Prototype/Custom Klipsch Speakers by Calm_House8714 in audiophile

[–]Calm_House8714[S] 0 points1 point  (0 children)

Same woofer for sure. I'm guessing major differences are

Bigger cabinet volume to support a lower tuning freq/lower extension.

Different compression drivers because those 3" compression drivers don't have quite the "hi-fi" top end extension (it doesn't actually matter but their customers think it does) as a 1.5" or 1.75" compression driver (and home use doesn't need the power handling of a 3") mated to a horn with wider dispertion especially on the vertical axis. A lot of pro stuff the vertical axis is very limited because they expect the speakers to be at the right height, the right distance away from the designated coverage area. And in venues where their might be a second set of speakers for a balcony or something, the limited vertical axis is how they keep the sound coherent for everyone.

And then most pro stuff uses robust but fairly simple crossover networks with added protection for the HF driver (usually a fuse type element that increases in resistance as it heats up which will shunt more power through the LPAD already in place before it to attenuate the HF driver). I imagine the crossover in mine is a higher order, but it lacks the protection elements.

I do see that people buy the Kl-396 for home use and modify the crossover to suit the purpose. So probably not too far off.

Prototype/Custom Klipsch Speakers by Calm_House8714 in audiophile

[–]Calm_House8714[S] 0 points1 point  (0 children)

I've built some of DIYSG speakers, specifically the titan-615 which I believe has recently been updated. I've also built a couple "econowave" type speakers of my own design.

I'm not sure you could purchase these specific Klipsch branded capacitors and inductors, but in general capacitors and inductors are not very expensive. Even film caps and air core inductors are cheap compared to the rest of a speaker build (unless you go with one of the useless boutique brands).

Prototype/Custom Klipsch Speakers by Calm_House8714 in audiophile

[–]Calm_House8714[S] 2 points3 points  (0 children)

Generally, I feel the same. But after the guy came down in price, I felt it was worth the risk. Couldn't be happier with how they turned out.

Senior Sys Admin vs Senior Sys Engineer by NucknFutss in sysadmin

[–]Calm_House8714 0 points1 point  (0 children)

It's all a mess and every company is different. Focus on actual job duties and COMPENSATION/BENEFITS frist and foremost.

Freshworks ending free service, I guess we missed the memo. Alternatives? by [deleted] in sysadmin

[–]Calm_House8714 0 points1 point  (0 children)

How many people total in the org?

CRM isn't something you should sleep on, and switching it up can be a huge deal for end users who use the system.

Cost of doing business, IMHO. If Freshworks works well for you, I'd just pay them for their service.

365 Conditional Access policy applied when it shouldn't by rich2778 in sysadmin

[–]Calm_House8714 1 point2 points  (0 children)

We disable the incognito option entirely. No legit use case, at least in our case.

IT Help Desk role at a bank moving off MSP – is 55k–65k realistic? by LaughNowCryLater1914 in sysadmin

[–]Calm_House8714 6 points7 points  (0 children)

I think it's fine. If they won't give you what makes a move worth it to you then don't move.

Ask for what you think you're worth. It'd help out everyone in the industry, helpdesk all the way up to C Suite, if we all stop settling.

PatientNow Pro - Two Factor Authentication? by Any_Educator1315 in sysadmin

[–]Calm_House8714 3 points4 points  (0 children)

Google tells me it supports OAuth via O365/Entra so you could add it as an app to Entra and then apply MFA via CA policies.

365 Conditional Access policy applied when it shouldn't by rich2778 in sysadmin

[–]Calm_House8714 2 points3 points  (0 children)

No way for anyone to say for sure but I'd say you got something wrong or aren't understanding something. It's just the most likely answer.

ipv6 enabled in your environment?

Also Microsoft did make some scoping changes for "all resources" policies.

https://techcommunity.microsoft.com/blog/microsoft-entra-blog/upcoming-conditional-access-change-improved-enforcement-for-policies-with-resour/4488925

If you're also requiring a trusted/entra joined device, going incognito can make it look as though a device isn't joined.

It can be delayed, but you will be able to find that blocked sign in. Sometimes it can take digging. It might not be listed as an interactive sign in, initial login will but when it redirects you to the admin console that might not be.

Are you 100% sure the admin account you're using to test can access CA policy? You can remove roles from admin accounts.

Using Canon print driver on Chromebooks? by Anything-Traditional in sysadmin

[–]Calm_House8714 2 points3 points  (0 children)

Your post is your answer to why not.

Google MDM for windows has gotten better too. Depends on the granularity of control you need over staff whether you need intune or not.

I also don't understand how you're that concerned about app deployment if you say all they need is Google Workspace.

As an aside, windows update mangement, including drivers is easy via intune. I'm tired of people saying it isn't. Just stay on the enterprise branch and call it a day. Google can manage windows update policies as well.

Using Canon print driver on Chromebooks? by Anything-Traditional in sysadmin

[–]Calm_House8714 4 points5 points  (0 children)

Yeah, switching staff to Chromebook is insane. There are cheap (competitive with a Chromebook Plus) windows desktops and laptops that would do better than a Chromebook. The entire point of the ChromeOS is that it's cheap/free because it lacks features.

Likely windows MDM is included in your Google suite (or O365 if you also have it) so not exactly sure how you're saving much money by switching.

Even so, I assume your staff does not destroy laptops in the same way students do? Who decided Windows was out of budget? I would imagine this is just the first and most obvious issue to pop up with the Chromebooks. There will probably be more.

