Jump to content
Watch the EdSec 2026 Conference Live - Click Here ×

Marci

Members
  • Posts

    1,299
  • Joined

  • Last visited

Everything posted by Marci

  1. No. An IP Address is not a Domain Name. Direct IP resolution isn't handled by DNS, it's handled by routing / proxy. DNS only handles name-to-address resolution. What specifically are you trying to achieve?
  2. In which case someone else probably replied before you, then realised and deleted, leaving you to look the wally I'm afraid.
  3. Sounds like the root cert for your "another provider" CA needs pushing out to clients' Root CA Trust Store...? Is the new provider in the list at https://social.technet.microsoft.com/wiki/contents/articles/51151.microsoft-trusted-root-certificate-program-participants-as-of-january-30-2018.aspx ?
  4. You're not looking for a file - you use Install Disk Creator to make a complete working functional bootable USB installer. You then run disk utility, select the USB stick, and head to File > New Image > Image from [devicename]. It will then produce a DMG of the contents of the USB Stick.
  5. Make a bootable USB stick using the installer and Install-Disk-Creator (or whichever tool you prefer). Unmount the USB stick via Disk Utility. Create an image of the USB stick via Disk Utility. Upload the created image.
  6. One would suggest that one's first post on a forum such as this should be more than "Google it". *rolls eyes*
  7. No idea why you've been advised to do this on the command line / in terminal. It can all be done by dragging and dropping folder to new drive then updating home location for your user accounts. Essentially - copy the user's home folder to new drive same way as you'd copy any other folder to somewhere else. Now head to System Preferences > Users & Groups > Right click (or alt-click, or two finger tap) on the user whose home folder you moved > Advanced Options > Click 'Choose' alongside the Home Directory field, browse to the new location. OK. Reboot, log back in, delete the home folder from the original drive. See https://www.lifewire.com/move-macs-home-folder-new-location-2260157
  8. Looked at https://products.office.com/en-GB/where-is-your-data-located ?? Safe Harbour agreement was declared invalid and rendered meaningless in 2015, replaced with Privacy Shield.
  9. Virgin here - site fails to load. It's something to do with domains hosted on hostpapa / servers co-located at Cogeco Peer 1 (so servers are in Toronto, Canada). A 'regular' (ie: I'm a Mac user) UDP trace route fails, and bombs at tor-fr402-xe3-1.peer1.net. An ICMP trace route goes through and does eventually hit hp180.hostpapa.com at 64.34.68.30, but the site itself doesn't load. ICMP trace: traceroute to 64.34.68.30 (64.34.68.30), 64 hops max, 72 byte packets 1 10.126.168.254 (10.126.168.254) 0.752 ms 0.442 ms 0.395 ms 2 49-4-1-82.static.virginm.net (82.1.4.49) 0.967 ms 0.827 ms 0.840 ms 3 manc-lam-4-tenge13-3410.network.virginmedia.net (62.254.116.254) 5.498 ms 5.445 ms 5.398 ms 4 manc-core-2a-xe-111-0.network.virginmedia.net (213.104.242.25) 6.142 ms 5.265 ms 5.680 ms 5 * * * 6 * * * 7 * * * 8 tcl5-ic-6-ae0-0.network.virginmedia.net (62.254.85.66) 13.912 ms 14.752 ms 10.805 ms 9 10ge.xe-0-0-0.linxb.ldn-teleh-dis-1.peer1.net (195.66.224.156) 11.764 ms 15.332 ms 11.116 ms 10 10ge.xe-2-1-0.mtl-bvh-dis-2.peer1.net (216.187.115.135) 95.105 ms 88.876 ms 85.053 ms 11 10ge-xe-1-0-0.mtl-bvh-dis-1.peer1.net (216.187.120.169) 86.905 ms 85.528 ms 88.534 ms 12 10ge.xe-1-0-0.tor-fr709-cor-1.peer1.net (216.187.114.197) 85.580 ms 85.399 ms 85.235 ms 13 216.187.120.218 (216.187.120.218) 84.813 ms 85.044 ms 89.111 ms 14 tor-fr402-xe3-1.peer1.net (216.187.113.86) 93.166 ms 86.500 ms 93.031 ms 15 hp180.hostpapa.com (64.34.68.30) 85.043 ms 87.035 ms 86.564 ms UDP Trace: traceroute to 64.34.68.30 (64.34.68.30), 64 hops max, 52 byte packets 1 10.126.168.254 (10.126.168.254) 3380.490 ms 0.513 ms 0.460 ms 2 49-4-1-82.static.virginm.net (82.1.4.49) 0.998 ms 0.948 ms 0.841 ms 3 manc-lam-4-tenge13-3410.network.virginmedia.net (62.254.116.254) 5.537 ms 5.560 ms 5.428 ms 4 manc-core-2a-xe-111-0.network.virginmedia.net (213.104.242.25) 5.466 ms 5.963 ms 5.266 ms 5 * * * 6 * * * 7 * * * 8 tcl5-ic-6-ae0-0.network.virginmedia.net (62.254.85.66) 11.205 ms 11.541 ms 13.600 ms 9 * 10ge.xe-0-0-0.linxb.ldn-teleh-dis-1.peer1.net (195.66.224.156) 12.148 ms 13.304 ms 10 10ge.xe-2-1-0.mtl-bvh-dis-2.peer1.net (216.187.115.135) 84.985 ms 84.775 ms 84.583 ms 11 10ge-xe-1-0-0.mtl-bvh-dis-1.peer1.net (216.187.120.169) 84.911 ms 84.828 ms 84.688 ms 12 10ge.xe-1-0-0.tor-fr709-cor-1.peer1.net (216.187.114.197) 85.605 ms 97.880 ms 84.779 ms 13 10ge.xe-5-0-2.tor-fr402-dis-1.peer1.net (216.187.113.78) 85.668 ms 86.229 ms 216.187.120.218 (216.187.120.218) 84.682 ms 14 tor-fr402-xe3-1.peer1.net (216.187.113.86) 86.983 ms 94.419 ms 88.563 ms 15 * * * 16 * * * 17 * * * 18 * * * 19 * * * 20 * * * 21 * * * 22 * * * 23 * * * 24 * * * 25 * * * 26 * * * 27 *^C
