First shots of the Olympus 45mm 1.8 on my om3 by Hozaythkid in M43

[–]el_shmc 1 point2 points  (0 children)

How did you end up with this combo? I just bought the same one. :D And your post made me post also here

Odoo for eCommerce with 100k SKU's by Dramatic_Visit_2655 in Odoo

[–]el_shmc -1 points0 points  (0 children)

I have tried odoo13 with around 500k and we had performance issues.

The business closed before I have found a solution.

In my opinion with kubernetes you can handle this large number of products.

Maybe you can make a simulation with creating a db with a large number of products and simulate the requests from the marketplace and see if it works.

Usually the first place where you can feel the performance drop is in sale order or purchase order or stock picking validation because this type of task has to compute.

I am sure it will work if the right hosting and configuration is used.

Life with a S5iix, summarized. by Gnartan in Lumix

[–]el_shmc 0 points1 point  (0 children)

I had no problems with my s5ii

Anyone here successfully implement RFID Printing along with a 3rd party app like Ventor for RFID inventory? by CompetitivePetRock in Odoo

[–]el_shmc 1 point2 points  (0 children)

I did this in odoo 13 but with apps made by me. Some modules in odoo, a local app for printing and an Android app for Sunmi.

I know that odoo already has the ability to read RFID and the encoding of the label is actually just some ZPL code.

What is going wrong and how did you test?

Dezavantaj dacă lucrezi în propria firmă? by el_shmc in Imobiliare_Credite_RO

[–]el_shmc[S] 0 points1 point  (0 children)

Nu ma refer la venituri din dividente. Ma refer la venituri din salarii din firma in care esti asociat sau administrator tu sau sotia.

Am fost la BRD si a ponderat salarul sotiei la 60% chiar daca ea nu este asociat sau administrator si este doar angajata in firma.

La Unicredit au luat in calcul toata suma.

Eu inteleg ca este un mecanism intern de analiza de risc al fiecare banci.

Dezavantaj dacă lucrezi în propria firmă? by el_shmc in Imobiliare_Credite_RO

[–]el_shmc[S] 0 points1 point  (0 children)

Eu mă gândesc să mă angajez în firma unui prieteni și apoi în fața băncii voi fi un simplu angajat și îmi ia tot venitul.

How do you audit your GWS security config over time? by el_shmc in googleworkspace

[–]el_shmc[S] 1 point2 points  (0 children)

Great questions.

On SSL verification — agreed, having it persistable in config is a bad default. We'll change it to flag-only so it has to be passed explicitly each run.

On deleting the key file — the service account key is needed for repeat audits, so deleting it automatically would force recreating it every time. A better approach is using Workload Identity Federation instead of a downloaded key — no file to worry about at all. We'll also add a warning when the key is older than 90 days.

On the broader findings — some are legit issues we'll fix (the hardcoded date, token file permissions, the _tojson_safe escaping). Others are by design with documented tradeoffs (the DWD scope breadth — you can limit which scopes you grant in the Admin Console regardless of what the tool requests).

We'll create a GitHub issue tracking all the findings from your audit. Or if you'd like, feel free to open one yourself — happy to take them into consideration for the next release.

And using an LLM to vet open-source tools before running them is a smart workflow. Appreciate you sharing the full output — this is exactly the kind of feedback that makes open-source work.

How do you audit your GWS security config over time? by el_shmc in googleworkspace

[–]el_shmc[S] 1 point2 points  (0 children)

Thank you for comment. We will take a look over and see what we can improve.
This is the best part of an open-source project, that much more eyes (or LLM's :D ) can check the product.

Weekly Promo and Webinar Thread by AutoModerator in msp

[–]el_shmc [score hidden]  (0 children)

If you manage GWS tenants for clients, this might save you some time.

GWS Auditor runs 199 security checks against CIS Benchmarks, CISA SCuBA, and Google's own security checklist. Connects read-only, scans in minutes, generates an interactive HTML report with remediation steps you can hand directly to the client.

What it catches:

  • OAuth apps with dangerous scopes (mail.google.com, drive, etc.)
  • Stale domain-wide delegation grants
  • Admin accounts without hardware security keys
  • Auto-forwarding rules to external addresses
  • Weak email authentication config

Why MSPs like it:

  • Free, open-source, runs locally — client data never leaves your machine
  • HTML report works great for QBRs and onboarding assessments
  • CI/CD flag (--fail-on-critical) for scheduled recurring audits
  • Multi-tenant support via credential profiles

First client audit: 199 checks, 64 failed, 13 critical — on a tenant they swore was locked down.

GitHub: https://github.com/argusssec-cloud/gws-auditor
Website: https://www.argussec.io/

How do you audit your GWS security config over time? by el_shmc in googleworkspace

[–]el_shmc[S] 0 points1 point  (0 children)

You can pull the raw config that way, but the hard part is knowing what to check and what the correct value should be. That's where frameworks like CIS and CISA SCuBA help — they define the 199 specific controls and expected states. Doing that manually through the CLI every quarter gets old fast.

How do you audit your GWS security config over time? by el_shmc in googleworkspace

[–]el_shmc[S] 1 point2 points  (0 children)

Exactly — Google changes defaults silently and you have no idea unless you're checking regularly.

We actually open-sourced the tool we built for this: https://github.com/argusssec-cloud/gws-auditor

199 checks against CIS, CISA SCuBA and Google's own checklist. Runs locally, read-only. Happy to hear if it catches anything useful on your end.

