Good news everyone. As of 30th June 2018, PCI compliance demands a minimum of TLS v1.1. Meaning it's illegal for your website to support IE6-10

Hi Dev Ranter,

My name is John Smith and I came accross to your resume on Linked In and I was very impressed. Would you be interested in a 5 min call?

Job Details:
Required skills (all expert levels): C#, JAVA, Clojure, C, PHP, Frontend, Backend, Agile, MVP, Baking, Redis, Apache, IIS, RoR, Angular, React, Vue, MySQL, MSSIS, MSSQL, ORACLE, PostgreSQL, Access, Python, Machine Learning, HTML, CSS, Fortran, C++, Game design, Book writing, PCI - Compliance
Salary: $15/Hours no benefits
Duration: 2 Months (possible extension, plus we can fire you at will)
Place: Remote (with work tracking software)
Hours: 5am - 1pm, 6pm - 11pm
Expect to work on weekends

You will be managing people as well as building applications that had to be running as of yesterday. Team culture is very toxic and no one cares about you.

We care about you though (as long as you deliver)

Looking forward to talk to you.

John Smith
Founder, CEO, Director of Staffing, Entrepeneur
Tech Staffers LLC ( link to a PNG posted on facebook)
Est. 2020

my habit to inspect any nicely done apps to understand how they achieve such greatness, I never felt more welcome when I visit the console, until i found Quizlet.

great place to leave easter eggs.. :)

One year for Christmas, my dad got me an old tower and installed Windows 98 on it. He also got two old-school PCI WiFi cards so that my "new" computer could access the Internet via his.

I started learning basic web development. I would convince my mom (an English teacher) to buy me books on programming all the time when she was getting her own books at the store.

Eventually, I got a book on Blitz Basic and started making my own video games.

Then GameMaker, Java, C/C++, and more web development and design happened until all the sudden, out of nowhere, I'm a computer scientist 😁

It's crazy how much we owe to our parents. And neither us nor them even realized what they were doing at the time!

Men. Live with it.

(Stupid mistakes that kept me from sleeping.. 🤦🏻‍♂️ Lesson learned: Sleep.)

Cleaning and Installing Windows 11 in new PCI 4.0 SSD.

I’m LOLing at the audacity of one of our vendors.

We contract with a vendor to build and maintain a website. Our network security team noticed there was a security breach of the vendor’s website. Our team saw that malicious users gained access to our Google Search console by completing a challenge that was issued to the vendor’s site.

At first, the vendor tried to convince us that their site wasn’t comprised and it was the Google search Console that was compromised. Nah dude. Our Search Console got compromised via the website you maintain for us. Luckily our network team was able to remove the malicious users from our search console.

That vendor site accepts credit card payments and displays the user’s contact info like address, email, and phone. The vendor uses keys that are tied to our payment gateway. So now my employer is demanding a full incident report from the vendor because their dropping the ball could have compromised our users’ data and we might be responsible for PCI issues.

And the vendor tried to shit on us even more. The vendor also generates vanity urls for our users. My employer decided to temporarily redirect users to our main site (non vendor) because users already received those links and in order to not lose revenue. The vendor’s solution is to build a service that will redirect their vanity urls to our main site. And they wanted to charge us $5000 usd for this. We already pay them $1000 a month already.

WTAF we are not stupid. Our network service team said we could make the argument that they do this without extra charge because it falls in the scope of our contract with them. Our network team also said that we could terminate the contract because the security breach means they didn’t render the service they were contracted to do. Guess it’s time for us to get our lawyer’s take on this.

So now it looks like my stakeholders want me to rebuild all of this in house. I already have a lot on my plate, but I’m going to be open to their requests because we are still in the debrief phase.

I am slowly losing my mind and will to live because of this PCI audit, I hate it so much

Overheard a dev bragging about how our site is fully PCI compliant. So much so even the invoice data is secure. My BS meter went off, so I decided to look at what 'secure' code looked like.

What was your most ridiculous story related to IT?

Mine was when I was quite small (11yo) and wanted a graphics card (the epoch of ATI Radeon 9800), looked at the invoice to know what kind of ports I had in the pc (did not open it), then proceeded to brat to my dad to get me a new GPU

So we where in Paris, we went to a shop, vendor asked me "PCI or AGP?" and said AGP.

