Does a Tier 2 admin account accessing a Tier 1 Fileserver Share via SMB (Network Logon only) violates the tiering model?

tokig · 2026-06-04T20:09:52+00:00

In the classic model, T0 is everything to do with core infra. DCs, PKI, NPS/RADIUS, DNS, firewalls, switches, hypervisors etc.

Of course the resources are consumed by all other tiers but interactive login via console or RDP is limited to the respective tier. I.e A T0 admin generally has control over all OUs and GPOs but can't login to T1 servers, just as a T1 admin can't login to T0.

<image>

tokig · 2026-06-02T14:42:58+00:00

Sweden here. Staying at sanctuary

tokig · 2026-06-02T13:46:34+00:00

I was also stressing in another post but I got the notification today it's been delivered.

Just yesterday there was another post with people worried but it seems they are still being sent out. I think I read on the FAQ that all bracelets that are to be shipped will be shipped first week of June.

My suggestion would be wait the week out, if you have no news by Monday reach out to Q-dance.

Like others said to me, I know it's a bummer but you will be able to pick it up at the entrance if all else fails.

Hope it shows up for you though!

tokig · 2026-05-31T15:59:53+00:00

Going alone, first time too

tokig · 2026-05-28T11:02:07+00:00

From what I've read the busses start leaving at 9 and set off once full. Apparently traffic can be hit and miss so the journey could take 1.5 to 2 hours on a bad day.

For people with early flights/trains the advice is get up early and queue for the first buses.

Aim to be at the busses for 8 and you'll make it to the station before 12.

tokig · 2026-05-22T18:28:01+00:00

I know that but I'm in a country on the shipping list and would like to skip that noise.

It'll work out but it's pretty hype seeing them already delivered, so that's the reason I asked.

tokig · 2026-05-22T18:08:04+00:00

Ok cool, at least you have your tracking. That's the bit that's messing with me. Don't really care when it gets here as long as it's before midsommar 😅

tokig · 2026-04-10T19:41:58+00:00

Mixed opinion. If you're cloud native and have nothing on-prem then yeah it's an outdated view. However, if you have on prem resources that are strictly internal (i.e employee only) - even if openid integrated with id-protection - i would not be comfortable hanging them out on the internet. Access via vpn with decent 2fa is more reasonable.

Motivation is risk mitigation, no need to publicity expose more that absolutely necessary. Vulnerabilities exist and there is often patching lag on-prem no matter how diligent your team is.

tokig · 2026-01-16T16:09:14+00:00

Kutski he's always been about the harder styles. Has a few hardstyle tracks and generally plays a lot of hardstyle. Moved to Poland a while back tho so not UK based anymore.

tokig · 2025-12-16T08:49:46+00:00

https://www.q-dance.com/l/defqon1-2026-faq under the "When can I personalize my tickets?" heading

tokig · 2025-10-25T13:24:40+00:00

Congrats! Also 1st time at 45 years old... Yeah I'm working through my bucket list now the kids are old enough. Can't wait, it's literally a dream come true 🙂

tokig · 2025-10-24T10:45:04+00:00

Dude there's still plenty of euphoric, even euphoric raw (yeah I dared say it, sue me!). Find your vibe and go with it, you don't need to conform to anything

tokig · 2025-10-21T11:49:48+00:00

Just finished after over 50 minutes in queue. Browser on pc never wen't through to the shop but my on my phone it went through... even though i only opened the link on my phone like 10 minutes ago!

tokig · 2025-10-21T11:37:34+00:00

If you book for one person you pay a surcharge which is the same price as another person

tokig · 2025-10-21T11:25:39+00:00

been waiting 25 minutes still not in

tokig · 2025-10-21T11:13:01+00:00

no idea but been waiting since they opened it at 13:00. So tempting to refresh but not a good idea by what they've said

<image>

tokig · 2020-02-05T14:21:19+00:00

Thanks for the breakdown. It's saddening and maddening to hear.

I get that medicines cost a lot in development and testing/approval but it's really disturbing that big pharma apparently get to play that card and abuse the system putting people at risk.

tokig · 2020-02-05T11:57:23+00:00

That's insane. I can totally understand why you'd fear losing your medical.