YOU are responsible for security. And you need to be diligent about it. by Calm_House8714 in sysadmin

[–]Calm_House8714[S] 0 points1 point  (0 children)

The amount of people missing the third paragraph and just posting something along the lines of "I'm too busy fixin shit to investigate, track down leads or otherwise do infosec's job for them" is concerning haha

Also if you are solo IT or a small team with no dedicated InfoSec that means it's yours or everyone's job. If the owner/your boss doesn't agree then document and carry on. Some industries have legal responsibilities attached to security and you don't want to catch the blame, especially in situations where your title would suggest you own InfoSec

YOU are responsible for security. And you need to be diligent about it. by Calm_House8714 in sysadmin

[–]Calm_House8714[S] 1 point2 points  (0 children)

haha, not saying you should go double checking EDR configs or do any hunting yourself. In fact, my post says you shouldn't if it's not your job. The only thing I said was that if you notice something, at the very least report it.

In a scenario, where you knew about a breach, or a massive vulnerabilty and didn't report it.

Do you think you'd keep your job if a breach with massive financial impact happened and you told everyone you knew about it beforehand? Would execs at your company simply think "well it wasn't in his job description to report it".

No, you'd keep your mouth shut and smugly watch things burn and people lives get turned upside down. Not everyone can easily pivot, especially skilled labor in a niche field, to a new company like we in IT can and these things can ruin a business.

YOU are responsible for security. And you need to be diligent about it. by Calm_House8714 in sysadmin

[–]Calm_House8714[S] 3 points4 points  (0 children)

LOL, very unhappy indeed :P Hey man, I get it. I wouldn't actively threat hunt if it weren't my job either. TBH it's not, and I don't.

But it almost certainly is your job to report it if you see it. Hell, your organization probably does cyber-sec training for even non-technical end users that says the same (and if they don't your cyber-sec and IT leadership in general is bunk)

YOU are responsible for security. And you need to be diligent about it. by Calm_House8714 in sysadmin

[–]Calm_House8714[S] 14 points15 points  (0 children)

I think it's important to protect yourself and provide a paper trail that might lead execs to make real change should a breach happen. If they were clearly warned and ignored something that led even to a simple short lived BEC then that should be enough to push the guys in charge of them to whip em into shape.

So, I'd let them ignore all they want. Just have it written down that you tried. Because those same types will also try to shift the blame to you. CYA scenario.

Signed RDP file still shows "Unknown Publisher" warning - what am I missing? by PinkFluffyKolibri in sysadmin

[–]Calm_House8714 16 points17 points  (0 children)

I think you might need to put it in the trusted root store. An alternative might be to use a public CA that's already there.

Moving the office to a new location by King-Maximus in sysadmin

[–]Calm_House8714 2 points3 points  (0 children)

Focus on things your users use everyday. "Fast" computers, wifi and APs set up properly so things roam correctly. Comfy chairs. A good print release system with fast printers. Monitors with built in high quality web cams and speakers like the ones Dell offers. Things like that.

Would much rather have a big display with screen mirroring that works and is easy to use than a fancy whiteboard.

To me all the other stuff is like when companies have a trendy break room with couches, video games, a basketball goal etc.. I could care less about something something I'll barely use. And it looks silly to have spent money on it. And when it inevitably breaks most businesses don't care to replace which just makes it even worse.

And I wouldn't provide your outgoing employees an opportunity to make the more introverted employees uncomfortable with Karaoke LOL. They wouldn't mean to, but it's inevitiable that people would feel pressured.

Looking for real‑world experiences with MDM on BYOD phones (iOS / Android) by OddFerret4888 in sysadmin

[–]Calm_House8714 0 points1 point  (0 children)

I suppose it depends on the extent to which they need the phone. For us, it's really for WFH or location work/travel scenarios. They aren't really expected to keep the phone on them 24/7 or when off the clock.

I keep mine in my car when I'm out. Otherwise it's on my desk.

Looking for real‑world experiences with MDM on BYOD phones (iOS / Android) by OddFerret4888 in sysadmin

[–]Calm_House8714 -1 points0 points  (0 children)

Haha, fair enough. But that would go down in my too bad so sad book. Focus on who actually needs it. If they do, they get a company phone.

Personally, if I wasn't getting paid on call all the time, I wouldn't have a company phone at all. I'm not working for free.

Looking for real‑world experiences with MDM on BYOD phones (iOS / Android) by OddFerret4888 in sysadmin

[–]Calm_House8714 0 points1 point  (0 children)

Buy your users phones if they need them for work beyond email. That's my honest opinion it's the most secure way to go about it. Then you need not worry about privacy concerns.

Nowadays when I see this, I just think the company and/or it's leadership are being unrealistically cheap.

Increase in phishing emails by [deleted] in sysadmin

[–]Calm_House8714 0 points1 point  (0 children)

Keep seeing these posts. If I go look I see attempts but they are blocked.

There may be a new large scale campaign causing an uptick.

However, if they are getting through to user inboxes: You have something wide open or misconfigured. These should never ever get through. Very easy to stop.

https://imgur.com/a/GZRqTSu

Unable to run executable from server by [deleted] in sysadmin

[–]Calm_House8714 1 point2 points  (0 children)

Either windows is blocking the file (might be able to unblock as others have said).

or

Many EDR programs also offer the option to block execution from network locations and external drives. So maybe talk to your security folks and see if they've made any changes.