mon now, run that stuff on company resources!

Like if folks enjoy learning poo poo on their own time game on but it better be coming out of the company budget.

The Iron Rose
May 12, 2012

:minnie: Cat Army :minnie:

i am a moron posted:

I also literally don’t think about work or touch computers outside of my job except to play video games

I am happy you too have found your pinnacle of effort / reward.


xzzy posted:

Someone I know actually buys computers to set up their home lab and evaluate software for use at work. C'mon now, run that stuff on company resources!

Like if folks enjoy learning poo poo on their own time game on but it better be coming out of the company budget.

This is just insane though. There’s rewarding learning and study, and then there’s just being taken for a ride. Wasn’t someone in the other thread paying out of their own pocket for their company’s confluence server?

I’m not saying be grateful to our corporate overlords for poo poo. Exploit them for all they’re worth! A teammate recently took a month vacation, put in his two weeks notice the day after returning, and did no work for those two weeks. I’m happy for him! Make the fat cats buy you certs, courses, and pluralsight subscriptions before taking those skills and moving onwards and upwards.

The system’s hosed friends. But in lieu of another more equitable model, one may as well game it as best you can. And in my experience, the further upwards you go, the less demanding the work.

Dandywalken
Feb 11, 2014

I, for one, would like to hear from CLAM DOWN on the matter.

Methylethylaldehyde
Oct 23, 2004

BAKA BAKA

BaseballPCHiker posted:

I dont get how this is that hard.

Just lie if you truly dont want to learn anything off of the clock, read about industry news, etc. Just have an answer ready if you want to try and get the job. Ive never been pressed on this ever, and I interview and job hop all the time.

"Just Lie" is how about half your interview questions should go. If they can't prove you didn't do X or Y on a previous gig, and you know enough about the tech to bullshit it, who can say what really happened? Certainly not your old boss, who by company policy cannot say jack and/or poo poo about you other than 'he worked here from X to Y, he is eligible for rehire'.

I think the best answer to "what do you do to learn about new tech on your own time" would be "I watch Linux Tech Tips, mostly to learn how NOT to do something. Half his projects are the tech equivalent of chopping a tree down with a hammer, technically doable, but very dumb."

Sickening
Jul 16, 2007

Black summer was the best summer.
I have said this many times in other threads, but the truth often doesn't benefit you if its not what they want to hear. You are competing for jobs with other liars. The system encourages people to lie. The entire system is built from lies. Its just the way it is.

klosterdev
Oct 10, 2006

Na na na na na na na na Batman!
Oof. User was accessing and working out of the old database location using logmein to connect to an old computer pointing to the old location.

Dick Trauma
Nov 30, 2007

God damn it, you've got to be kind.
One of the CEO's assistants gave me an old flash drive and wanted me to check it because the CEO was looking for old photos. I took it back to my desk and plugged it in, and it was full of zips named for female celebrities with the word LEAKED at the end.

BaseballPCHiker
Jan 16, 2006

Dick Trauma posted:

One of the CEO's assistants gave me an old flash drive and wanted me to check it because the CEO was looking for old photos. I took it back to my desk and plugged it in, and it was full of zips named for female celebrities with the word LEAKED at the end.

At my first job my creep of a boss got fired because someone saw him looking at porn at work. When they seized his computer to look into the matter they found whole folders of photoshops he had done of female employees onto pornstars bodies. One of the creepiest grossest human beings I've had the displeasure of working with.

Fil5000
Jun 23, 2003

HOLD ON GUYS I'M POSTING ABOUT INTERNET ROBOTS

Dick Trauma posted:

One of the CEO's assistants gave me an old flash drive and wanted me to check it because the CEO was looking for old photos. I took it back to my desk and plugged it in, and it was full of zips named for female celebrities with the word LEAKED at the end.

Well that's some old photos. The fappening was all the way back in 2014

Dick Trauma
Nov 30, 2007

God damn it, you've got to be kind.
It was on a Lexar thumb drive. Surprised that it didn't turn to dust when I unplugged it.

PremiumSupport
Aug 17, 2015

Dick Trauma posted:

It was on a Lexar thumb drive. Surprised that it didn't turn to dust when I unplugged it.

I have one of those! It's got our Windows 10 image on it...

The Fool
Oct 16, 2003


our flagship platform application broke the max number of app roles in aad and fixing it is going to require totally redesigning out access model

Sickening
Jul 16, 2007

Black summer was the best summer.

The Fool posted:

our flagship platform application broke the max number of app roles in aad and fixing it is going to require totally redesigning out access model

How.... how is this possible?

The Fool
Oct 16, 2003


Sickening posted:

How.... how is this possible?

The application in question is TFE, each TFE workspace gets two teams, a read and a write, each TFE team has a corresponding app role so when someone logs in, they automatically have access to the correct workspaces

This resulted in 1255 app roles on the app registration.

