r_systemadmin | Unsorted

Telegram-канал r_systemadmin - Reddit Sysadmin

-

Reddit SystemAdmin. Thanks @reddit2telegram and @r_channels.

Subscribe to a channel

Reddit Sysadmin

Microsoft 2011 Secure Boot Expiration Question

We have tried getting a straightforward answer, but keep speaking with reps who want to sell us tools.

We are primarily a Dell shop and are concerned with the announcement of the existing secure boot certificates expiring.

https://www.dell.com/support/kbdoc/en-us/000347876/microsoft-2011-secure-boot-certificate-expiration


I'm just a bit confused by the documentation. The Dell doc, and the linked Microsoft one found in that, shows that Microsoft will be rolling out a fix via Windows Updates (if the correct group policy is set) along with working with third-party vendors to have the cert in the BIOS. What I'm confused is that if they both have to be done to fix it. I mean...I know it is important to have the BIOS updated, but it looks like you can have this fixed via Windows Update later or update the BIOS on the device once that is available. It reads, to me, like you can do the Win Update or BIOS, or do you have to do both to fix it?


Even in the Microsoft article it states that the Windows Update can fix it, but it's not "permanent" as turning off/on the secure boot post update could remove the cert (but the BIOS is more permanent).

https://redd.it/1mqby40
@r_systemadmin

Читать полностью…

Reddit Sysadmin

Modern Alternatives to SSL VPNs. What’s Actually Working Long Term?

Every few months it feels like another SSL VPN exploit occurs. A week ago I was leaning toward a big well known vendor but I’m wondering if that’s just trading one box for another instead of actually modernizing

For those who changed what did you move to? Or why do you stick with SSL VPNs?

Id like solutions that can be still on appliance-based VPN but with extra hardening, can be fully on ZTNA or SDP, peer-to-peer or identity-based, less open ports/inbound exposure, and that plays nice with both corporate and BYOD devices

Our environment: \~300 users, mix of on-prem + cloud, fully remote and hybrid staff.
Goals: reduce inbound exposure, simplify access control, and cut down on patch babysitting

Would love to hear what’s been working for you in production and whether the operational trade-offs were worth it

https://redd.it/1mq6zaj
@r_systemadmin

Читать полностью…

Reddit Sysadmin

I built a Slack bot that remembers every incident so on-call sucks less

Hey folks,

TL;DR: 

Built a Slack-native assistant that remembers your team’s past incident discussions and brings them back into the thread when the same alert fires again. No new dashboards. No manual documentation. Just Slack.

If you’ve been on-call, you know this pain: Pager goes off at 2 AM, you hop into Slack, scroll through threads, and think — “wait, didn’t this happen a few months ago?”
Someone probably debugged it, found the cause, maybe even fixed it… but that context is buried deep in channel history. So you start from scratch. Again.

Here’s what my bot does right now:

When an alert shows up in Slack, it checks if we’ve seen it before.
If yes, it replies with past triage notes, root causes, and who fixed it — all pulled from Slack history (up to 6 months back).
Builds a searchable knowledge base from your incident chats, zero extra effort.
Sends a weekly digest with most recurring alerts, noisiest services, and top responders.
You can DM it or mention it under any alert to ask things like “What usually causes this?” or “Has this happened in staging before?”
Shows alert summaries and heatmaps in the Slack App Home so you can see which alerts waste the most time.

We don’t silence or filter alerts: we just give you context so you can fix things faster and stop reinventing the wheel at 3 AM.

Demo video here: https://www.youtube.com/watch?v=MHWsOZa0Gpc
Try on test channel: https://www.robinrelay.ai

I’d love to hear from others:

Do you discuss investigations/fixes in your alert channels?
How do you usually dig up old incidents when they recur?

https://redd.it/1mq8gxt
@r_systemadmin

Читать полностью…

Reddit Sysadmin

How do you keep Cisco switch and router upgrades within budget?

We’re planning a network refresh and looking at upgrading some of our Cisco switches and routers. The quotes we’ve received so far are painful.

We want to keep everything above board (no questionable gear, maintain SmartNet eligibility, etc.), but we also have to make the budget work.

