Linux
Recently we had some electrical work done on the NOC. The Air Conditioning had to be disconnected for a few hours, and we watched the temperature in our Server room slowly creep up. It got us thinking; Is there an easy (and cheap) way for us to get alerts about
Tutorial
fail2ban is a magical little program that does precisely what it says on the tin. Fail to authenticate properly enough times, and you'll be banned. Banned from what? Well, just about anything. fail2ban is super flexible; It reads log files and executes commands when certain conditions are met,
Investigation
So a while ago, I followed a guide to enable using Google as the login provider for all our MS365/Azure/Entra/Whatever accounts. This was a pain in the ass, as for some reason using MS to authenticate with Google is like 3 steps, but doing so the other
Linux
I was digging through logs with journalctl --since=yesterday to verify our Proxmox servers were good to go, and I saw plenty of nonsense. When in doubt, I tend to skim for the bright red things that say Error. There were more than zero, and some were a tad concerning.
Google Workspace
Google, being an company funded almost entirely via advertising revenue, is attempting to kill AdBlockers (with a fun side-effect of potentially ruining the internet) with their new Manifest V3. What is Manifest, you may ask? This has been discussed ad-nauseum elsewhere, but here's the TL;DR; Manifest is
Windows
I work in K12 Education. Student accounts in AD and Google Workspace are automatically provisioned with the help of Classlink's OneSync. Staff accounts on the other hand, are much more difficult to automate, as their are many different positions with different needs. Those have historically been created by
Tidbit
I didn't think it was possible, but Google Workspace's options for controlling permissions regarding Calendars is actually worse than those of Google Drive. Really the only way to get a list of all the calendars for your domain, is to use GAM. Setting up GAM has
Tutorial
The amount of school districts getting absolutely bulldozed by hackers is an unpleasant reality that keeps me awake at night. In no small part due to my insistence, our school district has been on an absolute security rampage this past year. An integral part of a good security posture is
Google Workspace
More accurately, giving end users the ability to do whatever they like, and leaving Administrators with hardly any controls over what is shared and with whom, is a recipe for disaster. Last month (November 2023) it was revealed that a threat actor known as SingularityMD was exploiting misconfigured Google Groups
Docker
Docker is awesome, and a ton of projects can be spun up in just a few minutes using Docker Compose. Many of these primarily use a Web UI, meaning the entire graphical interface exists within the browser. Unfortunately, most of the time these UI use plain HTTP, which is vulnerable
Proxmox
In the state of Oregon, education institutions with PACE insurance (and many others) are beginning to require not just antivirus, but antivirus with Endpoint Detection and Response (EDR). We chose to go with Crowdstrike, which, despite having the world's cringiest product names, actually provides a cheap, well-functioning base
Docker
I frequently use Portainer and its Stacks feature (which is really just Docker Compose in a fancy hat...) to spin up all manner of random junk. It is probably the laziest way to get from nothing, to a full working service with a web GUI. Here's a list