Jump to content
EduGeek EdSec 2026 is Go! 27th Oct in Derby! Join us for a day of EdTech security focused talks, networking, and an evening social ×

pcstru

Members
  • Posts

    5,998
  • Joined

Everything posted by pcstru

  1. It's not just tampering you should worry about. GIT is 'just' a version control system which will replicate 'code' repositories to the local machine. One issue might be suitable checking on the content of those repositories. It is not just clever programming that lives in files that can be put in a repository. Any file can be placed there by anyone. That said GIT is not confined to a particular service - you can use it against your own controlled repository, so the actual issues will depend on how it it is configured for use and what repositories the client is able to access. There have also been security issues with some implementations of the client which allowed arbitrary code execution on machines.
  2. When you ask for a reference you are targeting a person with some subject authority - hopefully someone who has actually managed the person for some time. You also tend to ask specific questions; about timekeeping, general attitudes etc. So you have an expert answering exactly the kind of questions you need answered. Here we just have one statement from an anonymous internet persona which just says "From my experience the 'people' would put me off doing business with them." That tells us nothing useful (your experience could be as a user for many years or just passing by their stand at BETT a decade ago) and seems basically defamatory ('people' in sneer quotes seems quite rude). Those two facts tell me it has no place on a professional forum. In all your statement tells me very little about Bromcom and the people that work for them (my experience of them as an actual customer is generally positive), but it does tell us a lot about you. I suspect that is quite the reverse of the effect you wanted to communicate.
  3. A simple solution is just to use Index (or even Vlookup), so assuming the two lists are in the same order of students, the cells in the second table can just be Index( , preference cell in table 1); This should work because the integers recorded as the preference are the offset to the activity itself in the header.
  4. Kent have some good templates for eSafety, Scoial Media and AUP. They also have a draft DP policy for schools. LSE and other Uni/Colleges tend to have good policy and guidance for Data Protection, searching for the uni name and DP will find them.
  5. Like everything, if you can't do it already, it just takes practice! I'll do some extra hours where doing so will make a huge difference - usually making something broken work again. But if I'm always having to work extra to pull in the deadlines then there is a problem elsewhere. If I then point that out to management and they ignore it, then my view is they have decided to live with that as a problem and it is not for me to solve it by constantly depriving myself of the ability to earn additional income - which I am perfectly entitled to do using those very same hours!
  6. Looks to me like some config file is referring to a check that is not defined - probably in command.cfg . I'd nip into the config path (possibly /usr/local/nagios/etc) and grep -R check_sda1 * and see what that says.
  7. Depends, but perhaps in abstract for a sort of technical management role : 1. Fight any fires, basically stuff not working / extremely unhappy people at your door or popping into your inbox. 2. Figure out what you have. 3. Figure out what people want, need (and to some extent expect). 4. Create a plan to deliver 3 given 2 and possibly some additional spend. Apart from 1, take your time and try not to rush to judgement. Avoid any temptation to dis the setup or work of previous employees. Find the up-sides, the silver linings and build on any positives but mostly try to just do a lot more listening than talking. ... Maybe.
  8. They should start by teaching politicians how to behave on the internet and how to provide truthful, accurate content. When they do that, perhaps pupils will be led by example. /Rant
  9. I wouldn't get your hopes up, the only thing it has in common with the stories by Adams, is the name.
  10. It is difficult to debug remotely without actual data. Might be worth having a read through of MS documentation on dates : https://msdn.microsoft.com/en-GB/library/ms186724.aspx A possible way to filter to a day might be : Select * from blah Where ( day( datefield ) = day( getdate() ) and month(datefield ) = month( getdate() ) and year(datefield ) = year( getdate() ) ) and datefield is not null; You should not need to do that (and it is likely to be horribly inefficient on large datasets) but it may help you debug what is going wrong.
  11. That IS a bold statement! I'm having to resist the urge to start counting; well, once I figure out what actually is real. People believe all sorts of wierd things and I doubt anyone in here is immune to that. I've hung around (and indeed run a forum mostly for those sceptical of) free-energy forums for the last decade and have watched people pour tens of millions into fraudulent schemes and when they don't deliver - it's a conspiracy by "big oil" or some government interest! Believing the world is flat seems a bit mundane and might actually be quite common depending on how you define "belief". For example, someone can claim to believe that (say) the world will end tomorrow but if in every action they seem to be preparing for events that occur after that time, you might be inclined to disbelieve that they really do "believe". Belief has to result in actions otherwise, well what is it? Given that, if we look at someone who believes the earth is round but is planning a journey and just uses a euclidean approximation of the earth, their action is consistent with a belief that the world is in-fact flat. What if they never act in a way that is consistent with their belief of a round earth?