I’m terrible at negotiating with vendors. I swear they can smell it the second I get on the call. For those of you who’ve done similar upgrades, how did you manage costs without compromising support or reliability? Did you negotiate differently with resellers, go through alternative Cisco partners, or something else?

Would love to hear any cost-saving war stories.

https://redd.it/1mq3jl8
@r_systemadmin

Читать полностью…

Reddit Sysadmin

Thickheaded Thursday - August 14, 2025

Howdy, /r/sysadmin!

It's that time of the week, Thickheaded Thursday! This is a safe (mostly) judgement-free environment for all of your questions and stories, no matter how silly you think they are. Anybody can answer questions! My name is AutoModerator and I've taken over responsibility for posting these weekly threads so you don't have to worry about anything except your comments!

https://redd.it/1mpwb8o
@r_systemadmin

Читать полностью…

Reddit Sysadmin

Sysadmins thrown into customer calls – how do you stay composed?

Not sure if this is the right place, but I’ve been pulled into a few customer calls lately where the questions get deeply technical out of nowhere. I’m used to tickets, not explaining SSL certs on the fly while the AE looks panicked.
I usually try to prep ahead, but it never covers the random edge cases. I’ve seen folks keep a running FAQ doc open or ask to circle back later – both feel clumsy.
For those of you who bridge support and sales, how do you avoid derailing the call when you’re asked something obscure? Would love to hear how others handle it.

https://redd.it/1mpni7m
@r_systemadmin

Читать полностью…

Reddit Sysadmin

What is the dumbest or worst thing someone has done or asked you to do?

I can't believe how dumb people can be. What do they think our job even is?

Mine:
VP called said it was urgent. Essentially, VP had two screens, her browser is usually on Display 1 but now it's on Display Two, I asked her to dragged the browser to the other screen, she didn't know what it was. So I had to go to her desk and drag it for her to the other screen - shocker.

https://redd.it/1mpnnaq
@r_systemadmin

Читать полностью…

Reddit Sysadmin

Do you feel management expects Google / Amazon type services from you?

I'm great at my job, but sometimes I feel like I get a "look" or an indirect comment like, "Well google does this, why can't we?"

Oh well, let me think about that. I'm an army of one, handle literally everything with a plug or IP address on it, whereas Google has hundreds of thousands of IT employees, but sure, no problem, I'll work on that before lunch....

https://redd.it/1mplcro
@r_systemadmin

Читать полностью…

Reddit Sysadmin

It’s time to retaliate against these crappy tech companies that treat candidates like shit.



Software engineering has become a hell job. They treat employees like crap. I’ve been looking for a job for half a year now, and they treat me like crap. They call me for HR interviews I have like 5-7 each week, 40 minutes each yapping about their comspny. Then they send me a 3-hour coding task and expect it completed by a deadline. Sometimes I submit it and don’t even get feedback, or they reject me without inviting me to discuss my solution, even though I invested so much time for free.

The next stage is the technical interview. Usually at least two senior engineers once I even faced 5 of them. They observe you and your responses like some experimental animal. Some don’t even turn on their cameras. They might glance at your answers and comment "that’s an easy one.” Humiliation. After a 2hr barrage of questions jumping from topic to topic, some companies don’t even bother sending feedback.

I asked them how many other candidates they were interviewing. They said about 4. So imagine three senior engineers wasting a whole working day conducting an interview instead doing their work

And if you make one mistake, you’re rejected. They might judge you based on things you have little control over your stress, body language, or the general impression they get from you.

This profession has become a hell. Last month, I participated in around 40 interviews, including 10 technical ones. I feel like a full-time job seeker. Like a loser who wastes half a day each month on these senseless interviews.In the end, I eventually have nothing.

What are these companies looking for? I didn’t know the answers to 3 out of 20 questions and got ghosted. Few years ago, they would have hired me at a top company based on how I present on interviews now.

This is a hell job. I’ve dedicated 10 years to studying CS, including professional experience. If you lack experience in one technology from their tech stack, they reject you. They won't even give you a chance to teach you.

