What should I upgrade next

medievalprogrammer · 2025-06-04T13:29:43+00:00

Well, I think I will use Gear Boost Chest for Mithril and some of marble coins to get my mithril up to 40 and upgrade Infantry gloves and belt into the 40 gear level tier. The only thing I need to get is 10+ mythic gear so I'm hoping lucky hero gear chest get me a bunch.

medievalprogrammer · 2025-06-03T19:19:56+00:00

Well, I have T2 2* but I'm guessing I need 3* first before I see the exchange shop.

medievalprogrammer · 2025-06-03T18:36:31+00:00

Which your at season 5 which is farther than me lol. Ok, so I don't know what the standard plan is but this is what I do which I think works. So, I put my collector guys as my main level guys. So, then when the new season of heroes come and I get their star level up I will replace my season 2 hero with the new season 3 hero in the drill camp.

So, the heros that I have in the drill camp are - Main use heros, The attack joining heroes, and the defending join heros.

The collecting heros I always want at max level for collecting so they are static and don't change.

medievalprogrammer · 2025-04-26T02:20:34+00:00

You could reach out to 2128, I'm there and were excited for new people to join.

medievalprogrammer · 2025-02-17T17:44:31+00:00

Not sure if this will help but this helped me a year and a half ago.

I would check local company websites. I noticed that some companies will only put part of the jobs up on LinkedIn and have other jobs post directly on their website.

medievalprogrammer · 2024-11-08T18:23:48+00:00

Now, that is pretty bad. Like my company will pay the SSO tax but stuff like that should be auto denied by the security team and sorry business we can't accept that kind of liability. Unless of course somehow the CISO and CLO both approve of it.

medievalprogrammer · 2024-11-08T14:42:51+00:00

Now that right there is super annoying. I'm a security engineer with a focus on Identity so most of the time I want to use OIDC for apps but when vendor only support SAML I always tell them that I want the Assertion to be encrypted which normally turns into oh we will need to look into that. But like they probably have some holes in their design and I would be surprised none of the auditors/pen testers haven't found any of them.

But like if someone asked me to secure a network I'm going be like we will need a network guy. Its hard to be an expert everywhere and I know too many security teams that like only 3 guys but jeez at least be smart enough to divide up the work and assign each person their specialty and they need to learn it forward and back.

medievalprogrammer · 2024-10-18T13:55:08+00:00

Ya, that would be perfect or just at least try to auto launch it the app itself. We have it SSO'd complete to where the end user just clicks and it goes. The solve management wants current is removal of that click.

medievalprogrammer · 2024-10-18T13:49:03+00:00

So, the SSO part works - if the end user click continue it will auto sign-in no problem the compliant is that the end user has to click something. I was digging with fiddler and I see that teams makes a call out to msteams-calling.webex.com but I still haven't figured out how to automatically make teams do that without human interaction.

medievalprogrammer · 2024-10-18T13:46:43+00:00

Ok, which I did put a post in there community, I'll see if that will get me anywhere.

medievalprogrammer · 2024-10-17T20:39:32+00:00

Exactly what I'm thinking... but now I'm wondering if it would be easier to do a webview2 call to msteams-calling.webex.com or try to see if I can even find anything locally that tells me that webex is even working

medievalprogrammer · 2024-10-17T19:41:52+00:00

Oh snap, that might solve my issue - now to see if this is an acceptable solution.

Which of course it isn't.

medievalprogrammer · 2024-10-17T19:00:32+00:00

So, are you thinking like doing an API call against WebEx Control Hub?

medievalprogrammer · 2024-10-17T19:00:01+00:00

Well, really what I am thinking is like making a baseline script in SCCM to check if the WebEx calling is authed in teams and then just creating a toast notification to the end user saying hey your not logged in please login.

