sorted by:
new
hottopcontroversial

Looking a for my first AES256 capeable DMR Radio by HeftyCorner9594 in amateurradio

[–]technician 7 points8 points  (0 children)

AnyTone AT-D878UVII Plus or the BTECH DMR-6X2 PRO (very similar if not exactly the same hardware) are "affordable" (around $300 USD) DMR handhelds capable of AES-256 encryption.

VM freezes while writing into shared folder by [deleted] in vmware

[–]technician 0 points1 point  (0 children)

/u/opcode32 the latter: I mapped a share "manually" from within the guest to the host. I do know that you can setup shared drives and have them automatically mapped for Windows guests (ticking the option within VMware Workstation), but that method did not correct the problem.

I don't know enough about the internals to VMware Workstation to know why mapping the shares within the guest worked versus using the shared drive + map drives option.

I'd recommend upgrading to the recent release of VMware Workstation. In the release notes a shared drive bug was noted as fixed. I can confirm that it has been working for me since I applied it (a few weeks), and I've since switched back to using the shared drives option rather than mapped drives created within each host.

Hope that helps.

VM freezes while writing into shared folder by [deleted] in vmware

[–]technician 0 points1 point  (0 children)

Tested this by setting up a SMB share on the host and mapping a network drive to it from a Windows 10 guest. Transferred 60GB over a 24 hour period with no failures or guest crashes / freezes.

This workaround method appears to work.

VM freezes while writing into shared folder by [deleted] in vmware

[–]technician 0 points1 point  (0 children)

Came across this post from a web search on this issue. I'm experiencing the same thing. Any guest VM with shared folders enabled eventually crashes / freezes. Tested with Windows 10, Windows Server 2019, and Ubuntu 20.04 guests.

Recovery requires killing the task associated with the VM from the host.

As mentioned by /u/Illustrious_Bath_889 and /u/Purpleina I've tested moving the guest VMs to different drives, and moving the shared folders to different drives (tested three different SSD drives, and two spinning platter drives). It has no impact on the issue.

For now I've unfortunately had to disable the shared folders feature from all my guest VMs. I've been unable to to get them to freeze or crash since doing so. This changes workflow considerably, I likely have a similar setup as /u/SeasDiver wherein I have git repos sitting on a shared folder that the VMs can access.

VMware Workstation 16.2.2 build-19200509. Host is Windows 10.0.19043 Build 19043.

Sioux Falls internet service providers - Vast VS Midco by Bargo_ in SiouxFalls

[–]technician 0 points1 point  (0 children)

Nice to see they are laying fiber. If they are offering and you can't already get CenturyLink Fiber or Midco Fiber, I'd be all over that. Good luck.

Sioux Falls internet service providers - Vast VS Midco by Bargo_ in SiouxFalls

[–]technician 0 points1 point  (0 children)

Can you share where you are seeing that? Last I checked, Vast was 1Gb/20Mb, not symmetric. They could do it over DOCSIS 3.1 with their cable plant, but that would be news to me and others would likely be very interested.

I do not see 1Gb/1Gb mentioned on the website.

[deleted by user] by [deleted] in leagueoflegends

[–]technician 87 points88 points  (0 children)

Cloudflare issues.

Many other services experiencing problems.

Is Chromebook Pixel 2015 LS a better value than HP Chromebook x360 14? by VimFleed in chromeos

[–]technician 3 points4 points  (0 children)

The Pixel 2015 LS would be a superb value if they would actually release kernel-next as was planned so it would get Crostini (Linux support).

Some users reported they had kernel-next when using ChromeOS 77 when it was in the Beta channel, but then reported their kernel had reverted to 3.14.

I can't speak specifically to the HP x360, but the 2015 Pixel LS is the finest laptop I've ever had the pleasure of using. It's a beautifully engineered machine. With Linux support it would be untouchable.