I feel treated like crap after years of dedication. I am knowledgeable and experienced, yet it feels almost impossible to get a job. How they treat candidates is unacceptable.






How can we retaliate against these shitty companies? Maybe we should let them taste their own medicine.


We should not be ashamed that we have been rejected. They should be ashamed of how they treat people badly, without any respect. So let’s unite and share feedback from our interviews. They feel strong because they can treat candidates like crap, but if we’ve all been treated like shit, let’s connect, unite, and be strong to protect ourselves and not let ourselves be treated that way



I’ve thought about flooding their job posts with AI-generated resumes from fake accounts, hacking their webpages, or sending applications with salary expectations way above their budget.

Next time plan to use AI tools during interviews. For 3h , I will send AI-generated, low-effort solutions in 10 minutes and let them waste their time evaluating it.

Seriously, we need to protect our profession. What other ideas do you have?

Right now, I’m thinking about creating an app for people who have been rejected, treated like crap in interviews, or made to waste their time.

I want to bring these people together to share their experiences of crappy interviews and spread information about how these shitty companies treat candidates.

The app would let users rate companies, leave 1-star reviews describing the interview process, and share interview questions with other candidates. It could help people fight back against these awful recruitment processes.


These companies have become really confident in treating people like shit they must taste their own medicine. Let’s unite to retaliate against them.











https://redd.it/1mpdtao
@r_systemadmin

Читать полностью…

Reddit Sysadmin

Grammarly alternatives

While we have rolled out a policy to prevent Grammarly from being installed and executed we have had pushback from some users with one particular user getting a letter from their doctor specifically asking for it based on their dyslexia. We have a meeting with them, HR, and their manager (and my manager) tomorrow and while I plan to let them know of Microsoft Editor I'm looking for more carrots to offer before I brain them over the head with the Microsoft Editor stick.


TLDR need a privacy focussed alternative for Grammarly with bonus points if it has an option to store data within Australia.

https://redd.it/1mhumc6
@r_systemadmin

Читать полностью…

Reddit Sysadmin

How do you do shared scanners?

So we have a bunch of sharing scanners and they are kinda of a pain.

How do we move to a single scanners? SMB shares are kinda iffy because finance/HR will complain about confidently (even withing the same department) and email to scan seems tedious unless we can connect a keyboard to the scanner to type the email faster (and the scanner itself has a decent sized screen)

Is there any other solution?


Edit: if you have a model of scanner that can save multiple SMB shares as folders or email address to avoid constantly tipping that would be great.

https://redd.it/1mhkaib
@r_systemadmin

Читать полностью…

Reddit Sysadmin

Rant: Why do they bother with boss/employee reviews?

Just did the annual review for my boss, the CIO. I believe they said it's anonymous. Yeah, I'm so sure they won't know it's me considering they can narrow it down to one of the 4 of us and we all have DRASTICALLY different writing, grammar, and spelling styles. So because of that, I can't really give an honest rating as it would be far lower. I'm sure that'd help me get a raise in the future.

If there's an actual, ongoing, operational problem I'd bring it up with one of the execs so what is even the point? It's all just lies anyway. And I suspect mine will be a little padded. If I screwed up on a ticket or project, that's common knowledge where there's no point revisiting it and if I was going the wrong direction on a project or ticket priority handling or something, it wouldn't wait for a review.

I bet my review will be 100% accurate too and not overly-generous considering they know they don't pay me enough for the work I do. They also know I replaced 2 people when I started. So nit-picking the 2% of my job I did wrong is not a good idea when I'm already unhappy and I suspect they know that.

This is such a complete waste of my time to write lies and then hear lies about me because some suit wants us to. Anyone else in this situation? If so, venting on reddit totally helps lol.

https://redd.it/1mhk6cl
@r_systemadmin

Читать полностью…

Reddit Sysadmin

How can you effectively monitor AI usage at work for Security

Couple of months back I was in a conference from Cloudflare and at the end we had a Q&A session. Most of the questions from the Audience where related to AI usage and security, someone shared a story about how multiple teams within their organization created chatGPT and other Gen AI profiles and started using them w/o IT guys know about this. And from my own personal knowledge I know people just throw everything into the prompt, including sensitive data and so. So how are you guys tackling this issue in your orgs??? Do you see this as a huge problem right now??