Paris > London > Isle of Skye roadtrip followed, then as my dad brought me back home in Switzerland, we opened my pc...

And we couldn't fit the GPU in the basic old PCI port. My Dad was pissed. He frustratedly tried fitting the GPU in the PCI slot, but nope. (He's a software engineer though)

At least the GPU had 256 mb of ram :D

Gave it to my brother 6 months later at family gathering

To this day, my Dad still thinks I cannot handle hardware, although I have successfully built 10+ pc, and still cringes with a laughing smile when I talk to him about it haha

Ah well.

Inspiration to code kicks in!

Kids asleep, everybody’s asleep, house is quiet. The kind of peace ive always wanted and wished! (Parents here will understand.)

Get to my laptop, opened up code editor, start fresh and clean! Created new file, about to type my first code and.........blood dripping from my nose. It doesn’t stop there, its like flowing for a while!

I noticed it keeps flowing while im projecting the inner excitement to code. When my mind drifted a bit, the nose bleeding stops. Wth? Its like my body is ejaculating when im excited to code, yeah.. it ls blood shot out of my nose, wtf!

...and i have to stop what im doing. Then the ideas just spoofly gone. Suddenly i dont know why im staring at an empty code editor.. (what was im about to code again?) i totally cant recall, it simply gone. Damn it. That could be a million dollar apps! Wish i can go back to an hour ago and record myself when i received that historic inspirational moment. 😔

We have a badly out of shape but functional product , the result of a "if its not broke don't fix it" mentality. The only thing manangement cares is our next release and making meetings to plan other meetings...

Now comes the time of the security Audit (PCI)...

Manager : oh noooo the audit will fix this issue, quickkk fix it !

Us : welllll its a lengthy process but doable, we just gotta do a,b,c,d,e . Part a is essentially what we need the rest are refactoring bits of the system to support part a since the performance would be shit otherwise

Manager: can you do part a before the audit starts ?

Us: yep.

Manager: do it . Oh and pop those other issues on JIRA so we can track em

Audit completed....

Manager: so we got through ok?

Us : 👍 yep

Manager: okayy, take those other issues..... and stick em at the bottom of the back log...

Us : huh ? *suspicious faces*..... okay but performance is gonna be poor with the system as it is cuz of part A....

Manager: yeaaahhh * troll face* ....about that.... roll it back and stick that too at the bottom of the log. We got to focus our next release. Lemme schedule a meeting for that 😊

Us : faceplam

That stressful moment when Windows 10 decides to fuck up your network drivers even though I just bought a new wireless pci card and still refuse to work properly so you just install various drivers to see which one works but Windows is just like: hey yo, fuck your drivers 😠

FML!!!!

I'm just going for Ubuntu now or maybe Windows 7 😥

Oh my god has anyone seen or used these. Ssd pci cards. From western digital? 2000 mbs read speed. That's stupid fast.

2nd year programming professionally I designed, coded, and released a PCI compliant credit card encryption system, including updating all 7 million records (at the time) in our existing database to utilize the new system. By some miracle, it worked with only one small hiccup (see previous rant).

It's been a while since I've heard a consensus of a moronic idea from the corner offices. I was invited to a department planning meeting (just to listen, not necessarily engage or add value) and discussion went to the development of a mobile app.

Mgr1: "The CEO has the net present value of the mobile project as $20 million. Where did he get that number?"
VP: "No idea."
Mgr2: "How will it be any different than our web site that is already mobile compliant?"
VP: "It is to gain market share"
Mgr3: "Market share from who? A mobile app is not going to increase our customer base. At best, it will only move some of our existing customers to mobile. No way it would scale to those numbers."
VP: "The primary benefit is so customers can browse offline."
Mgr2: "Offline browsing isn't listed in the milestones."
Mgr1: "We're not going to push and keep gigs of data up-to-date on someone's phone just for random times they don't have internet access."
VP: "I guess that's right. We can push our pdf catalog. That's only a few hundred meg."
Mgr2: "Pushing the catalog? That's not on the listed milestones"
VP: "Its all assumed."
Mgr3: "Who owns this project? Web team is already maxed to capacity."
Mgr2: "Marketing team only has 3 developers, we can't take on anything as complex as a mobile app and support the existing processes."
Mgr1: "What about the network infrastructure and PCI compliance? We're talking about a system for the web site and another for mobile, right?"
Mgr2: "Who is going to manage all the versions in the app stores and future changes to the mobile platform?"
Mgr4: "Not us"
Mgr2: "Nope"
Mgr1: "OK, good. Its very likely this project will be dead on arrival at the next company strategic meeting."
VP: "Mobile the only project on the strategic meeting agenda. Sorry guys, it's happening. We're not going to leave $20 million sitting on the table.
<awkward silence>
VP: "Next item of business ..."

