Tom here from Orange Systems and on July 2nd of 2021 a very large-scale ransomware attack was deployed specifically using the Kaseya VSA software and the ransom affected roughly 1500 businesses and 60 different IT providers and this is why they were referring to it as a supply chain attack So we'll get to that a little bit later in a video, but let's start with yes There was a 70 million dollar ransom put on here and the our evil ransomware group and their happy blog Yes, that is what they call it is where they post how much they want in ransom now This is a pretty tragic story that actually starts not on July 2nd of course but with all the planning and everything that went into this attack and I'm gonna start here with Victor somewhere this year the DIVD NL which is the Dutch cert organization will share a story about how we Nearly prevented an enormous supply chain ransomware attack which potentially led to the single largest ransomware spree in history and Failed and if you don't know who Victor is or familiar with Dutch Institute for Vulnerability disclosure where Victor has a write-up and publish it will get to and why I'm bringing all this up is very important so you can dive into the history of Victor over at Darknet Diaries episode 88 And you'll actually find that Victor spent a lifetime Disclosing properly and with full intention of getting things fixed not exposing but getting them fixed properly vulnerabilities found in many many different products and He's part of the guild of the grumpy old hackers, which is episodes 87 and 88 of Darknet Diaries I just bring those up I like to offer up some of the further reading of where I first heard about and really some insightful information on how this Guild works and what they've done to help bring the bar of security and raise it up But the other reason that's so interesting is because the CVE is signed and when they were actively engaged with the CVE Dates all the way back to April and they have a whole case update right here on their blog And all this will be linked down below and this is actually where the problem starts There was a vulnerability found in the Kaseya VSA product now. What is Kaseya VSA? We could probably go back a little further for those of you that don't work in the IT industry We are a managed service provider me as in my company And that's one of the tools that is used is the Kaseya VSA now. We use a competing product from SolarWinds Yes, I'll talk more about them later because they were in the news as well a few months ago But Kaseya VSA is among the tooling that is used in my industry so we can manage many systems at scale This is why they refer to it as a supply chain attack now supply chain means they get in To how the systems are being supplied services now They didn't at least it does not appear to get into Kaseya Directly that we are aware of right here on July 6th of 2021 But what this means is they were able to use the Kaseya VSA and it comes in two different flavors It has the option of being Hosted by Kaseya that via their software as a service or licensed to host it on prem Either way you're going to rely on Kaseya for updates and this is why we roll back to this you know Dutch notification over here by Victor they had a flaw in the product and that flaw in the product and a flaw in a tool that works at that scale means That ransomware can be deployed at scale now They have a whole you know breakdown of what they did they were doing responsible disclosure as I stated That's the way Victor works and the judge cert team works. So they had assigned it and Really got engaged with Kaseya who they said was responsive But being responsive and getting it done is two different things It is very hard to write secure software that problem is a scaling problem as well as Software becomes more complicated. It will undoubtedly have more flaws This is why you need to engage third-party pen testing agencies to poke at the software Look for the flaws and hopefully fix them and then once you're notified of these flaws Hopefully fix them in a timely fashion. What is he timely fashion? That's gonna be well up to the lawyers Honestly, it's not up to me if Kaseya knew about this flaw so many months in advance Was it that hard to fix or was it something that they were almost getting ready to patch and the ransomware our evil group found the flaw before it got patched These are some of the questions that we still don't really have answers to but obviously this is something very Concerning and one of the problems in the industry right now is just how fast these companies patched We as an IT provider myself as well We put our confidence in these tools that we use to help manage systems That means any of these tools having a security flaw. It needs to be patched and done right away Not delayed not well, we'll get to it. We want to do a few product releases and updates first something else Security has to be a priority because these incidents are absolutely Something that happens at scale now for those you that may have followed my channel previously or all the way back in 2018 when I covered this Yes, I've covered Kaseya VSA because in 2018 it was used to do crypto mining now This is Kyle CEO of Hunter slabs back in 2018 in the write-up of house Kaseya VSA had a flaw that was exploited and then used to deploy crypto payloads times were simpler than they Just wanted to borrow some CPU cycles to you know mine a few extra coins Come that back today and Huntress was leading the charge on getting us all notified and very detailed breaking down What was happening here? They were looking at it from the outside and of course came to the same conclusion and everyone's now in communication But they have a similar write-up They actually posted where they found what appears to be a potential authentication bypass and the potential for sequel injection Now they did this by looking at the logs of the infected systems And so they go, okay, we see through this log through this here Now something a threat actors do is actually destroy a lot of logs. So this is not easy to obtain Huntress had to really reach out to a lot of Engage with I should say a lot of different MSPs to find one that had good logs because part of the whole process is Don't show people how you did it makes it harder to patch And that's the way these different ransomware groups work But Huntress was really on it for getting on top of things and identifying which IP addresses were used to send the commands How this whole thing broke down and really helped get the word out They really led the charge on this and gave really detailed updates step by step each of the way This also is something to say it was doing on the side over there They seem to be a little bit less forthcoming about how they were doing it, but they did shut down their servers They didn't recommend to their people to shut down their servers. We have a recent statement. I'll leave a link to below from their CEO You know usual PR statements saying we have lots of customers and only a small number of them were affected type of statement because that's what you expect from our companies It's a it's a PR thing. I love it or hate it. It is what it is, but This type of attack is obviously very scary very concerning for people like myself who manage and have to rely on these different tools in our industry And this is one of the things I want to talk about the way forward because this is something that really concerns me We do not have the best responsiveness in the industry to these type of attacks It's not that it's not gonna happen. That's probably the one thing is true It breaches happen is how those breaches are handled Was it a problem you knew about since April or was it a wow no one seen this coming? That's really clever type of hack and that's where things get a little bit fuzzy And the way we help mitigate against these things one transparency These companies should be having full penetration testing done on a regular basis with their products They make the money to do it pen testing quality pen testing I should say is yes very expensive It is also one of those annoying things that the people who work in the business admin side go hold on We keep paying these people not to find things are they really useful and you know business citizens are made around that Yes, sometimes they do find things and that's the whole goal We want these security testing people we want the pen testing companies to find these flaws Get them fixed and keep these software tools secure This is a problem that was faced earlier and I covered a video with connect wise and they Mishandled essentially their attitude from being told they had some flaws and one of their products by Bishop Fox They had a video I did on that and come here. We come all the way here in 2021 We have a completely different response from connect wise or even participating in bug bounty programs That is kind of what we want to see in the market We want to see these companies go from hey I guess we should probably get in this versus downplaying it all saying it was only some small amount of customers if you're That's small amount of customer if you are to date the fewer than 60 Kasey a customer You know, you're just one of the 60 of them that represents 1500 businesses this is not small scale and please note I don't really have a number for exactly how many endpoints that means But obviously a small mom and pop shop getting infected with ten computers is terrible a thousand systems or 2000 or even more affected at a single large company Which we know this has shut down some pretty sizable companies a Swedish grocer was included in the list on there as well This is a much more serious