I know this is mostly related to gen AI stuff, but I guess this gets trickier when talking about using the AI APIs or even building own AI models. When taking data outside of the company for processing or so...

https://redd.it/1mhg9xq
@r_systemadmin

Читать полностью…

Reddit Sysadmin

Is Rippling IT good for IT management? Already planning on switching to their HCM, need help with IT inventory, identity management e.g. SSO.

I’m looking for IT Management tool for sso and asset management. I’m currently reviewing a few platforms to consolidate our HR and IT functions like onboarding/offboarding, app provisioning, and the likes. 

Our org is growing to 50+ employees, but our IT is still running on primitive, manual processes. I work directly with HR, finance, etc but we’re all running on different systems. 

I’m looking at Rippling IT because we’re already planning on switching to Rippling for HR and it’d be ideal to have it all on one software with one set of info. Everything points towards it making some of the core functions like offboarding and device recollection easier, and less reliant on spreadsheets, so getting  Rippling IT feels like the natural right choice, rather than adding a software.

Is it worth it to get Rippling IT since we’re already looking to switch to Rippling? Does Rippling IT help with device collection, identity management, etc.? 

PS: No shill DMs, please.

https://redd.it/1mhfur7
@r_systemadmin

Читать полностью…

Reddit Sysadmin

Overlapping IP Space

Guys, if you're going to run docker on an enterprise environment, talk to your network folks. Don't just pick a non default IP space because you think the default will cause problems.

Network guy here, we carved out the default 172.16.0.0/16 space for you to do what you will in your private docker instances. We will never make an enterprise network in this space. But you went and changed your docker IP scheme to 172.60.0.0/16 and black-holed a whole building from being able to use your application. Why would you do that? This is the only docker network running on this machine, there was genuinely no reason to change it.

Now I have users that are complaining and blaming network when an application guy decided to change default for the sake of changing default.

https://redd.it/1mhbqes
@r_systemadmin

Читать полностью…

Reddit Sysadmin

I ended a QA dev's test and I don't care or feel like I should

There is this QA manager who doesn't respond to email, waits until the last minute, and doesn't make it a point to understand how things work.

I created a group chat with the CTO, his report - the QA manager, my manager, and myself so we could test and share information in real time for internal load balancing I set up.

The CTO miscommunicated what he wanted, so I spent time setting up load balancing how to normally do it with the servers all behind the LB. But he wants a server next to the webservers on the same subnet to hit the load balancer. Which isn't normal, but I got it done. I set it up so that their testing server goes up to the router / fw and hits the LB. I did mention this was kind of unusual and mentioned more standard ways to do it. Which of course got met with, "K."

Today I don't hear anything after 24 hours and I am tired of working late because other people wait until the last minute and then the CTO tells me it's urgent.

I go to the chat and ask if they tested. The QA manager tells me he can't get to the sites but he is trying from somewhere I told him would not work due to setting it up in accordance to the CTO's request. And then the QA manager starts voicing the concerns I voiced in the chat he is a part of as if I didn't voice them and as if I am just not understanding something.

The QA manager as usual communicates poorly. He tells me he can't get to the sites from x after I told him only the test server is set up to hit the load balancer. Then he says, I don't think it's working because I got web server 2 twice. There is a cookie set to retain the server you were on...

All of this is stuff he should know because I told him but he does this thing where he hides in the shadows and then responds last minute to make it seem like he was there all along. He doesn't listen to what you tell him.

So after asking numerous clarifying questions - I finally glean he is wanting to test the load balancing works by hitting different servers. But he is just going to the site hoping to hit a different server. Then when he doesn't - he just comes to the conclusion it isn't working.

I tell him we should remove all servers but one, test, and repeat to prove it works. He says, "Give me 15 minutes I need to do x." And it's the end of the day and I'm not about to work late ad he is very bad about coming back at 17:00 the next day. So I just tested myself (which I already had) and in the middle he gets mad, "Did you do something?... I was testing on site x."