Pci fucking compliance

Stories like the one I'm about to tell you are just another reason why people hate Windows. I know I usually preach 'Don't hate everything' and shit, but this is a real big fucking deal when it hits your desktop for no reason.
Now, onto the actual story...

Background: Playing with my Oculus, fixing issues like forgetting to use USB3 and stuff. I learned about an issue with Nvidia GPUs, where in Windows, they can only support 4 simultaneous displays per GPU. I only have the one GPU in my system, Nova, so I have to unplug a monitor to get Oculus and its virtual window thingy working. Alright, friend gave me idea of using my old GPU to drive one of my lesser used monitors, my right one. Great idea I thought, I'll install it a bit later.

A bit later...

I plug the GPU in (after 3 tries of missing the PCI-E slot, fuckers) and for some reason I'm getting boot issues. It's booting to the wrong drive, sometimes it'll not even bother TRYING to boot, suddenly one of my hard drives isn't even being recognized in BIOS, fuck. Alright, is the GPU at least being recognized? Shit, it isn't. FUCKFUCKFUCK.

Oh wait. I just forgot the power cable Duh. Plug that in, same issues. Alright, now I have no idea. Try desperately to boot, but it just won't I start getting boot error 0xc000000f. Critical device not found. Alrighty then. Fuck my life, eh?

Remove the GPU, look around a bit while frantically trying to boot the system, and I notice an oddly bent SATA cable. I look at it and the bastard is FRAYED AT THE END! Fuck, that's my main SSD! I finally replace the SATA cable and boot, still the same error... Boot into a recovery environment, and guess what?

Windows has decided to change my boot partition, ya know, the FUCKING C: DRIVE, from NTFS to RAW format, stripping it of formatting! What the actual fuck Microsoft? You just took a shit on yourself while having a seizure on the fucking MOON! Fine, fuck you, I have recovery USB! Oh, shit, that won't boot... I have an old installation! Boot ITS recovery, try desperately to find a fix online... CHKDSK C: /F... alright, repairing, awesome! Repaired, I can see data, but not boot. So now I'm at the point where I'm waiting for a USB installer to be created over USB 2.0. Wheeeeeeeeee. FML.

THESE are the times I usually hate Windows a lot. And I do. But it gets MOST of my work done. Except when it does this.

I'm already pissed, so don't go into the comments and just hate on Windows completely. Just a little. The main post is for the main hate. Deal with it. And I know that someone is going to come at me "Ohhhhh, you need FUCKIN LIIIIIIINUUUUUUUXXXXXXXX!' Want to know my response to that?

No.

TLDR: I need advice on reasonable salary expectations for sysadmin work in the rural United States.

I need some community advice. I’m the sysadmin at a small (35 employee) credit card processing company. I began as an intern and have now become their full time sysadmin/networking specialist. Since I was hired in January I have:

-migrated their 2007 Exchange server to Office 365

-Upgraded their ailing Windows server 2003 based architecture to 2012R2

-Licensed their unlicensed VMware ESXi servers (which they had already paid for license keys for!!!) and then upgraded them to 6.5 while preventing downtime on hosted VMs using tricky transfers and deployments (without vMotion!)

-Deployed a vCenter server to manage said ESXi servers easier

-Fixed a three month gap in their backups by implementing Veeam, and verifying its functionality

-Migrated a ‘no downtime’ fileserver to a new hypervisor host, implemented a ‘hot standby’ server as a backup kept up to date by the minute with DFS replication.

