|
Put a filter on incoming mail and install adblock and you take care of like 95% of infection vectors.
|
#
?
Jun 16, 2015 10:42
|
|
|
|
| # ? May 31, 2024 08:09 |
|
|
spankmeister posted:I'm in incident response and it's cool how within the timespan of say a year most IT shops went from "HOLY poo poo ALL OUR FILES ARE ENCRYPTED WHAT HAPPENED WHAT DO WE DOOOO?" to "yeah just another cryptoware 's all good". That's doesn't mean I'm still scared as hell about getting hit with that crap.  Yes, backups are fine, but still..
|
|
#
?
Jun 16, 2015 12:05
|
|
|
Collateral Damage posted:An email attachment filter is one of the best first lines of defense against viruses nowadays. This %100. Is there anyone out there that actually still allows inbound .zip or .exe attachments? It's easier and more manageable to block all of them and then make an exception for the special snowflake in marketing who gets zip files of photos for some reason.
|
|
#
?
Jun 16, 2015 15:14
|
|
|
Mo_Steel posted:Executable renamed as a zip (e.g. resume.zip.exe), or something else going on? It was a zip file that contained an html file that opened a page with a fake virus infection screen and prompted you to "click here" to clean the infection, the executable that downloaded from that was crypto.
|
|
#
?
Jun 16, 2015 15:14
|
|
|
AHAHAAHAHAHAHAHAHAHAHHAHAHAHAHAHAHAH IT HAPPENED
|
|
#
?
Jun 16, 2015 15:21
|
|
|
larchesdanrew posted:It was a zip file that contained an html file that opened a page with a fake virus infection screen and prompted you to "click here" to clean the infection, the executable that downloaded from that was crypto. That's almost beautiful in it's own hosed up way. In the perennial "Web page printed out scanned and saved as a jpg inside a word document and emailed" kind of way.
|
|
#
?
Jun 16, 2015 16:23
|
|
|
This is my personal hell today. 3 machines at different clients. I suspect Malware but our scanners haven't found anything yet. Anyone seen this?
|
|
#
?
Jun 16, 2015 17:08
|
|
|
I got an email asking me if I could "expedite" the ticket called in "this morning." Sure, that sounds reasonable. Until you find out that I got that email at 12:08, for a ticket that I found out existed at 12:00, which was entered into the ticketing system at 11:59:33. I will grant you that that is technically still "this morning." And yet. Everyone else on my team is on vacation, which makes me the primary support right now for well over a thousand users at multiple sites in the region. gently caress off with your ten minute old ticket.
|
|
#
?
Jun 16, 2015 17:27
|
|
|
Ugh, two things today. 1) Never tell people a part "should be coming in today" because since 8:01AM I have had every single person from the affected department (and the GM) come by TWICE to ask me when the thing will be working again. I have to explain the whole process to them each time. 2) I never should have demonstrated my malware detecting abilities to the GM. Now he's just forwarding me everything in his spam folder that has an attachment with the subject "Is this a virus?" I've gotten 43 emails this morning alone.
|
|
#
?
Jun 16, 2015 17:55
|
|
|
teethgrinder posted:AHAHAAHAHAHAHAHAHAHAHHAHAHAHAHAHAHAH IT HAPPENED Congratulations.
|
|
#
?
Jun 16, 2015 18:21
|
|
|
larchesdanrew posted:2) I never should have demonstrated my malware detecting abilities to the GM. Now he's just forwarding me everything in his spam folder that has an attachment with the subject "Is this a virus?" I've gotten 43 emails this morning alone. It's always a virus. (Or goatse).
|
|
#
?
Jun 16, 2015 18:30
|
|
|
larchesdanrew posted:2) I never should have demonstrated my malware detecting abilities to the GM. Now he's just forwarding me everything in his spam folder that has an attachment with the subject "Is this a virus?" I've gotten 43 emails this morning alone. Spin up VMs, one per email, and meticulously open each email attachment he forwards you to verify whether or not it is in fact a virus. Log your time. Edit: For my own personal hell, I'm on-site at a company with three filled 48 port switches serving at minimum 18 different VLANs, with apparently no rhyme or reason (company has ~80 systems and 40 employees). They have lost the enable password for all of them. FreshFeesh fucked around with this message at 18:34 on Jun 16, 2015 |
|
#
?
Jun 16, 2015 18:31
|
|
|
Or just set up a cuckoo instance.
|
|
#
?
Jun 16, 2015 18:32
|
|
|
larchesdanrew posted:Ugh, two things today. I don't know how expensive it is, but where I work, any attachments that break the rules are automatically replaced with a .txt explaining that the attachment was rejected. I would say that over 90% of the attachments you expect to receive are going to be pdf files, audio, video or images. If any of those are too big to attach to an email, zipping them isn't going to help and you need an ftp solution or something.
|
|
#
?
