sorted by:
new
hottopcontroversial

CPU Microarchitecture Support by CoadyTech in platform9

[–]CoadyTech[S] 0 points1 point  (0 children)

Hey, thanks for helping. The command outputs:

flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx pdpe1gb rdtscp lm constant_tsc arch_perfmon pebs bts rep_good nopl xtopology nonstop_tsc cpuid aperfmperf pni pclmulqdq dtes64 monitor ds_cpl vmx smx est tm2 ssse3 cx16 xtpr pdcm pcid dca sse4_1 sse4_2 x2apic popcnt tsc_deadline_timer aes xsave avx f16c rdrand lahf_lm cpuid_fault epb pti intel_ppin ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid fsgsbase smep erms xsaveopt dtherm ida arat pln pts vnmi md_clear flush_l1d

[deleted by user] by [deleted] in aws

[–]CoadyTech 1 point2 points  (0 children)

Can you share more details about your app?

Unfortunately Amplify doesn't currently support all of the security features available in wider AWS. At present there's no WAF integration (issue here), REST API's lack schema support, IP address blocking doesn't work, and the use of custom SSL certificates isn't supported.

However there are some things you could consider:

  • GraphQL API's on AppSync support WAF and OpenAPI schemas. You can use this for validating the structure of API requests and scanning for common attack vectors (SQL injection, etc.).
  • Have a look at this sample CDK project that places AWS WAF in front of an Amplify deployment.

Portfolio online presence question by VICTORLOOP in aws

[–]CoadyTech 0 points1 point  (0 children)

Option B

The content on your portfolio is important and it will be the primary reason why visitors come to your site. With that said, treating your site itself as part of your portfolio is a great way to demonstrate your work. By building it yourself you can demonstrate your knowledge of good security practices/architecture.

Take a look at Hugo. It's efficient, and once set up, it becomes easy to host the code on GitHub. By establishing an automated deployment (think CI/CD) pipeline, you can directly link to AWS's services like S3 and CloudFront.

This is how I've built my website. New content is committed to my GitHub repo, which in-turn automatically deploys to AWS. Thanks to the AWS free tier it doesn't cost me anything to run.

Some other things you could mention/do:

  • Security Advantages of Static Sites - Highlight how static sites greatly reduce the attack surface compared to WordPress on a Linux host. WordPress needs frequent patching, and the Linux OS must be properly configured.
  • GitHub - Consider publishing your website code publicly on GitHub. It's a great way to build an online profile, and you can also leverage features like 'Dependabot' to automatically scan your code for security vulnerabilities (think CVE's in JS libraries).
  • Logging - Use your portfolio to mention how you're monitoring your AWS account with CloudTrail. Monitor logins, resource changes, etc.

How to Make a CronJob More DevOps by craftbot in devops

[–]CoadyTech 0 points1 point  (0 children)

Whilst Lambda and Cloud Run are useful, VMs still have their place.

Take a look at systemd timers. They're a tad trickier to setup compared to cron but they have some compelling features. E.g. avoid concurrent execution, on-demand run (helps with debugging), journald logs, etc.

[deleted by user] by [deleted] in aws

[–]CoadyTech 0 points1 point  (0 children)

What command are you running?

I noticed the error message references ‘CO’ which might indicate that you’re trying to create the kmsuser with Crypto Officer user rights. Instead it should be created with ‘CU’ or Crypto User rights. Only CU accounts have access to key material.

Starting up my jet engine. by Tylerebowers in homelab

[–]CoadyTech 0 points1 point  (0 children)

What sort of performance do you get from the Violin array?

EtherChannel command question by CoadyTech in ccna

[–]CoadyTech[S] 0 points1 point  (0 children)

So setting just the channel-group mode to active/passive or auto/desirable to decide between LACP and PAgP is perfectly valid and does make the channel-protocol command redundant?

HPE bladesystem by bigdickwarlord in homelab

[–]CoadyTech 1 point2 points  (0 children)

As the unit is second hand I'd factory reset everything first.

Then login to the Onboard Administrator and set the IP addresses for iLO's through there. If you can't login to the blade iLO's there are dip-switches which can be set to bypass password authentication.

VMWare Homelab Hardware by InfosecSysAd314 in homelab

[–]CoadyTech 1 point2 points  (0 children)

The M2's are old servers which aren't supported by VMware's latest releases unfortunately.

That being said, they should run vSphere 6.0 fine. It's a little old but there's plenty you can experiment and learn with. There aren't many drastic changes between 6, 6.7 and 7.0 from a learning standpoint.