-Replaced failing hard drives in a RAID array underlying their one ‘business critical’ fileserver, which had no backups for 3 months at that time

-Reorganized Active Directory and Group Policy deployment from a nightmare spiderweb of OUs and duplicate policies

-Documented the entire old network and now the new one as I’ve been upgrading this

-Audited the developers AWS instances and removed redundant machines, optimized load balancing on front end Nginx servers, joined developer run Fedora workstations to the AD domain and implemented centralized syslog monitoring on them.

-Performed network scans and rewrote firewall exceptions to tighten security

There’s more, but you get the idea. I’ve now been tasked with taking point on an upcoming PCI audit which will be my first.

I’m being paid $16/hr US, with marginal health benefits. This is roughly $32,000 a year, before taxes.

I have two years previous work experience managing a third party Apple repair facility (SimplyMac) and every Apple certification for warranty repair and software troubleshooting. I have a two year degree in general sciences, with about 4 years of college credit (Two years of a physics education and two years of computer science after I switched focus) I’m actively pursuing a CCNA and MCSA server 2016 with exams paid for and scheduled.

I’m going into a salary negotiation in two months. What is a reasonable salary to request, from your perspective, for someone in my position?

Thanks in advance!

Got one right now, no idea if it’s the “most” unrealistic, because I’ve been doing this for a while now.

Until recently, I was rewriting a very old, very brittle legacy codebase - we’re talking garbage code from two generations of complete dumbfucks, and hands down the most awful codebase I’ve ever seen. The code itself is quite difficult to describe without seeing it for yourself, but it was written over a period of about a decade by a certifiably insane person, and then maintained and arguably made much worse by a try-hard moron whose only success was making things exponentially harder for his successor to comprehend and maintain. No documentation whatsoever either. One small example of just how fucking stupid these guys were - every function is wrapped in a try catch with an empty catch, variables are declared and redeclared ten times, but never used. Hard coded credentials, hard coded widths and sizes, weird shit like the entire application 500ing if you move a button to another part of the page, or change its width by a pixel, unsanitized inputs, you name it, if it’s a textbook fuck up, it’s in there, and then some.

Because the code is so damn old as well (MySQL 8.0, C#4, and ASP.NET 3), and utterly eschews the vaguest tenets of structured, organized programming - I decided after a month of a disproportionate effort:success ratio, to just extract the SQL queries, sanitize them, and create a new back end and front end that would jointly get things where they need to be, and most importantly, make the application secure, stable, and maintainable. I’m the only developer, but one of the senior employees wrote most of the SQL queries, so I asked for his help in extracting them, to save time. He basically refused, and then told me to make my peace with God if I missed that deadline. Very helpful.

I was making really good time on it too, nearly complete after 60 days of working on it, along with supporting and maintaining the dumpster fire that is the legacy application. Suddenly my phone rings, and I’m told that management wants me to implement a payment processing feature on the site, and because I’ve been so effective at fixing problems thus far, they want to see it inside of a week. I am surprised, because I’ve been regularly communicating my progress and immediate focus to management, so I explain that I might be able to ship the feature by end of Q1, because rather than shoehorn the processor onto the decrepit piece of shit legacy app, it would be far better to just include it in the replacement. I add that PCI compliance is another matter that we must account for, and so there’s not a great chance of shipping this in a week. They tell me that I have a month to do it…and then the Marketing person asks to see my progress and ends up bitching about everything, despite the front end being a pixel perfect reproduction. Despite my making everything mobile responsive, iframe free, secure and encrypted, fast, and void of unpredictable behaviors. I tell her that this is what I was asked to do, and that there should have been no surprises at all, especially since I’ve been sending out weekly updates via email. I guess it needed more suck? But either way, fuck me and my two months of hard work. I mean really, no ego, I made a true enterprise grade app for them.

Short version, I stopped working on the rebuild, and I’m nearly done writing the payment processor as a microservice that I’ll just embed as an iframe, since the legacy build is full of those anyway, and I’m being asked to make bricks without straw. I’m probably glossing over a lot of finer points here too, just because it’s been such an epic of disappointment. The deadline is coming up, and I’m definitely going to make it, now that I have accordingly reduced the scope of work, but this whole thing has just totally pissed me off, and left a bad taste about the organization.