But I mean you were actively testing if the load balancing was working and you didn't say you were running a test on site x. He essentially indirect told me to check it. And it broke some test he was doing, but at this point I don't care. He was testing the load balancing - so naturally I assumed it was okay to test the load balancing. Especially since he was actively pointing out concerns bout load balancing.

People don't respect my time and they come back to me 24 hours later. No one wants to work anything in real time which leads to miscommunication or misunderstandings. It's why I made the chat. Because if I left it in a ticket, I'd hear back next Friday that it isn't working and then get asked why it was broken for a week.

And right now, I know the QA manager didn't hear my final message and he is going to tel lthe CTO he doesn't think it is working and the CTO is going to go to my boss who will go to me and there will be this trail of uncertainty on something that 100% works. And at the end of it - they will see it as my shortcoming.

So I don't feel bad that I broke his test. For once I put myself first so I could definitively say this works and not have to touch it again. Sure I'll have to reiterate it works, but I don't have to touch or eat up my evening testing something I told them eight times works.

https://redd.it/1mqebnz
@r_systemadmin

Читать полностью…

Reddit Sysadmin

AI pilots become... accidental deployment?

A lot of companies are testing out AI pilots and I notice they're just forgetting them. They're in prod, doing their thing.

No sunset date. No formal security review. The pilot becomes the deployment.

I've even seen myself and others testing stuff for six months. it’s still running, quietly answering whatever anyone asks it. Nobody’s re-checking permissions, nobody’s thinking about what’s been learned in that time.

Is this just how new tech always rolls out now? Or are we setting ourselves up for some weird data exposure stories in the next year

https://redd.it/1mqa0yw
@r_systemadmin

Читать полностью…

Reddit Sysadmin

Whats your W10 EOL plan?

I've been pushing for everyone to get upgraded for the last few months.

2 on prem users remain. 20 remote users remain. Luckily, my international users are complete.

I've been sending out emails every other week with status updates to managers of who remains. I have given a hard stop notice for October... aka laptops will no longer be logged into / disabled in Entra. I am sure I will get some kickback, but sometimes the only way to get action items dealt with is by use of force.

https://redd.it/1mq5kja
@r_systemadmin

Читать полностью…

Reddit Sysadmin

which password manager to choose for our non-profit.

55 full time staff, 100=125 seasonal staff (May - August) ... currently we have Dashlane for free but that's coming to an end in 30 days... Which, in your experience is the least expensive: Dashlane, 1Password, Bitwarden, ??? Thanks in advance for your recommendations.

https://redd.it/1mq0mg0
@r_systemadmin

Читать полностью…

Reddit Sysadmin

Which is your go-to SIEM?

I’ve been working as a sysadmin for an operational system for years, but I recently switched to a cybersecurity role. My first assignment is to gather logs from numerous Windows and Linux servers, then audit them. I’ve used Splunk in the past, but I’m curious to know what other SIEM tools you recommend or prefer.

https://redd.it/1mptj6a
@r_systemadmin

Читать полностью…

Reddit Sysadmin

How to get users to stop asking for admin

Maybe this is r/shittysysadmin but I think this comes down to language and education, something I’m clearly lacking. Or just something that will never ever be solved due to stubbornness.

I’m operating a Linux HPC cluster. Essentially, users SSH into a login node, run a command like srun —mem=16gb —gres=gpu:1 —pty bash which spawn a job on some compute node where they have access to 1 GPU and 16 GB of RAM.

Users often try to compile software in their home folders, and use a package like conda which automatically sets all the environment variables which will allow them to “install” software and shared libraries in their home directory without affecting the underlying system.

For a few users, this works well for them and they get along happily. But for a significant number of users, they don’t understand that there are extra steps involved.

