Ontopic Random Computer-Electronics Thread

Mustard Dispenser said:
Well, theyre not giving the admin password to everyone
Theyre making a specific account that engineering will control
Theyre just worried about managment realizing theyre useless
Click to expand...
Coming from the other side, I don't think that's the reason. They're just trying to prevent more work from you guys. And btw, its a slippery slope. Once it gets out that you guys are doing it, everyone else will as well. And now the chicks in HR can install the new Crystal Crash game, or whatever the fuck they're playing. And now ticket volume will have tripled, and tickets will now be taking two weeks.

:iono:
 
my little brony said:
No I get that but I'm saying if there's that much lag time for tickets then an alternative solution is called for. Otherwise you end up departments going to management to demand admin privileges and you lose any reasonable control over that segment of the network.

If security is so strict that the users are having to work around it then the security measures become counter productive. Accessibility is just as important as the rest of the triad.
Click to expand...
Agreed on ticket times. I'm shocked there isn't an SLA in their agreement with this company.
 
Mustard Dispenser said:
Well, theyre not giving the admin password to everyone
Theyre making a specific account that engineering will control
Theyre just worried about managment realizing theyre useless
Click to expand...

And this is the kind of solution that, to me, causes more problems. Now you have a shared account with higher privileges that presumably the entire department will have access to. Even if only a few people have it then they've lost any semblance of non-repudiation.

A better solution is selecting a few users from engineering that are trained or knowledgeable in IT stuff that can receive elevated power user accounts. They can still accomplish simple tasks but each one maintains responsibility over their own account.

Otherwise what's almost certainly going to happen is one of you gorillas is going to just log in to their computer with the engineering account every day :fly:
 
  • Gravy
Reactions: Duke, Domon and fly
fly said:
Coming from the other side, I don't think that's the reason. They're just trying to prevent more work from you guys. And btw, its a slippery slope. Once it gets out that you guys are doing it, everyone else will as well. And now the chicks in HR can install the new Crystal Crash game, or whatever the fuck they're playing. And now ticket volume will have tripled, and tickets will now be taking two weeks.

:iono:
Click to expand...

Any decent IT department should have a software whitelist running at the domain level that prevents stuff like that being installed.

Granted most of that stuff happens in the browser anyways

But I see what you mean, it can cause more problems than it solves
 
  • Gravy
Reactions: Duke
Yeah if they would respond to a ticket request in a timely fashion, none of this would have come to a head.
I mean, theres like 10 of us here, the ticket volume is going to be small, even if we do fuck shit up.
But waiting days on end just so some asshole can remotely update my makerbot software is fucking ridiculous.
 
  • Gravy
Reactions: Duke, Mr. Argumentor, fly and 1 other person
my little brony said:
A better solution is selecting a few users from engineering that are trained or knowledgeable in IT stuff that can receive elevated power user accounts. They can still accomplish simple tasks but each one maintains responsibility over their own account.
Click to expand...

This is actually the case, one person will have control of the account.
 
  • Gravy
Reactions: my little brony
Mustard Dispenser said:
This is actually the case, one person will have control of the account.
Click to expand...
Ah, much better, then. We did that on larger bases where each unit sent a couple soldiers to get training and sign forms saying they'd behave in order to do simple shit like password resets so people wouldn't have to walk halfway across the base to the help desk.

I just loathe the notion of shared accounts on principle.
 
my little brony said:
Any decent IT department should have a software whitelist running at the domain level that prevents stuff like that being installed.

Granted most of that stuff happens in the browser anyways

But I see what you mean, it can cause more problems than it solves
Click to expand...
They can't answer tickets and you want a whitelist? I've never seen a company do a whitelist, as its a nightmare to manage.
 
my little brony said:
Ah, much better, then. We did that on larger bases where each unit sent a couple soldiers to get training and sign forms saying they'd behave in order to do simple shit like password resets so people wouldn't have to walk halfway across the base to the help desk.

I just loathe the notion of shared accounts on principle.
Click to expand...


it sounds like one person in engineering (who hopefully has some guidance and training) will be a DTA (designed transfer authority) who can download shit for the org at large.
 
  • Gravy
Reactions: my little brony
My concern with all this Xiami gear is battery life. Its easy to make a cheap rf device that spits a couple of bytes back occasionally with off the shelf chips.

It takes some diligence to properly code it so it doesnt eat the whole battery every 6 months.
 
  • Gravy
Reactions: Jehannum
At the place I'm at, people like me in R&D have admin accounts so we can install drivers, development tools and other shit that we need to do our jobs. It's understood that we know what we're doing, and we're responsible if we fuck something up.
People on the production line don't do those things, so they've got ordinary user accounts.

Pretty damn simple.
 
  • Gravy
Reactions: Duke
gee said:
At the place I'm at, people like me in R&D have admin accounts so we can install drivers, development tools and other shit that we need to do our jobs. It's understood that we know what we're doing, and we're responsible if we fuck something up.
People on the production line don't do those things, so they've got ordinary user accounts.

Pretty damn simple.
Click to expand...


And that would be perfect here as well
Whats frustrates things, is that I used to work at NASA, inside the gates, had access to all kinds of stuff, and our machines were less locked down than where Im at now.
Pure insanity
 
  • Gravy
Reactions: Mr. Argumentor and my little brony
it's also pretty easy to isolate those parts of the network that have users with elevated privileges

you need admin access to all your machines for special snowflake software? great, you're living behind a DMZ
 
Domon said:
My concern with all this Xiami gear is battery life. Its easy to make a cheap rf device that spits a couple of bytes back occasionally with off the shelf chips.

It takes some diligence to properly code it so it doesnt eat the whole battery every 6 months.
Click to expand...
My entryway motion device seems solid. It's been about a month and still at 91%. The temp sensors shipped with low batteries, so I'm replacing them. It's just 2032 coin batteries, so its not like its going to break the bank.
 
You must log in or register to reply here.
Top Bottom
Back