▲ 4 r/CMMC

Network Diagram Question

I am trying to wrap my brain around how to put an AP into a network diagram when you are trying to show what is in scope/in your enclave vs. Out of scope/untrusted/outside of the enclave.

My brain says to put a trunk connecting to the AP that sits on the line of the scope, then a dotted line into a SSID inside the enclave and then one going outside to where the SSID for the OoS is sitting and somehow show it cannot access back into the network?!?!

I am massively overthinking this I'm sure but I can't figure out how to portray this in the network diagram.

reddit.com
u/thegreatcerebral — 3 days ago
▲ 26 r/usenet

Better way to Whisparr?

Is there something more simple like Seerr for Whisparr things? Or is there a better way and I just don't know what I'm doing?

reddit.com
u/thegreatcerebral — 22 days ago

Is it possible to hide/block Viewers from Page Revisions?

As the title states, I am looking to know if it is possible to remove/hide the ability for viewers and public to get into the Page Revisions OR in the least not allow them to see the contents or any info regarding the changes or preview the older pages or the changelog notes?

...or does this need to be a feature request?

reddit.com
u/thegreatcerebral — 28 days ago
▲ 28 r/CMMC

Something Just Dawned on Me.... (maybe a 20/20 moment and that people know more about what will happen than they lead on)

We are working towards L2 with our consultant. One of the things that I was looking at forever ago was RMM solutions. I love NinjaOne and they have a FedRamp version etc.

Talked with them and literally they just have a "FedRamp Charge" of $15K/yr. above and beyond what they charge for the platform. That was a hard thing to swallow and I moved on because having an on-prem solution is far cheaper and its an RMM and we are <50 endpoints.

Well last Monday out of the blue... I haven't talked to NinjaOne in months at this point in time. They call me and sent an email and now they are looking to drop the price and give me 5 months free.

Maybe it is just a coincidence but it does now seem strange that after so long of nothing, exactly one week before the announcement was made, they sent me an email trying to get me to come back and sign a contract.

Maybe the major players in the game have been given a heads up on what may be coming and so they were trying to lock people into contracts right before the announcement?

Anyone else have some very generous offers suddenly appear last week or the week before?

reddit.com
u/thegreatcerebral — 1 month ago

Question about screening for a position in the public education system in Florida.

I am just wanting to know if there would be any laws in how screening processes are handled and if my wife should reach out to the CTA or a private attorney (sadly the CTA does not always represent the best interest of the teachers and acts more like HR in the interest of the CTA members).

My wife recently was screened to be able to apply for a position. There was a question up front about pre-requisites to be screened and she did meet the requirements and those that she did not, she went and fulfilled them: an exam and a training course.

She consulted with many individuals in preparing for the evaluation/presentation, and her recommendations are exactly what you would want if you were looking for a job. We even paid for someone who had been in that realm a few years ago to consult... when I say the prep work and foundation was solid, it was.

She did the screening/presentation. She was told they would be given the results later that day or the next. It has been nearly a week and only yesterday did she receive the word that she did not pass the screening. She has not been given her score nor has she been given the score sheets.

My wife has found out through individuals who were told the following information:

  • They discussed her before she even got in the room and pre-determined that she was not going to pass
  • This was based on her not currently being a specific type of teacher (not going into specifics here to try to save some anonymity) even though that is not a pre-requisite to the position
  • They have lied about how long the screening was (she has time receipts from when she powered off her phone and when she turned it back on from text messages as well as life360 being on her phone.
  • They have further lied and stated now that she did not get through all 5 questions which she did.

She still has not been given her score sheets or her actual score. She was told by the individual who divulged this information that my wife was the smartest person in the room and that her answers were actually "too much" for them to be able to process and that she needed to "dumb them down". The answers were spot on just too high of a level for them to completely comprehend.

She was told not to tell her principal because if she found out she would take it as high as she could as my wife has the skillset, the scores, the recommendations.... everything needed and her principal wants her to have the position.

I'm just curious as to what any legal grounds my wife would have here. She hasn't been given her score sheets. I believe that it is because they purposefully scored her so low that when they give her those that if someone were to actually take a look then it would be made very clear that this was done out of malice as the body of work and the scores would not match. I believe they think that eventually my wife, and also her principal will just stop asking for the scores and the scoresheets and it will just be swept under the rug. OR they wait until positions have to be filled and then it won't matter because it will be too late to do anything about it anyway.