Almost daily, the same 4-5 users email me saying the “need sudo permissions” to build and install an obscure piece of software. Almost always this is because they got a permission denied error when running “make install” because they didn’t run “./configure —prefix=/home/user/conda/env/…” and it was trying to write to “/usr/bin” or some other protected system directory. Every time, they walk away frustrated when I give them either the proper solution or an ultimatum. Even if I did give them sudo access, baring them inevitably breaking another users environment, the package would only be installed to that compute node. So when they inevitably end up on another compute node, the files will be missing.

I also build modules for users via spack, and make them available via a “module” command, so they can run “module load nextflow” and now their environment paths are set correctly to allow them to use the software.

I figure this is enough to allow them to get most of their work done, but for some it’s not. Every time, I tell them “I can’t give users sudo permissions due to security and operational concerns. Here are the steps to install this package without root”. And then the next day, exact same thing: “I need sudo to install this package”. Yes, this is a crash out. It’s a one man show so no one to ask for help. How do I teach them? Is there some mental model I can teach them?

https://redd.it/1mpnhpj
@r_systemadmin

Читать полностью…

Reddit Sysadmin

Has anyone's org actually seen a benefit from 365 Copilot?

For places with mature infosec policies and actual controls on new stuff, have you seen a successful deployment of this crap?

https://redd.it/1mpmo9f
@r_systemadmin

Читать полностью…

Reddit Sysadmin

IT layoffs at T Mobile

Just curious what's going on over there?

https://redd.it/1mphgau
@r_systemadmin

Читать полностью…

Reddit Sysadmin

Looking for a better ticketing system

Hello all,

Hey everyone,

Right now, my company is using Outlook as our main ticketing system (yes, I know 😅), and it’s starting to show its limitations. We’re looking to move to something more structured and efficient.

What ticketing systems have you used and would recommend? Ideally something user-friendly, scalable, and easy to implement.

About 500 to 600 users and budget is negotiable we don’t really have one

https://redd.it/1mhrhi6
@r_systemadmin

Читать полностью…

Reddit Sysadmin

Sonicwall Gen7 SSLVPN possible 0-day

https://www.sonicwall.com/support/notices/gen-7-sonicwall-firewalls-sslvpn-recent-threat-activity/250804095336430

https://www.theregister.com/2025/08/04/sonicwall_investigates_cyber_incidents/

Didn't see this here yet, just noticed it in my RSS feed. Guess I'm shutting down the VPN until I can drive in and start whitelisting IPs. Happy Monday!

https://redd.it/1mht83f
@r_systemadmin

Читать полностью…

Reddit Sysadmin

Direct send disable breaks Azure Email Communication.

Just had one of those infuriating "WTF, Microsoft?" moments. We run a production mail system through Azure Communication Services (ACS) Email, which, as documented (https://learn.microsoft.com/en-us/azure/communication-services/concepts/email/email-overview), is completely separate from Exchange Online. It’s an authenticated mail service using App Registrations, no connectors, no direct send, no relation to EXO transport pipeline at all.

So what happens when we (responsibly) enable RejectDirectSend in Exchange Online to harden domain spoofing protections?

Mail flow from ACS Email dies.

Not a hiccup. Not a delay. A full-on "message rejected" scenario as if we were doing unauthenticated direct send, which we're not.

Open a case with Microsoft support, and I get a politely worded, totally useless response that boils down to:

> "Yeah that’s expected. Direct Send from accepted domains gets blocked when you flip the switch. Configure a connector or disable it."



WHAT CONNECTOR? What are you even talking about?!

ACS Email is not an Exchange Online workload. It authenticates through Azure, not Exchange. It doesn’t use direct send, and there’s no way to configure a connector for it in Exchange Online, nor should there be. This is literally Microsoft breaking their own mail platform with another Microsoft product’s security feature.

How do you even QA this kind of thing?

So now we’re in a position where a global mail solution billed as enterprise-grade and scalable for apps/services is dependent on Exchange Online not having one specific setting enabled, a setting that’s there to prevent spoofing.

Let me say that again: a security feature in EXO breaks Microsoft’s own separate, authenticated, app-to-email service.

The cherry on top: Support telling us to “configure a partner connector” and “check SPF.” As if this were a traditional SMTP relay scenario.

No. This is a secure, authenticated service designed for cloud-first applications. You broke it by accident, and the response is basically, "Oops, sorry."