  12. Given that pintheft is just a "content aggregator" (read it steals content from other websites - depriving the artists (the actual content creators) of the traffic), all the content on Pintheft should be available anyway from the original websites. I do wonder why any art teacher would want to demonstrate to their students the pointlessness of becoming an artist by showing students how even they think the product is not worth paying for and not worth protecting from blatant thieving profiteers like ... well, hello Pintheft!
  13. You could do. IMO it is poor because it replies on an assumption about the data (no future data is entered) but you won't find your door being battered down by the SQL police - so up to you really.
  14. Sorry,yes, you need milliseconds too, so : DATETIMEFROMPARTS(2017,3,20,0,0,0,0) If you are not using the time why not just change the field type to a date?
  15. Because it is looking for something happening at exactly midnight. You could cast the datetime to a date or just bracket it as I suggested to ensure you squeeze every last moment from a day :-).
  16. For me, when you say SAN what is most important is that the network is separate and only carries storage traffic and hypervisors and servers need multiple NIC's to be able to talk to both the SAN and the application side. In terms of the storage, you can then put cheap iSCSI NAS on that network or a more expensive solution. Personally, I justified ~£30K on two Dell servers with 24 SAS spindles in each running some cheap SAN software (OpenE) to provide a solution in which data is duplicated across the nodes and we have some ability to automatically fail over if there are issues. That was 4 years ago so it may now be that budgets mean we cannot replace that with a system which is as capable, but I will want to find a way to get as close as possible first for duplication of data and second as a hot standby. Our users files are on cheaper iSCSI NAS (various Thecus units but primarily two N12000's, one of which is synced overnight as a hot standby). IMO the price of a second unit is a lot less than the potential cost of not having data available for a week while a new unit turns up and we populate it with data from backups (an activity which will take several days to complete).
  17. Try with date < getdate() to see if you get any data (assuming that you have dates before today in your data). I guess you might also be executing the ASP via a method that wants to do parameter substitution, which may be objecting to having no parameters. If the time is the problem use DATETIMEFROMPARTS instead and bracket, something like (date >= DATETIMEFROMPARTS(2017,3,20,00,00,00) and date <= DATETIMEFROMPARTS(2017,3,20,23,59,59)) and date is not null.
  18. It might be handy to know which vendors Database Engine you are using and the version. Assuming it is MsSQL, date = getdate() Will filter to the current date or date = DateFromParts(2017,01,01) allows you to build a date from it's ... err, parts. However, if the fieldtype is DateTime, you may need to range it to cover the 24 hours. Also if the field is not mandatory, then you likely need to explicitly deal with nulls - either to include or exclude them.
  19. Could you please include salary information on these posts as stated in the rules of posting to the jobs forum.
  20. Is the better option "not going to happen" because cost or other reasons? If it's just cost, have a look around at second hand gear?
  21. Perhaps worth highlighting some very specific things not generally in the scope of schools MIS : "The successful candidate will have good working knowledge of EFA/SFA funding and data requirements; be experienced in the processing, validating and submitting of ILR returns and have an understanding of audit requirements. You will have previous experience of managing SQL Server databases, writing complex reports on a variety of data sources and of enrolment processes. Management/leadership of a similar team and have the ability to develop, coach and motivate others would be desirable. "
  22. Generally quite good but we put a lot of effort into our implementation in terms of familiarisation, training and preparation (reports and any interfaces we use to support various business processes). Some senior managers seem to be concerned that we can't just go to another school and grab their configurations so we can spit out the correct numbers (which they seem to think we could if we has SIMS). However, the problem is more to do with them not being able to define what they actually want, rather than any inability of the system to deliver it. That problem would be the same regardless of the choice of MIS!
  23. No. They might (and should) make recommendations but an MIS has consequences beyond any support role and the final decision (and responsibility) for such a critical change rests with the head. That is true even if you have someone who is dedicated to supporting all aspects of the MIS and who is as knowledgeable and skilled as it is possible to be in the domain of MIS's. If you looked at it in terms of a PRINCE2 project, your skilled MIS expert might take the role of "senior user" (or perhaps even suppliers in that they supply business services) but the executive role should be the Head or a member of SLT who is acting with the delegated authority of the head.
  24. That almost implies it would be OK for them to make uninformed decisions within their area! I agree but it is also important that the final say so is at the appropriate level. Those high quality staff do not want to be seen to be the decision makers further down the line when the gripes start (and they will!). Here there is now some grumbling from Senior Management about our choice and it would be really uncomfortable for someone to be holding the "I made that decision" baby. IMO the grumbling is unwarranted and stems from them not actually knowing what they want, rather than a systems inability to deliver that. As is often the case in these things, our job is to make sure the decision makers are properly informed so they can make good, rational decisions based on high quality evidence. Whether they then do make good decisions, is beyond our control.
  25. Err, is 0.0.0.0 correct or is that just placeholder for the server address? If it is actually 0.0.0.0 then it needs to be the server address if you want to make network connection from a different IP.
×
×
  • Create New...