problem because it's not about which business the scale and scope of these businesses And of course if you're that business you are deeply concerned and you're asking the questions What do I do about this? So I'm hoping that this is just one more I hate to use the word wake-up call because it's not a cliche and But sometimes it is a wake-up call and sometimes it is companies like connect wise who go alright This is our new security posture. We're participating in hacker one we're going to really take this seriously and Finally, let's talk about solar winds which was also a supply chain attack But a slightly different one now This is where in I believe fully because solar winds came out better after the incident What happened was solar winds specifically solar winds Orion because solar winds In a similar way to Kaseya is a company built by acquisition when you build your company by acquisition You slap your name on all the things so it's solar winds Orion solar winds MSP Etc. Etc. The solar winds Orion product was attacked But that then caused an audit of all internal things on solar winds, which is great They re-upped procedures revamp things and you end up with a better product And hopefully Kaseya does the same thing Kaseya VSA is the specific product. They have confirmed was attacked They've engaged with mandiant fire. I and are going to be working on a plan and remediation Now when they engaged with solar winds, that's actually a great thing Fire I was a little bit interesting how they became engaged on December 13th of 2020 fire I actually announced that they were part of the solar winds attack Well, they more specifically announced that they were attacked in December of 2020 and it turned out solar winds was a source But the source went all the way back to November 2019 I'll leave a link to the video where I break down the whole timeline Because the solar winds attack was obviously interesting in scale and also interesting that it went on for so long unnoticed But it also had a very different goal the goal of the are evil Ransomware gang is to collect money So specifically they're asking for 70 million like I said the goal in the solar winds incident was espionage Which means is quietly and stealthily as possible You go through systems and collect information with the goal being espionage not the goal being deploying ransomware So their roles technically supply chains attack the solar winds one went up the supply chain to attack a specific product They knew was deployed by many companies Which does include fire I which led to their breach which led to some really good debrief But the our evil gang is part of the ransomware as a service And yeah, they're just out to make money They matter of fact if you dig a little bit into them The reason we're aware so much of the happy blog is where they happily post all the different Ransoms they're asking from many different companies. They've been around a while. They're not stopping this And I know there's going to be some people we need to solve this cryptocurrency problem And I seen a CEO make some hints of that from kaseya, but honestly that is great I live in a real world where that exists I don't know that the world's going to shift dramatically against cryptocurrency and Stop the transactions from happening once a product has been out there and these attacks scale up like they do partly Yes, is certainly an enablement to be able to move that kind of money anonymously But I don't see any easy solution outside of Massive changes, but so many places are adopting cryptocurrency that those massive changes are going to be harder and harder to implement every day to get traceability Atom not saying there's no efforts that should be put towards it But I live in a world where I know that exists So we know we have to create security because honestly if you want to talk about the perfect world It would be the one where microsoft updates just work and all the software updates just work And we don't even need these RMM tools because computers are just magic and there's never a problem with them But back to the real world that we all live in All right, leave your thoughts down below on this and hopefully the recovery process which I know has begun will go smoothly um One little comment on that if you spend a little bit time on reddit r slash msp You will notice that I know one thing that's hampering some of the recovery Process is the scale and scope some people go. Hey, just flip the switch for backups That's great until you have thousands and thousands of them and you tax the backup servers and the actual restoration process is Always a little bit longer than you might expect but should be something to really consider It's not just a matter of rolling these back. It is the You know the time it takes to do it and finally someone may ask isn't there software that will magically solve all these problems That's a mixed answer because it really depends on whether or not you Excluded everything antivirus and firework exclusions and trusted apps per the casay are right up if you completely wait list Everything casay it does to allow you to get things done You now kind of neutered a software that you may be using to protect you on it So there's not like a magic this absolutely is the way to do it because Everything in security is a balance We use a series of different tools to stack them on top each other to help provide a comprehensive protection stack But with any of these there's balances I can turn off the computer and claim it secure But the reality is I had to use our As I said we're solar winds user We had to use solar winds to deploy a lot of mitigations against the Just recently posted printer problems that thank you microsoft for not Doing that properly and then causing lots of time and mitigations to fix the printer nightmare issue That was last week's problem, which by the way is still this week's problem It's just that this is also a problem for a lot of people in the industry And my heart goes out to all the msp's that were affected by this obviously Many of them were doing things right. They were multifactoring things And also a shout out to many of the people in the industry including huntress and all the others that participated in one Documenting this and getting the word out and other msp's that are been helping out everyone So it's been cool that we've seen a lot of community support And hopefully kaseya at the end of all this comes out better and as a solid program And maybe we'll even see him on hacker one that would be pretty cool. All right, and thanks And thank you for making it to the end of this video if you enjoyed this content Please give it a thumbs up if you like to see more content from this channel Hit the subscribe button and the bell icon to hire a sure project head over to laurance systems.com And click on the hires button right at the top to help this channel out in other ways There's a join button here for youtube and a patreon page where your support is greatly appreciated For deals discounts and offers check out our affiliate links in the descriptions of all of our videos Including a link to our shirt store where we have a wide variety of shirts and new designs come out Well randomly so check back frequently And finally our forums forums.laurancesystems.com is where you can have a more in-depth discussion about this video and other tech topics covered on this channel Thank you again, and we look forward to hearing from you in the meantime check out some of our other videos


It's showtime. So it says at the top when I use StreamYard to display this and definitely I Managed to do it on time. Although I don't have a reason not to be on time I was just working on other things and here I am and welcome to another So I that I title it right. Yes. It says Saturday stream. So we're gonna go with I titled it right I've titled it Sunday stream on Saturdays and Saturday stream on Sundays I've definitely gotten it wrong quite a bit. I used to see an email address the vlog Thursday one because it's set up and Exists for people that want to send questions in that can't be fit into comments That's something that happens a lot. Let's see. Do I have any emails that came in? I feel like there's one and I'm actually I gotta Address this one someone asked me via email. Can they get this shirt? Um, these are from Ninja one. So I don't have the rights to it But I'm gonna ask I gotta ask Jonathan. He's He's on my ask list for next week of things to do matter of fact I'm gonna make myself a to-do list notice for that exact thing. Where did this go? Oh Did I close it? I Have certainly closed it. Well, I can fix that. This is I I've been using I don't I don't know if it's worth me doing a video on it But boy, is it a cool product or tool or open source project and that's a log seek log sec log seek So make myself a to-do before I forget ask John then about Does it say on these shirts? I gotta read it in the screen. Oh hugged your IT person shirts Hugged IT person Shirt, there we go Man, I cannot I feel back. I can't spell this right J-O-N-A-T-H-I-N. There we go My to-do list has been made All right Um, what do we have here? Do you use anything like Observium or Libre, NMS, etc. I was using Xabix I was actually I'm probably going to wind down my Xabix server because I don't do it much with I don't do much with it anymore it's I don't think there's anything wrong. What is the other one? It's called check mk I feel like that's what it's called This is another one people asked me about I haven't used it either, but hey since we're talking about them We'll throw one more on the list here But no, I don't really use any of those anymore Business-wise we use