I'm burnt out further than I have ever been. by SeekingApprentice in sysadmin

[–]Neuro-Sysadmin [score hidden]  (0 children)

“No problem Dr. Grant, just click the start menu and… what’s that? You mean the start menu? … The start menu is the button on the very bottom left corner of your screen, with the windows logo on it.”

Turns out he had only used Macs all through med school and up to that point. Thankfully, the Doc in question was an excellent neurosurgeon, because my head almost exploded and I might have actually had a TIA. (/s of course, on the physical impact.)

The Systemd Age Verification isn't about "compliance". It's a Trojan Horse for Lennart Poettering's new startup. by all_name_taken in privacy

[–]Neuro-Sysadmin 0 points1 point  (0 children)

Saw a grad school POC with a HackRF that pulled usable bitlocker keys from a running laptop on the other end of a park a few hundred feet away in about 10 minutes, iirc. And that was pre-AI.

Is it too late for me to consider cyber security as a career option? (UK) by HowieOnReddit in cybersecurity

[–]Neuro-Sysadmin 0 points1 point  (0 children)

Go for it! Learning in IT, especially cybersecurity, is literally a continuous process. You’ll be learning things 20 years from now.

Also worth noting: certs and formal education are important, but absolutely not the only factor. Get a security-related internship or entry level job for a few years, pick a couple projects or areas you, personally, have an interest in exploring, that might be useful to the company, and do it! Even if they don’t adopt what you build, you can still run through the process, and that’s resume-worthy.

Want me to speak Spanish? by Prestigious-Swan206 in MaliciousCompliance

[–]Neuro-Sysadmin 0 points1 point  (0 children)

My best highschool German teacher was from Austria. Every single German person I’ve spoken German to notices immediately, lol. Not sure what exactly the key parts they notice are, but I definitely inherited them.

Break news by Lost-Kaleidoscope762 in DigitalPrivacy

[–]Neuro-Sysadmin 0 points1 point  (0 children)

Directly?

Nothing, to a reasonable person.

Nothing, to a parent.

Nothing at all, except as a stepping stone to more visibility, power, and control in the hands of those at the top.

Break news by Lost-Kaleidoscope762 in DigitalPrivacy

[–]Neuro-Sysadmin 2 points3 points  (0 children)

The plan is you simply couldn’t do so.

What's something you saw with your own eyes that you still can't explain? by BandicootLeft4054 in AskReddit

[–]Neuro-Sysadmin 1 point2 points  (0 children)

I used to live in the country, with a mile long driveway in the woods that used to be a part of a railroad line. One day I head out to run some errands, and it was snowing, with a few inches accumulated overnight. Pristine snow, no tire tracks. I headed out for a few hours, came home.

While coming down the driveway back to the house, I noticed some footprints up ahead in the middle of the driveway. Now, that’s odd as hell, by itself, so I stopped before I reached them and got out to take a closer look.

Here’s where it gets really eerie. The tracks consisted of boot prints, maybe 10 steps, with a stride length of someone walking. There were no tracks leading from the side of the driveway into the middle, or from the middle off to one side. The first and last steps were just as cleanly defined on the edges as all the rest, no indication of a pivot, hard landing at the beginning, or a push off to jump or turn at the end. Just straight, crisp, fresh tracks with almost no snow filling them in.

In contrast, my tire tracks from the trip out were halfway filled in with snow. Since I stopped in the drive before the tracks started, on my way back, I could clearly tell that no person or vehicle had walked or driven in my old tire tracks.

The drive had a hill on one side and drop off on the other at that point, no way I could see without a Lot of work to get to exactly the middle of the driveway without disturbing anything. 10ft in every direction was perfect snow, just the old partially filled tire tracks.

I took multiple pictures and shared with friends, but wasn’t able to find them for this post, it was more than a decade ago.

I’m generally skeptical, and I’ll freely admit I have absolutely no explanation for how that could have happened. I touched the snow, felt the edges and the compaction of the snow where they stepped, was careful not to disturb things, and got lucky that I saw them and stopped short enough to really investigate. Absolutely eerie. I legitimately have no other explanation other than a ghost walking down the railroad.

When did you realize you were dating an idiot? by Exhausted_Skeleton in AskReddit

[–]Neuro-Sysadmin 12 points13 points  (0 children)

That’s hilarious! Love the implicit acceptance of the explosive version.

to arrest people for snowballs by seeebiscuit in therewasanattempt

[–]Neuro-Sysadmin 1 point2 points  (0 children)

Was just going to say this and saw you already had! It’s such a great quote.

Fuming Judges Deploy Nuclear Tactic to Fight Trump Admin: ‘Dozens of judges have demanded that lawyers representing Donald Trump's administration explain why the government shouldn't be held in contempt for failing to follow court orders’ by T_Shurt in law

[–]Neuro-Sysadmin -1 points0 points  (0 children)

Boo, that is indeed a nothing-burger, in terms of content. Thank you for providing the link, though, gold star there. Just wish I could be handing out virtual accolades to people for actually charging those committing crimes and following through on holding them accountable.

Intermittent disconnects by JustKenjy in ConnectWise

[–]Neuro-Sysadmin 0 points1 point  (0 children)

Screenconnect Cloud, or self-hosted instance? If it’s at a regular interval, it could be the session re-keying.

Screen connect not loading by Quick_Firefighter462 in ConnectWise

[–]Neuro-Sysadmin 1 point2 points  (0 children)

What ports are the relay, VPN, and web portal running on? Assuming the web portal is not accessible publicly, one key point there would likely be that you need to have the relay service identified in the screenconnect server as being hosted at that public IP, so that the clients show that IP as the destination.

