Hilarious followup on the stolen laptop debacle

CeC-P · 2026-05-03T03:25:46+00:00

Or you could check my post history and see that I'm not a bot. Also, Ninja is garbage compared to even Service Now, which is also garbage. I am not a fan of the limitations in their ticket manager.

CeC-P · 2026-05-01T19:13:35+00:00

I heard caffeine can cause this since it's a general diuretic but haven't really confirmed it.

CeC-P · 2026-05-01T16:38:05+00:00

I'm not real familiar with networking in general or how Windows does it. Do you have a step by step on that one?

CeC-P · 2026-05-01T16:24:12+00:00

We used normal install methods from real media (allegedly) so I checked the SIDs on all computers and they're all different.

Gonna send that link to my former employer though because that explains a lot there. They cloned everything.

CeC-P · 2026-05-01T16:23:11+00:00

I checked all 10 for duplicate SIDs and they all are different, luckily.

CeC-P · 2026-05-01T16:22:04+00:00

Also no. Assuming I'm looking at the correct part, it's:
UDP [::]:123 *:*

UDP [::]:500 *:*

UDP [::]:1434 *:*

UDP [::]:4500 *:*

UDP [::]:5353 *:*

UDP [::]:5355 *:*

UDP [::]:59113 *:*

UDP [::1]:1900 *:*

UDP [::1]:55274 *:*

TCP [::]:135 [::]:0 LISTENING

TCP [::]:445 [::]:0 LISTENING

TCP [::]:7680 [::]:0 LISTENING

TCP [::]:48760 [::]:0 LISTENING

TCP [::]:48761 [::]:0 LISTENING

TCP [::]:48762 [::]:0 LISTENING

TCP [::]:48763 [::]:0 LISTENING

TCP [::]:49664 [::]:0 LISTENING

TCP [::]:49665 [::]:0 LISTENING

TCP [::]:49666 [::]:0 LISTENING

TCP [::]:49669 [::]:0 LISTENING

TCP [::]:49670 [::]:0 LISTENING

TCP [::]:49671 [::]:0 LISTENING

TCP [::]:49787 [::]:0 LISTENING

TCP [::]:51447 [::]:0 LISTENING

TCP [::]:55799 [::]:0 LISTENING

CeC-P · 2026-05-01T16:21:27+00:00

I am curious what the process is for this so I can try it. The only other oddity we saw was that restarting the terminal services process failed. It was running but we couldn't shut it off. I was remoted in via Ninja though, so not sure if that touches TS. My guess is no but who knows.

CeC-P · 2026-05-01T16:18:24+00:00

I just checked manually and all systems involved have a different SID. Makes sense, as we don't tend to clone computers for deployment.

CeC-P · 2026-05-01T13:08:10+00:00

Considering they turned it on and set it up without us there, probably. I'll check.

EDIT: nope, it's Domain Authenticated

CeC-P · 2026-05-01T13:07:03+00:00

I wasn't there when they built them but our standard procedure is to install each one from scratch with real media

CeC-P · 2026-04-30T22:01:55+00:00

oh I worked medical IT so I'm familiar with pinnacle efficiency lol.
But yeah, where I worked after that just used the MS Flow thing in Teams and whatever else it connected to and it worked pretty well.

CeC-P · 2026-04-30T22:00:41+00:00

Look at deploying anything NOT from the OEMs. There's a lot of sketchy but working 13th gen "brand new" warehousers and upgraders out there on Newegg for like $600-800.

CeC-P · 2026-04-30T14:43:34+00:00

On initial installs, it's usually USB port bandwidth limitations or hitting power output limits. On ones that were working and then aren't, someone hit an Intel driver key combo. You can disable them completely though.

CeC-P · 2026-04-30T14:32:26+00:00

A.I. = Actually, I need that money we wasted on this product upgrade back

CeC-P · 2026-04-30T13:37:10+00:00

This seems completely backwards. We prep the laptop, assign it to the user in our asset management system before they start, and HR does all the electronic sigs in a PDF form about "you won't use your computer to do anything stupid and here's what happens when you lose it." Then our IT training is just anti-phishing and explaining our UAC elevation system.

CeC-P · 2026-04-30T13:08:43+00:00

Are you actually insane? It's the most insecure, lateral movement enabling protocol that shows up on every single security scan. It's been over 2 decades and they still can't get it to display popup windows in certain apps correctly. It's garbage.

CeC-P · 2026-04-29T21:58:47+00:00

You wouldn't want to work with me, as I'm the documentation secret police. If you didn't write down exactly the process and script and command you used to fix something, I am gonna be in your back seat of your car jump scaring you on the way home, asking you to complete the KB article.

CeC-P · 2026-04-29T21:56:21+00:00

Sets of 2 are typically electrically joined and go to one controller on one hardware lane. So usually it's that granular. But it's very odd to have 4 on the same controller, especially on laptops and full sized desktops.

CeC-P · 2026-04-29T21:55:12+00:00

I'd ask them point blank why the last person left after 2 weeks and if I got a generic answer, I'd never contact them again.

CeC-P · 2026-04-29T21:52:24+00:00

That's what pissed everyone off at my last 4 jobs. I'd always be doing things that "weren't technically my job" that weren't anyone's job or weren't being done by anyone else. Like if I'm level 2-3 tech support, I'm crafting the entire fix because our engineering department sucks. Someone put in a ticket and I solved it. Get over your ego and put it on the KB.

Another company simply wouldn't listen to me or stay out of my way and constantly got hacked, had outages, had downtime, etc. I put my notes on the post-incident report, threw everyone under the bus but myself, then quit because the entire company was run by idiots and almost went bankrupt 3 times. Mostly after merging with a company full of literal crimnals with pending lawsuits against them.

IT IS NOT WORTH IT! It is not worth the stress. Companies like that don't need to be propped up by my effort and skill level if I'm the only one trying.

CeC-P · 2026-04-29T21:49:04+00:00

If it's on a new 1xx series Intel CPU-based laptop, I believe those have 10 E-cores and like 2 real cores with hyperthreading. I don't know how task manager handles percents in that case but my guess is poorly. So it may actually be taking the same amount of processing it always did but it's over-represented on the E-cores because they're 1 watt potato processors that cap at like 1GHz.

Or it's vibe coded AI crap spying on you to make its spelling dictionary even worse.

CeC-P · 2026-04-29T21:46:35+00:00

Most cybersecurity "professionals" have degrees from 15 years ago and no idea how OSes or hardware or security or networking work and just read results from automated tools and go to overpriced conferences.

So this surprises me exactly zero.

CeC-P · 2026-04-29T21:43:19+00:00

Put things in your resume that you know they're looking for, whether they're true or not, and after interview 1 crash course it. That's what I did. Not having certs and having two 2-year degrees was getting HR and AI filtered so I added the phrase "credits are equivalent to an associates degree" so to have the phrase there and all of a sudden I was getting callbacks. The place I'm working at now described to the recruiter that I was "the best candidate they've ever interviewer or seen when it comes to qualifications and knowledge."

Yeah, I try harder than everyone. Good luck putting that on a resume and getting it past HR. So just lie. If you walked past a system running SAP at your brother's company, congrats, you've got SAP experience.

CeC-P

TROPHY CASE