FishCustard

The best Kitboga clip IMO is where he "redeems" Google Play gift cards on a fake page that he created (I think it's actually injected JS using a browser plugin on the real page) after stringing the scammer along for about five hours!

If you're interested in people stringing these scammers along, look up "Kitboga" on YouTube. Jim Browning also does good deep-dives into the people behind the scams, tracking them down and reporting them.

Me neither. While my partner is very savvy about scams and such, she thinks I should always answer the phone "just in case it's important". Nope! Got no time for that - 99% of unknown-number calls I get are either Bitcoin scams, "you've been in an accident" scams or just plain telemarketing rubbish.

Enthusiastically done - can't resist cute animals!

Your understanding is correct - however you can just use machine tunnels if you want, with no need for individual user tunnels. However, this can be buggy (at least it was on 17xx/18xx versions of W10) and user tunnels are generally more robust.

Standard Office 365 stuff with advanced regex rules for catching phishing (see the Phishing Emails and Phishing Regex threads in the Security forum). Works well enough - people can always ask to have domains blocked if they get a load of spam.

I would strongly recommend that teachers use a fake surname on social media (or a middle name, etc.) and a non-obvious profile picture, as well as locking down who can contact them. Most do - I have many friends who are teachers and that is exactly what they do. The only issue I could see is that it might cause mild disruption in class (e.g. "Oi sir so your first name is Morfin, that's real weird!").

I fail to see the issue around students knowing a teacher's first name - they should of course address teachers appropriately, but the mere knowledge isn't an issue. Unless I've missed some safeguarding point?

SEN school, 200-something students, 180-something staff, 40k pages per month.

We have one at Reception with pictures of school activities and student achievements (obviously with photo permission etc!), and one in the staffroom with the staff rotas (e.g. playground duty, etc.) on. EDIT: Sorry, forgot to say that we use Google Slides and a Chromebit for this, happy to explain further if you want.

You could restore from a backup to a temp database, extract the marks and then insert them into the live database. I've had to do this before when someone at the LA restored the wrong backup and overwrote marks. I have the scripts I used to do it if you want them.

Do they need to be unblocked inbound and outbound or just outbound? I did both only because I was having issues with call dropping on WhatsApp calls. Most of what I did was trial and error to get it working.

I do not doubt that you have, but when Exchange goes wrong it can be a real pain to sort out. (Disclosure: The last version of Exchange I managed was 2010, it might be much better now)

Yeah, in this situation I would migrate to 365. Exchange is one of the clear-cut things IMO that you don't really want to be managing yourself if you can avoid it - too much hassle. It would be just as much if not more work doing what you describe in your post than doing a full migration.

Nooo.... why, are the same people making this that made that series? Was it awful?

Very pleased that Benioff and Weiss are nowhere near this!

The site appears now to be owned by family members of the original creator (the one who was convicted of child pornography offences). I would ask whether the school would want to be seen using resources that are tarnished by a connection to a sex offender. Personally, I would want nothing to do with it, and would recommend the school subscribe to something like Twinkl (other alternatives exist!).

This I partially agree with - it should be pulled from AD. Public LDAP - eh, overkill for schools.

Luckily this thoroughly ludicrous policy has been dropped altogether: https://www.theguardian.com/uk-news/2019/oct/24/government-spent-2m-on-porn-block-before-policy-was-dropped

This is the issue. Voltage and grounding are irrelevant, you have a broad-band EMF emitter sitting near electronics. A big one can quite happily kill PCs and monitors. Recommend doing it away from the PC! Preferably the other side of the room.

Do you honestly believe that SLTs at most schools would even know what signing in the sense you mean is (e.g. PGP), let alone want it implemented?

Exactly!

Agreed. It's generally thought that most of the "legal" disclaimers in emails wouldn't actually stand up under any real legal scrutiny, and only serve to make people scroll further to find the actual content in a thread.

Blackhole outlook.office.com on your internal DNS? Obligatory "this is a stupid idea" (as in the MD's request is stupid) comment!