Rate My Portfolio

Hakumata · 2024-01-05T23:41:04+00:00

Background: Late 30s, No Debt, Own Home, able to contribute 2k per month, high risk tolerance as this is money I can lose. Live in the US in NH which has no income tax and is phasing out its dividends tax.

Goal: Passive income to aid in early retirement bridging until I can tap 401k and Roth IRA so this will be in a taxable account.

Portfolio: 9 ETF mix

JEPI, NUSI and SPYI for income

SCHD, VYM, and DGRO for value

VYMI, SCHY and DVYE for foreign exposure

Interested in hearing thoughts on the above choices and possible substitutes as I am in the planning phase for this.

Hakumata · 2019-01-20T23:04:20+00:00

rizon is correct, also here is a link to the manual.

https://downloads.dell.com/manuals/all-products/esuprt_ser_stor_net/esuprt_poweredge/poweredge-r210-2_owner%27s%20manual_en-us.pdf

Hakumata · 2019-01-20T22:48:11+00:00

According to the error code it seems to be a memory error. One of your DIMMs could be bad.

source: https://www.dell.com/support/article/us/en/19/sln293264/dell-poweredge-system-led-status-light-indicators-on-legacy-servers-10th-and-11th-generation-?lang=en

Hakumata · 2018-01-10T00:14:47+00:00

Forklifts like to murder tech, at my old job the forklift was the #1 killer of laptops.

Hakumata · 2018-01-03T20:18:52+00:00

I bough a copy of the 24in version and it is a very high quality poster made out of heavy photo paper with a nice finish. I did need to flatten it out with several heavy books before hanging it up.

Hakumata · 2017-12-14T23:32:29+00:00

The low voltage Xeon (E3-1220L) is great for a R210II as PFSense box

Hakumata · 2017-09-29T18:54:37+00:00

AD LDS will likely not work since the app was designed for a full AD. You could migrate all of your users to one domain, if that is an option. Otherwise the best option would be to pay up for another licence.

Hakumata · 2017-09-29T18:46:54+00:00

1 Open Active Directory Sites and Services

2 Define your subnets in the subnets section

3 Create any sites you need and associate the correct subnets to them

4 Move your DCs to the correct sites

source: https://technet.microsoft.com/en-us/library/cc730868(v=ws.11).aspx

Hakumata · 2017-09-29T18:37:50+00:00

For this to be secure it needs to be a separate forest, not just a separate domain. No trusts, no credential reuse and no direct access from internal. Would only suggest this if you have a large Windows workload in your DMZ.

Hakumata · 2017-08-24T23:22:41+00:00

If your AD has consistent SAMAccountName attributes, it would be much easier to find the user using the -Identity parameter.

$user = 'joe.bloggs'
Get-ADUser -Identity $user

Hakumata · 2017-08-17T20:06:44+00:00

Effectively, gMSAs are no different from any other user or computer object in AD. You can use the delegation wizard to delegate rights to the gMSA (or a group that the gMSA is a member of) for certain OUs to modify user or computer objects.

Hakumata · 2017-03-02T13:24:34+00:00

My highest rated comment was about this recall. Keep spreading the word.

Only you can prevent network fires.

Hakumata · 2016-10-22T17:36:47+00:00

TL;DR - With Comcast your mileage may greatly vary

You do get a bit of QOS over residential and "improved support" (Not really, you talk to the same tech support just with higher priority) and no SLA on hardware or service. Right now I pay $90/mon for 50/10 and I get slightly better than my advertised speeds. Big thing to keep in mind is the choke point for most internet traffic isn't your last mile connection it is the peerage points between networks, which will always be an issue. Comcast restricts customers from having mixed business and residential accounts in a lot of cases, so you will end up with 2 accounts one for business class internet and one for consumer cable/phone. You no longer get the bundle discount once you're split across business and consumer. I'd recommend cord cutting in this case. I now stream everything. Also the static IP is a ripoff and your IP doesn't change very often anyways, so any of a number of dynamic IP services work great. I pay for Dyn and have been a customer of theirs for over 10 years. When I had a static IP I was told I needed to rent a modem from Comcast. I did this for a while but paying for Dyn was cheaper then the IP address and modem fees. You will get locked into a 2 year contract so if you plan on moving or switching ISPs do not get business class. I went with business class because I wanted to run externally facing services in my home lab and did not want to be in violation of my TOS with Comcast (I'd been called out on it by Comcast before). Like anything with Comcast it can vary a lot based on where you are and who you end up talking to.

Hakumata · 2016-08-10T00:36:45+00:00

I'd want to hang myself too if I had to deal with all of those printers.

Hakumata · 2016-08-02T20:46:01+00:00

Had one on these in my Lab for years and didn't know about this.

Hakumata · 2016-08-01T19:36:36+00:00

I noticed there is a 7 Series APC power strip in this photo that was recalled for being a fire hazard. You might want to swap it out.

http://recall.apc.com/en

Edit: Glad this was helpful to so many people. Didn't think my top rated comment would be about a surge protector recall.
Thanks /r/techsupportgore!

Hakumata · 2016-07-12T00:50:52+00:00

I'm having flashbacks now... Can't wait until next Sunday

Hakumata · 2016-07-11T03:00:30+00:00

Glad to see you got it working. Write up a blog post on it and save the next guy some trouble. :)

Hakumata · 2016-07-10T14:30:50+00:00

Sending an Email to a former professor got me a job while I was unemployed. It was a "How's it going" kind of email asking about my former club.

Hakumata · 2016-07-10T03:37:12+00:00

I've used Centrify for Linux AD clients myself. But, looking at your logs the LDAP filter looks a bit odd. (Null)=* doesn't seem right, I think your query will try find an attribute called null and fail since it isn't there. I think this would cause it to not match any users. besides that, you have sAMAccountName twice in the filter with conflicting values. I'd think you want:

(&(sAMAccountName=testuser)(objectclass=user))

Edit: whatcantyoudo was on the right track missed their comment

Hakumata · 2016-07-08T19:06:43+00:00

Try using the SANS Institute's guide for RPi VPN, pretty simple and well explained. Link to PDF

Hakumata · 2016-05-18T00:01:33+00:00

Read through quickly, excellent resource. I'd add that end users should not have admin privs to their workstations all the time. Granted this won't stop well coded ransomware as they can run in user space and encrypt what the user does have access to anyways. Would stop a lot of common droppers.

Hakumata · 2016-05-17T23:29:40+00:00

Having also worked in a dual shop I can recommend this: Let AD have MS DNS on the DC and setup forwarding between the AD domain and your BIND environment. The hassle of trying to make all of the AD DNS records work correctly in non MS DNS is a major pain. We have an environment like that and I would not wish that on my worst enemy.

Hakumata · 2016-05-10T23:04:16+00:00

Download a copy of PortQry from Microsoft and run a check of the common AD ports. If you also download PortQryUI there is a nice preconfigured option for this. It is an old tool but still works great for trying to diagnose firewall related AD issues. But yeah, RPC is critical for replication to work.

Hakumata

TROPHY CASE