Jun 16, 2015 19:03
|
|
|
spankmeister posted:Congratulations. teethgrinder fucked around with this message at 22:52 on Jun 16, 2015 |
|
#
?
Jun 16, 2015 20:32
|
|
|
nobody ever forgets their first "needful"
|
|
#
?
Jun 16, 2015 20:41
|
|
|
BaseballPCHiker posted:This %100. Is there anyone out there that actually still allows inbound .zip or .exe attachments? It's easier and more manageable to block all of them and then make an exception for the special snowflake in marketing who gets zip files of photos for some reason.
|
|
#
?
Jun 16, 2015 23:08
|
|
|
Election time is coming up, and we're waaaaaay too cheap to invest in actual election coverage software. Guess who has been tasked with figuring out a way for 20 users to simultaneously and constantly update data in a meticulously formatted .xls file? For the record, I have no idea how SQL and/or databases work. I am ashamed. My current plan is to write up a simple program in VS that will write the data to a communal networked .csv (or .xls) file that will be read by our graphics system to update voting info. I'm probably in way over my head on this. I've got three weeks before my second kid is born, and election coverage will be the first week of August. So that gives me three weeks to write this up, and then I'll be out on paternity leave while all this poo poo actually hits the fan 
|
|
#
?
Jun 16, 2015 23:14
|
|
|
larchesdanrew posted:Election time is coming up, and we're waaaaaay too cheap to invest in actual election coverage software. Guess who has been tasked with figuring out a way for 20 users to simultaneously and constantly update data in a meticulously formatted .xls file? For the record, I have no idea how SQL and/or databases work. I am ashamed. This will crash and burn spectacularly.
|
|
#
?
Jun 16, 2015 23:16
|
|
|
spankmeister posted:This will crash and burn spectacularly. It always does. For example, last election they didn't want to pay for a legit copy of Excel for the graphics computer and the trial ran out in the middle of the show.
|
|
#
?
Jun 16, 2015 23:19
|
|
|
larchesdanrew posted:Election time is coming up, and we're waaaaaay too cheap to invest in actual election coverage software. Guess who has been tasked with figuring out a way for 20 users to simultaneously and constantly update data in a meticulously formatted .xls file? For the record, I have no idea how SQL and/or databases work. I am ashamed. https://www.youtube.com/watch?v=fxby--kSf8c Emphasis on the part at the 18 second mark.
|
|
#
?
Jun 16, 2015 23:23
|
|
|
larchesdanrew posted:It always does. For example, last election they didn't want to pay for a legit copy of Excel for the graphics computer and the trial ran out in the middle of the show.
|
|
#
?
Jun 16, 2015 23:48
|
|
|
larchesdanrew posted:It always does. For example, last election they didn't want to pay for a legit copy of Excel for the graphics computer and the trial ran out in the middle of the show. Hahahahah this is beautiful. God, you could make an A/T thread for working at a local TV station
|
|
#
?
Jun 16, 2015 23:51
|
|
|
larchesdanrew posted:It always does. For example, last election they didn't want to pay for a legit copy of Excel for the graphics computer and the trial ran out in the middle of the show. Hahaha, gently caress. Cost of a copy of excel versus the cost of your bush league poo poo going sideways in the middle of a show = ???
|
|
#
?
Jun 16, 2015 23:55
|
|
|
larchesdanrew posted:Election time is coming up, and we're waaaaaay too cheap to invest in actual election coverage software. Guess who has been tasked with figuring out a way for 20 users to simultaneously and constantly update data in a meticulously formatted .xls file? For the record, I have no idea how SQL and/or databases work. I am ashamed. e: it took them two weeks, on a weekly report, to gently caress it up because one of them decided that inserting rows below the named table and formatting it to look like the table would somehow magically make it part of the table.
|
|
#
?
Jun 16, 2015 23:57
|
|
|
J posted:Hahaha, gently caress. Cost of a copy of excel versus the cost of your bush league poo poo going sideways in the middle of a show = ???  There's no bad publicity!
|
|
#
?
Jun 17, 2015 00:00
|
|
|
Vicas posted:Hahahahah this is beautiful. God, you could make an A/T thread for working at a local TV station The election before that, the director did a data refresh and the entire spreadsheet rearranged all the data by alphabetical order, but didn't sort the associated numbers. So for the last third of the election coverage, all the numbers were wrong. Apparently the election before THAT they decided to host the SQL server handling the database on a do-nothing machine that the production staff used for email. Like, just kind of in the middle of everyone (it's still running on that machine). Apparently, mid-show, someone logged out of the account running the server and logged into their account so they could play Solitaire. So, yeah, I'm actually anticipating everything going up in flames. We could probably turn election night into some sort of comedy show if people knew what was going on behind the scenes.
|
|
#
?
Jun 17, 2015 00:01
|
|
|
So with all that prior evidence of cheaping out having a tangible negative impact on the quality of your output…
|
|
#
?
