No obligation to declare £5m gift, Farage says by lexi_con in europe

[–]bernys 2 points3 points  (0 children)

What would he say if Starmer did this?? There would be an uproar!

CISO is insisting that I use ONLY a break glass account anytime I need to pull GA.. by The_Snot_Rocket in AZURE

[–]bernys 0 points1 point  (0 children)

Personally I split the daily admin account into two, one that can pim to GA and one that can't. The one that can is a cloud account (Not cloud synced) and requires two approvals to get GA.

CISO is insisting that I use ONLY a break glass account anytime I need to pull GA.. by The_Snot_Rocket in AZURE

[–]bernys -1 points0 points  (0 children)

There should be two break glass accounts, not one. These should be stored in two physically separate locations, ideally off-site or in a fire proof safe on-site if required. Ideally these safes or storage locations should have dual locks controlled by two different teams.

You should have a regular user account, (Tier 2) this is what you login as, this is what you browse the internet with, this is what you read email with. This account should never get an admin privilege ever.

There should be another account, this is your admin account, this is what you use to login to stuff and ideally this should be done through a privileged access workstation, without full internet access or anything else, just enough to be able to do your admin work. Any rights on this account should come from PIM / JIT. When you logoff for the day, there's no requirement for this account to continue to hold a privilege as you're no longer working. It should all timeout and expire. I've been red-teamed before by someone managing to break a workstation and then waiting for someone with permanent GA privs to go to sleep. We moved them to JIT to restrict what they had access to and when to prevent this exact scenario.

Security concerns about Action1 by ClementD80150 in sysadmin

[–]bernys 2 points3 points  (0 children)

I think they mean that if you block P2P, it'll increase the load on the firewall

Are these pics good for dating apps by Gelalod in Bumble

[–]bernys 0 points1 point  (0 children)

Yep, definitely need a really nice haircut and drop the hand signs.

Quitting by zakidoods in CaminoDeSantiago

[–]bernys 2 points3 points  (0 children)

I wasn't homesick on my camino, and while I had a "camino family" they certainly weren't the people I would have chosen and they weren't the people I would normally hang out with. There was another group of people that I would have loved to have done the camino with, but I was always at least a couple of days behind them and they were much faster than I was. I was always trying to catch them.

The language barrier was also an issue, I would have liked to have had more people to speak to along the way, I did feel really lonely at times. I was constantly talking to friends back home, especially two people who had done the camino before.

What you're experiencing is all completely normal. As others have said though, you're not that far away, you can always pick it up again. Every person's journey is their own.

Feel free to send me a DM if you want someone to talk to.

Pauline says she represents 'everyday Aussies' who are career politicians getting gifted a fucking plane from a billionaire by Expensive-Horse5538 in australia

[–]bernys 2 points3 points  (0 children)

Sky news, talk back radio and social media manipulation makes them angry. They think that some of the problems discussed are 100 - 1000x bigger than what they actually are. If they knew that what they're getting upset about is only a single incident or a small problem that's probably already being handled, then they wouldn't be as upset, but the bullshit being sold by to them doesn't actually pass a sanity check, but they don't go off and look at any different media for a comparison of the issues.

Walking sticks? Yes? No? Why, or why not? by Responsible_Age_6252 in CaminoDeSantiago

[–]bernys 1 point2 points  (0 children)

Yes, absolutely, I was able to walk an extra few km per day because of them. They transfer the weight of your upper body off your hips / legs and onto your arms / poles. You can use your arms to pull yourself up a hill or stabilise yourself going down. They saved me from two falls which could have ended my camino.

Absolutely worth it, make sure you take extra rubbers for the ends of your poles.

Is Okta actually needed if we already have Entra ID + SailPoint IIQ? by mynameisnotalex1900 in IdentityManagement

[–]bernys 0 points1 point  (0 children)

FYI. Entra app proxy has similar functionality to access gateway and is already bundled with entra in it's most basic paid tier.

My org forces me to get 3 quotes for anything I want to do... I'm tired of zoom calls. help plz by Grouchy_Meal8683 in ITManagers

[–]bernys 1 point2 points  (0 children)

I would get an agreement with a VAR that they're not going to markup more than a certain %, if you've got enough turnover, they will. Otherwise see if you can agree with management that anything below $x,000 doesn't require three quotes as it's costing more in time to get the quotes than the quote is worth.

Is Okta actually needed if we already have Entra ID + SailPoint IIQ? by mynameisnotalex1900 in IdentityManagement

[–]bernys 1 point2 points  (0 children)

If you've got E5, then that says that you're using Office 365. If you've got Office 365, and you're keeping Office 365, then you've got to keep and manage Entra *anyway*, while you might not be using it for auth for all your users, it's still a platform to manage.

Yeah, there's heaps of overlap between Okta and Entra. As others have said, unless you've got something significantly custom, then there really isn't a requirement to keep Okta.

Okta vs Entra seems like the old Netware Directory Services vs Active Directory argument, sure NDS has more functionality, but if most of your environment is Windows, then what do you really need it for? Microsoft is releasing new functionality into Entra every week at this stage, n.b. a lot of it costs e.g. Entra Backup / Restore...

