Dear Users... (A thread for Sysadmin, Technical Support, and Help Desk people)

Status
Not open for further replies.
I'm convinced that 90% of complaining about "OMG now I have to repeat my problem to you! I just explained it to the other guy!" comes from people who just vomit out their issue in one long unbroken stream of consciousness data dump to everyone.
 
Big Mainframe Company put a bugged OS upgrade on to our dev machine last week , but didn't apply the patch that seems to have been available since July. Hmmm
 
Could be worse.

Our company is making a big push to improve security. Part of that is better controls for admin/privileged functions. As part of that, we're implementing a system so that we don't have direct access to the privileged accounts;we'll check them out and in as we need to use them.

Well, one problem they ran into is that our workstations require smartcard logins, and these new admin acocunts don't have cards associated with them. This means when we try to "Run As" an admin function, it can't log in the admin user. Not a big deal; we can do like everyone else in the world and set up specific jump servers for this, that are used for admin and have other controls.

Instead, our security team has decided that a better option is to simply turn off the smartcard requirement for all admin workstations.

Yes, we're reducing security across the most privileged systems in our enterprise; many of which are laptops (not even restricted to the company property).

This is typical for our new security team.

Anyone know a place that's looking for an expert Windows admin with some experience in programming, -IX systems, Mac OS, and networking?
 
No! This is a lie that smart phone and laptop makers have been pushing on the public for years now.

Biometrics should be used only for authentication, that is, showing you are who you claim you are. It's the "user name" part of a user name/password pair. They should not be used for authorization, that is, granting you access to systems.

Why? You have only one fingerprint or face. If people who aren't you figure out how to bypass the biometrics, they have complete access to the system and you can't lock them out. ("Sorry, George, the Cardassians have figured out how to bypass the retina scan and can now access Starfleet's weapons systems. We'll either have to revoke your access completely or gouge your eyes out.")

A better approach is to use biometrics for authentication and a secure token for authorization. That way if the authentication part is compromised, the authorization token can be revoked and re-issued.
Yes, you're absolutely right, and I should have been more careful when I said that. Biometric methods should be one factor in a multi-factor authentication system.
 
No! This is a lie that smart phone and laptop makers have been pushing on the public for years now.

Biometrics should be used only for authentication, that is, showing you are who you claim you are. It's the "user name" part of a user name/password pair. They should not be used for authorization, that is, granting you access to systems.

Why? You have only one fingerprint or face. If people who aren't you figure out how to bypass the biometrics, they have complete access to the system and you can't lock them out. ("Sorry, George, the Cardassians have figured out how to bypass the retina scan and can now access Starfleet's weapons systems. We'll either have to revoke your access completely or gouge your eyes out.")

A better approach is to use biometrics for authentication and a secure token for authorization. That way if the authentication part is compromised, the authorization token can be revoked and re-issued.
NSFW
I have it on good authority that all human anuses are unique, i.e. they have different patterns of fissures, etc. So I am dreading the day when some officious bean-counter is going to insist on using this as a unique personal identifier. Can you imagine designing the interface?? :rolleyes:
 
Well today I learned that because of the latest reorg I get another new boss.

My fourth in as many years.

It's annoying because 1) I hate training new bosses and 2) I really really like this one I have right now.

:(

Bleah.
There's always the BOFH way; shovel, roll of carpet and sack of lime.
 
NSFW
I have it on good authority that all human anuses are unique, i.e. they have different patterns of fissures, etc. So I am dreading the day when some officious bean-counter is going to insist on using this as a unique personal identifier. Can you imagine designing the interface?? :rolleyes:


So the Grey Aliens are just authenticating?
 
NSFW
I have it on good authority that all human anuses are unique, i.e. they have different patterns of fissures, etc. So I am dreading the day when some officious bean-counter is going to insist on using this as a unique personal identifier. Can you imagine designing the interface?? :rolleyes:


Support: "Is it plugged in?"
 
Which is what I was saying. Google knows who you are and what you want, so it gives better results.
Knowing what browser and OS are being reported in the request header isn't the same as knowing who you are and what you want. If people are avoiding Google searches because they're afraid of that, then they're stupid. If DDG is intentionally ignoring that, then they're exploiting stupid people.
 
Knowing what browser and OS are being reported in the request header isn't the same as knowing who you are and what you want. If people are avoiding Google searches because they're afraid of that, then they're stupid. If DDG is intentionally ignoring that, then they're exploiting stupid people.
It has the unintended side effect of creating search bubbles, where Google gives you results that it thinks you want as opposed to what you need. It's probably good for technical topics, but for controversial ones it only serves to amplify the echo chamber. For things like medical information it can be a killer, if Google decides you're into alternative medicine and fails to show you results from more reputable sites.

In addition, I don't know what Google knows about me. What I do know is they've made it their mission to get as much data as possible about my browsing habits, where I go on the web, what sites I visit, and how long I stay there.

East Germany used to have a group that did that, too. I think you know their name: the Stasi.

Basically, Google is sitting on a huge mine of personally identifying information from millions of people, most of it collected without their knowledge or consent. Anyone is only one National Security Letter away from that information being abused.
 
I have such mixed emotions!


No DST in Brazil in 2019
2019-04-11
The government of Brazil has announced that there will be no DST in Brazil in 2019.

Parts of Brazil were scheduled to observe DST (summer time) from 3 November, 2019 to 16 February 2020. This now seems to be canceled, although no decree has been made yet.

On the one hand, YAY Brazil!!! Wish we'd do that.

On the other hand, oh crap - timezone changes in my future.
 
I have such mixed emotions!



On the one hand, YAY Brazil!!! Wish we'd do that.

On the other hand, oh crap - timezone changes in my future.

How many time have I posted this I wonder?

supervillain_plan.png
 
Status
Not open for further replies.

Back
Top Bottom