  10. Mefinx you'll be waiting a while.
  11. Cheaper equivalence at https://www.megamac.com/collections/solid-state-drives-for-macbook-pro/
  12. I use a Siemens RDJ10RF Thermostat (think it cost about £30 off eBay) paired with a Raspberry Pi3, RFXTRX433e (controls all my sockets, dimmers n' switches etc - a general mish-mash of Maplin cheap RF-remote sockets + some Energenie and LightwaveRF gear), cheap eBay 433Mhz transceiver (just for the thermostat, as the RFXTRX doesn't support Siemens' 433Mhz RF protocol, but supports pretty much everyone else's), a custom control script for the Thermostat (https://github.com/PatchworkBoy/boilercontrol), Domoticz as the main everything-controller / hub enabler, and Homebridge (for HomeKit support on iOS to dish it out to my devices) Everything talks to Domoticz on the Pi, which in turn talks to homebridge via homebridge-edomoticz plugin. Could also talk to Google Home / Alexa via their various HAP plugins on GitHub - just need to install them. Been running it for best part of 3 years now and heating costs have come down by around 20% over that time. Temp & humidity sensors in each room are simple Dallas 1-wire protocol probes on a ring hooked up to one of the Pi's GPIO pins. I've got the per-room sensors affecting Lightwave radiator TRVs, and average of all room sensors on a floor affecting main thermostat, with the floor of precedence determined by bluetooth presence of any devices registered with the system. Once system is up and running there's no cloud-services or net reliance. All local / self-contained. Remote control is exposed via HomeKit thru my AppleTV, or via Domoticz's builtin Web Interface on the Pi (not exposed to outside world).
  13. Or add mod_rewrite and mod_authnz_ldap to apache, and just knock up a .htaccess dropped into web root defining the AD usergroups / OUs allowed access... no need to add the server itself to AD at the OS level (as that will then usually grant each user SSH / FTP logon rights as well depending how you've got the server set up, which the majority of web hosts wouldn't want). First lump forces https, second lump handles ldap auth. RewriteEngine On RewriteCond %{SERVER_PORT} 80 RewriteRule ^(.*)$ https://%{SERVER_HOST}/$1 [R,L] RewriteCond %{HTTP_HOST} ^[^.]+\.[^.]+$ RewriteRule ^(.*)$ https://www.%{HTTP_HOST}/$1 [L,R=301] AuthType Basic AuthBasicProvider ldap AuthName "Staff" AuthLDAPURL "ldap://domain.controller:389/OU=Staff,OU=School Users,DC=school,DC=co,DC=uk?sAMAccountName?sub?(objectClass=user)" NONE AuthLDAPBindDN "DOMAIN\binduser" AuthLDAPBindPassword "bindpass" Require valid-user Ideally you want to be using an ldaps:// URI on whatever port it's running on on your DC. Bind user needs to have read-only access to AD. You can also skip ALL of the above, recompile php --with-ldap and just integrate ADLDAP into your website: https://github.com/adldap/adLDAP Or if you're using Azure / Office365, you can secure it using any of the MS Graph SDKs... - Javascript: microsoftgraph/msgraph-sdk-javascript - PHP: microsoftgraph/msgraph-sdk-php And if it's a frameworked website then you can usually just install a plugin that handles it all: eg - wordpress: https://en-gb.wordpress.org/plugins/next-active-directory-integration/ - codeigniter: https://github.com/kathmann/Auth_AD Lots of options that don't require joining the server itself to AD.
  14. You can't as far as I'm aware. Queried this with our LA's Data Guru... essentially all they can get for us is tables-checking data, which no longer contains the figure we're interested in. Asked them to contact DfE Statistics, and they got nowhere. Only solution is an account on the LRS and manually look up each student and then manually tot up all their qualifications, however there's still no guarantee what you come up with will match what DfE use for their calcs when they bring out your L3VA Report. Also, the L3VA Ready Reckoner as it currently stands doesn't accept 9 - 1 grades for calculating prior, so you'll need to convert all of those back to A* - U equivalence to get their equivalent KS4 points, unless LRS gives you them - can't recall offhand (I no longer do data).
  15. Am guessing they just expect you to turn on auditing at the SQL Server and monitor from there to save themselves the work of integrating it into SIMS itself.
  16. I'm going to assume that that should say 'agnostic'... am looking into the Leeds event in Feb.
  17. Clause 67 Page 21, point 95 - https://publications.parliament.uk/pa/bills/lbill/2017-2019/0074/18074-I.pdf
  18. Marci