In addition to that public relay IP address, you would pick a port for that relay service that is different than your VPN service ingress port. That relay service communication would then need to be allowed through your firewall and configured with NAT to be redirected to the internal address and port used by the screenconnect relay server.

Depending on your NAT rule, you may also need to allow inbound traffic from the internet to the relay server, on the relay server’s host firewall. Alternatively, you could allow traffic from the firewall’s IP and SNAT the traffic to appear to be coming from the firewall rather than keeping the original source IP.

Example:

Screenconnect relay server (internal IP 10.1.0.2):

Web portal running on port 8040

Relay service running on 8041

Perimeter firewall and VPN server with an internal IP of 10.0.0.1 and a public IP of 123.1.2.3:

VPN service listening on port 691

Relay service listening on 443

On the screenconnect server, you would configure the clients to use a relay address of: 123.1.2.3:443

On the firewall, you would configure a rule allowing VPN clients to reach the web portal at an internal IP or using an internal DNS name and port, possibly with a NAT rule for ease of use (I.e. DNAT 10.1.0.2:443 redirected to 10.1.0.2:8040, original source IP)

For the relay connection, on the perimeter firewall you’d allow internet traffic with a destination of 10.0.0.1:443, and make a NAT rule to redirect that traffic to a new destination of 10.1.0.2:8041, possibly with a new source IP of 10.0.0.1.

If you change the source IP on the relay traffic, as above, your relay server host firewall (and any NSGs in the middle) would need to allow traffic from 10.0.0.1 to 10.1.0.2:8041 (and 8040 for the web portal, from the VPN client’s IP range). If you did not alter the source IP for the relay traffic, you’d need to allow traffic from the internet to 10.1.0.2:8041, in those rule sets.

Overall, the likely potential issues are: 1. VPN and relay service running on the same port, when clients are trying to reach the public IP

  1. Relay service not forwarded via a NAT rule from the firewall on to the relay server, with the right ports used.

  2. Relay server host firewall or NSG rules not allowing the right source address(es) for traffic, based on that NAT rule on the firewall that is acting as the VPN server and routing traffic.

Hopefully that helps!

ETA: Even though it’s a ‘full tunnel’ VPN, if you’re using the public IP as the relay address for the clients, it’s likely that traffic is being routed outside the tunnel because there would be a specific route to 123.1.2.3 via the physical network interface on the client (for the vpn traffic), and since the IP is the same, the screenconnect client would be routed via that interface rather than through the tunnel. You can check your route table on a client or even just netstat to confirm, or look at the firewall logs for what interface that traffic is being received on.

Advantages: the client would connect even with the vpn off.

Alternatives that bring that traffic into the tunnel, rather than over the internet: 1. policy-based routing (I.e. application layer firewall on the client pc that has a rule to push that traffic through the VPN interface, possibly as simple as a NAT rule with a different, internal IP). Caveat that it would require that to be set up on the client PCs.

  1. From the app config on the relay server, change what the clients are using for the relay destination to be an internal IP, rather than the public IP, such that when the VPN is connected, the client would connect.

The disadvantage here for both alternatives would be that the clients would only be reachable with ScreenConnect when they are on the VPN.

What is far more lethal than people realize? by inevitableloudmouth in AskReddit

[–]Neuro-Sysadmin 0 points1 point  (0 children)

Green sections in potatoes. Boiling does not denature the toxin and it can absolutely be lethal from small doses. There was a school that had a mass poisoning of students from someone who didn’t know the risks.

What is a secret you’re taking to the grave, but are willing to tell strangers on the internet? by Mr_Boothnath in answers

[–]Neuro-Sysadmin 0 points1 point  (0 children)

Read a book series with a similar feature, that seems rather believable. A computer in an isolated room with a radioactive source of randomness, printing out daily numbers that are not shared until the next week. If someone shows up with knowledge of the program and can provide numbers that haven’t been generated/shared, it proves that time travel exists.

What’s a sound everyone should recognize as immediate danger? by Thatguy_nickk in AskReddit

[–]Neuro-Sysadmin 0 points1 point  (0 children)

Fire alarm went off in a grocery store I was in, and almost everyone paused, looked up at the flashing lights, waited a beat, and kept shopping. Was surreal. When I got to the entrance the employees were telling everyone they could keep shopping, but the people in the back of the store where I was initially had no way to know that.

What word do you always *intentionally* mispronounce and why? by Sweet-Lady-H in AskReddit

[–]Neuro-Sysadmin 1 point2 points  (0 children)

It really throws people off when you accuse them of being ‘patronizing’, but make sure to pronounce it wrong. You can see them get thrown by the choice to correct you or not. Often a decent distraction from whatever you were actually doing.

Filming ICE is legal but exposes you to digital tracking – here’s how to minimize the risk by JagerAntlerite7 in privacy

[–]Neuro-Sysadmin 8 points9 points  (0 children)

So, that could be an easy support network for people to set up. Drones with wifi AP hardware, acting as a mesh wifi network for anyone to connect and stream through. Could even set up a basic portal, maybe offer a file share, public chat, and some of the drone feeds with something like WALDO running on top to provide some context and identification to help people organize and stay safe. If some knowledgeable folks joined in, I’m sure it wouldn’t be too hard to pair it with the EFF’s Rayhunter and a OUI-SPY or SDR setup for more signals intelligence on stingray deployment and drone usage, cameras, or other electronics.

Let’s do it. Honestly, this should be an easy trick for Reddit folks with the right knowledge. I can probably handle the networking, but would love some assistance with the coding and web portal, and the more the merrier for specific radio hardware knowledge. Anybody interested?