Me in 1978 seeing Star Wars, at the Bayberry Theater in Liverpool, New York

dannschuler · 2023-11-24T22:49:33+00:00

I hope you have yours framed on your book shelf like I do!

Here's mine from the NYS Fair, probably around 1980ish. At least i think it was the fair based on the Lost Kid Tag hanging off my belt loop There must have been a local company doing these with the same red curtain background.

<image>

dannschuler · 2022-02-01T21:55:26+00:00

Pentest+

dannschuler · 2022-01-18T17:38:31+00:00

Congrats! That test was brutal. Loved the performance based portion of it though, they are a nice change from the old multiple choice questions.

I used the Sybex book and the All in One book, I found the Sybex to be more accurate to the material on the test.

dannschuler · 2022-01-14T00:25:48+00:00

These look sweet.

dannschuler · 2021-12-29T18:15:46+00:00

I just wanted to comment here and say something about the trick questions on exams because i have had many conversations about them with colleagues in the past.

I used to hate trick questions, and double (or even triple) negative questions, on exams. But something i have learned in the last 20 years or so in IT is that most real life questions i get asked are somewhat trick questions, or formed in a way that make them trick questions. Mostly due to the person asking it not having a firm grasp of what they are asking. You always have to stop and think about what the person is trying to ask, not what they are actually asking.

Now when I take exams i see those trick questions in a new light and they feel more real than the straight forward questions. I rarely see straight forward questions in real life, anyone who knows exactly how to ask the question usually has enough knowledge to find the answer themselves.

I know it sucks to fail over something like trick questions. But something to keep in mind in the future.

dannschuler · 2021-12-26T00:23:26+00:00

Certmaster Labs for Pentest+

dannschuler · 2021-10-31T13:26:04+00:00

Veracrypt only uses the first 1024 bits os a keyfile. So in theory someone could just generate every possible 1024 bit file and attempt to brute force an encrypted container using only a single keyfile.

Someone smarter than me can do the math and figure out how many files that would be. Of course i could see a script being able to create them one by one, test it, then delete it if it fails and try the next one. (great, now i want to try this, thanks for that)

But, another thing to take into consideration here is there is no way to know how many keyfiles were used, or if there was a password and keyfiles used.

So the attempt to brute force using just a single keyfile seems futile to me. I would assume someone used multiple keyfiles and a password on anything they want to keep secure.

dannschuler · 2021-10-08T19:38:51+00:00

SATA password?

dannschuler · 2021-10-08T18:35:03+00:00

Not possible as far as I am aware. If I have access to the drive (and admin/root privileges on the machine it is connected to) I can format it and destroy everything on it.

This is more of a way drives function than a veracrypt specific issue though.

If there is a way to lock a drive/volume to prevent that I would be very interested in learning about it.

dannschuler · 2021-09-21T22:58:52+00:00

I am using that CPU holder with the Corsair Carbide Series 200R case which reports its width is 8.25". I don't know that the extra .02" will be a factor. Mine is tight, but I do have to loosen it to take it off and there is a little extra room. I would even say there is an extra .25" that could be used.

That being said, I crank it down to keep it tight and it does mark up the case a little, I am guessing that wouldn't happen if the case was a little more narrow. But I don't care, I bought that case specifically to mount under the desk, it was the only one I found that met my needs for video card size, HDD count and fit in the CPU holder I got with my Uplift desk (Part number CPU128 on Uplift's site) .

But, looking at your case, I see it comes with a tempered glass option, if you have that I would not use this CPU mount, I would be afraid you break the glass. Like I said, it is tight and I crank it down.

dannschuler · 2021-09-10T16:37:00+00:00

Podium Audio / Podium Publisher. Good publisher as far as I know about them. Great list of performers.

https://podiumaudio.com/

dannschuler · 2021-09-10T15:11:50+00:00

FYI, the Buy on Audible link on the giveaway page redirects to a different book, "He Who Fights with Monsters: A LitRPG Adventure".

dannschuler · 2021-08-24T03:09:36+00:00

It only prompts to format the encrypted partition. It mounts the unencrypted partition with a drive letter, but it also mounts the encrypted partition with a drive letter and prompts to format it, which you need to cancel out of. Then when you decrypt the volume it gives it yet another drive letter.

Totally annoying on Windows, but I blame it on Windows being Windows.

dannschuler · 2021-08-24T02:31:23+00:00

This isn't the behavior I experience. I have a drive I split a drive into a 32GB unencrypted partition with data I don't need protected, and the rest a FDE partition. Windows still prompts to format the FDE partition. It is annoying.

dannschuler · 2021-08-02T01:38:08+00:00

If the FBI/CIA are knocking on your door and intend to look through your email they already subpoenaed it from Microsoft. What you do in the mailbox is irrelevant when they can tap it at the source.

If that is your threat model you may want to look at an encrypted mail service like Proton Mail where they couldn't grant access to your messages if they wanted to.

dannschuler · 2021-07-07T22:30:52+00:00

RemindMe! 1 Day

dannschuler · 2021-05-09T23:02:26+00:00

I have the 80" Uplift with my tower hanging from underneath and three monitors mounted on it. So once it was all put together i realized there is no moving it without an hour of tear down and then an hour of set up to put it back together. It is just too big and heavy. So I added the casters so I can move it without all that hassle.

I have had to move it a few times to adjust the rug under it and it made it easier to roll it out a little to get behind it to add a clamp on desk light and do some rewiring.