This is the kind of crap that makes IT pros want to jump ship and go live in the woods.

Microsoft: Either separate your services properly or document the fact that internal product lines can silently brick each other.

And no, I will not be “temporarily disabling” domain spoofing protections because you couldn’t design your systems to talk to each other.

Unacceptable



https://redd.it/1mhngje
@r_systemadmin

Читать полностью…

Reddit Sysadmin

MDM Implementation Problems

I work for an IT solution provider company, and we've struggled with Kiosk machine maintenance. On-site fixes waste resources and time, and the issue with client reporting was a nightmare. It's tough for us to help customers efficiently because the emails they send are incomplete and their photos are blurry, causing ongoing complaints. What's worse, when new technicians went on site for training, our senior colleagues had to remotely supervise their progress, trying to spot mistakes and correct them instantly via voice.

Finally, after endless discussions, leadership approved MDM! We know Intune, but we chose Airdroid Business MDM. Because it’s cheaper and has Kiosk mode, remote monitoring, and the control features we need. But! Approving an MDM was just the first step of a marathon! The entire deployment is now my responsibility.

Those Kiosk machines are chaotic. Now, I need to track down and connect those Kiosk machines by myself. I have no team, no help. While our other techs handle daily support, this complete MDM rollout is my exclusive mission. Leadership approved MDM, but hasn’t grasped its strategic importance.

Has anyone else faced a similar situation? This is my first time implementing an MDM solution. Zero-touch enrollment is currently the most ideal way to enroll. While AirDroid Business MDM felt easy to pick up during the trial, are there any common pitfalls or crucial things I should watch out for?

https://redd.it/1mhj2d9
@r_systemadmin

Читать полностью…

Reddit Sysadmin

After Webflow got absolutely demolished last week, I'm realizing how screwed our AI workloads really are

That Webflow attack was brutal sustained targeting of specific API endpoints that brought down their entire platform for hours. Got me thinking about our ML services and honestly I'm spiraling.

If Webflow with all their AWS backing can get wrecked like that, what happens when attackers start hitting AI workloads with the same precision? At least Webflow knew they were under attack. With AI, someone could be manipulating your model outputs for weeks and you'd never know since it looks like normal traffic.

We're running inference services on financial data and our monitoring is basically useless for AI-specific attacks. Standard observability tools can't tell the difference between legitimate requests and someone systematically probing for prompt injection vulnerabilities.

The really fucked up part is that AI models can become the attack vector themselves. One poisoned dependency in your ML pipeline and suddenly attackers aren't just causing downtime - they're exfiltrating data through model manipulation. Your WAF won't catch that shit.

Webflow's post-mortem mentioned how attacks compounded their existing performance issues. With AI that's 10x scarier because the models adapt in real time. Someone could be training your own system to leak data and you'd have no idea until it's too late.

Anyone else losing sleep over this? Feel like we're all just waiting for the first major AI breach to realize how blind we actually are.

https://redd.it/1mhhciu
@r_systemadmin

Читать полностью…

Reddit Sysadmin

best usb over ethernet alternative? kernel pro is kinda garbage

so I’ve been trying to find decent USB over LAN software to share a couple devices around the office — mostly dongles and a printer. Tried USB over Ethernet Kernel Pro, but it's been super unreliable and also crazy expensive if you need more than a few devices.

I’ve seen names like USB Network Gate, VirtualHere, FlexiHub, and usbip, but I’m not sure which one actually works well and doesn’t feel like abandonware.

anyone got real experience with a good one?

https://redd.it/1mh7z4j
@r_systemadmin

Читать полностью…

Reddit Sysadmin

Thanks for painting all over the ethernet pattresses...

https://imgur.com/a/hPpCrvi

I came back after Annual Leave to discover the Maintenance Team had painted a room black. This included all the electrical sockets and ethernet pattresses... Now have to replace the pattress faceplate as it doesn't open, and also find out what is connected to what port and re-label it...

https://redd.it/1mh8h1i
@r_systemadmin

Читать полностью…
Subscribe to a channel