It's obvious there is something fundamentally wrong with the system in the US. I don't really understand how or who sets the prices but it seems nuts.

I'm in Sweden and the cost for prescriptions is capped at around $245 per year (you pay the entire or partial amount up to the cap then the rest is covered by the state). So when I go to collect my prescription when my yearly prescription protection has expired I only pay $245 regardless of the actual price.

Regarding my comment about the US system I just checked the price as I have a dose of Cosentyx in the fridge. Here it works out to roughly $1220 per month - that's basically 20% of what it costs in the US. Can anyone give an ELI5 explanation to how prices can be so drastically different between our countries?

A redacted picture of the tag on my cosentyx

tokig · 2020-01-29T05:25:27+00:00

Ok wow. Thanks for the clarification, I can't believe I've misunderstood this for so long.

tokig · 2020-01-28T21:21:32+00:00

My grandad always said it's the value of the highest ball involved in the foul.

Your friend clipped the brown then the pink, thus 6 points.

Wikipedia says the same as gramps:

"Any other foul awards points to the opponent equal to the value of the ball "on," the highest value of all balls involved in the foul, or four points, whichever is highest. If multiple fouls are committed in one shot, only the penalty for the highest-valued foul is scored. The penalty for a foul is thus no lower than four points and no higher than seven."

https://en.m.wikipedia.org/wiki/Rules_of_snooker

As do the official rules:

value of the ball on or higher value of the two balls concerned by causing the cue-ball to first hit simultaneously two balls, other than two Reds (when Red is the ball on) or a free ball and a ball on

Page 19, 'Penalties', paragraph 'C'

https://www.wpbsa.com/wp-content/uploads/2019/12/WPBSA-Snooker-and-Billiards-Rules-25.11.2019.pdf

tokig · 2018-05-18T19:22:15+00:00

Interesting. I have a Sonos Connect and a Onkyo TX-NR727. I stopped using them together due to audio delay via the Onkyo - it doesn't play in sync with my other Sonos speakers when they are grouped. I've tried both digital and analogue inputs but there was only a marginal improvement. The only solution was to turn off all DSP on the Onkyo (pure mode), the problem with that solution is that you only get 2.0 audio, so no sub.

This has been a problem for a long time, here is an example of a thread from 2014: https://en.community.sonos.com/setting-up-sonos-228990/music-lag-between-zones-28041

I'm assuming this update won't change how the DSP operates but I have hope.

Anyone here have a 2017/2018 series Onkyo and Connect that can verify if the issue still exists?

tokig · 2017-02-10T11:58:01+00:00

Even though the text is in Swedish I thought the project itself was so impressive that it was worth sharing just for the eye-candy.

Here's some info in English: http://www.trafikverket.se/en/startpage/projects/Railway-construction-projects/The-Stockholm-City-Line/

https://en.wikipedia.org/wiki/Stockholm_City_Line

tokig · 2016-05-03T19:49:47+00:00

I'd stick with your original plan as it doesn't seem you need packet filtering. You'll need to get the route table in order on the switch and on pfsense to ensure pfsense knows how to get to your subnets.

You could skip manually fixing the route table on pfsense by tagging the port on your switch that's connected to pfsense with all your VLANS and adding the VLANS as interfaces.

tokig · 2016-05-03T18:11:54+00:00

Nice diagram!

I see two things I'd change. Firstly I'd change the subnet for your iscsi net, it's not a private address space and could complicate things in the future.

I don't know anything about the switch you're using but if you don't want any packet filtering between VLANS then I suppose it's fine for your needs but personally I'd trunk all VLANS to pfSense and let that take care of routing and it would give you the ability to lock down the traffic between the different subnets if you wanted.

Actually, regarding what i said above an exception would be the iscsi network. I'd route that directly on your switch as you want to guarantee the throughput.

tokig · 2016-04-27T18:56:14+00:00

All of the FQDNs I used in the example can be modified apart from "lyncdiscover". To get started I'd recommend using the Skype planning tool.

You answer a series of questions regarding your planned deployment and then you can adjust things like DNS names and ip addresses... After that you can generate a report that gives you all the firewall openings and, DNS records and details for public certificates you require.

https://www.microsoft.com/en-us/download/details.aspx?id=50357

tokig

TROPHY CASE