Jump to content
EduGeek EdSec 2026 is Go! 27th Oct in Derby! Join us for a day of EdTech security focused talks, networking, and an evening social ×

Norphy

Members
  • Posts

    8,349
  • Joined

  • Last visited

Everything posted by Norphy

  1. New Andy Weir book, if you haven't already got it? https://www.amazon.co.uk/Project-Hail-Mary-bestselling-Martian-ebook/dp/B08FFJS3YW/ref=sr_1_1?dchild=1&keywords=andy+weir&qid=1627547231&sr=8-1
  2. I think the metaphor here is: You go out for the day. Someone breaks into your house and pretends to be you. A milkman knocks on the door and asks the person there if they're interested in milk delivery. The person at the house pretending to be you says "Yes". If the milkman has SPF/DKIM/DMARC, he says "Great, can I have some ID please?". The person at the door either dithers and says "no", or the ID that he has doesn't match, it either isn't his or the address on his ID is wrong. The milkman says "LOL NO" and moves on. If the milkman doesn't have SPF/DKIM/DMARC, he takes the person at the house at his word and signs the household up for the service. The milkman checking for ID doesn't stop the vagrant from breaking into your house, but it does stop him from signing you up for a service you don't want. If you want to stop people from breaking into your house, you buy a stronger lock. Or an Alsatian. /edit this was started before I noticed @enjay said "Thanks"
  3. These technologies don't mitigate against that scenario, no. But what they do is help prevent people from sending fraudulent email from another SMTP server pretending it's you. The SMTP protocol is ancient and wasn't really built and designed with a network the scale of the Internet in mind. It's trivial to set up an SMTP server and send an email with any old address as the sender. What SPF/DKIM/DMARC do is define what network address ranges are allowed to send as you and if recipient email servers are set up correctly, if they get an email from an IP Address outside of that range they reject it. It's not foolproof and they're not supposed to be an ultimate solution to everything, but they're an important part of your email security toolkit.
  4. I might be wrong about this but as far as I understand it, although the two products do have somewhat overlapping purposes, they're more complimentary products than they are direct competitors. Securly is more about web filtering, while Senso is classroom management and monitoring.
  5. There was the Virgin Media outage a few days ago which was caused by a massive underground electrical explosion. It got one of our schools and a lot of LGFL schools. We were lucky as we have another circuit at a different site that we can use but not everyone would have been. It’s unusual, but it’s a concern.
  6. Is it a gen1 VM? Might be worth trying a legacy NIC if so
  7. These are domain members? Can you use a group policy preference to create local users? The option is there: I've admittedly never tried, but it looks like it should work.
  8. Had thunder and lightning here about an hour ago, then hailstones. Boiling again now.
  9. https://www.theguardian.com/media/2021/jul/20/sue-perkins-new-host-bbc-radio-4-just-a-minute-bake-off-comedy-nicholas-parsons On the one hand, she did a good job as a guest host and I think she's a good choice for the role. On the other hand, she was always an excellent contestant and it seems a shame that she can't do that any more. It's going to be a tough ask to carry on the job after > 50 years of Nicholas Parsons but I think that if anyone can do it, she can.
  10. You can’t make that assumption. I’ve seen people have panic attacks when an icon is removed from their desktop or when a shortcut stops working. Forcing a UI change on someone unannounced or with short notice is, to quote an old colleague of mine, doing something to your users, not for them. And, point of interest, Windows 11 is going to a yearly release cadence, not every six months.
  11. Because, while I concede that’s it’s very very similar, it’s not the same. Ignoring what they’ve changed in the background, which apparently is a fair amount, and ignoring the increased hardware requirements, the UI is different enough to cause disruption if you just drop it on your user base unannounced. While I have no doubt that that W11 uptake will happen (and probably relatively quickly as well) pushing it out to all and sundry as soon as it’s available is asking for trouble.
  12. The way I look at is, deploy the H1 build when you rebuild over summer then push out the enablement update when H2 over Christmas or Feb half term. With the past few releases of Windows, all the code for the new builds is pushed out with the cumulative updates but left dormant. When it’s time, you can install the enablement update which takes two minutes to install, the computer reboots and you’re on the new build.
  13. 1) Yes - see lifecycle doc here: https://docs.microsoft.com/en-gb/lifecycle/faq/windows#windows-11 2) the date being bandied about is 20th October. It will probably be put onto the MVLS around then. If you have an MSDN sub, you’ll probably be able to get it sooner.
  14. I had one of those docks with a Venue 11 Pro tablet a few years ago and I found they were extremely fussy about the DisplayPort adapters that they used. I seem to remember the ones that worked best were VGA adapters, oddly enough.
×
×
  • Create New...