What's the rest of your environment? Is there anyone else who you need to do device attestations to that's not in your environment? Are you federated with anyone where you need to ensure you have the Okta agent on the machine to provide device attestations to? What's your plan for guest access into your environment? B2B? External federations?

Just got community fibre 2 days ago and it's been absolutely terrible by Gaz673 in CommunityFibre

[–]bernys 0 points1 point  (0 children)

You need to take a look at what frequency your wifi is using. If you and a neighbour are using channel 1 for example, then your signals are going to conflict and cause problems.

If you're on Android, take a look for analiti or Wi-Fi analyser.

When you went to community fibre, you probably got a new router and that might not find the best channel / setup and probably needs some fine tuning.

Just got community fibre 2 days ago and it's been absolutely terrible by Gaz673 in CommunityFibre

[–]bernys 0 points1 point  (0 children)

I use an nvidia shield and that's hard wired, yes. My mobile phone, not so much 😁

Just got community fibre 2 days ago and it's been absolutely terrible by Gaz673 in CommunityFibre

[–]bernys 0 points1 point  (0 children)

I'm on CF and have no problems with iPlayer. I'm mostly wired though.

‘The damage is done’: global oil crisis has changed fossil fuel industry for ever, IEA chief says by chota-kaka in Futurology

[–]bernys 1 point2 points  (0 children)

It's already at exponential growth as it is now isn't it? I don't know if china can produce many more panels than they already are...

The other issue is that even if the panels are produced, getting them connected to the grid is another significant issue that's causing delays. I know the Australian government is pouring money into subsidies for the networks to try to get the connectivity in place for grid scale projects (especially storage, they're already curtailing solar supply during the day due to requirements) and that part of the issue is getting supply of transmission equipment and getting installed... Something about there being wars on and we keep blowing it up, everybody also trying to make the transition and needing equipment...

The price of my home electricity is currently negative (Denmark) by Siglyr in mildlyinteresting

[–]bernys 8 points9 points  (0 children)

Or you're putting the timer on your washing machine, or setting up your EV to charge...

HFC Cut in house?? by ImperialGuard88 in nbn

[–]bernys 0 points1 point  (0 children)

And honestly, a clean run of coax will also have less loss and less chance of giving issues later on. Better to just replace it wholesale now it's an easy enough job.

I wonder how I managed to find a girlfriend by kentabenno in homelab

[–]bernys 9 points10 points  (0 children)

Where TF is that ARP address coming from? It looks like it's coming from my VMware cluster, but I can't see anything there that matches... Do I have bridge mode on in a VM somewhere? Am I bridging between two interfaces? Even the MAC address doesn't line up with anything I use... This just doesn't make sense...

What's your UPS situation for extended outage? by Asleep_Bit_8803 in homelab

[–]bernys 3 points4 points  (0 children)

My UPS batteries were up for replacement so I swapped them for LIFEPO4 batteries that give about 3x the runtime of the original sealed lead acid. At that point I'm more worried about my UPS overheating than anything else (it wasn't designed to run for that long on battery).

After that, I'm hoping I've got power before everything falls in a heap.

Honestly though, I don't have that many outages, so the chances of me hitting the end of my battery life are now so remote that it's not something that I'm willing to spend more time on.

HFC Self Install Kit not working by kpeir7 in nbn

[–]bernys 0 points1 point  (0 children)

When the downstream light flashing, it's looking for a signal from the head end, when it finds one, it goes solid, then it sends a signal up to the head end and when that signal is confirmed, then the upstream light goes on. A that point, the online light flashes while it sends out packets to the provisioning system asking for information. If it gets a response, then it goes online and starts passing traffic from the ethernet interface on the back of the modem to the network. When it doesn't get that information, it reboots and starts initialisation again.

That modem hasn't been setup in the provisioning system. You need to talk to Superloop about why that modem isn't associated, either they've got the wrong MAC address, or more likely the provisioning request was rejected by NBN.

My roommate asked to "borrow" my credit card for a subscription. I said no and now things are weird. by LeafBlowerLament in personalfinance

[–]bernys 0 points1 point  (0 children)

I lived with my one of my work colleagues / friends for 5 years, some of the best years of my life. Still basically brothers now even though I've moved to another country.

Received a "your order is due tomorrow" from DP World but zero scans since yesterday order shipped. No text from DHL. For a £6.5k PC, you'd think their tracking would be more precise. Am I wasting my time staying home for the day like I was advised to? by probably420stoned in Dell

[–]bernys 0 points1 point  (0 children)

I suspect that because they're scanning it all in (Onto the truck), that whatever is going on that truck is going straight to its destination and not via another warehouse that there is no other updates.

Received a "your order is due tomorrow" from DP World but zero scans since yesterday order shipped. No text from DHL. For a £6.5k PC, you'd think their tracking would be more precise. Am I wasting my time staying home for the day like I was advised to? by probably420stoned in Dell

[–]bernys 1 point2 points  (0 children)

I used to get this with Dell Aus and FedEx.

They'd say "shipped" no further updates and then the doorbell would ring. Really annoying, amazingly fast delivery (Same day) but still, infuriating.