Asked a client how they were getting on with the GDPR preparations, knowing they sometimes ask me to check documentation and such.

them: "Whats the GDPR"

me: "its the new European privacy law coming near the end of May, its ok, most of the work should be covered by your PCI DSS compliance paperwork with a few tweaks."

them: "oh, we just pay the non-compliance fee for that"

me: "wait what? well whose your data controller registered under the ICO required due to cctv being used"

them: "oh isnt that optional?"

me: "ok so heres my hourly, or i can quote for the whole compliance project"

I know not everyone is tech minded and GDPR hasnt been that well advertised, but jeez...

Just sitting around waiting for a 220GB Database to import, if I had a spare PCI-E port I could have used a 240GB NVMe PCIe SSD but now I have to use an old Seagate 500gb HHD. Gonna be a while.

What a nice day. We've been working on this for the past few hours. All we need is just one PCI-E extender. Well, halfway through, there was one tiny cable from 12V rail touching something else. Result: one probably dead GTX 1060

PCI DSS compliance meeting... great! 😩

I know nothing about PCI compliance or ecommerce, but guess what I've been tasked with creating!

"hey the hi-8 camcorder's working again, can you get this PCI tv tuner card working so we can transfer the tapes to a digital format"

here we go again...

no stickers, so throw it in a machine, boot debian's installer, switch TTYs, "lspci": okay, a pair of "Brooktree BT878" devices. Drivers? ..."support built into most kernels since 2.4." Didn't they remove a lot of legacy hardware support from 5.x or 4.2x or so? Debian works with it... oh, "Debian Sarge." Kernel 2.6. FUCK... well, we'll try Debian 10.6 latest and see what happens.

Currently installing Debian 10.6 on a victim machine from a nonfree ISO to test this. (goddamn, how many times have I installed debian onto something?) Hopefully I don't have to go find a Debian oldoldstable ISO or anything...

When you need more PCI slots!

Over the last few months, I have now told my client multiple times that they cannot store credit card information on their non PCI compliant server. It's difficult refusing to do something they have set their mind on (especially when it's just me and 3 of their execs in the meeting). Funnily enough, each time they ask me and I refuse, I think they respect me more for it!

Writting stuff after while(true).

PCI DSS scan came back saying that WebDAV extensions need to be disabled. Kind of surprised, since I have other servers I’ve configured to standard and I can’t find anything in my notes about it.

In either case, been searching for info on how to fix it for 2 days and turned up nothing useful. Report found it on ports 80 and 443, so a firewall fix seems out here.

Running Plesk 17.5.3 on CentOS 7. Anyone have any pointers on how to get the job done?

Oh! Damn No No Nooooo
Our team was working on upgrading our infrastructure for PCI Compliance for two months. Did all assesments and testing and waiting for long approvals. Finally, we finished all upgradation smoothly.

After we submitted our report to Infrastructure and that guy comes with Audit reports stating that the PCI Compliance requirements has changed.
And we were like we just upgraded a few hours and how come it changed. And we have to the whole job again. Just want to flip tables now.

concept: a PCI/PCI-e/SATA/IDE device allowing for booting from a "HDD" which is, in reality, EPROM. Not EEPROM, EPROM. For purposes of, say, having an uninfectable copy of HBCD 15.2 or HBCD 10 PE you can insert and forget about without consuming a USB slot or disc drive.

what the f....

So I'm making some changes to my setup. I'm relieving my current router from its duties and retiring it as a mini PC for my desktop setup. And I got my hands on a Dell Optiplex that will become my new router.

Now, firstly, the Optiplex came w/o a wifi antenna. I booted it up into a LinuxMint install USB for the first time and didn't expect much from it, but to my surprise, I got a popup: "There are wifi networks available". At that spot there was also my Fenvi PCI wifi card's antenna of my current (soon-to-be-previous) PC and it was barely seeing any wifi, and there came Optiplex with NO antenna attached to it and it managed to maintain stronger and more stable signal. wtf....

Alright, it's Fenvi, it's chinese -- there's probably not much I should expect from it.