    New website!

    Your latest news block on the front-page breaks the layout on mobiles.
  19. Marci

    New website!

    Get rid of all the CutWin links, even if it is just a staging demo - it's sitting on a school's legit domain. If you need a temporary link destination just point them all to "#". Pointing them to CutWin is just plain suspect and would immediately stop me from downloading any further themes developed by yourself if I were a general Joomla theme user, and would likely result in complaints from parents. If you didn't put them there, then your site's been hacked already and you should really get it taken offline asap until the server's integrity has been verified.
  20. Additional considerations: Do your HR staff comply with a password complexity policy? Are you the sole key holder to the comms room? Is the comms room secure in case of a break-in? Are all your IT staff with access to that comms room _100%_ trustworthy? Do you have a shared administrator account amongst IT staff? I can think of plenty of reasons why it should be encrypted if requested, and not many for why it shouldn't.
  21. Wonderful little toys if you hook the original Xbox model up to PC or Mac and use OpenKinect + Processing. I use 3 of them for person-tracking across full width of a stage, which then affects visuals being projected onto backdrop. Get 'em scooped up! (And if you tape over the structured light emitter, and shove them in IR mode, they make rather excellent night vision cameras if you provide an external IR flood)
  22. Yup, had the same here a few minutes ago, so doubt it's your ISP...
  23. Shred or burn are about your only two options... or find a bag heading off to be collected by secure disposal company if your place use one, and drop it in. I do as above - chop off end, feed into shredder, turn on, watch with glee as it sucks it all in and shreds the lot. (The shreddings then go off to the secure disposal company)
  24. They've banned smartwatches here for students along with all mobile devices. When the kids kicked off about staff being able to have their phones etc, the response from above was "that's because they're adults. They've completed their education, are in full time employment and have earned the right to be trusted to use their devices sensibly and appropriately." (basically).
  25. Wordpress 4.8.2 & Office 2016 seem to have no issues at all copy and pasting whilst retaining all formatting...
×
×
  • Create New...