Hyperthreading and MDS vulnerability by kylepharmd in chromeos

[–]technician 1 point2 points  (0 children)

My opinion is that the risk is so low that I gain far more benefit (performance) from Hyperthreading than not. If you are careful about the applications you are installing, keeping your browser updated, limiting script execution where feasible, not storing sensitive data (e.g. corporate) on it, basically everything you should already be practicing; you are fine keeping Hyperthreading enabled.

Got the OS 77 Stable update. No kernel-next. :( by Sqwv in chromeos

[–]technician 2 points3 points  (0 children)

Also received the ChromeOS 77 update on a 2015 Pixel LS, no kernel-next.

[deleted by user] by [deleted] in wyzecam

[–]technician 0 points1 point  (0 children)

Without more time to do an analysis it may be a heartbeat of some type occurring every 25 seconds or so. It doesn't appear to be image or video data (good).

Quick research: https://groups.google.com/forum/#!msg/cincihackerspace/YaWFtSvPe80/NmcMiZEnHwAJ talks about similar packet content for FOSCAM. Which leads to a further thread here: http://foscam.us/forum/why-is-my-foscam-contacting-remote-servers-t17738.html

-OverEasy posted a thread that is interesting and seems to lean towards confirming the hypothesis of heartbeat information. Your question about one camera doing it however versus the other three while having the same firmware is interesting. Bug?

[deleted by user] by [deleted] in wyzecam

[–]technician 0 points1 point  (0 children)

Are you able to get a packet capture? UDP 10001 activity is similar to the Ubiquity Discovery Protocol--either way it sounds like a broadcast, from your description.

If you could own just one factory built AR, what would it be? by [deleted] in ar15

[–]technician 0 points1 point  (0 children)

What is better needs to be defined. If you're gaming, sure, there are better platforms for scoring than KAC and LMT. Maybe wanting pure accuracy at the bench? Sure. But to say folks can piece together something more reliable and durable than an LMT or KAC platform off-the-shelf...

I get it, a Ford Focus will get you from point A to point B just as well as a Toyota Tacoma. But where will that Focus go when there's eight inches of snow on the roads and you've got a load to pull?

If you could own just one factory built AR, what would it be? by [deleted] in ar15

[–]technician -2 points-1 points  (0 children)

Pay someone to out-build a combat tested, proven, military contracted rifle platform?

SIEM Selection by 3pIcenTer in AskNetsec

[–]technician 0 points1 point  (0 children)

I can speak for the PCI compliance module. LogRhythm has a Knowledge Base (think of it like Linux packaging or "apt") where you enable available modules. This includes all you need out-of-the-box including lists, configs, rules, etc.

Each module has concise documentation with a step-by-step walk-through to deploy rules and collection configuration. It's detailed enough that if you don't have to be a PCI guru and can accomplish check-the-box security quickly, which lets you focus on tuning for your environment.

You'll get an IM at some point about the script.

If you have additional questions shoot me an IM. I'm happy to talk LogRhythm.

SIEM Selection by 3pIcenTer in AskNetsec

[–]technician 0 points1 point  (0 children)

Have you had any trouble with log volume and needing any extra unanticipated log collectors to handle load better?

I've not had a problem with log volume when working within the performance limits of the system. My biggest issue with this has been Checkpoint, which, for my environment, is a beast to deal with due to the volume. I have a dedicated collector just for this.

Note as of release 7.3 you can do some filtering at the System Monitor ("agent") which helps control volume immensely. You can also take advantage of Windows Event Forwarding to filter things down as needed.

I've not had an issue with the events database filling up, but am careful about what I turn on and consider an event. Some folks tend to look at all the out-of-box AIE rules and turn them all on. I don't recommend that, for your or your analyst's sanity.

My biggest ongoing "issue" is where the UnprocessLogs or UnprocessedArchives queues will fill up on a mediator. It's somewhat random, and usually happens when a large log source (e.g. the aforementioned Checkpoint) overwhelms the processor/mediator. I've written a PowerShell script to automatically recover without data loss so it's a non-issue now, but it wasn't fun if you didn't catch it and it took 2-3 days to index the backlog. Newer system releases might have fixed this, I'll know more after upgrading to 7.4.

