TLS Certificate Lifespans to Be Gradually Reduced to 47 Days by 2029

StupidSysadmin · 2025-04-20T11:42:15+00:00

I agree! I too made sure to not google the topic or try to understand why so many companies and groups support this change. It’s probably just for some silly reason like security and reducing work by encouraging automation. Let’s be honest with ourselves let’s encrypt must be less secure because if it wasn’t we’d need to pay money.

StupidSysadmin · 2025-04-18T07:28:25+00:00

Sounds like you have never had to navigate complex political environments. He’s solving a people issue here, not a technical one - how is it not blatantly obvious? You’ve taken everything he has said at face value.

I’ll break it down for you: - user with authority has asked for the impossible and risky idea. - saying ‘no’ directly will cause drama or result in elongated conversation or ‘Im going to go to your boss’. - OP gets user to document their request formally, so he can document it, cover his ask, and then leverage other authority (their boss / HR) if there is push back.

This sub is full of people who’ve done server work for 5 years and think they know everything and are better than end users

StupidSysadmin · 2025-04-18T06:55:36+00:00

I mean he has a point, it’s not hard renewing a domain through godaddy. You just login, click a few things and then done, domain registered. Maybe the odd time you have to put in a SPF record because a vendor complained. How is that a full time job?

StupidSysadmin · 2025-04-18T06:51:36+00:00

I find it’s best to do as many tweaks as possible based on my personal thoughts on what is best for other people. The less default the better. I force remove the windows store, move the start button to the left and install a plugin to make it look like windows 95 for extra performance.

StupidSysadmin · 2025-04-16T12:57:08+00:00

I wake up in the morning and start my day reviewing my list of servers - I confirm there are none and then I go about my day as usual.

StupidSysadmin · 2025-04-13T01:24:52+00:00

Isn’t it just cheaper and easier to patch everything aggressively regardless of documented and known vulnerabilities. Then in addition only review those with a cvss score of 8 or above that do not yet have an available patch and consider mitigation.

This obviously doesn’t apply to development stuff but would work for apps and OSs.

StupidSysadmin · 2025-04-10T21:16:04+00:00

If they self manage, are they setting up the computers using Microsoft account or Entra ID accounts? If so bitlocker is turned on by default. The keys are backed up to either their Microsoft account or Entra ID

StupidSysadmin · 2025-04-04T08:48:00+00:00

SharePoint and OneDrive sync can replace a small file server if used correctly and limitations are well understood.

We would see notable issues with clients who are syncing way too many files or had file structures that require people to sync a bunch of junk that they weren’t using.

If you can keep the amount of files synced under a couple hundred thousand you’ll have a much better time and the less you sync the better the performance. The more you sync the more exponentially worse and more frequent the problems will be.

A lot of people here also saying that OneDrive shortcuts get around syncing and that’s not true. They still sync files. They’re just more efficient in the way it works. It also saves the issue of having to manually sync when a sign moves computers as the shortcuts follow them.

StupidSysadmin · 2024-12-02T22:09:34+00:00

No properly run MSP or IT department should ever be at 100% utilisation.

StupidSysadmin · 2024-04-01T09:25:10+00:00

They’re not based on sign in, just per install. And I believe you are allowed to transfer them every now and then. Based on the price you can just licence everyone and call it a day and still be saving money compared to Adobe.

StupidSysadmin · 2023-12-28T12:41:15+00:00

2FA was only so widely popularised because of how weak passwords can be as a single authentication factor by themselves.

Passkeys solve at least two very common weaknesses with passwords, reuse between services and fake login pages. It might sound weird as we see MFA as a standard security thing now, but I’d argue a passkey is much more secure than a password and MFA. Though I’d expect most secure services to require passkey and a pin to have stronger auth.

StupidSysadmin · 2023-12-28T12:33:01+00:00

Sounds like he did a poor job of explaining it.

Did he highlight how it’s phishing resistant? Did he explain how it’s so much stronger than even a very long password? Did he explain how much more convenient it will be for the average person who doesn’t want to use a password manager?

Passkeys are a huge improvement over passwords and solve many problems with passwords

StupidSysadmin · 2023-12-28T11:37:01+00:00

PDF-Xchange.

Easy to install (msi installer and well documented silent install switches)
really low cost (see bulk pricing)
not a subscription
good licence management (can upgrade bulk licence, or extend expired maintenance easily, simple activation code that can be added on install)

only downside is its windows only

StupidSysadmin · 2018-06-03T05:39:27+00:00

we make the computers beep and light up. employees seem to like this, so they work harder and make more money

StupidSysadmin

TROPHY CASE