Avic for everything In myself, I just use uptime kuma to let me know if things are up. That's as much as I care is Tell me if they're down and then you have two uptime kumas One manages all the stuff and you have another uptime kuma that just make sure the other uptime kuma is doing uptime kuma things And then you're done Then you have everything, but this is the other one that check mk. I've heard good things about this one, too It's supposed to be a good system But I don't use it so I can't really speak to it It's not something I need to use very often. It's probably the best way to describe that Now I will talk real quick about this Because I think this is really cool This is the thing I don't know that I would be the one to do the video on because there's already People who are much more organized than me doing videos But if you're looking for a self-hosted cross-platform Second brain, we'll just call it second brain I'm trying to think of the word to use but second brain is what I've heard a lot of people call it And I really like it. I like things that are open source I like things that have plain text on the back end because it makes things really easy to edit And this particular tool I think is awesome. It's really helped me. It's the first time. I've really felt More organized when I want to get things done, especially when I have all these little to-do lists that I make It's been solid for that. So if you're looking for An interesting application To do the whole second brain thing. It's just neat project management It's all the little knowledge things that happen I'm actually using it for my newsletter, which I wanted to announce So that's The next thing is I have to collect all this data that's going to go into my newsletter And I've been writing it and writing it all at once. It's hard writing it incrementally is a lot easier So if you head over to my website actually me log out Whoops Come on. There we go. Share this tab instead If you go over to my website and you scroll down to the bottom I have launched a newsletter So you it's double opt-in and someone pointed out that the day one I turned it on it was not That was fixed immediately. So now it is a double opt-in newsletter And uh, yeah, if anyone's interested in staying up to date with what I have going on It'll be some of the news articles I cover. It'll be videos that I have So if you're interested, this is of course opt-in This is not me to try to sell you anything. It's just an easy way to avoid algorithms that may or may not Tell you when things are happening or what videos were covered Or I'm also going to have been there just some of the general updates to software I talk about a lot and I'm going to put a couple of my musings in there Sometimes I find interesting things on the internet that will just be part of my newsletter that's going to go out my plans are just twice a month I don't want to do any more than 24 newsletters a year. I think that is plenty Uh of newsletters and it's plenty of commitment to me to do it So if you're interested head over to lore systems.com. That's where you'll find that And as I said, I'm building that data with this what with this tool here the log seek tool because it works really well now something else I'm doing to Fix up things on the channel is these live streams seem to be a lot of fun for both me and many of the audience members who participate but As people love to point out, they're not well indexed, but that's changing I'm working on putting together a solid workflow on this The workflow is not finished, but it works I just got to tune it and I'm big on making it a really simple process But essentially I plug this all into AI a few hours after the live stream is done That way the system can transcribe it once it's all transcribed I have an AI system analyze it and then create all the time stamps and notices for it It's pretty cool. I've done it to a handful of the videos that are all existing So I'm going through the backlog and adding it and I read through it to make sure it's accurate Because sometimes it just doesn't understand the context So I'm trying I'm not going back too far because I don't want to have to rewatch videos to make sure I have the context right because the thing with the AI is it's not a replacement for people But boy, is it helpful. I know the full context of what I talked about I'm pretty good at memorizing things and remembering the conversations I had But AI will occasionally just get things a little bit wrong about what I was talking about So I will go through the notes it creates Which is way easier than me watching because I I did it on some of my two and three hour live streams And I just fixed up the notes, but everything becomes nice and time indexed with a all a nice summary. So definitely really Really a fun thing. I'm going to be able to do so people can go through and Have an understanding of it. Um The second brain is log seek. I see if you get that out later. Awesome Well, I make a video on the AI tools for this. I doubt it I don't think it's so far off base for my channel like hey, how to update your youtube channel I mean, it's not to me anything particularly It's like I try to stay on topic because the problem is when I get way off topic of my channel I mean, I'll tell people the tools I'm using it's called um taja ai Let me find it real quick. Share this tab This is the tool I'm using how to how youtubers optimize in three minutes Um, I'm looking at doing this with chat gpt, but it it does it better when you use this tool I tried using chat gpt which has a tool to summarize videos. It just doesn't do the timestamps very well So this tool actually does the timestamps and a better organized method downside is it's costs a lot more than my usual chat gpt subscription, but I don't I might do some Self-hosted chat gpt videos coming up that I might do that I think is there's a lot of useful things where you can host these Uh, large language models yourself So that that might be on topic for my channel, but how to optimize your youtube channel not not likely a video I'll do Nothing of interest to ask happy holidays may your stockings be filled It was sold out unified dream routers. Yeah And uh, nope. I have not I've been busy doing a lot of other things. So I have not done anything with check mk Hey, tom another massive year with great content. I hope you're your family. Best of season. Absolutely Thank you very much, Nathan. What's the big boulder you're getting into? Um I don't know. I don't do new year's resolutions at all Not my thing. Um, I when I make decisions to do things. I just go do them I don't wait for a date to do them. I don't set like a buy this day I set completion states based on when I want a project done because of things I have scheduled, but yeah Um, that would net. Oh, have you seen analogy announcing the v6? Uh, uh, if you have one heavy thoughts on it. Yes. Yes. I have one. Um Did I plug it in before the video? Probably not. Let me try. Let me see if it's still plugged in I I was just moving things today Hey, it's plugged in I can actually show you I I was supposed to have the review done and I do not But uh It's here. This is what it looks like. Oh and by the way, I'm using the bligh kvm to show you this See if this I may have unplugged the usb to it Oh, I did not it works. There we go. Cool So, yes, this this is that The flickering is not The system it is somehow not liking the kvm I can't imagine a lot of people are going to be using a kvm to view their Device that would be illogical, but it works. I like the device I've had no problems with it other than it not liking my kvm, which is a completely I think I could probably adjust something and fix that but Yeah Not a big deal now. Let's talk about this though because it's in the title Is the other device. Let's see hold on. What else is in here? Uh with those little boxes Uh those little boxes where I went with astrology. I can't wait for that review. I have stock alerts on three sites. Yeah, the um Just to comment on that The reason the video is not done Is we are delayed on getting our cameras in it's going to live at the cnwr offices We're putting all new cameras in at cnwr all synology cameras And we're going to put a video wall up and we're going to use that as the video wall controller So that's on our to-do list to get that all configured. Um, but it isn't done So i'm going to do a review using my cameras But it's going to get a second review when it becomes living at the cnwr But I've had it for a while. I probably had it for two or three weeks maybe longer I have to look at the date. I got it because the day I got it. I plugged it in and turned it on Well, no, no, I take that back a few days after I got it because by accident of Synology, they didn't send me the right plug Um, they they sent me the euro plug not the us plug when they shipped it to me minor detail Um, they just I don't know why they made that it was a minor thing It's not it's not a dig at them at all. It's just something that happened. But yes Uh, is black kvm different than pie kvm or same open source? Um, they're very related is the way I would describe them They're not 100 and that's the review. I was going to work on today and I didn't get done Um, jeff reminded me jeff from craft computing did a review on the black kvm I might have had mine longer than him. I've had it for like Six or seven months maybe longer. I've been using it. I really like it. I've been updating it I ssh into it and do all the updates and I've Watched the product mature through code updates and I have a whole Like I have a lot of notes on the review because I've been using it so much Uh, but that leads me to something I'm