11,252 reputation
63173
bio website secopsmonkey.com
location Dublin, OH
age 34
visits member for 5 years, 7 months
seen 11 hours ago

Security Engineer in the health care field. I get hot for automation, vulnerability management, and hardening.

http://www.linkedin.com/pub/scott-pack/3/689/76a


Jun
19
comment dump tcp connections without tcpdump
@ewwhite: Any good change management policy should have the ability to exempt specific, or classes of, changes from going through the full process. If this one doesn't....
May
12
comment Extended ACLs Not Always Being Inherited
Interesting. That's pretty cute. I'll have to see if i can get my hands on that software and mock up a test again. I should be able to track it with auditd
May
4
comment Designing a computer network of > 100 devices, dividing server responsibilities
I'm with @EEAA on this. Given the maturity of virtualization platforms you're screwing yourself with backups, change management, disaster recovery, system management, everything.
Feb
8
comment Can you change the virtual NIC type after building a VM?
Uncontested. The first rule of Internet advice is to pour out a bowl of salt. The second is to analyze it against your environment to see what actually makes sense. With a sufficiently advanced environment doing any host maintenance without vCLI is probably bad juju.
Feb
7
comment Can you change the virtual NIC type after building a VM?
@JamesRyan: I suppose, but just using vi seems easier. Unless sed is available on there....
Feb
6
comment What is the risk in turning off Base Filtering System on Windows Server…?
My questions would be what is it about BFE and WFP that you don't trust? These are pretty well tested, and industry understood, systems. Do you not trust the packet processing subsystem or do you not trust the administrator? Those are very different problems with very different solutions.
Jan
31
comment Does filling up disk with dd removes files securely?
It's worth noting that Secure Erase is inconsistently, or not at all, implemented between vendors and can't actually be trusted for SSDs. The only currently acceptable practice for SSDs is destruction.
Jan
30
comment Does filling up disk with dd removes files securely?
Might I recommend checking out the DESTRUCTION tag on Security.Stackexchange? We've waffled on about several aspects of this topic before.
Jan
15
comment Puppet: managehome on user type only works when user doesn't exist
@FrançoisBeausoleil: Cute! I need to read more up on the newer versions. I wrote most of my modules for 2.4 and have been fixing them so they continue to work but haven't done a good job of keeping up with changes like that.
Jan
14
comment Puppet: managehome on user type only works when user doesn't exist
@quickshiftin: Yeah, there should probably be another require on that. I simply forgot.
Jan
14
comment Can you change the virtual NIC type after building a VM?
@warren: The webUI was introduced with 5.5. Which is fantastic because, from what I understand, it's only available through vCenter and many features are no longer available in the fat client. Really leaves all of us standalone users out in the cold.
Jan
13
comment Can you change the virtual NIC type after building a VM?
@warren: With 5.1 that would be the vSphere client. I don't have access to a fully licensed 5.5 instance to check the web client against.
Jan
13
comment Can you change the virtual NIC type after building a VM?
@warren: It depends quite a lot on your infrastructure. In my case it was easier to do this than re-register the guests so their MACs would be allowed on the network. Sometimes switch ports could be MAC locked, sometimes reservations are in use. Sometimes it doesn't matter but sometimes it does and a good admin needs to know how different things work in different situations.
Jan
11
comment Can you change the virtual NIC type after building a VM?
@John: You also can do it in the GUI (at least on 5.1). The VM must be powered down and you must change the MAC.
Dec
19
comment How To Enable URL Filtering With Just Squid & C-ICAP
Welcome to Server Fault! Whilst this may theoretically answer the question, it would be preferable to include the essential parts of the answer here, and provide the link for reference.
Dec
19
comment Squid + windows active directory Authentication + Dansguardian
Welcome to Server Fault! Whilst this may theoretically answer the question, it would be preferable to include the essential parts of the answer here, and provide the link for reference.
Dec
19
comment Linux webfilter with LDAP SSO authentication
Welcome to Server Fault! Whilst this may theoretically answer the question, it would be preferable to include the essential parts of the answer here, and provide the link for reference.
Dec
3
comment Overriding Parameters in Previously Declared Puppet Resource
I am loathe to admit that this worked out pretty well. It certainly adds some extra complexity but I'm seeing some real flexibility advantages that I'm liking the idea of.
Nov
27
comment Overriding Parameters in Previously Declared Puppet Resource
Great. Now I have to learn Heira. NEWMAN!
Nov
6
comment How to stop only the Mysql server in MAMP PRO?
Welcome to Server Fault! Whilst this may theoretically answer the question, it would be preferable to include the essential parts of the answer here, and provide the link for reference.