@Dashrender said in Pentagon Warns Against Using Lenovo Equipment:

@brandon220 said in Pentagon Warns Against Using Lenovo Equipment:

I had to laugh about it. Last year I got dinged for not blocking github and the similar sites. This time they tell me I can go on github and get a piece of software that will compare my firewall config and detect any changes. The logic makes ZERO sense.

audiors are allowed to make up any damned rules they want. it's just nutz.

But companies are alllowed to hire any auditors that they want.

Been using Wasabi for several months now. Was using AWS S3 for several years prior. Haven't had any issue with Wasabi. Using the same tools, as it is S3 compatible.

@Alex-Jones said in Apple locking down iPhone batteries:

Someone has an anger fox problem...

@JaredBusch said in Wide ransomware virus infection sourced from 3rd party IT's remote agents.:

@Fredtx said in Wide ransomware virus infection sourced from 3rd party IT's remote agents.:

@scottalanmiller said in Wide ransomware virus infection sourced from 3rd party IT's remote agents.:

@Fredtx said in Wide ransomware virus infection sourced from 3rd party IT's remote agents.:

@scottalanmiller said in Wide ransomware virus infection sourced from 3rd party IT's remote agents.:

@Fredtx said in Wide ransomware virus infection sourced from 3rd party IT's remote agents.:

@scottalanmiller said in Wide ransomware virus infection sourced from 3rd party IT's remote agents.:

@Fredtx how did it get determined that it was their agents that did it and not just a coincidence or something?

We received several support calls from the whole Oregon area and that was one of the common denominators for all the computers that were infected with that variant. I for one hand did not work with the customer, but that's what our techs saw and found. Tbh, I'm trying to understand how that could happen when most of the ransomware cases involves a self executable file.

So many different MSPs, but they all shared one tool?

It was only one MSP (PM Consultants) who’s agent spread the infection to their own customers. Their customers called our support desperate for help.

What agent was it? Knowing which program was compromised is a big deal, those agents are hosted by the vendor 99% of the time.

I was told it was Connect Wise.

Old and Unpatched, or weak passwords then.

Likely. Attach probably came through an MSP workstation.

@bnrstnr said in XCP-ng 8.0 is available:

The xe-guest-utilities package in Fedora, CentOS, RHEL official repo isn't enabled by default. If you update and lose PV, just run systemctl enable --now xe-linux-distribution

Will do.

@IRJ said in Well this is bad... VPN vulnerability release:

This really seems like a backdoor was found

http://blog.orange.tw/2019/07/attacking-ssl-vpn-part-1-preauth-rce-on-palo-alto.html

And this is an oh got me moment

Sounds that way, yeah.

@Dashrender said in 16TB spinning rust is here:

Many systems today can use JBOD, the system itself takes care of any reliability needs. Exchange added that back in 2013.

Everything uses JBOD at some level.

@DustinB3403 said in Microsoft alternative - open source project?:

This is the part that CERN's team is pissed about.

TL:DR CERN's contract with Microsoft as an Academic institution pricing was revoked, and priced jacked way the hell up.

A prime example is that CERN has enjoyed special conditions for the use of Microsoft products for the last 20 years, by virtue of its status as an “academic institution”. However, recently, the company has decided to revoke CERN’s academic status, a measure that took effect at the end of the previous contract in March 2019, replaced by a new contract based on user numbers, increasing the license costs by more than a factor of ten. Although CERN has negotiated a ramp-up profile over ten years to give the necessary time to adapt, such costs are not sustainable.However, recently, the company has decided to revoke CERN’s academic status, a measure that took effect at the end of the previous contract in March 2019, replaced by a new contract based on user numbers, increasing the license costs by more than a factor of ten. Anticipating this situation, the IT department created the Microsoft Alternatives project, MAlt, a year ago.

Yep.

@travisdh1 said in Wave to be acquired by H&R Block for $537 million:

The only evenly slight bright side to this: At least it's not Intuit.

Or M$

I actually like the case on a mac for once! Still doesnt justify $6k lol

@hobbit666 said in SAMIT on Huawei vs Google:

One thing I don't get yet is my have Xiaomi, Umidigi and other manufactures from that side of the world not been effect by all this stuff with the US?

My thoughts would be if the government have been asking Huawei to but spying/data harvesting stuff in gear wouldn't they be asking all manufacturers?

If they go after "all" it would over expose the falseness of the whole thing.

It's already patched. These things happen. While I'm a huge believe that Docker-like containerization has little proper use in production (see conversation on NodeBB's forums), this isn't a Docker problem. It's just a mistake that can happen when using containerization. Yes, Docker is more risky by being the brand new, shiny product rather than one with decades of testing and auditing. But it's minor as it was identified and patched very quickly.

@Emad-R said in SAMIT on Huawei vs US & Google Day Two Recap:

huawei owns middle east the global market

FTFY

@syko24 said in VoIP.ms issues in Chicago Datacenter:

Chicago Servers are having an issue today:

Capture.PNG

Yes, affecting a customer of mine today.

Also had the same issue last week