going to be working on today when I'm done with this live stream There's a part of my office. You can't see over here But I don't like things disorganized and things are getting a little disorganized because I have so many little things I'm reviewing which is not normal for me But I also realized I spend too much time just doing some of the tutorials and some of the product reviews So I'm building my this area for my studio is bigger than it needs to be For what I'm using it for today, but I built it this big so I could grow and I've now been here like Push in two years. I think it'll be two years of February that I am in this studio So I'm taking the empty space and building the second set. I always wanted to do it But I I'm very careful. I try to use everything I have and optimize it before I Upgrade it again. I don't upgrade for the sake of grading. So yes that review will come out I'm going to just finish today building the second part of the studio I know what I want. The vision is in my head and uh, I will go get that done Uh, the bligh kvm website is broken. Yep. That's it is not a great website. That's part of the reasons I want to make sure um, the thing How do you not know travis you you signed for it? It catch I think you're the one who signed for it So that's what was in the mystery synology box. I opened it up at the office. So it's on you travis Do you think two unify express to be better than one u6 smash that statement doesn't make a lot of sense because you don't want To unify express is the unify express is a router So you can get the unify express and then add another wi-fi to it And one of the things I've been doing and why my review takes longer for the unify express versus a lot of people have There's first unify doesn't send me things for free anymore. Um They decided that they don't want to which is fine. I'd buy everything on my own everything I review for unify for like the last almost probably two years now if not longer Um, has been 100 stuff. I purchased uh from unify the unify express is no exception to that and I don't know that buying two unify express would work in mesh mode. I'm gonna go with I doubt that works Um, the unify mesh that was meant to manage other unify devices But what I did for my testing Is I bought it and the home side of my network not where my business stuff is I Now it's currently streaming and everything else you see discord and youtube and facebook This is my home side of my network and this is what's running it is a unify express So you can see all the um here. I just have one switch And it feeds it feeds another unify switch I wasn't I didn't want to swap adopting it because I got all the ports labeled then feel like doing that um But it We're just the topology Oh, I so I got a kick out of this it has a it has the tessel in there So that's funny. My car is going through it. But yeah, this has got all the different. Um, See if I've hit play will it show me the traffic? Oh, let's stop trafficking Reload the page Why is the traffic displaying out where I was working earlier? Show internet traffic Uh, it stopped. Well, it was working before but Yeah, I um It seems to work Quite well. I haven't had any issues with it so far running And I wanted to do a review of actually running my network with it and managing devices Uh, because I think just reviewing it doesn't really give you the whole story until you say oh look Tom's got a bunch of devices. He connected his printers to it.  Uh when I was up there. She's watching tv right now streaming whatever show she watches But overall it's it's worked really quite well No issues Most active clients Oh, let's look at my wife's phone. What's my insights from her phone? Let's see. Ooh, should I block should I do to test the app blocking and take my wife off facebook? View all traffic Create some filtering rules. I said I it's it's working really well. I like the unifying express Uh, certainly waiting for the resource for you plan for parents. Um, maybe pair it with a flex hd. Yeah, yep Uh, how much power does it draw? Is it viable for road warrior subs in the car? I don't know why you would use it in the car It's a little wattage. I think it if you look on unifies website, they have the wattage on there So if we look what it's somewhere on here I know I've seen it somewhere Maybe I'm skipping right over it By now, maybe it's on their buy page I'm gonna measure it as well, but it doesn't use a lot of wattage technical specs. There we go 10 watts I knew it's in there somewhere, but yeah only 10 watts. I don't know why you use it in your car, but sure 10 watts Travis does sign for a lot of things Hey, Tom, I asked you about piehole last week. Can you advise me to use pf blocker instead of my think? Thank you so much. It's working perfectly awesome uh, time to layer three Layer l3 products for pants Parents on a pf sensebox and it's working well, but the lack of auto update is a pain. Yes, it is I will agree with that for home users. I really recommend people Have things that auto update for home users Is mesh mode different than range extenders? Kind of it depends how each one's set up That's a more complicated topic because it's implemented different ways and there's a lot of name. There can be some name collision on how that works Usually the way unify mesh works is it takes a couple of the Antanas and uses it as backhaul for the other device I always recommend not doing mesh unless you have to but if you have to do mesh then you have to do mesh Uh, what connection speed do I have? I think I have 300 here 300 or 500 dash cram transferring wi-fi for road integrator maps and such Yeah, I I have no use case for that so I mean it feels like that's a better use case for a mobile phone Having it pull data from there because it's going to be More ideal, but I don't know I've never wanted of course I I say I never wanted it and then I bought a tesla now I have a dash cam um, I don't know and I've never really Yeah, I don't know. I guess it's kind of novel and I've seen people set up raspberry pies For example, even with the tesla. Uh, there's some raspberry pi projects. So you can stream your data To a raspberry pi that will hold all the data and when it comes in range of wi-fi Of course, you could put 5g on there You can then offload the data the biggest problem with the webcam data and why I wouldn't I wouldn't want to do it over mobiles just because Banned with unless you have an unlimited mobile plan that never throttles which isn't really how that works What's you know, if I like with ipv6 as parents are cgnat ipv6 dual stack parents are on 900 900 I have no idea and I'm not going to bother with ipv6 Matter of fact, I thought it was interesting I'll have to pull up the statistics cloudflare had some interesting stats for All the companies that have enabled ipv6, but all the traffic still goes to them ipv4 And if you try to turn off ipv4 it breaks things So I don't know anything that only works on ipv6 Besides some esoteric thing that someone set up or they're hardcore committed to it Got any thoughts unify six mesh coke can access points thinking again a couple in mesh mode I Don't know they work fine But unify supports mesh on a lot of different devices. So here's one of them. I mean, I've been using one for a while I've had this I've had it since it came out. I don't think I ever reviewed it One of I bought it Because I wanted one and we bought a couple of them for clients and they worked great But I never I never reviewed it, but it works perfectly fine and you I don't know why they call it mesh This is the confusing part because you don't need that device to mesh You have other devices that mesh Just the same so you can mesh with that device or you can use it as a wi-fi device But they've stuck the name mesh on there on a lot of like this one also can mesh This is u6 l r does not have mesh in the name, but it will mesh So It creates confusion to people. It's whether or not you turn the meshing on is what makes it mesh Not whether or not it's got mesh in its name. Welcome to unifies confusion that they've created Raspberry Pi attached to obd2 for coding my bmw. Yeah, no, that's a cool use case It's a sort of an aspect pf sense open sense sofas xg you can configure things like buffer bloat unify expect you can get into the detail Equally plus with the unify express. Yeah, the unify express is going to be and this is where I'll I'll land it is Unmistakably easy like it just works But the moment you go, but I want to make it work differently This is not the device for you if you have needs to do all kinds of specialized policy routing Not the device you should buy I'm it's one of those things of how I feel about unify you have to look at the features That you need and say does unify meet that or look at futures You'll need in a future like will I need advanced wire guard policy routing? You're not going to find that on the unify devices. You need failover not to have any headaches Well, that's not on there. You want a real high availability system. That's also now going way outside of it And I know they got shadow mode, but the shadow mode is like stupid It's I don't it's not really high availability at all. It's a warm standby that requires you to manually switch things over It's not high availability. It's convenience of not having to Set up a new system and get it up and running, but it's still downtime to do so And a lot of people are asking for high availability because the internet is so critical to anything that people do And you can do ha with pf sense with their lowest couple You can pair up a couple low n pf senses and have an ha system if you need it I use cloud for dns point to ha proxy and pf sense stops working when I turn on cloud for a proxy to hide my ap I have no idea. Um I've never tried attaching cloud flare Tunnels to an ha proxy instance.  