Jun 17, 2015 00:07
|
|
|
larchesdanrew posted:Election time is coming up, and we're waaaaaay too cheap to invest in actual election coverage software. Guess who has been tasked with figuring out a way for 20 users to simultaneously and constantly update data in a meticulously formatted .xls file? For the record, I have no idea how SQL and/or databases work. I am ashamed. Would office online work for this? It has real-time co-authoring and sheet protection so you can limit what information can be changed.
|
|
#
?
Jun 17, 2015 00:08
|
|
|
lampey posted:Would office online work for this? It has real-time co-authoring and sheet protection so you can limit what information can be changed. You know, if the auto-saving works like I hope and just saves it whenever a change is made, this may be a pretty decent option. I'll have to keep this in mind. Thanks, lampey!
|
|
#
?
Jun 17, 2015 00:17
|
|
|
Dr. Arbitrary posted:https://www.youtube.com/watch?v=fxby--kSf8c These videos are great. https://www.youtube.com/watch?v=0ObfVhkay5k "Spec bucket"
|
|
#
?
Jun 17, 2015 00:20
|
|
|
Renegret posted:These videos are great. I got some Unicorn socks from them last year. They were great. I hope they do the same thing again.
|
|
#
?
Jun 17, 2015 02:19
|
|
|
larchesdanrew posted:Election time is coming up, and we're waaaaaay too cheap to invest in actual election coverage software. Guess who has been tasked with figuring out a way for 20 users to simultaneously and constantly update data in a meticulously formatted .xls file? For the record, I have no idea how SQL and/or databases work. I am ashamed. Are you an affiliate of a national network? Couldn't you just ask your national network for help with this?
|
|
#
?
Jun 17, 2015 02:22
|
|
|
Volmarias posted:Are you an affiliate of a national network? Couldn't you just ask your national network for help with this? Not really. They supply us with bare minimum to broadcast national shows. Local news is completely up to us. The AP supplies a national election data feed to use, but we're on our own for anything state and below. Couple that with the fact that everyone in control leaves these decisions up to the chief engineer who does not give one single gently caress about anything that doesn't affect him directly, and you get this clusterfuck. He told me to stay out of it and is making GBS threads on entry idea I have, but at least I'm trying something
|
|
#
?
Jun 17, 2015 02:30
|
|
|
An RFP due tomorrow came in! I manage the support team, therefore I need to be the one who responds to support questions in an RFP, right? It's not like we have a Sales team and pre-made documents that will handle any support-related questions in an RFP, right? I can't wait to get ripped for these answers: quote:Section 2.2.4 deals with the amount of licenses for purchase as well as pricing, therefore I did not supply an answer for that section. quote:Section 2.2.5 deals with offering 80 hours banked time for professional services – both offsite and onsite – therefore I did not supply an answer for that section.
|
|
#
?
Jun 17, 2015 03:50
|
|
|
larchesdanrew posted:He told me to stay out of it and is making GBS threads on entry idea I have, but at least I'm trying something Sounds like he's trying to do you a favor.
|
|
#
?
Jun 17, 2015 03:56
|
|
|
larchesdanrew posted:You know, if the auto-saving works like I hope and just saves it whenever a change is made, this may be a pretty decent option. I'll have to keep this in mind. Thanks, lampey! You could pull something together for ~free~ using google spreadsheets and some forms and stuff, too.
|
|
#
?
Jun 17, 2015 04:08
|
|
|
lampey posted:Would office online work for this? It has real-time co-authoring and sheet protection so you can limit what information can be changed. The Table functionality might come in handy too; it expands down as new data is added and you can set up PivotTables and the like to reference them. Not sure if charts do the same but I'd be surprised if they didn't; then it's just a matter of right-clicking it and telling it to Refresh and grab new data. Is the data entry you're talking about along the lines of: District, CandidateAVotes, CandidateBVotes, CandidateCVotes, Closed/Open? e: Hadn't tried out Excel Online so I was curious, quick and dirty example:  Sums run B:B, C:C, and D:D so when new data is added it recalcs the chart automatically; should be possible to formula in the open vs. closed status to determine how many precincts have reported in. Mo_Steel fucked around with this message at 05:47 on Jun 17, 2015 |
|
#
?
Jun 17, 2015 05:34
|
|
|
A ticket went out, from me to ISP. Apparently, one of the major ISPs here is making GBS threads itself, resulting in timeouts when opening bunch of websites. Including Office 365, which bunch of our clients use. I think I'll turn off phone now. Support was super nice, and thanked me for notifying them. Good thing is, I can still access SA 
|
|
#
?
Jun 17, 2015 10:04
|
|
|
|
| # ? May 31, 2024 08:09 |
|
|
larchesdanrew posted:He told me to stay out of it and is making GBS threads on entry idea I have, but at least I'm trying something Get this in writing, step back, watch the fire and prepare for your new child. Let them dig themselves into another hole they seem really good at it.
|
|
#
?
Jun 17, 2015 14:25
|
|
