• 0 Posts
  • 29 Comments
Joined 1 year ago
cake
Cake day: June 12th, 2023

help-circle


  • It would be better to our them on blast on social media since that sometimes gets the companies attention to try and fix PR.

    Works almost every time. I had a ticket with a vendor open at work for just about 3 months, and then only replies I’d gotten on the ticket was the “We’ve received your support request which we’ll promptly ignore!” autoresponse upon opening, and then another auto-response a month later saying the ticket was being assigned to another department. I’d replied to the ticket ~20 times asking for updates in that time.

    I finally got sick of essentially yelling into an empty room and called out the company, their marketing team, their support team, and their CEO on Twitter, making sure to @ each one of them in the message. I got a reply from their CEO and an actual human responded to the ticket less than an hour later.

    It’s shitty and a last resort, but it’s generally very effective.


  • I have a Hisense and had a similar experience. I was watching something fullscreen on an HDMI input, and then it suddenly switched inputs and showed a fullscreen firmware update prompt. I had no choice available other than to agree to update the firmware, no cancel button, couldn’t change inputs, nothing, the only choice was to update the firmware. So I unplugged the TV.

    About 10 seconds after I powered it back on, the exact same update prompt happened, still with no choice to decline it. I pulled power and booted it back up one more time just to be sure, met with the update prompt again.

    This made me very angry.

    The next time I powered it on, I had a packet capture running to see where it was phoning home. I created a firewall rule blocking all the hostnames it tried to connect to at startup, pulled the plug, and then booted it back up. No more update prompt, and it hasn’t happened again. Good thing they don’t download and pre-stage the new firmware, I guess.

    Let me know if you want the hostnames and I’ll PM them to you.







  • BTW, any authenticator app works when it tells you to use one. They all use a standard, so it doesn’t matter which one you use.

    Eh, it’s a little more nuanced than that, there’re more standards for MFA code generation than just TOTP.

    And even within the TOTP standard, there are options to adjust the code generation (timing, hash algorithm, # of characters in the generated code, etc.) that not all clients are going to support or will be user-configureable. Blizzard’s Battle.net MFA is a good example of that.

    If the code is just your basic 6-digit HMAC/SHA1 30-second code, yeah, odds are almost 100% that your client of choice will support it, but anything other than that I wouldn’t automatically assume that it’s going to work.


  • A times B times C equals X… I am jacks something something something

    Narrator: A new car built by my company leaves somewhere traveling at 60 mph. The rear differential locks up. The car crashes and burns with everyone trapped inside. Now, should we initiate a recall? Take the number of vehicles in the field, A, multiply by the probable rate of failure, B, multiply by the average out-of-court settlement, C. A times B times C equals X. If X is less than the cost of a recall, we don’t do one.

    Woman on Plane: Are there a lot of these kinds of accidents?

    Narrator: You wouldn’t believe.

    Woman on Plane: Which car company do you work for?

    Narrator: A major one.






  • This is the first lesson you have to learn as a Linux enthusiast, NEVER run commands you don’t know from the internet

    “Nah, just curl this random web address and pipe it over to a sudo bash shell, everything will be fine!”

    I hate how this is becoming the official install method for more and more shit. It’s like dude, really? You may as well stick your dick in a garbage disposal, both of those actions are equally safe.

    You’re dreaming if you think I’m not going to wget it and read it to see what it does first.


  • I’m forced to use either Chrome or Edge for my work computer and it drives me crazy.

    I’ve been a Sysadmin for a ~decade. I can state with 100% certainty that the reason behind that decision is that you can very easily configure Group Policy to control the behavior and visibility/availability of features in Chrome and Edge. Firefox didn’t have that until just a couple of years ago, and it wasn’t great when it first became available. And to be honest, it’s still not fully baked, but it’s at least usable now from an administrative perspective.

    Maybe bring it up to your IT department and include this link in the email/ticket.



  • Is OpenVPN not just SSL traffic?

    It’s not, it’s an IPSec VPN by default which runs over UDP. You can run it via TCP and it operates over the same port as HTTPS (443), but it’s not the same protocol and can be differentiated that way.

    A way around this would be to run an SSLVPN with a landing page where you log in instead of using an IPSec VPN or a dedicated SSLVPN client.

    Another way around it would be to create a reverse SSH tunnel on a VM/VPC in another country/state and send all your traffic through that.