I mean why use both would be my question I if I was going to set some things up that point at cloud flare tunnels They would just point at the cloud flare tunnels and I wouldn't bother with the uh extra step or complexity of ha proxy Any plans on checking more more amount of stuff? No I'm not impressed with them. They were they're slow to update on security.  It doesn't really get me excited about it. Um, but it's an alternative It's out there people want to use it. Um, I just don't really Not big on it What do you recommend for a thousand dollar budget chew nas home nas system will only be nas not running containers um I think brian moses does a great job.  I don't know what made them do this Uh, but brian moses he's got blogs on his chew nas builds That's the I don't really get into the budget ones. Most of the stuff we're doing I just don't do many budget ones. So I don't know Um, I have a lot of high-end ones.  And he researches and gives you links to all the best places and he builds them too. So, uh, check out briancmosis.com For chew nas builds Greetings, he tell me how to configure xcp and gv lands Uh, I have a video on xcp and gm vlands. Let me look How old is that video? There's probably a question. I don't have the answer to I think Let's see here Oh Three years old, but this is going to be completely relevant. Uh, I'll drop a link to this video It's defining vlands and xcp and gms and orchestra. So That video is now in the comments Agree with policy routing and do a way and forge you back a few i2 aces work perfectly with pf sense. Yep Uh, speaking of dns knows my iot do not use my local dns server Do you have a video showing how to capture all dns recurred lists of devices? hardcoded for It's not a video. It's if you're using pf sense There isn't Right up in pf sense, uh since dns redirect There are there you go. There's your pf sense pf sense redirect. It's the rules you can create in pf sense to make that work I have new fibrant connection with the modem router access point is difficult to relocate. Where do I need it? Uh, I can use one unify ap or both whan I don't understand but assume Where I need can I use one unify ap to both whan capture wi-fi and land? No Uh, that's not gonna. Well, I mean there's a way to make it. It would be really complicated far beyond the Time I have in this live stream to explain There's actually a way to to bridge different devices together create a series of separate vlands But it's not ideal to do it that way. Um, and it's complicated In reality, unifirex recipe purchased my parents that there's a potential wi-fi we turned off and watched the various ap's um You can use the wi-fi on it and the wi and an additional one as well how Much does xcp and g consume without bm? I want to try it after your videos on xema board, but i'm not sure yet since I don't have windows and linux mac is it worth a try I Don't like are you asking how much resources does it need? I can Pull it up in my lab here So let me pull the pool and share it You're at I think you're asking how much memory it needs Let's find out here So let me stop. Well, I don't need anything. I have to stop. I think I can just go into the system uh, it needs two and a half gigs for the os and the hypervisor to run so two and a half gigs The rest right now, this has got 32 gigs and we've got 10 gigs for time windows and My chasm server is running With uh 12 gigs of ram. I hoard data for posterity currently have a half a petabyte Uh, let's see on two separate devices analogy and qnap. I would likely I would like a file delivery only server And would like you ask your opinion. I want two petabytes file I don't know what you're asking You want a file delivery? What what is a file delivery server? You want to be able to send files to people? Defined file delivery server and I'll see what I can do to answer the question What up son? Okay, you just let me know All right Do you want to say hi to everyone on the live stream? Sure Oh, yeah, your voice sounds amazing. Oh, yeah Hello He's sick. Maybe you don't breathe on me Uh Just curious. How did you find our first year would actually be and why'd you start using it? Oh um So that's actually a I started if you dig around on my channel I I I wonder if I should take them down because sometimes I I like to leave videos up But when they're highly inaccurate Like the old citrix videos, they're not relevant anymore But if you dig around on my channel, you find some citrix videos We inherited some clients that were using citrix server And it worked really well. I was actually shocked at how well it worked And I was like, oh, this is actually pretty nice So we got a little bit of citrix and then we got to be friends with people at zen orchestra Because that's what was managing citrix then citrix did a dumb thing And when citrix was done being dumb Xcp and g was launched out of it and I became friends with the people at vates And I was pretty blown away with the Development cycle and from there we started doing a lot of consulting and now we're a number of years in to the consulting gigs Of xcp and g seen it operate at very large scales with thousands of virtual machines and be very manageable And uh, yeah, we've just been there since the product's been growing So I think we're probably five years in I have to look at what my oldest xcp and g video is But we might be as much as five years in and I will tell you it's been amazing working with the team Like the the people they are outstanding and really talented So that's kind of what's pushed it and the fact that they've got all the integrated backups into So boy, it just it just makes it really easy to manage and operate and do things at scale So yeah, that's uh, that's how we got into the whole xcp and g thing and still happy with it file delivery and so much that it all stores data And delivers what I need I don't need frills just storage and delivery You just want a place to store your files? My answer is always going to be true nas That's uh, the mold the world true nas is not lying when they say they are the world's most popular nas software They're the most popular open source nas software specifically I don't think anything is operating at like the number of installs that true nas is and they give you a hell A lot of features on there. Um, I like synologies. I think they make a good product as well I have several synologies, but the the true nas system for large-scale storage We we've sold petabytes and petabytes of storage all built on true nas. It's it scales. It works. It's a solid system So if that's what you're looking for, yeah Uh exosand v2 probably be out next year That's my assumption If you are running xcp and g production with windows servers are using vm for backups Or are you just relying on internal tools for xcp and g? Oh, this is the problem. Yes. Um A lot of times for consolidation will put things in vm because it's easier. So yes, we'll still run vm Uh, this is a complaint internally that we wish there was a Uh, vm integration So it all was in our one system. It changes the licensing Uh, because it's if vm could talk to the hypervisor directly It's going to be different than a vm talks to each individual Uh, vm, but that's the only solution for now I don't know if vm we'll see how the market shakes out with all the disruption being caused by vmware And xcp and g is definitely becoming more popular Maybe vm will write some software for it. The team of vates is not writing something for vm They're they're not going to do that. They're not going to dedicate resources to it Synology scales quite well, um But it can be challenging because the large scale synology servers you might buy Once you get into their rack station ones, they have some restrictions on which hard drives you can use And then usually someone who's saying they are data hoarding for the sake of data hoarding has a hodgepodge of hard drives As opposed to a more restricted list from synology Which leans people towards building out something with like a true nas I've choose surveillance stations. Mine are my parents parents's recording server linked to cms logged into primary We're not getting push notifications for remote cameras. They're way to fix this I don't know why you're not getting push notifications. I I have no problem in my push notifications. So because I don't have an error message to work off of I I don't know um The app seems to work fine for push notifications using I'm using the synologies Uh, what do they call that where you the name's eluding me at the moment? I should log in and look at it, but I have it set up So I'm using the quick connect with synology for that to work I don't know if the quick connect is why it works, but it does work the cms though The cms I've always found to be buggy unless it's local using cms across the internet I've never found works very well. I found it to go offline a lot That's why I've never recommended it Speaking of managing xcp and g at scale. What's your preferred method of managing client supplements?  