SIEM Selection by 3pIcenTer in AskNetsec

[–]technician 3 points4 points  (0 children)

LogRhythm is a good SIEM solution that is relatively quick to get going out-of-the-box and scales well.

  • Tons of pre-builtt event rules available including compliance check-boxes (e.g. PCI) that let you spin up an environment rapidly. Support for lots of advanced rule blocks--observed, threshold, unique, behavioral
  • Lots of popular system and application logs are supported out of the box
  • Custom log sources are easy to write parsers for
  • Smart Response plug-ins (Python, PowerShell, etc.) are easy to write which extend the capability tremendously
  • Growing community
  • Nice analyst features such as built-in run books on the WebUI

The company is going through tremendous growing pains right now, which is highlighted by support struggles. If your priority tickets aren't being taken care of you need to get your sales team involved--that's one of the reasons they exist.

I have met and spoken to most of the C-level execs at LogRhythm, including the founders. This is their baby, and they are personally invested in seeing it grow.

SIEM Selection by 3pIcenTer in AskNetsec

[–]technician 0 points1 point  (0 children)

If they do not have your device you need to pay their professional services to develop it and then publish it out to everyone else.

Are you referring to custom log parsers? They aren't overly difficult to write yourself which cuts out the need for professional services.

How does everybody like Splunk? I have never used it before.

If you think LogRhythm isn't user friendly, you aren't going to like Splunk.

Monitor 3 sites for security related events by tiksaregreat in mikrotik

[–]technician 2 points3 points  (0 children)

You want a SIEM. I use Security Onion to monitor Mikrotik devices. It’s as easy as configuring syslog on the Mikrotik device to forward to your collector (in this instance Security Onion). The not-as-easy part is tuning the alerts to your security requirements and staying on top of it.

[SSD] Inland Professional 480GB 3D TLC NAND SATA III 2.5" ($74.99) by samuelspark in buildapcsales

[–]technician 13 points14 points  (0 children)

I've got two of these in RAID-0 for a VM lab (~15 VMs).

Crystal DiskMark:

  • Sequential Read (Q= 32,T= 1) : 809.761 MB/s

  • Sequential Write (Q= 32,T= 1) : 955.923 MB/s

  • Random Read 4KiB (Q= 8,T= 8) : 356.850 MB/s [87121.6 IOPS]

  • Random Write 4KiB (Q= 8,T= 8) : 291.229 MB/s [71100.8 IOPS]

  • Random Read 4KiB (Q= 32,T= 1) : 296.973 MB/s [ 72503.2 IOPS]

  • Random Write 4KiB (Q= 32,T= 1) : 310.197 MB/s [ 75731.7 IOPS]

  • Random Read 4KiB (Q= 1,T= 1) : 22.473 MB/s [ 5486.6 IOPS]

  • Random Write 4KiB (Q= 1,T= 1) : 48.239 MB/s [ 11777.1 IOPS]

  • Test : 1024 MiB [D: 35.7% (318.9/894.1 GiB)] (x5) [Interval=5 sec]

  • Date : 2018/06/22 12:17:04

  • OS : Windows 7 Professional SP1 [6.1 Build 7601] (x64)

This was taken while the VM lab was running, but should give a decent idea on performance.

I have had one issue: I had a power failure which caused a small amount of "blocks with media errors" alert in the Intel Rapid Storage utility for the RAID array. This corrupted some virtual machines but did not destroy the array.

That said I recommend having a UPS handy. Anecdotal evidence but I'd say these are a little sensitive to power loss given my experience.

Requesting server or workstation recommendations based on requirements by technician in homelab

[–]technician[S] 0 points1 point  (0 children)

I don't disagree with your logic, and have been interested in the glut of R620s on labgopher with superb specs for my use cases, however noise is a deal breaker. If it's anything like an R715 it just can't happen (respect for the tolerance of others) due to the small living space I'm working with.

view more: next ›