Stijn!!

[GH85Carrera]

Golly that sounds like a fun commute David.

[Porsche-poor]

was not to bad but their was a pole down for two days. Saw two people go around the cones and go thru. One in a car and one on a bike.

[RKDinOKC]

What did the strippers do for 2 days?

[Porsche-poor]

Originally Posted by RKDinOKC

What did the strippers do for 2 days?

went to the local fire hall.............

[RKDinOKC]

How very accommodating of the fire house. Bet the number of volunteer firemen increases for that 2 days!

They might have trouble explaining the glitter all over their fire engines.

[flipper35]

If it stays warm and rainy I am going to have to get the mower out. Mowing in January is wrong, very wrong.

Richard, did you see my post on the security issue? Maybe I am paranoid.

[RKDinOKC]

What security issue was that?

Oh that one.

I refuse to setup powershell scripts to manage our Office365 because I can't automate MFA within a script.

Would have to see if their system would let someone hack the credentials to login to your secure connections with that Java.

From what I've seen, once they get some credentials they are home free.
And they can hack ANY password scheme in seconds now. Even encrypted. Hence MFA!

But jus because SSL can be hacked does not mean don't use it!

I am dreading the day phone routing gets hacked. Now it is only spammers spoofing call origination. How long before they start intercepting MFA messages?

[GH85Carrera]

I have been having fun. We have pretty much zero retail sales for our company that would require sales taxes. Back in 2017 we did actually sell some prints to a regular private company. We charged and paid the sales taxes. I wrote a letter to the Oklahoma Tax commission and explained that virtually all our sales are services. We do a lot of work for tax exempt organizations like state owned universities, hospitals, schools, and the federal government, all exempt.

Mostly we get in a airplane, take digital photos, and do magic things to the photos, and send the client a bunch of electronic files. No tangible objects, just services, no sales taxes owed. It seemed silly to HAVE to file a tax form full of zeros every month. They gave us special dispensation to file just every 6 months. Still all zeros, but only before July 15th and Jan 15th of the following year. They keep "improving" and changing the way it is done every few months. It took me 30 minutes to find the site to even file the required by law sales taxes. A big zero, but it is done. And while I was on a roll, I filed the forms with the secretary of state for our corporate license. I "fee" of just 26 bucks for the honor of being in business. No major deal, but just more electrons moving around.

Just the fun of owning a business. It only cost $26 bucks today, but my personal income taxes and self employment taxes are due in a few days. That is lots more painful.

[Porsche-poor]

Originally Posted by RKDinOKC

What security issue was that?

Oh that one.

I refuse to setup powershell scripts to manage our Office365 because I can't do MFA with a script.

Would have to see if their system would let someone hack the credentials to login your your secure connections with the Java app.

the layman version is "don't mess with it" I take it?

[RKDinOKC]

There are a lot of cool third party apps and hosted apps we won't use because it is just not secure.

We can't even do single sign on because the affordable solutions are not secure and the secure solutions are way expensive.

365 does have a feature called app password where you setup a password for a specific app on a specific computer. But if it burps it defaults back to MFA making the app password useless.

Guess what you are describing is kinda like giving you credit card info to someone. It is now up to their security to protect your card info.

Think if the informaiton was at all proprietary, I would require them to do at least SSL to protect your proprietary data.

[HHI944]

Originally Posted by RKDinOKC

There were a few RR parts I ordered from somewhere in England. Got most used from Rover Cannibals here in OKC. Was always getting Atlantic British catalogs. Must have been an Atlantic British tracker on the RR. Their catalogs just started showing up, then stopped when I sold it.

Got my Cayenne headlights from the OEM in Spain. Even with the $100 import tariff they were still 1/2 what they cost from Porsche.

The Disco variant of the 200tdi never came to the states, so parts are kinda tough to find here. It's the same block and head as the defender 200tdi, but everything else is different. Different timing case, injection pump, water pump, PAS pump and the intake and exhaust/turbo setup are different. On the defender, they mounted the turbo above the intake to keep it dry for river crossings.

The proper pump ended up running $235 shipped, more than 200 cheaper than the places that have it in stock in the US.

[flipper35]

Originally Posted by RKDinOKC

What security issue was that?

Oh that one.

I refuse to setup powershell scripts to manage our Office365 because I can't automate MFA within a script.

Would have to see if their system would let someone hack the credentials to login to your secure connections with that Java.

From what I've seen, once they get some credentials they are home free.
And they can hack ANY password scheme in seconds now. Even encrypted. Hence MFA!

But jus because SSL can be hacked does not mean don't use it!

I am dreading the day phone routing gets hacked. Now it is only spammers spoofing call origination. How long before they start intercepting MFA messages?

They already have.

[RKDinOKC]

Sure would like to come up with "Black Ice" if you have read any William Gibson like Neuromancer.
Or Snow Crash like in the book of the same name by Neal Stephenson.
ie Hack the hackers and take them out.

[Jim Richards]

Originally Posted by flipper35

If it stays warm and rainy I am going to have to get the mower out. Mowing in January is wrong, very wrong.

Richard, did you see my post on the security issue? Maybe I am paranoid.

I'll be mowing at least once or twice before the month is over. Of course, it takes 15-20 minutes to edge & cut my massive yard.

And yes, Brent, you're paranoid.

[GH85Carrera]

Originally Posted by RKDinOKC

Sure would like to come up with "Black Ice" if you have read any William Gibson like Neuromancer.
Or Snow Crash like in the book of the same name by Neal Stephenson.
ie Hack the hackers and take them out.

Well all you need is one of the computer experts from TV. They can hack the CIA or IRS in minutes, and do it by just pounding on the keyboard. Never a need to hit enter, and for sure never a function key, or backspace and few if any space bar keys. And the mouse is of course not used like the number keypad. Best of all they can enhance the reflection in a pair of glasses to read the tag on a car across the street from a ATM security camera. Heck they can read the little sticker on a tag and read that number.

[RKDinOKC]

Met a guy that his job was messing with hackers that tried to get into his company's computer system. Not protecting the system, but messing with hackers that tired to get in. He had a bunch of computers that were his fake company network. He would lead the potential hackers into his system thinking they were getting into the corporate system and mess with them while tracing their connections. They would think they were getting into stuff and hacking passwords and credentials, and getting into what looked like valuable information that was just foobar. They worked so hard just to get deeper and depper into his little network. He really enjoyed it too.

The the books I referenced above did similar. The worst was in the book Snow Crash, where you would get a screen of what looked like static, but it actually reporogramed and erased the hacker's brain. Hence the term Snow Crash. Good book.

[flipper35]

I talked to a guy a couple years ago in Austin who had a similar job. He got more info about them than they did real information about his clients.

Kevin Mitnick said the easiest way to get into a company is using someones real credentials. It is easier and you are less likely to trigger anything. It does take some time to go up the ladder so to speak. My first takeaway is don't pee next to a stranger.

[RKDinOKC]

What suprised me was hackers had software to watch the data stream of an encrypted connection, then decrypt and get the credentials in seconds.

[Noah930]

My mini-disappointment of the evening. I thought I had cleverly invented a new word about a month ago. Farticles: the little particles that come out of your butt when you fart. But then my 6th grader Googled the word tonight, and it appears as if it's in the Urban Dictionary (though not my spellcheck) as of 2015.

[porsche4life]

The worst part about that is knowing that she won’t let you live down being wrong.