One the the best way to do this and I could find it for you. I will I got the I just had this bookmark because someone else has the same question There we go You know, I'll drop a link for people. I like dropping links The best way to do it is a single xo instance and then use xo proxies the rest of the way I'm dropping a link to that. This is the page on it. Uh, it's One instance of xo a and clients having xo proxy I see a shirt you said ecc ran for sure. That's why most people say you should get it with your NAS Because bad ideas and myths live live on forever on the internet For that one person that claims they had a bit flip that cost them their zfs pool that didn't happen They had some other reason to cost them their zfs pool. It's a nice to have but it's not a required That's the thing. It's just not it's not required. That's the whole thing Do you run a vm server just clients? Uh, yes, we run vm server We have a but we have uh, so I think a few of our technicians are vm certified as well You may already have one terabyte in cloud storage. Uh, if you have any productivity software Yeah, that's true too You can disable chrome journey in the flags.  Um, what was your other question?  Sure. I mean It's really as easy as turning on their synology cloud connect But yes, you can high you can hire us for that You don't need true nas to work perfectly Okay You're responding to someone else there make sure I understand that If you're not using the cloud connect, I don't know if you get the notifications. That's the thing Um, the other the other problem is just to let you know like to hire us to help with it If there's some bug and the analogy has to be reloaded We'll spend the hours it takes to do that. Are you ready? You know, you're talking $200 an hour of our time To do that and if it's a bug that synology has to work through because they've got something messed up in a system We'll absolutely sit on the phone with the vendor for also $200 an hour I just warned people ahead of time. Sometimes you got to I mean soundly has support for these things and We will facilitate calling the support people and sitting on the phone But that does come at the price right now our base price for getting things done um Is 200 an hour, but I the the simple thing is I would be using their cloud connector Because I believe that's how it facilitates getting the data From your Synology to the push notification server at Synology then down to the app I'm almost positive. That's how that works So if you're not using the cloud connector, um, then I'm not then or just disconnect Uh disconnected and reconnect it But yeah, we can audit the settings and see if there's something obvious in there Uh fill out that hires form and uh, you'll get a you'll you'll go through the process and you'll get a booking link. Um You know looking at Synology you're looking at $200 an hour. That's just our base rate for uh looking at those Happy Saturday dbtech Thoughts on a new bait slices look they may be uh quite increased for someone having to buy support on each host Versus just buying actually, I think they're pretty cheap. I think they're doing a very good job under pricing for what you get So I think the the new bundled pricing that they're offering is solid. I talked about it on my last Blog thursday, I think Where did it go here? I can drop the link in There we go For anyone wondering And I'll share the link in the description here I think their pricing is very reasonable for what they're charging if you're looking at Just a basic small business plan, uh six tickets a year 24 hour response time $2,000 a year is pretty reasonable. Um for licensing on there for all the features. That's backup and everything That's the full xo that's Everything they offer so I think that's a very reasonable price And of course they have enterprise pricing. They have pro pricing They have you know, I just I dropped the link down there for people that want to take a closer look at it I found a single pc homeland box with proxmox pretty good plus debian plus devian Uh on devian seems to be a good combo for a lot of homeland workloads. Yes. I definitely think devian works great morning bret This is another myth people like to repeat one. I I have a video on how much memory it requires because One of my servers when you see I'll pull it up because this is this is that thing that goes that won't work But it works all day long. It works perfectly fine So if if the one terabyte of ram per One ter one gig of ram per terabyte of storage was actually true This server wouldn't work as well as it does. That's just a backup server. It's not fast But oh by the way, I seem to have five gigs free. I also seem to have um This is like a 30 terabyte. I think this is the 30 terabyte server I'm only using 12 terabytes of it. But obviously I've got more storage in here than Uh, the memory at least that formula is broken. So no, that's not true at all It was never true. But someone in the forums Said it confidently and people said that must be true. That must be how that works There's I should just do a separate video called myths of zfs Uh, have you got any questions regarding vmware migration? We have a ton of people asking questions about vmware migration About three weeks ago update pf blocker and was available if it didn't do updating Uh was worried about losing my free license pf blocker update completely vorked Fortunately, I stayed at the config before rebooting because os was gone after reboot weird Nicky was very good about helping me.  It's a free product where you get support You won't get on support on the machines. You don't license But you can talk to all the machines. You don't have license. It doesn't restrict you from that um, just throwing it out there if you buy the license, but You got to remember you're you're applying it to The machine for support. You're not going to get support on the other machines So you can buy the license for part of it or you can just buy a license for zen orchestra But the you won't get support But you get all the same features. So just throwing it out there Um You know in contact them though, they have a nonprofit and things like that Is there a good alternative to the unify ai theta? I don't know. I've not researched that Have I tested a standby for the dream machine? I didn't bother because it's dumb I don't have two dream machines and I looked at it and I said that's not great It's better than nothing and that's it Uh needs xcp ng A hardware it will work with the hardware read controller. It doesn't require a hardware read controller I'll give me a call once we see a vmware reveal new numbers. Uh Yeah I mean, here's the problem though of everyone wants their free thing and The open source world is full of dead bodies where uh, the community beat them to death with requests for support bandwidth bandwidth for hosting a project and eventually no revenue coming in to keep the development going forward You know, it's been a few episodes ago that I talked about the history of open source firewalls I mean that history went from lots of open source firewalls down to very very few because there's not enough money in maintaining it I don't know if you can use the Bluetooth unlock doors. I'm not sure about that. I have not looked up or kept up with all the changes to the unify. Um Door access system So to use unify or pf sense for your personal home firewall Oh pf sense pf sense gives me way more flexibility But for testing reasons, I've got the Unify express Because i'm testing it because you know, here's the thing I may like pf sense a lot But if you were to ask me who would I install at someone's house that I don't manage It's not going to be it's not going to be a pf sense that I have to update I don't want to do it and if they're not paying me to do it. Sorry and you know, even my daughter She's got a dream machine. Why does she have a dream machine because it works it auto updates She just plays video games. My daughter doesn't work in tech And so at her house, she is perfectly fine music This is a great like home recommendation And they that's where I think that they really kill it right here. This is like, hey, you need these features at home Here you go This is a nice little box for doing exactly that I think they really did a good job of it. I like the form factor I like that it auto updates by default all the right things good home user stuff. So Oh, yeah, ip beat cop for sure Uh, definitely less secure to run your cameras over wi-fi.  Um, if I knew you're having a wi-fi camera So do we have the average criminal that you're trying to capture on camera? With those tools, maybe there's some that's not it's not zero And it's definitely more every day because tools that make noise to disrupt your wi-fi exist And they're not expensive. So it is a consideration that you have on there Um How likely is it to happen? I don't know. Um that that's a It's a how what's your risk tolerance is how you answer that question My risk tolerance says the problem with and this is my my concern with wi-fi cameras is Partly the disruptive part but way more. How am I going to power them?  