Is there any kind of laws broken? I know she does not want to reach out to the CTA because she believes they will not want to touch this one so we would have to find an employment attorney if there was anything here. I'm just not sure there is anything concrete and a lot of hearsay until she gets the scorecards and then someone can objectively look at it from the outside and possibly have someone cross-reference say others that were evaluated at the same time that made it to see the difference in the body of work etc.

I do believe that there was a discussion and the panel was told that they had to score her low enough that she would not pass. According to what we already knew they all had to score her less than 3 which is absurd for her to not pass the screening.

reddit.com
u/thegreatcerebral — 2 months ago
▲ 14 r/ChatGPT

What happened to the ability of all AI to remove backgrounds and give you good transparent PNG files?

I used to just drop an image into GPT and just give a good old "can you remove this background for me and give me a transparent png" and it would chug along and boom! Image was there. It was transparent and a png which is all I ever wanted. I have chats from March 23rd when I was doing it before removing the background of my company's logo for a presentation.

Now I tried it starting about a week and a half ago and it can't do it. It just makes the "transparent checkerboard background" but it's an actual background. No matter what ways I have tried, no difference. I went over to both G models and the same thing. Well the one that has the logo like an event horizon just repeated the prompt back to me 3 times and then told me it was too busy to do it. So to be fair that one never failed, It just never did it.

I even went to Remove.bg and it is horrible now as well and I was doing great with that a week ago. Literally the site for the two images I tried were no better than the tool baked into PowerPoint.

The final kicker, I had GPT turn the background into a chroma key green for me so then it SHOULD be easier to remove for all tools... nope. No change, all of them were horrible at it. Even the remove.bg site removed random artifacts and left giant swaths of chroma key blank background areas and when I tried to use the magic brush to remove a part of one, it started removing full letters from the bottom of the image.

I just don't understand what happened in the past few weeks that just killed that ability. ...and they all must be using the same engines for this or they all wouldn't fail in the same way all at the same time.

Anyone have any other ideas? It's crazy because the stuff I am doing is not difficult in the slightest. Super high contrast, clean lines. So dumb!

Also, I pay for GPT, I don't pay for any others. I only tried the two G boys and remove.bg as I recently found out about that one.

reddit.com
u/thegreatcerebral — 3 months ago
▲ 5 r/Toyota

New Camry S-flow not working for son in the back.

New Camry is a week old. I have a son. He weighs 121 lbs. 15 years old and is in the rear with his seatbelt on.

I started the vehicle and S-flow was on... nothing in the back. I turned up the fan, made sure I was not in eco mode, nothing. I eventually turned off S-flow. I told my son who also got a new Camry on the same day (we bought two, long story) and he stated similar when his friends are in the vehicle. What gives?!?!?! I notice sometimes on the screen you are presented with that roller coaster view with three people in belts or whatever but that isn't on the screen so I have no idea what it is thinking. My assumption is that it is tied to the back door opening which it did but maybe the vehicle hadn't actually picked that up, like I left the car unlocked so it was still sleeping when the door was opened so it never registered that there was a person back there. I do not recall it saying "check the back" either.

I'm thinking they need a software update/recall for that nonsense. Like it doesn't even register unless the car is awake, the door opens, and THEN it will check the weight sensors and belts to report what is going on. When I unlock my car after work and drop my backpack in it (weighs like 40 lbs.) it will yell at me to check the back and I get nasty alerts from the app about it as well. Programming oversight maybe?

Here is the thing. My son has special needs and cannot advocate for himself that he is hot. We are in Florida so even with the air on in the front the back can be extremely hot. It is not safe. I would imagine a dog would experience the same as they don't even wear belts (some do sure).

reddit.com
u/thegreatcerebral — 3 months ago

Trying to figure out what seems like the most basic thing...

Ok so it should be obvious. I just want to remove the background and keep the outline of the image so I can make a sticker. I have been trying to use the trace tool which makes it look like image 2. I would imagine there is something stupid simple I am missing. There is a white outline, I would imagine the software could pick that up and go with it but no.

