Linux
I've done a lot of experimenting, and I have found a really great combination of settings for Proxmox to optimize the performance of Linux-based VMs. It's not as difficult as wrangling Windows VMs but there are a few potential pitfalls to avoid. Let's get
Google Workspace
In my last post I talked about a recent string of security breaches, and my frustration in dealing with Google Drive permissions in an effort to protect my district. Here I'd like to discuss some of the solutions I have discovered. First, what does a perfect solution look
Windows
If, like me, you have decided to force your users to log in to MS365 with their Google accounts, I recommend this gentleman's guide. Doing this the other way 'round (using MS to sign into Google) is incredibly easy, but us Google-centric orgs have quite a bit
Linux
Recently we had some electrical work done on the NOC. The Air Conditioning had to be disconnected for a few hours, and we watched the temperature in our Server room slowly creep up. It got us thinking; Is there an easy (and cheap) way for us to get alerts about
Tutorial
fail2ban is a magical little program that does precisely what it says on the tin. Fail to authenticate properly enough times, and you'll be banned. Banned from what? Well, just about anything. fail2ban is super flexible; It reads log files and executes commands when certain conditions are met,
Investigation
So a while ago, I followed a guide to enable using Google as the login provider for all our MS365/Azure/Entra/Whatever accounts. This was a pain in the ass, as for some reason using MS to authenticate with Google is like 3 steps, but doing so the other
Linux
I was digging through logs with journalctl --since=yesterday to verify our Proxmox servers were good to go, and I saw plenty of nonsense. When in doubt, I tend to skim for the bright red things that say Error. There were more than zero, and some were a tad concerning.
Google Workspace
Google, being an company funded almost entirely via advertising revenue, is attempting to kill AdBlockers (with a fun side-effect of potentially ruining the internet) with their new Manifest V3. What is Manifest, you may ask? This has been discussed ad-nauseum elsewhere, but here's the TL;DR; Manifest is
Windows
I work in K12 Education. Student accounts in AD and Google Workspace are automatically provisioned with the help of Classlink's OneSync. Staff accounts on the other hand, are much more difficult to automate, as their are many different positions with different needs. Those have historically been created by
Tidbit
I didn't think it was possible, but Google Workspace's options for controlling permissions regarding Calendars is actually worse than those of Google Drive. Really the only way to get a list of all the calendars for your domain, is to use GAM. Setting up GAM has
Tutorial
The amount of school districts getting absolutely bulldozed by hackers is an unpleasant reality that keeps me awake at night. In no small part due to my insistence, our school district has been on an absolute security rampage this past year. An integral part of a good security posture is
Google Workspace
More accurately, giving end users the ability to do whatever they like, and leaving Administrators with hardly any controls over what is shared and with whom, is a recipe for disaster. Last month (November 2023) it was revealed that a threat actor known as SingularityMD was exploiting misconfigured Google Groups