How am I going to power all those cameras? The only way I can really power those cameras is Let me pull them up real quick so if I Go into my cameras and pull up the monitor here You know, I need to be able to get power to the core So I can You know, look at my backyard And the only way I can do that is poe or run power to it If I'm going to go through the trouble of running power to it. I may as well run a poe. Oh look a squirrel We'll watch we'll watch that i'm distracted by a squirrel Ha ha literally squirrel Uh the unified door access and bluetooth on iphone's at least is not fully there as far as you know. Yeah um What steps do you tense would you take to make pf sense next gen hope since guys have zen armor Which seems to do a lot of stuff automatically Yeah, um, I wouldn't recommend pf sense for layer seven. That's if you need layer seven You don't use pf sense. That's that's my answer to anyone who asks same answer all the time So getting over the first dream machine release. So it won't be beta testing and dual setup Although their latest network system is more solid. Yes Our org saw the writing on a wall when broad cam first announced the acquisition We're sitting happy a year of migrations on new tanix. Yeah Does xc would you have a concept to share cluster storage for isos and vms or do you have to um I mean You can do xo sand. That's that is their clustered storage. So yes, if you That's an option they have xo sand is a paid feature though. That's when I say xcp and g and zen orcs are free xo sand is the one Paid feature inside of there that you can't just grab the source code for I always boss have this all ring cameras went offline during a car break into their car. Yeah I mean, that's it. It's the thing I got a bmw current as many cameras are wired. I actually have both ring and other Sophos xg does have some of the layer seven features Is that how do you pronounce that travis? So it would be kisi? I'm curious So travis has actually worked with the kisi system I have not I thought one giga ram per drive. I'm sure you're talking about shurnass. No, it's not Wonder what the next big tech acquisition obis deal got abandoned. We don't need more big tech acquisitions Could you maybe show what add-on g running your pf sensebox? I run pf blocker That's it. That's I mean, I like end top if you need monitoring end top is cool other than that. It's end top and Pf blocker, that's that's it I bounce between sysco muraki sofos and pf sense for my home firewalls. Hey, you know Bounce around between them. That's what that's how you learn Do you know a good solution to put my game pc in a basement 20 feet away? Heat seems to be an issue on the main floor during the summer Good solution to put my game pc in the basement Get the drill What list do I use in pf blocker? I think the only thing I use Let's log in and look People are going to be disappointed to learn this And maybe I'll do an updated video on it. I'm not using dnsbl at all Sorry, so this is turned off. So I don't care about these lists. Um ip wise I got I've been goofing with it. So let me see if Yeah, I use the g.o.i.p and uh The tour So tour is turned off Actually, I don't yeah Tour and g.o.i.p. Is all I'm using Do you recommend using technology for secret agreements and any thoughts on blue iris? I don't want to run windows. So I'm not running blue iris. I've liked Synology, it's a solid nas solution. It's a solid security solution blue iris works fine People seem to be happy with it that use it. Uh, it has a lot of tinkering you can do in it Why pf blocker over aggard because it's built in a pf sense I don't have to run a separate system and I don't care about aggarder piehole features They don't matter to me. Um, I block things in the browser It's way easier to deal with using like ublock It's that way if I have a site that has a problem. I'm not going and logging into anything I'm just doing it all right through ublock Kisi has a has her, of course, but it's all cloud managed to bounce between pf sense open sense, uh, and ditched untangle Any idea why otc to affair separate page now in the latest version of true nascale added security? I don't know The maybe Maybe make it harder to attack. That's my guess Because you got to go through more numerous screens. I don't know You probably go through their lot change log and maybe there's a reason noted somewhere Look under like ui fixes or ui changes in their jira They use jira and their development's open There'll be someone's notes in there of why they changed it. They don't change things for no reason at all or maybe they do I well, no, they don't change for no reason. They change them for somebody's reason Maybe that reason resonates with you. Maybe it doesn't Uh, I'm not either use ip lists. See if I can't buy a list from telos outside of snort You know the problem is we Here's a good security example. Um in talking about this It's the the lists are always behind. They're constantly behind The problem is we had a client get, you know, they clicked on some stuff and they downloaded right from being A virus essentially that tried to install a rat on their system So we tried to get remote access It was downloaded directly from being which created some confusion at first until I looked at the logs directly I'm like, oh being shows you the file unless you download it and Well, the problem is the ip address is it contacted. Let's pull them up real quick I have I have a note on those. So let me Pull up the security incident All right, go here But the ip's at the time of the event. We're not on there. Uh, this is just virus total So this is the you know the contacted domains here The ip addresses it reached out to they're marked malicious now, but when we actually oh this one's still not Oh, that's part of well this one this one's part of akamai is why You can't mark it as malicious because you if you if you block these um Things as malicious they aren't going to there you'll break the internet if you break cloud content delivery networks from akamai and cloud player but Yeah, when you start looking at all the files all the reaches everywhere the contact to URLs are these weren't even marked malicious anywhere I am the first person to even submit this and this client found it from bing So, yeah, I'm not huge like those lists like I don't they don't give me the warm fuzzies that they're really good I actually didn't get the drill pcs in the basement at the end of a 25 foot hdmi usb cables. I can't say I recommend this Uh, I don't watch I quit watching tv 13 years ago probably. Um, that's that's 13 or 14 years It goes last time I had cable tv Oh, wow, it's been longer than that now I think I got rid of cable tv around 2006 or 7 so I don't I watch very little tv. I watch some streaming. Um Yeah, I don't watch I don't watch a lot of tv in general I use the ip block list and png cool Don't know how bad it until there's a vent and such. Yeah, we deal with events. That's how I know how bad it is That's the automatic graph inside there that'll open things up Um Do you think crowd sec is better than static list? I think both crowd sec and sent a one are still probably your front runners for things For doing that. I'm but i'm still a bigger fan of huntress. I think huntress has the best team out there When it comes to edr crowdshark crowdshark, it's got a good team Sent a one's pretty good. We've been annoyed at some of the false positives But sent a one's not a bad not a bad product We use sent a one ourselves but hands down huntress is still my favorite product I trust their team the best Uh, this goes this was always wrong when I managed uh search for our setup a couple years ago It was always allowing sites that were categorized wrong. Yeah, probably Need a decent endpoint protection even those behind uh shame Even those behind though are same. Um, yeah huntress hands down is the best I only have tv thing for fall football and then I revert back to hulu back to just basic streaming.  Yes crowd sec is really good. I completely read that as crowd strike My bad, but I know I said the words crowd sec in my head. It went to crowd strike crowd sec is awesome Yeah, crowd uh crowd sec is coming for pfsense They are and yes, no huntress is not for home users Sports junkie here have all the streaming services You know, it's interesting because I don't know what the future holds because my my kids. Um, there's sports junkies too Esports and that's all the online It's funny because I don't people don't always realize that the biggest sporting events of today the super bowl the Is world world series is still a thing, right? I don't watch any sports, obviously But if you started combining all those together, they don't hold a candle to the scale that esports operates at now It's it's actually kind of funny. People don't realize that You look at like oh hulu. They're a big place, right? They look like a rounding error when you compare them to the scale and scope that youtube operates at as far as users. So, yeah, that's um It's it's going to be a different world in the next over the next 10 years Uh, yep pop o s is still my favorite for personal use Crowd sec is pretty much dns filtering crowd sec is not at all dns filtering crowd sec is ip block listing based on reputation Crowd sec is an ip reputation company. Let's see Where else does that one reach out to we're gonna keep Follow an execution pass because it's entertaining Look at all the pdfs this thing has in it These are fun. Ooh collections that contain this domain interesting This is just a reach out to adobe. This part's not malicious because it spawns adobe acrobat um Files zip Can we open this one up too? What other files is this? There we go There's the files this drops one of these files This is fun to play you can do this on i'm doing this on the free account if you haven't played with it before It's kind of fun You mentioned any videos, uh, you got in trouble ubiquity due to your critic review of their products You let us know some of the disadvantage of their products.   