How does one go about this?

u/thegreatcerebral — 3 months ago
▲ 1 r/CMMC

Two-Pronged question about Vendors

I'm not sure how to frame this but we have two particular types of vendors at our facility out of the many that this question revolves around:

  1. Machine Vendor Direct Maintenance Technicians - Thing DMG MORI Technician
  2. Cleaning Crew/Janitorial Crew - Nightly cleaning company

My questions are:

  1. How do you handle these?
  2. Is there a way to have them become some sort of Authorized 3rd party by us?

Mostly my question is that, with the technician we have so many machines that the MORI technician is out at our place 2-3 times a month and can be here for 1-3 days or more each time depending on what is going on and revisits after ordering parts etc. We have an assigned technician who comes out every time unless he is out sick or on vacation. Is there a way that we can make that standard assigned technician authorized so that when he comes on site he does not need to be escorted around the property while he is here? The sign-in/out piece isn't a problem but when he is here for 8 hours/day or so for at least 5 days/month average it is a huge hassle to dedicate a babysitter to watch this person. We have cleaned the area and everything we can to the best of our ability to remove all CUI from the area he is working in. I cannot promise that because he is working on a machine that has gcode and through diagnostics if the machine shut down and we cannot get back in which is why he is out that he is kept from accessing that gcode but that's the nature of the beast there. We can and do clear the area of any CUI before he arrives.

My question with the cleaning crew is basically the same. We have a cleaning crew that comes nightly. They clean the office area etc. and I personally do not know the schedule but some nights I'm sure they clean MORE than some nights when I'm sure they just take out the trash. Is there a way that we can do similar with them where we can somehow authorize particular individuals at that company to be allowed to be here unescorted and do their thing?

reddit.com
u/thegreatcerebral — 3 months ago

Anyone know what these were really?

Since they do not sell them anymore I am trying to locate that pick but without the dime stuff on it. It wasn't a show pick. They sold these back in the day. I am down to like 3 or 4 and if you look at the price on ebay for them... just don't.

Anyway I've tried the quite a few picks and off the top of my head I cannot remember which ones but Tortex and really anything I could grab from .77 to 1.05 or whatever the Hetfield White Fang picks are.

These are just my holy grail picks. I don't know why but they just are the sweet spot that I love. and the finish doesn't slide etc. etc. etc.

I'm hoping someone knows what they are really and I am able to find them. I have emailed Washburn in the past and they don't even know.

[update]

I have contacted Washburn and they said “we have no idea anything about those. Take some calipers and measure the thickness”

I contacted Dunlop and they said that they asked around and they did not make them and to contact Washburn.

I have reached out to Dime’s guitar tech and have not received a reply yet.

[/update]

[update 2]

I reached out to Dime's tech. He responded and told me that Dime used .88 Dunlop Tortex picks. He said that these were promotional things and they didn't have anything to do with them so he has no clue.

So, .88 Dunlop Tortex it is no matter what. lol.

[/update 2]

u/thegreatcerebral — 3 months ago

Ok I may be crazy here and it may already exist but maybe not I suppose. So I get that I can create whatever.domain.mine and then I can NPM with that whatever and point to [internal source] and do the proxy thing. For that to occur, not that it's a problem but I have to create a DNS record for each "thing" I am wanting to serve. I'm just wondering if there is a "portal" of sorts that one could host instead?

Don't get me wrong I know I can host Homarr and then just face that open and then create buttons for all the the things turning that into a portal but that would still require creating all the whatever.domain.mine DNS records and such.

Instead it would basically be like a NPM but a visual one that you would hit and then from there it handles the rest. "It" would know about the internal stuff and I would tell it what it is hosting but the person using would only need to know onething.domain.mine instead of one per "thing". I guess though it wouldn't work because then you wouldn't be able to say connect your jellyfin app on your Roku because it would block that unless it were smart enough to just know if it were fed a port to shoot that along?

Anyone dealt with wanting something like this? Honestly it doesn't bother me to setup everything up and enabling/disabling things in NPM is easy etc. etc. etc. it was just something I was thinking about when I was trying to figure out what to maybe host next.

reddit.com
u/thegreatcerebral — 4 months ago
▲ 16 r/CMMC

What I mean by that is, we are about to stand up our GCC High Tenant. Is there a checklist that I can go down from top to bottom of things to enable, disable, setup, define, etc. that when I reach the bottom I can cross-reference each task to a control etc.

For example (making up numbers for the sake of argument):

Conditional Access

  • Set locales to only allow countries you specify (3.8.2)
  • Enable MFA (3.1.1, 3.2.1)
  • Disable Legacy Authentication (3.1.1)

While also just having everything in sections so that if for example we do not want to use One Drive I would either go through the motions of settings for the sake of it being there but then disable anyway OR skip it etc.

Does such a beast exist?

reddit.com
u/thegreatcerebral — 4 months ago