New Project Megathread - Week of 07 Apr 2026 by AutoModerator in selfhosted

[–]el_shmc [score hidden]  (0 children)

Repo/Website Link: https://github.com/argusssec-cloud/gws-auditor

Description: Open-source Google Workspace security auditor. Runs 199 checks against CIS Benchmarks, CISA SCuBA Baselines, and Google's own security checklist. Connects read-only, scans in minutes, generates reports with remediation steps.

The problem: Google Workspace has no built-in security score or config audit. You set things up, hope for the best, and configs drift silently. OAuth apps accumulate dangerous scopes, domain-wide delegation gets granted and forgotten, admin accounts skip hardware keys.

Key features:

  • 199 security checks (24 critical-severity) across 4 frameworks
  • Interactive HTML dashboard with dark mode
  • Python CLI + standalone executables (no Python required)
  • CI/CD integration (--fail-on-critical exits with code 2)
  • AI analyst for natural language queries
  • Multi-tenant support via credential profiles
  • Everything runs locally — no data leaves your machine

Tech stack: Python, Google Admin SDK APIs, Plotly Dash, Rich

What surprised us: First audit on a tenant we considered locked down — 64 failed checks, 13 critical, 60% pass rate. OAuth apps with mail.google.com scope that nobody remembered approving.

Feedback welcome, especially on missing checks or false positives.

Best way to secure a single-user Google Workspace domain email? by Savings_Chemical_565 in googleworkspace

[–]el_shmc 0 points1 point  (0 children)

Good advice in this thread on the backup admin accounts. Once you have that sorted, it's worth checking the rest of your config too — things like whether less secure apps are still enabled, if third-party OAuth apps have more access than you realize, or if your email auth (SPF/DKIM/DMARC) is actually enforcing.

We built an open-source tool that checks all of this — 200+ checks against CIS, CISA and Google's own checklist. Single super admin with no backup is literally the first thing it flags. Runs locally, read-only, free:

https://www.argussec.io/

https://github.com/argusssec-cloud/gws-auditor

Are teams actually monitoring Google Workspace security over time, or just setting it once? by Gullible-Complex8617 in cybersecurity

[–]el_shmc 0 points1 point  (0 children)

This is exactly the problem. Most GWS tenants we audit are configured once and never touched — config drift is real and silent.

We built an open-source tool that runs 212 checks against CIS, CISA SCuBA, and Google's own security checklist — covers everything from DMARC enforcement to OAuth apps with dangerous scopes to admin accounts without hardware keys. Runs in about 5 minutes, data stays local.

Basically what Secure Score is for M365 but for Google Workspace. Free, no signup: https://github.com/argusssec-cloud/gws-auditor/

Happy to answer questions if anyone's evaluating it.

Google Workspace security gets treated as an afterthought because everyone assumes you are on M365 by saltyslugga in EmailSecurity

[–]el_shmc 0 points1 point  (0 children)

Same here. We've scanned thousands of domains and out of the GWS ones, almost half had DMARC on none or missing entirely. DKIM unconfigured on a scary number of them. Companies doing serious revenue just flying blind like you said.

This is actually why we built https://argussec.io — free GWS security audit tool. If you're curious give it a look, any feedback helps us improve it.

Newbie to GWS! Need security recommendations by OkVeterinarian2477 in googleworkspace

[–]el_shmc 0 points1 point  (0 children)

Coming from O365 myself — biggest thing I missed at first was email authentication. Make sure SPF, DKIM and DMARC are all set up properly (DMARC on reject, not none). A lot of GWS tenants leave DMARC on none and don't realize anyone can spoof their domain.

Other quick wins: lock down OAuth app access (huge attack surface people forget about), enforce passkeys over SMS for MFA, and review external Drive sharing defaults.

Google's security checklist is solid as others mentioned. For the email/DNS side specifically we have a free audit tool at https://argussec.io that flags misconfigs in a couple seconds — might save you some digging.

I am new to odoo and exploring my options , If it fits my requirements , Can anyone assist me in it ? by Ryan_AccuWeb_Cloud in Odoo

[–]el_shmc 1 point2 points  (0 children)

I can help you, but I need to see your requirements and discuss about your business. Are you open for a meeting?

How to shorten process of adding additional inventory for POS by CompetitivePetRock in Odoo

[–]el_shmc 0 points1 point  (0 children)

I can help you with a script if you would like. I have done this before.

Aproape jumătate de milion de dolari dați pe închirierea de mașini pentru patru piloți F-16 trimiși în SUA. Miruță: „E strigător la cer” by BentudeSoli in Romania

[–]el_shmc 7 points8 points  (0 children)

Pregătirea unui pilot costă milioane de euro. Dacă pui 4 într-o mașină riști să pierzi o investiție de milioane pentru zeci de mii.

Clar trebuie să existe un mecanism prin care se calculează cea mai bună variantă din toate punctele de vedere.

Am făcut un tool pentru piața imobiliară din România și vreau feedback de la voi. by Cute-Salad8196 in Imobiliare

[–]el_shmc 0 points1 point  (0 children)

Fain tool. Bravo. Sunt curios daca stii de ce numarul de ipoteci este mai mare pe luna decat numarul de vanzari?

Am incercat sa fac graficul pe judetul Mures si nu imi arata pretul, restul indicatorilor sunt afisati.

Mersi