Then I hooked it up right next to my current router with an external USB wifi adapter having 4x6dBi antennas on it, serving as my current wifi AP. Trying out hostapd configs, searching for the right channels,... should I test it? Naah, it still doesn't have an antenna - it won't reach my laptop. Meeh, for shits and giggles! `hostapd -d /etc/hostapd/hostapd_custom.conf`, on my lappy `nmcli d wifi rescan; sleep 5; nmcli d wifi` and... wtf... To my surprise, the AP was there! A thick wall away, no antenna whatsoever, and I still could connect to that Optiplex AP and post this rant!

What magic is this??? I'm now a bit concerned about ordering an antenna for it - I'm worried it could either worsen the signal or make it so strong that it'll fry my brains overnight.

I needed to install an extra Ethernet card on my machine at work. The process of getting it from the IT department was fairly easy, but the damn things didn't have the small screws you need, in order for the card to not hang on the PCI-E port...

Turns out finding that kind of screws is way more annoying than the card itself. :/ I don't get why they were not included, if they are essential for the operation of the card...

TIL all x86-compatible CPUs have ISA support and the ability to be reset by the keyboard controller via A20 line, all thanks to not wanting to alienate a single person who refuses to upgrade.

you can put ISA or AGP devices straight onto the fucking LPC bus and it'll work on most CPUs. Y'know, on the same bus as the TPM in most?

you already know i'm gonna put a floppy controller, a parallel port, and an IDE controller on the PCI-e bus with an ISA daughterboard

My video card just died this saturday (a Geforce GTS 250, did an awesome job over these years ). After removing the card from the pci-e slot i wouldn't get scrambled screen output anymore, but Linux Mint did not boot ( it would restart after the grub menu). Now i got managed to install the driver for the radeon onboard card , but Cinnamon still crashes.
GOD FUCKING DAMNIT !!!
But not enough this morning i also trapped a nerv in my back this morning and we got fuckin 33 degrees C in germany.

Anyway , does someone know a good video card in the middle price segment ?

Windows plug & play is shit. Change my mind.

Wasted so much time trying to connect my camera and I still cannot plug it in (not sure if the PCI driver is missing, or just Windows sucks at this). I thought fresh Windows installations handle the drivers automatically, at least last time I looked it worked out of the box.
On the other hand, I've rarely had any issues with Linux in these regards. I'm probably biased, but I'm still more productive when working on Linux.

No matter what right thing you did, what right cause you fought, in the end, you will always have to lose..you will always be the bad guy.

When you have to remove a SAS card because you've got no free slots and need more NICs
:-(

man if i could figure out how to do stuff and had the money to do stuff i'd be dangerous as fuck, but as of now i can only posit questions... it sucks.

Examples:
- What do modern browsers/crawlers do when hit with, say, an "HTTP 450 Blocked by Windows Parental Controls" or an "HTTP 374" status code?
- What happens if I do <xyz minor edge case thing> on <system?> (just use your imagination, this happens for every edge case i can think of for every system and the list wouldn't fit in a few megs' worth of half-byte ASCII, much less *here*)
- What if I made like a board to fuck with busses while systems were on? Press a button and for like five bus clock cycles pins like 6 and 7 are shorted? That sort of thing. As for system/bus types, *literally any* (old consoles with expansion ports, PCI/-e/-X/whatever, southbridge, etc.)
- What if I did <filetype> shenanigans by doing <something indescribably horrible> to this file? How do things react?

Low profile PCI card in a standard slot. Hmm...

Pass the pliers and cable ties....

Just had the opportunity to watch movie Searching on Netflix.

It was a seriously intense movie, until this scene.. 😂😂😂😂😂😂😂😂😂😂😂😂😂

I successfully PCI passed through my nvidia 970m to Bluescreen-OS on a nvidia optimus laptop.
Totally useless, if your GPU does not have any video output ٩๏̯͡๏۶

What's the point about having an HDMI output, if it neither works with the intel 530, nor with the 970m? Is it even connected? I mean, srsly, why would you do that? Best Linux support ever!!!1!!!

recently, I was working on a project to playback archived call recordings, and another developer was hired. part of my job is also to support a third party automation framework for customers, so I got "seconded" to support a proof of concept. the original project had now been messed up, it works, however, the functionality that made it secure has been MASSIVELY compromised for the sake of effort. I've tried to cause a stink as we have a major customer who will fail the next PCI audit. opinions on the situation. the other developer has a lot more experience, but seems to have chosen to satisfy management on deadlines over the original spec...