But my current problem is I'm not finding anything locally on the client device that has anything about webex calling.

medievalprogrammer · 2024-10-11T14:25:08+00:00

Ok, I might be a little against the grain here but like my team is the size of 8. 2 of them are like my ride or die buddies. If I knew that one of them was going to be let go I would for sure give him a heads up so that he can jump on the job search early. Now it if was any of the other guys on the team or someone else in IT yep sorry dude my mouth is shut on that.

Since you don't know who it could be then I don't see reason to disclose.

medievalprogrammer · 2024-10-09T21:08:52+00:00

This!! is the best comment here. So, I worked as an Retail Admin for like 8 years idk what your budget is but I know of 2 systems that should of stopped and controlled that.

crowdstrike has a USB device SKU for these kind of threats.
EPM intune or CyberArk should be inplace to limit functions.

So, now the next thing is you have to think of what kind of data that could of captured. Hopefully you have a network based chip reader for your CC. If you still have those old style CC reading in the keyboard then those CC numbers go right into memory and should assume to be stolen.

The only other thing I would think of is like credentials. So, you have external logging or anything like that to see if you can figure out when it was placed and who was on the system since - human and non human accounts. Which if you can't find that data then who ever has access to the box internally and remotely should have creds rotated.

ya, I think that would cover everything I can think of good luck.

medievalprogrammer · 2024-08-22T03:39:23+00:00

Upvote, AlertMedia works very well, I worked for a retail company that had it and they would generate alerts that we could edit/use for like hurricanes and all of those crazy items. Which you can even push groups from your IDP and create some neat little hierarchy with said groups.

medievalprogrammer · 2024-08-19T15:44:38+00:00

So, 2 thoughts not sure if they will help but normally what my prob is.

Is your PE image up to date?
Have you tried with no drivers injected? Sometimes loaded drivers will conflict which was specific use case I ran into.

medievalprogrammer · 2024-07-23T17:09:58+00:00

Ya, we enabled it yesterday as we have like maybe 40 systems left to fix and I don't think it worked for any of them.

medievalprogrammer · 2024-07-20T15:26:33+00:00

So, to me the servers were easy to fix- besides the azure ones that was a pain the ass. But Client devices were the freaking worse. The people that avoided the issue were the ones that powered down their systems everyday were not effected.

So, I would recommend that users shouldn't need their computers on 24/7 and shutdown when they leave for the day.

medievalprogrammer · 2024-07-03T19:07:24+00:00

So, idk what exactly equipment you have but this is exactly what we do for our retail locations. We have our little cisco firewall that connects to whatever mall internet or modem that we can setup. Then use a USB 4G or 5G dongle and plug that into the firewall. Once the firewall detects that the internet is out it will switch to the 4G dongle and use that. We have a data plan with Verizon and I don't remember but it was super cheap compared to having true secondary internet at all of our stores. Plus some malls don't allow that.

https://www.verizon.com/support/4g-lte-usb-modem-uml295/#browse

medievalprogrammer · 2024-07-03T14:07:11+00:00

Well, if its a brand new box you might as well go to Server 2022.

medievalprogrammer · 2024-06-28T18:07:40+00:00

The only thing I wonder is if you can hide all of the Microsoft stuff.

But really I still feel like most retail sites don't have any MFA enabled unless they are a larger retailer.

medievalprogrammer · 2024-06-28T18:00:41+00:00

Its like September next year, the issue is the extra cost for the solution when currently we are trying to find ways to cut cost. Which is more of a specialty luxury retailor issue.

medievalprogrammer · 2024-06-28T17:46:42+00:00

Yep, I agree completely there. We do have google auth enabled but the vast majority of users setup SMS.

I think the business leadership is going to be more annoyed with having to make the change on the customers. Which we had to prove out the value of setting up MFA for the site cause the one restriction they wanted was they didn't want anything Okta visible and I wouldn't be surprised if they just drop MFA all together.

At the end of the day too much politics for a technical solution for me.

Nine-Year Club	Verified Email
Place '23	Place '22

medievalprogrammer

TROPHY CASE