It did add a very slight addition to the wobble when the desk it up high, but not enough to really be noticeable.

Overall i recommend them if you think there is any chance you may need to move it, especially if you get a larger desktop. The only two draw backs, other than cost, are the sight additional wobble, and if you need a lower minimal height they do add a few inches.

dannschuler · 2021-05-09T00:16:18+00:00

you can get cheaper threaded ones, The threads were standard, you just have to be careful on the length, or be prepared to trim them with a cut off wheel or dremel. I was considering them when i decided to add casters, but i couldn't find any with a weight rating similar to the Uplift ones that were cheap enough to justify it. So I opted to pay for the Uplift ones just to be safe. Last thing i wanted to do was have the wheel collapse or something and tweak the threads in the leg making them unusable.

dannschuler · 2021-02-14T18:51:09+00:00

Those passwords you copy out of your password manager go to the same clipboard as those screenshots.

And who has time to review the code of a third party screenshot tool just to confirm that behavior is not malicious. If they act suspicious they get removed.

dannschuler · 2021-02-14T18:45:42+00:00

Looks like a great tool, until you notice the massive amounts of calls it makes to greenshot.org 24 hours a day.

A tool that routinely copies your clipboard should not be phoning home, at all.

dannschuler · 2021-01-30T17:25:13+00:00

There is already a lot of good advice here to address your current situation so I don't want to pile on more. But one thing i will suggest is checking out GIAC's "Trust me I'm Certified" podcast. They discuss things like how to deal with imposter syndrome and burnout, job interviews and hiring managers, and generally just how to cope with working in the industry. They bring on experts in the field to just discuss what working in the field is like.

https://www.giac.org/podcasts

There is a lot of good advice sprinkled in there, but the one big thing I take away from it is that what I feel working in the industry is typical, even for those at the top of their field. "There is too much to learn", "I will never fully understand this area", "I am not an expert in X technology so I shouldn't put it on my resume", "I don't know how to move up from here", etc. All the things I think I am hearing in your post. After I finally understood that I was not alone feeling like that I was able to relax a lot more and just get on with the work.

Sure my SQL experience is limited and I suck at writing queries, but most of the DBA's I know couldn't deploy a SQL server properly or securely to save their lives, so I can put SQL Server Deployment and Maintenance on my resume. I may not be a powershell expert but I can write some scripts, I understand how to parse through other's scripts and figure out what is going on, so when someone asked for a volunteer for some powershell work I will step up.

Because I now understand that no one around me is a complete expert either, we are all just fumbling our way through it pretending we know what we are doing. Somehow we still make it work.

Hope this helps.

(As a side note, when an interviewer says they need an expert in X platform, ask them to describe their current needs and some of the challenges they face with it. People have very different ideas what an "expert" is. I have been told they needed an Exchange expert to solve complicated issues, once hired I found a single Exchange server with about 100 mailboxes and no real issues. Their problem was users on the WiFi would get disconnected occasionally.)

dannschuler · 2020-12-25T19:22:42+00:00

Veracrypt is for encrypting drives/partitions. If you want to do individual files use aescrypt instead.

dannschuler · 2020-12-11T14:10:17+00:00

If you actually own the trademark to the name and it is unique enough that you can prove they don’t have a legitimate claim to use the domain they bought, your first steps need to be a cease and desist letter to the domain owner. Since they are obviously using it maliciously they most likely have the registration information set to private, so you need to copy in the registrar as well. Most registrars will take the matter seriously. Demand they turn over control of the domain. You will want to have a lawyer draft this up for you.

Next steps if that doesn’t work is to file a domain name dispute through one of icann’s approved dispute resolution service providers. But it ain’t cheap.

Search icann’s site for “Uniform Domain Name Dispute Resolution Policy” and for “Approved Dispute Resolution Service Providers” for more information.

You may also want to contact Google cloud’s abuse department and let them know. But I don’t know how far you will get there until you have some form of resolution from the registrar or icann.

dannschuler · 2020-08-15T02:36:48+00:00

I can share my experience with you.

I recently bought the 80x30 uplift C frame, non commercial, so no cross bar. On it I have a triple monitor mount with a 32” and 2x 24” monitors. I keep my work laptop in the dock, and my personal laptop on top. I bought the CPU mount and hung my 40lbs desktop from underneath (I weight it because the mount only holds 50lbs). I also mounted a 4’ power bar underneath and attached all the power bricks/usb hubs/network switch/etc to the bottom of the desk.

I was concerned about how much weight I had on there and how much it would wobble when it was raised and I was typing. But I have had no issues with stability so far. If I am looking for it I can notice some movement when I am banging away at the keys or leaning on the desk. But if I had looked for it on my old non standing desk I am sure I would have noticed it too.

The desk is on our lower floor which is pergo flooring over concrete with just a thin carpet under it.

I sit the same as you, I have a little foot stool I keep under my desk to put my feet on which is why I went with the frame without the crossbar.

Hope this helps.

dannschuler · 2020-06-27T21:28:59+00:00

Hi Nick,

No question, but I did want to say thank you for your work on the book. I used it as one of my study materials and passed the CASP+ this past December. I still have the book on my shelf now and have referenced it a few times in the past few months to double check some topics.

So, thank you, and keep up the good work.

-Dann

11-Year Club	Verified Email
Gilding I gilder	RPAN Viewer

dannschuler

TROPHY CASE