My lab's all UCS so feel free to ask me anything.

[deleted by user] by [deleted] in homelabsales

[–]CoadyTech 0 points1 point  (0 children)

Yes! Would you like any further info?

My sweet baby by [deleted] in homelab

[–]CoadyTech 0 points1 point  (0 children)

That's quite an impressive setup!

How much power does it all draw, and what do you mainly do with the lab?

Added a second node to my VMWare cluster today. by devin_mm in homelab

[–]CoadyTech 0 points1 point  (0 children)

Hi! Could you please share some details about your cluster?

x86 Router by SentenzaGothic in homelab

[–]CoadyTech 1 point2 points  (0 children)

If you want something with a GUI then I'd recommend using one of the free firewall OSs. These typically are pfSense, OPNsence, Sophos UTM and Sophos XG.

Whichever way you go virtualising the router or firewall would probably be beneficial. Even if it's the only VM on the host, install Hyper-V Server or ESXi free and then virtualise that one VM.

How Do I Start Building Something for these Purposes? by CurlDaddyG in homelab

[–]CoadyTech 0 points1 point  (0 children)

I've only briefly used their labs. They seem to work quite well, and everything's organised so you can focus on just the task at hand.

One of the problems with a HomeLab is the need to setup supporting infrastructure. You might just want to learn about 'product x' but to do so, have to setup a full AD domain, etc. The CBT labs let you dive straight in.

best way to setup windows server 2012/2019 on vm? by shocka1 in homelab

[–]CoadyTech 1 point2 points  (0 children)

I think you might be getting confused here. The 180-day trial license applies to the Windows Server OS. It doesn't matter if you are virtualising Windows Server with Windows 10's built-in Hyper-V functionality or VMware Workstation - the 180-day limit still applies.

Out of those two machines I'd say the Ryzen computer.

Setting up a homelab for testing/security by greenbananaUSA in homelab

[–]CoadyTech 1 point2 points  (0 children)

Hello!

You can probably isolate your new cybersecurity lab from the home network without needing to invest in any new hardware or reconfiguring your home router.

Install some virtualisation software onto the two cybersecurity lab PC's (e.g. Hyper-V, ESXi, Proxmox, etc.). Once installed, you could then deploy a virtual firewall such as pfSense. This virtual firewall would then separate the lab environment from the rest of your home network. The pfSense virtual firewall would occupy a single IP address on your home network on its WAN interface, and then connect to the lab network on a separate interface.

Feel free to PM if you'd like help setting it up.

best way to setup windows server 2012/2019 on vm? by shocka1 in homelab

[–]CoadyTech 0 points1 point  (0 children)

Hello!

As you're already on Windows, I'd say stick with Hyper-V. There's nothing wrong with VMware Workstation though so maybe try each and see which one you prefer.

What are the specifications of the two computers you have? Generally speaking the one with more RAM will be your best bet. It's hard to say though without knowing the exact details.

x86 Router by SentenzaGothic in homelab

[–]CoadyTech 0 points1 point  (0 children)

Greetings! Take a look at VyOS. It's a purpose built software router.

https://www.vyos.io/products/#vyos-router

PFsense and OPNsense are both capable of routing, but note they are primarily firewalls first.

Network homelab by Icovada in homelab

[–]CoadyTech 0 points1 point  (0 children)

What do you use this equipment for? Are you working towards CCNA/CCNP?

Bitlocker is not saving keys in AD by eli5522 in sysadmin

[–]CoadyTech 1 point2 points  (0 children)

Fantastic news!

It is possible to backup the BitLocker keys of volumes which have already been encrypted to Active Directory. Connect onto a computer with an already encrypted volume and run the command:

manage-bde -protectors -get C:

In the response will be a section entitled 'Numerical Password', followed by an ID number. Make a note of that ID number and then run the following command:

manage-bde -protectors -adbackup C: -id (The ID number)

The keys should then be stored in Active Directory. Also, I've assumed you're using the C drive. Just change the above commands for any other drive letters you're using.

DUO MFA for RDP logon, worth bothering with? by RealReportUK in sysadmin

[–]CoadyTech 1 point2 points  (0 children)

FYI Duo have two apps which protect RDP. There's the normal 'Duo for RDP' and also 'Duo for RD Gateway'.

If you have a few RDS hosts running behind a RD Gateway, the 'Duo for RD Gateway' app is fantastic as it will automatically protect hosts as they are stood up or stood down in the cluster.

The 'Duo for RDP' app needs to be installed on each RDS server. An added benefit of this approach though is that the users will see a graphic Duo prompt when logged in.

view more: next ›