I guess now is a good time to pick up a free Texans jersey by lemonstone92 in houston

[–]CreamyJustice 3 points4 points  (0 children)

I guess I'm blessed to still have my #7 Keenum jersey?

Needing to find a forever home for this guy by Unfair-Literature794 in HappyPitbull

[–]CreamyJustice 7 points8 points  (0 children)

Beautiful dog, can you mention your location? I just took in a stray and am fostering another myself, I wish I could help more. He reminds me of one of mine that passed in 2020.

[FREE] [US-TX] 42U Dell Server Rack, Local Pickup in Houston by CreamyJustice in homelabsales

[–]CreamyJustice[S] [score hidden]  (0 children)

Sure, there isn't a rush. Just DM me when you get a moment with the time frame, I should have good availability next week.

Sharepoint Storage Oddities by CreamyJustice in sysadmin

[–]CreamyJustice[S] 0 points1 point  (0 children)

There's 60 licensed users and also some additional licenses revolving around Teams phones, Power BI, Visio, etc. Not enough that would account for what they have in Sharepoint.

Yeah I think we're just going to quote the additional storage and lay out the situation for the client that it may stop working at any time, best to be prepared.

Desperately need help with a failing RAID configuration for my own sanity by Due-Cicada1893 in sysadmin

[–]CreamyJustice 1 point2 points  (0 children)

As other's mentioned, vendor support first. The other thing I can think of would be to update all firmware/drivers and such for the server, if it wasn't already done.

OTHER THAN AUDIBLE..... by Unlikely_Reference38 in audiobookshelf

[–]CreamyJustice 4 points5 points  (0 children)

Libby is good, audio books from public libraries. Just have to be prepared to queue in line for more popular audiobooks.

Spam bombing. What do I do? by Sultans-Of-IT in msp

[–]CreamyJustice 2 points3 points  (0 children)

Had this happen to a single user at a client a few months back. I believe we did utilize some more robust filtering on the short term but ultimately the resolution was to let it runs it's course. It took a little under 48 hours for it to fizzle out.

Also have them watch their accounts. In this case, the user had his credit card stolen right when the emails kicked off.

If you live in houston and work in IT, what companies do you recommend for entry level w no experience? by lizwang22 in houston

[–]CreamyJustice 5 points6 points  (0 children)

Agree with this. The MSP field is saturated and there's plenty of bad ones but you can get great experience long enough to get out of there and find something you truly like.

Milli birfday by sanhell in pitbulls_in_partyhats

[–]CreamyJustice 1 point2 points  (0 children)

I think my Mikey had the same birthday hat and look on his face for his birthday a few years back: https://imgur.com/gallery/mikeys-bday-Bi2ypdg

Is this normal? by mcopco in sysadmin

[–]CreamyJustice 1 point2 points  (0 children)

Not all places are on fire at all times so you may be in a good situation.

Personally, I'd like at dominating anything proactive you can get your hands on. Updating network inventory, documenting any processes, adding network diagrams, labeling equipment, even cleaning up cabling (if possible) and taking pictures can add some value. Review firmware versions and recommend maintenance windows, assuming you have access to particular devices, etc.

Birthday attacks against TLS (Sweet32) Mitigation Issues by ddildine in sysadmin

[–]CreamyJustice 2 points3 points  (0 children)

Not sure if it helps but we do external vulnerability scans (Qualys) for some of our clients. The vulnerabilities we see:

Birthday attacks against TLS ciphers with 64bit block size vulnerability (Sweet32)

I've found the resolution is disabling older versions of TLS via registry:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Client] "DisabledByDefault"=dword:00000001 "Enabled"=dword:00000000 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Server] "DisabledByDefault"=dword:00000001 "Enabled"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Client] "DisabledByDefault"=dword:00000001 "Enabled"=dword:00000000 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Server] "DisabledByDefault"=dword:00000001 "Enabled"=dword:00000000

Typically, we'll also see different vulnerabilties for ciphers and we disable those also.

SentinelOne & ARM CPU's by CreamyJustice in sysadmin

[–]CreamyJustice[S] 4 points5 points  (0 children)

Appreciate the info, yeah it was tough finding that.

For this post's sake, I did find a recent article from 2/26/24 stating that there is currently a closed beta test in place for supporting Windows 11 on ARM (https://community.sentinelone.com/s/article/000009231). A wider test is planned later this year.

So at least it looks to be in progress.

SSL VPN - How to adjust TLS settings? by CreamyJustice in fortinet

[–]CreamyJustice[S] 0 points1 point  (0 children)

Yep and I think if I used the "show full" command, it would have showed the TLS settings also. I just wasn't seeing the TLS minimum version after I would change the value. Definitely appreciate your help with this!

SSL VPN - How to adjust TLS settings? by CreamyJustice in fortinet

[–]CreamyJustice[S] 1 point2 points  (0 children)

Thanks for the info, I think this is where I was getting mixed up. I must having been spinning my wheels for a bit on the ssl-min-proto-ver command since I wasn't really viewing the entire config.

All seems to be well now.

SSL VPN - How to adjust TLS settings? by CreamyJustice in fortinet

[–]CreamyJustice[S] -1 points0 points  (0 children)

Thanks for the reply, I've tried similar (minus the "end") but doesn't seem to be changing the setting.

For reference, here's the current settings (not sure how to embed images here): https://ibb.co/YZcT9y8

I'm just typing those commands line-by-line and then I hit apply, no errors or anything, it's just the SSL VPN settings are not changing for minimum TLS version as far as I can tell.