IT BS thread

This was supposed to be my biggest cert. Novell CNE and A+ were going to earn me the big bucks. A+ at least got me a few interviews back in the day.

 

Ask me about my collection of Notes ID files.

 

I've been Admin'ing on Azure/M365 for almost 2yrs now. It won't be as great as you think, it can be......challenging. All I can say is: Fuck Powershell!

 

I dropped a ton of effort on an MCSE back in 1998. It was useless in 2001. I decided my next cert would be bulletproof (I chose CISSP), and I've been able to maintain it for almost 16 years.

 

I was thinking about CISSP, and I was tossing it around with our Cybersecurity Manager recently, but at my age I'm not sure I'm up for the change. I love the idea, and I think I'd like the challenge, but I don't think I have the years left to devote to it and excel at it.

 

It's managerial. If you're in or looking toward management, it or CISM is worth the effort.

 

I think I'd rather put the effort into Retirement++, even if it is a few more years down the road! lol

I work for a really good couple of managers and directors, which is hard to imagine right? Enjoy where you work? How does that happen? And we will all retire about the same time. As long as they keep paying me, I'm good where I'm at.

 

GASP!!

Makes sense - ACC put its energy into bombs. AMC shared its HQ building with AFCC, so they tended to be first to experiment with enacting the new world order.

 

Woke up to someone trying to break into my server. There's been a few attempts over the last few months. Usually they try a few random user names and give up after a dozen attempts, but this person/bot was after root for hours.

 

PAM is your friend And, of course, GeoIP blocking every country in the world who you dont want accessing your server.

 

Right now I'm using fail2ban, and root can't login into ssh. I think I saw an option this morning where I can set the ban time to increase every time they get blocked.

 

Our IDP/IPS tells the network to “forget” any foreign or flagged IPs. We had a DDoS attempt last week that lasted 2 minutes.

Yeah, all or our accounts with remote login have no rights - you have to su to root. The only way to log in directly to root is physically at the device, and not even then now that all of our Linux boxes are VMs.

 

I have had several attempted attacks from this country (Romania). I've had to block a lot of eastern European countries, as well as many Asian countries.

 

We’ve gone whitelist only. Most of Asia, Africa, South/Central America, and most of Europe is explicitly blocked. One of our vendors didn’t read their contract and subbed software work out to India, and we dropped them for violating terms (federal IT). Australia, Canada, New Zealand, France, and Great Britain are fully trusted. The other permitted countries are allowed only to connect to US facilities there.

We had an issue a few years back where an IT contractor went “on vacation” to China to visit relatives for 2 months and didn’t clear it with his company, and China followed his VPN traffic back to us. It made the news for a while.

 

Scroedinger's app

 

I just started studying for the ITIL v4 test today and damn is it a lot to take in

 

Bring that up around here and you just get a face full of "We're a DevOps organization, that's old school!" And then they continue to deliver crap and count on other teams to support that crap. One guy mentioned "centralizing DevOps." That doesn't even make sense.

 

lol this is my favorite page on the forum lol haha nice!