dmj

IIRC the professional licenses are free for edu if you open a ticket with Jetbrains

Gotcha: the providers only offer UK/CAN/US Must be pretty specialised.

Is EU hosting not an option? It seems a lot easier to navigate the legalities. It's not clear from the question why you're focusing on North America.

I'd say it's better to have ZFS pools, everytime.

yeah. But the mudslingers are sponsoring the forum.

I don't follow? Why would you need to manually fix the client devices ?

Doesn't the suggested fix just cause the same problem ? Seems the consultant is drumming up business for himself. The next report will read

Most are based on freeRadius, it's widely used, simple to setup, has tonnes of tutorials and runs clustered on minimal hardware

On this: Bromcom did point out that this was a Microsoft capacity failure. Please remember that they have SLA contracts with Microsoft and get a good rebate in credits when things go awry (which, I hasten to add, they don't pass back to schools) So whether the root cause analysis blames a third party or not, it's still Bromcoms failure in their setup.

At my last place (but one, so 5 yrs ago) we ran radius and DHCP on a teeny tiny cloud cluster. Worked great. Neither (free)radius nor dhcpd take any resources at all, and they both cluster quite nicely.

Crazy. ESS literally shut down scomis from offering support/hosting, then bitch about it.

Why not go for the £120k remote jobs if you're good enough: https://www.itjobswatch.co.uk/jv/GCS-Ltd/Senior-Azure-DevOps-Engineer-Azure-Infrastructure-Architect-Job-Nationwide-UK-3b82vm?jr=8n4-5bn-290

That's just a bad interview process. We always get our senior/lead engineers to do the technical interviews. Senior engineers hire the leads in some cases. They can always spot this nonsense. Management do the informal chats, but they don't run the technical interviews.

It's somewhere between an AUP and an SLA. I'd split them out TBH.

Nice, but good luck making that a disciplinary issue. edited: quoted the wrong line

Do you mean only vendor licensed OSS? The sentence doesn't make any sense in it's current form: if Microsoft contribute to a project that's vendor backed, but to get support you'd need a vendor licence.

Even without 1:1, the DfE know it's not going to be replaced for 7->10 yrs and by that time all devices will be running WIFI 7/8/9 and those 1Gb/s uplinks are going to become a serious bottleneck. I'm surprised they don't recommend dual connections to AP's TBH.

It would be nice if Bromcom DID pay out everytime they missed an SLA

If you want to do any amount of testing you will be automating server deployments regularly: but IasC is more than that - there's an element of accountability and the fact that you can look through past changes and see why a change was made. When you go back to something in 6 months and can't figure out why a setting is there your future self, and anyone new to the system will thank you.

Similar, but from what I can tell mitmdump will capture and decrypt the body if the http traffic, which should contain the offending language. If it was using squid, I would qgree

Here's a method I think would work: Setup the wifi such that on connection it sends the user to instructions to add a public ssl key. Setup a mitmproxy using the ssl private key put the mitmproxy before your internet and use iptables to forward to the internet (mitmproxy) redirect outbound traffic to the mitmproxy gateway use mitmdump to intercept the traffic Either: inspect on the fly by piping through ripgrep using your word list (probably too slow?) or send all the logs to ELK/datadog/whatever for realtime analysis setup an alert on matched keywords It's not trivial to setup but that's how I would attempt it if management didn't pursue any of the less crazy options.

Quite! Tell your DSL. Anyway I thought there was a Government bill to stop people posting anonymously... isn't it illegal for the sites to do this already.

I see a quick win there. Block sites that allow anonymous posting. Surely theres a safeguarding issue with allowing this?

I'd never say it's not feasible, it's not really IT's place to determine that. Just call out how much it will cost and let them make the decision.

Custom web proxy or wireless packet sniffing seems the only way to do this, but it does sound like weeks of engineering time. Cost it up, add in some third party developer time (say 2 engineers on £500 per day for 6 weeks). Pass it on to SLT and call it a day.