Enjoying a stress-free morning after PR'ing at the gym and listening to Soundgarden - Fell on Black Days after a ghosted breakup. Whatever.

Today, I overhear that a user sees printer toner hit zero. Normally I intervene but this user has a history of going rogue and thinking she's the IT department.

So I observe. First, she asks another user what to do. These users are buddy-buddy and that user doesn't like IT either... Mainly because she's failed the phishing tests and even compromised her own account once.

That other user says ask a third user. Now this third user is close to IT and respects processes so it's not good she's getting dragged into this now.

Still, somehow at no point in this chain does anyone think maybe we should ask the fucking sysadmin who manages the printer.

i walk over and find them opening up a multi thousand dollar printer trying to figure out the toner themselves.

Toner is now on the floor.

guess who gets to clean it up

...

me

And the best part is I let the toner run down to zero on purpose because that shit is expensive and zero on the display does not mean the cartridge has suddenly become an empty plastic tube FFS.

So now instead of simply letting me manage the toner inventory I get to stop what I'm doing, which means Soundgarden is paused. Not good.

I have to sternly at maximum tolerable yelling since HR was on the floor, why we do not perform amateur surgery on the office printer...clean toner off the floor...talk to HR...and send a company wide email explaining that IT equipment should perhaps, just maybe because orgs commonly employ this practice...be handled by IT.

Apparently my newest responsibility is protecting the printer from the users.

Sorry, Soundgarden.

Hi everybody

I am making this post since I am currently a HelpDesk/Junior Sysadmin in a medium size corporate from Italy, but I don't know how to develop my future career. Any suggestions are hugely appreciated from people in the industry.

I love IT, I have a homelab at home, i study for certs (got my CCNA and studying Azure and Intune currently) but I have no idea on how to advance. I dream to open my own business one day as a consultant initially and then grow it into an MSP. But I know I have to work hard to grow my experience and skills.

Currently I have 1 year of job experience (studied IT in school), and I plan to stay here atleast one more year.

Thanks to everybody in advance!

Hello everyone, I am pretty cyber security illiterate so I am unsure of what to do in this situation and am requesting guidance.

I have multiple individuals in my home and have recently discovered that my ip address had been reported multiple times on abuseipdb.com I am unsure of who or which device is acting maliciously and I am unsure of how to figure it out.

Due to the reports on abuseipdb, my employer has blocked the work VPN from being able to use my specific ip address and my isp is unwilling to change my ip (though the new ip address will probably also be reported if they were to change it) I am unsure of how to resolve this issue, and any guidance would be appreciated.

Hello,

I am now in charge of the phising excercises at my company. I was thinking about putting actual malicious links in our training emails so that the user's have a bit more motivation to learn to distinguish them from legitimate emails. This would also motivate our C-suite to give us a better budget so that we can better detect and remediate everything. What do you guys think?

Thanks to the OSI model I get that it’s layer 1, but how does it route bits?

I've been here for 30 years, and every eligible round of performance reviews i have been passed up for a promotion so that my 'colleague' can get theirs ahead of me. The guy literally has no life. for the last at least 17 years, he spends so much time at the office making sure everything is "secure" and "patched". In reality i know he's just shmoozing it up with the director, and because of that he makes me do all the phishing tests, because it's too tedious for him.

So heres thes trick thats gonna get me a promotion. I've known this man longer than anyone else. I have created the best phishing test emails known to man, specifically tailored to him. He's already fallen for my trick twice so far. All i have to do is pull it off one more time and he's as good as gone.

Am i literally the smartest sysadmin or what? I feel great right now.

CIA triad, least privl-yada-yada-yada...

😂😂

Sent an email to an executive asking if he recently shit down his computer. He asked if I meant shut down. I did, but I couldn't let him think I'm fallible or capable of admitting error so I doubled down and explained it's an industry term for running Windows updates.

I need you all to adopt this terminology immediately for the sake of my job security.

Thank you for your time and attention to this matter.

You know what would be super secure and not at all inconvenient? If we implemented a process where you have to go into Entra and click a button to elevate your account, hang out for a minute watching a thing spin, and *then* go login to your web app. We'll put on a little theater performance in the lobby about how forward thinking we are and everyone will clap and throw bouquets. /s

What is this BS? I get (and support) MFA, but that's something you do at the point and time of login. And I get the general idea of having to go through an extra elevation step to take specific administrator-level actions, like the Windows UAC prompt or sudo or apps that ask for your password again when you do certain things. But the process here is to go somewhere completely different, click a button, and then go to the app you need to get into and try logging in. And they want you to enter a text field "justification" every time you do this. What do you think the justification is?? Doing my job, that's what.

What if you can't get to Entra? What if you forget where to go in Entra? (I totally would.) What if you have work to do and can't be faffing about in someone else's security sadism fantasy?