The Fool
Oct 16, 2003


also, if anyone on my team is a goon, I've just outed myself

i am a moron
Nov 12, 2020

"I think if there’s one thing we can all agree on it’s that Penn State and Michigan both suck and are garbage and it’s hilarious Michigan fans are freaking out thinking this is their natty window when they can’t even beat a B12 team in the playoffs lmao"
I’m very confused by that. Maybe TFC is wildly different but you just assign one service principal per workspace and rbac them appropriately

The Fool
Oct 16, 2003


i am a moron posted:

I’m very confused by that. Maybe TFC is wildly different but you just assign one service principal per workspace and rbac them appropriately

this is to govern access to the tfe web ui, what you describe is the workspace access to resources

i am a moron
Nov 12, 2020

"I think if there’s one thing we can all agree on it’s that Penn State and Michigan both suck and are garbage and it’s hilarious Michigan fans are freaking out thinking this is their natty window when they can’t even beat a B12 team in the playoffs lmao"
Does it not do SSO then? What does it need this stuff for :thunk:

The Fool
Oct 16, 2003


It does, this is part of the saml config

Sickening
Jul 16, 2007

Black summer was the best summer.

i am a moron posted:

Does it not do SSO then? What does it need this stuff for :thunk:

I imagine that that the "solution" that was created was due to a few people not understanding the actual problem.

Sickening
Jul 16, 2007

Black summer was the best summer.

The Fool posted:

It does, this is part of the saml config

That is enough internet for me today.

i am a moron
Nov 12, 2020

"I think if there’s one thing we can all agree on it’s that Penn State and Michigan both suck and are garbage and it’s hilarious Michigan fans are freaking out thinking this is their natty window when they can’t even beat a B12 team in the playoffs lmao"
TFE might be bad idk that sounds really stupid

klosterdev
Oct 10, 2006

Na na na na na na na na Batman!
What on earth could posses a company to only want some of their users on MFA.

At least I got the risk acknowledgement in writing.

The Fool
Oct 16, 2003


Say I have a dev that needs access to a specific set of workspaces.

He submits a ticket to BMC to get added to the WRITE aad group that corresponds to the workspace, and the IAM team adds him.

That AAD group is assigned an app role within the app registration for TFE.

So when he signs in, he triggers the saml flow, aad sees that he is in a specific group, that group corresponds to a role, that role is added to the token that is delivered to TFE.

TFE checks that token, sees the name of the role, sees that role corresponds to a team, then gives that dev the access determined by that team.

Arquinsiel
Jun 1, 2006

"There is no such thing as society. There are individual men and women, and there are families. And no government can do anything except through people, and people must look to themselves first."

God Bless Margaret Thatcher
God Bless England
RIP My Iron Lady

klosterdev posted:

What on earth could posses a company to only want some of their users on MFA.

At least I got the risk acknowledgement in writing.
"CEO is too important for MFA"/"Bob in accounting is not important enough for MFA".

i am a moron
Nov 12, 2020

"I think if there’s one thing we can all agree on it’s that Penn State and Michigan both suck and are garbage and it’s hilarious Michigan fans are freaking out thinking this is their natty window when they can’t even beat a B12 team in the playoffs lmao"

The Fool posted:

Say I have a dev that needs access to a specific set of workspaces.

He submits a ticket to BMC to get added to the WRITE aad group that corresponds to the workspace, and the IAM team adds him.

That AAD group is assigned an app role within the app registration for TFE.

So when he signs in, he triggers the saml flow, aad sees that he is in a specific group, that group corresponds to a role, that role is added to the token that is delivered to TFE.

TFE checks that token, sees the name of the role, sees that role corresponds to a team, then gives that dev the access determined by that team.

In TFC this is all handled in the application itself and has nothing to do with AAD so I’m still majorly lost and I suspect they work differently. When you automate stuff you just use their API. This sounds very weird to me but I don’t do TFE so :shrug:

If you want a new job though lmk my company is hiring and we pay well

The Fool
Oct 16, 2003


i am a moron posted:

In TFC this is all handled in the application itself and has nothing to do with AAD so I’m still majorly lost and I suspect they work differently. When you automate stuff you just use their API. This sounds very weird to me but I don’t do TFE so :shrug:

If you want a new job though lmk my company is hiring and we pay well

One of the solutions put forward to replace this was to just manage team membership via api

The Fool
Oct 16, 2003


i am a moron posted:

In TFC this is all handled in the application itself and has nothing to do with AAD so I’m still majorly lost and I suspect they work differently. When you automate stuff you just use their API. This sounds very weird to me but I don’t do TFE so :shrug:

I mean, the whole point of all of that nonsense is so that we don't have to manage access inside of TFE, the user goes through the same IAM process as every other application.

quote:

If you want a new job though lmk my company is hiring and we pay well

If you're still hiring in January I might reach out. Angling for a promotion right now.

Caconym
Feb 12, 2013

I agreed to write the tagging and microsegmentation policy documents, wtf is wrong with me?

18000+ VMs, 15 tenants, 5 environments, 2000+ application instances and PII health information everywhere. Shoot me now.

Adbot
ADBOT LOVES YOU

Silly Newbie
Jul 25, 2007
How do I?

Arquinsiel posted:

"CEO is too important for MFA"/"Bob in accounting is not important enough for MFA".

Response: please give me that in writing so I can properly attest to our cyber security insurance people.

  • 1
  • 2
  • 3
  • 4
  • 5
  • Post
  • Reply