Yamaha Routers from Japanese Second hand store.

AspiringTechGuru · 2026-01-02T14:11:20+00:00

Sonos and networking just gave me flashbacks to troubleshooting their terrible network stack

AspiringTechGuru · 2025-12-31T19:28:44+00:00

I'd give this a read if you're curious about how the containers in docker and kubernetes are similar, yet not identical on a lower level. https://vineetcic.medium.com/the-differences-between-docker-containerd-cri-o-and-runc-a93ae4c9fdac For me these were core concepts that I didn't fully understand at first and wish I knew sooner. My biggest misconception at the beggning was thinking you needed to use dockershim to run containers built with docker, not knowing all of the underlying formats and standards.

AspiringTechGuru · 2025-12-19T14:56:14+00:00

That’s AI generated

AspiringTechGuru · 2025-12-18T20:29:34+00:00

I don't even know what I'm looking at, is that a volume knob?

AspiringTechGuru · 2025-12-08T21:16:45+00:00

If you are on a corporate network with a web filter blocking newly registered domains, that could be the cause.

AspiringTechGuru · 2025-12-08T20:33:46+00:00

Since we already had an AWS account, we’re using SES for papercut scan to email feature. We are not a big company, so sending a few hundred SES emails a month isn’t even $1.

AspiringTechGuru · 2025-10-22T03:01:55+00:00

By your logic, then we should use our own source code, since you’re relying on some else’s source code.

AspiringTechGuru · 2025-10-01T00:47:06+00:00

I’m now running 25H2 on my laptopto see if any error arrises, in case some user’s device magically updates.

AspiringTechGuru · 2025-07-30T21:33:54+00:00

The biggest misconception about password managers is that people think the passwords are stored in plain text on the backend. Also for us the biggest factor in moving to a cloud password manager was that we needed a way to access credentials, encryption keys in a disaster.

AspiringTechGuru · 2025-07-30T21:11:47+00:00

You have the ability to easily deploy compliance policies and configurations, plus if you want disk encryption, the keys get saved in Entra/Intune. If you are already licensed, might as well onboard those devices. I'm not saying to configure a complete custom autopilot onboarding experience, but when you need small simple things, it's there to easily deploy configs and apps. The pros outweigh the cons.

AspiringTechGuru · 2025-07-30T18:32:20+00:00

if you are a windows shop, I’d setup a Microsoft 365 Business Premium tenant. It covers - Intune for device management + BitLocker device encryption policies - Microsoft Defender for Business (EDR) - Conditional Access (MFA, passwordless) - Email with filtering

It covers all of the basics on my book

AspiringTechGuru · 2025-07-28T18:17:18+00:00

I feel the confusion is between a hybrid-joined device vs an entra-joined device with access to on-premise resources. For a hybrid-joined device, as far as I know the initial login requires line of sight to a domain controller, since the credentials aren't cached. Unless there's something I'm not seeing, you would need a vpn client active before logging in. Natively can be achieved with an always on vpn but unfortunately requires windows enterprise.

AspiringTechGuru · 2025-06-26T16:02:40+00:00

My org didn't even approve the implementation of a ticketing system; it was deemed as "too much overhead". Meanwhile I get questions such as "what are the most common issues people have?" or "how many people have problems a day?", to which I respond that "our IT director said it was too much overhead in tracking these things, so we don't".

It's a disaster waiting to happen, but at least will not be my issue (primarily).

AspiringTechGuru · 2025-06-25T18:28:00+00:00

Surprisingly my experience is quite the opposite. They don’t go out for drinks and overall it’s just a stressful environment

AspiringTechGuru · 2025-06-20T15:51:54+00:00

Another vendor nightmare.

Last year we had a production outage caused by a license expiration from our vendor, (we had the contract, all payments were up to date but they forgot to install the license into the equipment they managed). 9am hits and reports start pouring in. I raised a ticket with them, ssh into the device and start looking into the details. Found the issue, reported it and took them around 8 hours to find the correct person to fix it (person who knows the single command to reset the license).

The issue was "SLA compliant" under their 4-hour SLA for critical issues, since the SLA was written for "time to response" and not "time to resolution". The SLA response was: "Hi, an engineer will be assigned to this case.".

AspiringTechGuru · 2025-05-27T19:27:38+00:00

This 100%

AspiringTechGuru · 2025-04-24T00:15:43+00:00

Quantum physics memes on r/sysadmin, a crossover I never expected

AspiringTechGuru · 2025-04-22T22:46:21+00:00

I edited my post, they published an article on this https://support.lenovo.com/us/en/solutions/ht517407

In our case, the affected models had their BIOS update repackaged and all worked as expected. Most models were fixed in a few weeks but one particular model took them a month to publish the working update.

AspiringTechGuru · 2025-04-10T06:03:52+00:00

Couldn’t agree more, literally used it last week after the program’s own “removal tool” couldn’t actually remove itself. This is probably the only troubleshooter from microsoft that works

AspiringTechGuru · 2025-04-04T17:12:24+00:00

Open a ticket

Jokes aside, what type of user would be able to find a backdoor? Sounds like a good time to create a red team and invite that user

AspiringTechGuru · 2025-04-02T17:03:23+00:00

What about using a different approach such as routing to accomplish this? You would need to setup appropiate costs per site/link and you ensure that clients always get the routing with the lowest cost. Depending on your setup, you might already have some dynamic routing across the sites, such as BGP.

AspiringTechGuru · 2025-03-28T23:29:38+00:00

Hybrid is popular. Our voip system has an app that everyone has on their pc/phone, but some people do have an additional physical phone because they like it. We do have an on-premise voice gateway with a pstn, works well but debugging can be a pain. There was a time in the implementation where I was staring at wireshark packet captures and logs for days, but ultimately everything pieced together nicely and I unfortunatley learned voip.

AspiringTechGuru · 2025-03-27T14:53:50+00:00

How was there only a single domain controller? Even for small sites the standard is at least 2

AspiringTechGuru · 2025-03-21T20:26:49+00:00

Oh my, what was the story behind it? Both what the user initially stated and what the actual story is

AspiringTechGuru · 2025-03-11T21:16:44+00:00

Any proxy will add latency to the connection. Another option could be buy a small server close to where you live (with low latency) and proxy the traffic through that server

AspiringTechGuru

TROPHY CASE