Heteronymous

Vendor says you "may need to set up port forwarding" for their system to work, including UDP ports 10,000-20,000
No info on source names or IP (preferably they'd provide DNS names). I'm sure your box is hardened for any and all Internet-bound traffic on all those ports, right ? /s

Limit known actually required traffic by source folks, surely you know and do this. It's not a public-facing, appropriately hardened and maintained system, who knows what vulnerabilities are waiting to be leveraged on this proprietary closed box system ?

Next up is a request to forward HTTP and Telnet to an internal system. Please, for the love of all that is unholy, STAHP.

I'm not taking about anything ha

Posted here, where I've collected advise from Will Dormann of CERT, and included links to Microsoft's page about CVE-2021-36958, and links to two posts at https://blog.truesec.com :

https://www.reddit.com/r/sysadmin/comments/p4enqg/meaningfully_remediating_printnightmare_latest/

[Update, Aug 15, 8 AM: I don’t mean to suggest that this is viable for everyone, review and proceed as you need, of course. Context is everything, and I don’t know yours. Adjust accordingly and/or ignore if you like 👍🏼]

Putting this together so that hopefully it will benefit others here.

Will Dormann of CERT: "The mitigation of denying the "modify" permission to SYSTEM as outlined at blog.truesec.com/2021/06/30/fix… does appear to work."

See:

[https://twitter.com/wdormann/status/1426260597327421442](https://twitter.com/wdorm

https://www.bleepingcomputer.com/news/security/16-year-old-bug-in-printer-software-gives-hackers-admin-rights/

Here we go with yet another vulnerability to fill up our "free" time chasing down and remediating.

"This high severity vulnerability, which has been present in HP, Samsung, and Xerox printer software since 2005, affects hundreds of millions of devices and millions of users worldwide," according to a SentinelOne report published today and shared with BleepingComputer in advance.

The security flaw tracked as [CVE-2021-3438](https://nvd.n

There's been some lamentable hysteria about the app launch failures/delays macOS users were seeing the other night, corresponding (remembering that correlation ≠ causation) with the release of BigSur. (See https://arstechnica.com/gadgets/2020/11/macos-big-sur-launch-appears-to-cause-temporary-slowdown-in-even-non-big-sur-macs/ )
and what was happening and why, and the privacy concerns that raises - or, not.

Including a few posts claiming some pretty hyperbolic things about what Apple's OSCP service does and how.

Please see:

[https://blog.jacopo.io/en/post/apple-

FYI and hopeful enjoyment and use(fulness): https://github.com/illudium/ssh_install_and_secure_config_for_windows

I was just taking some time to watch on of u/geerlingguy's fantastic videos about Ansible for Devops - Ansible 101 - Episode 14 - Ansible and Windows,
and noticed that talks about downloading OpenSSH from Github. Certainly possible but not at all the only way to go.
I've been using powershell to install OpenSSH via Microsoft's announced availability and method here,
[https://docs.microsoft.com/en-us/windows-server/administration/openssh/openssh\

[Update 2/26/2020]:

*Facepalm and head banging on desk, repeatedly...*

I was wrong. This was an absolute FUSTERCLUCK of human error and lack of (any) requisite knowledge of the technology/-ies involved by a person empowered to act by a tragically uninformed web "developer."

My sincere apologies to Namecheap ! I do however stand by my assertion that you should default to alert(s) on changes (which is now in place).

To everyone else: I apologize and I have egg on my face. Imagine that (I never did) the new office manager would have access to the OTP backup codes and use them, which is what happened, I only just found out now.

As I said, I do recommend Namecheap should default to a

<rant>HP, why is your software such a stinking hot mess ?
HP MFP device. Download the latest software from HP. Oh WAIT: It wants to extract to the user temp directory and run from there. FFS, really ?? Smacks of malware much ? Why yes it does. Anybody with decent software restrictions will block that nonsense, as happened here.

SO I run the software on a PC without such valuable safeguards, and copy out the extracted folder contents.
NEXT FAIL ? "api-ms-win-core-file-l1-2-0.dll" source file not found.
On every single PC (current Windows 10, latest build, fully patched). Run a repair on Visual C++ Redistributable for Visual Studio 2015 which is already installed.
HP install

Update: with kind help from u/sysval I had it pointed out to me that there is/was an index,I mistakenly though (as in, misunderstood) what indices are created and how, I thought that the logstash.conf related to an/the relevant index that would be created and that I should have been looking for.

Crux of the matter: Things are setup and "working" but no logged events seem to be arriving at the recipient server,and there's no available nxlog index to choose when attempting to finalize the setup of Kibana.

I'm new to ELK but not linux or Windows, but this is driving me bonkers as I'm clearly missing something. Help me Jedi masters ! Surely I'm missing something obvious or stupid to anyone

All of this is predicated on having SOME existing form of remote access, at the very least ssh (and thus scp).

Download MouseTools, make executable, and put in your home folder, or that of

http://www.hamsoftengineering.com/codeSharing/MouseTools/MouseTools.html

Launch Terminal

​

Open System Prefs Security and hover over the approve button

Cmd tab over to the Terminal window

run ./MousTools -location

to get the needed cursor location

​

Run Script editor and edit the coordinates below accordingly to those you need for your specific situation.

​

tell application "System E

I have a server (Hyper-V host) with a VM of Server2012R2, with the OS & Data on a single drive within the supporting single VHDX.

I wouldn't do that by default, but it is what it is. What I need to do now is convert the setup to two separate VHDX files - to be setup/used/presented as separate disks for the VM - system and data, and - IDEALLY - it would be great to clone the existing VHDX, delete the system & proceed from there. Data alone (meaning nothing system related) is about 800 GB. If I thought it'd be a cinch to also pull out the data-only (parent) folder and shrink the existing VM to create a system-only VHDX, I'd do that. With the goal being to then be able to enable ded

Greetings, everyone.

It looks like SuperMicro parts are something of a world unto their own, but I've got a 1U 813M SuperMicro server that I'd like to work with.

It is insanely loud. Some noise from a server is of course to be expected, but I've also worked with a 1U Dell that's damn near whisper quiet.

The biggest source of noise on this thing is not the unit's cooling fans, but the fans inside of the power supply. The label on the PS is (Ablecom) PWS-512-1H 520W max.

Looking for help and/or recommendations on a compatible power supply that will be relatively quiet, without busting the bank.

I searched and found that SuperMicro has their "SQ" series power supply that are supposed to b