Um I have one windows lab machine And then my wife runs windows for work on a computer provided to her My son's gaming computer. My gaming computer are both windows There's all the windows machines. There's crowds like a replacement. No Because it I mean I don't know if they block tor for example And they block what they block you don't get to choose your block list. You choose the block list So it's not going to be as granular. I don't think um So you may want to run both Uh, what was the data source? Oh uploading a virus was the data source Just join what we're looking at. Um, this let me go back over to it This is just virus total. Um, you can upload viruses and View, uh, you can go through and view them. This you just signed up for a free account To this but literally this is just virus total This is the file I started with um for the detections It was called tractor maintenance month report And when I first uploaded it I uploaded it, um Last analysis four days ago, but it's about a week a little over a week ago Let's see. Oh, we can actually search for more. Oh, that's paid Those all require paid features. I'll say I can use I'm just using a free version here But you can you can go inside here and dig around and you can find the different relations behaviors Um, I I like the free accounts for these uh for these things For contacted ip's then you can that's how I bring it over to the graph so we can Break out these ip's Oh, man. I'm doing it completely wrong Here we go Here's the here's the file I was talking about here It's just a virus total link. You can find this Any clients running new tanks oddly we have zero clients that I'm aware of We have over well, I mean between not just the consulting clients But like the contract it clients is like I think 120 or so Zero of them have new tanix lots of them have vmware What about the power distribution pro? Um, I don't remember if that one's less dumb, but I found them all dumb One of the problems is they'll they'll take over a power supply But they won't power a system if it goes down Uh, if you power cycle it I thought that was stupid Are there fiber h fiber hd my cables probably have better experience at that distance I missed the name of the software you just posted um virus total Who caught it both s1 and huntress so both both triggered on the alert Can xcp and g do converge storage like b-san? Uh, yes, you it's called xo san is Didn't you ask this question yesterday or thursday is running true dance with hba card pass through and a vm the same as bread metal Not really. There's always extra overhead that the hypervisor is going to create and may or may not create problems Um No, we don't run any bios systems We run we run some really high-end sysco stuff for that but not nothing bios Oh xo store not xo san I'll go to the way it's on their website So I get it right Here we go It is xo store. I was definitely saying it wrong Commercial release coming soon hyper converter solution. So yes I can stop saying it wrong They've really they've done such a nice job under pages. I actually love the design aesthetic they follow I wish manufacturers, uh Can take honest feedback I'm fine with it because now no one complains.  I'm no one that chose to buy the product to review now Ha ha ha Uh talking about windows when windows 10 reaches end of life There's going to be millions of home PCs that won't have windows 11 hard requirement They're going to go linux home labs or newest servers computers are so cheap I think people are just going to buy new computers most of the time It drives hardware sales for sure It drives e-waste because there's a lot of times nothing wrong with those but a lot of people won't bother to reload it They'll say oh, it's expired. They'll use it until it gets infected or has a real problem And then they'll do something about it Oh, yeah, why didn't I review the much better rgb max ultra pole switch? Well because i'm choosing where to spend my money and my money. I wasn't uh Choosing to spend my money on that. I like rgb. I might buy one because I think I like rgb Um, but it'll be my choice to buy one not review it. Let's see here Closing all the windows I have open that way when I'm looking at things. I don't have to search as much There's a lot of things I have open I don't need these open. There we go closed all those You know, I I'm going to give these people a mention because I think they make a neat product, but I'll admit I should take money from them They offer they offer to sponsor this this is so I have not said yes to the sponsorship I like to test out the product first Um, I am running this in there Uh We'll answer a few questions before I show you real quick Just the opportunity to manage 60k virtualization stack was excited xcpg on it. Unfortunately the customer first proxmox and the customer is Is the creator of seph.  They fall short. Yes Uh, people make fun of rgb switch, but I definitely see the utility. I don't see the utility It is not that common of a problem I guess the one time the use case I have is really simple If I forget my glasses Everything's a little blurry right now and you tried to get tom to plug something into the right port There's a chance if I forgot my glasses I may not get it in the right port, but if you color code the port that's handy So their their use case is uh people that need glasses to see things up close like me That's that's their that's their target audience And see I'm not sponsored by them and they didn't I can say anything I want Label yes Label your ports physical and touch I label everything And guess what I don't move them that often My desktop distro because people are asking um always it's been popo s for years And I don't have any plans on changing that Thank you for your hands down down to earth interest and youtube videos. Happy holidays all you awesome. Thank you Being able to make uh make a port you are looking at flash is pretty useful making a flash or several There's switches that do that that's easy enough, but it's we actually looked it up We were trying to figure out how often that we're ever changing things Um across all of our client base and yeah, just not really a thing Um, but I want to mention this because I just thought it was really novel and maybe some of you might find it novel as well And that's chasm They they want to sponsor a video and I haven't said yes yet But this is just cool because it's all disposable desktops and we'll say Uh current Yeah current tab sounds fine. Um, they're disposable instances of different things And I I find it's really novel for me being able to spin something up Actually may confirm something here Because I've been shuffling things around this morning. Make sure they're all back where they belong And they are sweet So these are disposable Uh tabs i've set up in here I Jay's jay from one link cb already has a video on this topic So it's not that new and yes this ip address puts me in switzerland because it's all set up behind a vpn But if you ever needed a browser that also can run in a browser, so we've now Taken the browser running it in a browser And then it allows me to have a disposable browser to go to shady websites and test things And then when i'm done and close the browser it all goes away and gets wiped and everything starts over It's really slick how this works. It's actually streaming this So this isn't running It's running in my browser via a stream. It's actually running on my chasm box And I just think they made this is such a neat idea. I didn't get it at first Uh, but once I started using it. I'm like, oh, this is This is a really slick tool uh chasm web.com is their website for this but if you haven't played with it I would Really recommend checking it out. It's not exactly similar to cubes cubes is cubes works very different than chasm Cabin chasm runs as a server and when you run that server you get this ability to Stream it within that server matter of fact let me uh So delete this session It's going to destroy the session And let's fire up a cali linux session Current tab launch So now we're going to instantly spin up Boom. Here's a cali linux instance for me And it's also um behind A vpn I think we can do city Yeah, I think some in xeruk How do we make that? I think I can do this Oh, cool. It takes the browser commands. So there So if I wanted to go do something in here, absolutely I can do I have this instantly running cali linux with lots of tools in it So we can start doing assessments start pulling some data and when i'm done It leaves no trace. So I go over here And uh delete the session It's gone. It's going to destroy the session. What if I need to pop up on the tor browser? Well, I can do that too Let's launch tor So we're going to create a tor connection And this will let me know once this is established and then I can start Instantly looking at things on tor but when i'm done it all goes away And there's no way for it to escape here to get somewhere else because these sessions are all very contained Pretty cool though. Yeah, I've never used the ar thing Uh, is there any place we can Computer sent is there any good use place condition business computers 10 years old? We just dump them in the trash or removing hard disk And I think it's waste We take everything to recyclers Um, I had a co-worker unplugged the switch because the color of the light couldn't tell service power supply. Yeah So what's not sponsored? Do you want to show off is uh chasm that right there? Uh, is it safe to use headscale and production? I don't know that it's been code tested very well I don't know if there's any bugs in it. I I can't answer that from a securities perspective because I've never done a code Review of it and I don't know if anyone has Um, it seems to work. I know a lot of people that seem to run it. But yeah, that's different chasm is pretty cool Chasm is more people liking chasm here Uh, chasm's goal doesn't seem to work well remotely been tinkering with quite a bit You can make the can containers persistent if you need to yes, you can Homeland three years ago. I picked up a one u kvm switch Uh from local recycler. It died was looking for replacement. Uh, yeah, the bligh kvm is good That's another option is a bligh kvm. I had to update neck 8 15 37 It failed to update 20 through 9 due to adding a card and device which changed the signature. Huh interesting How can I reset root password? I forgot everything online doesn't work. Um You have to there's there's instructions on or more. I love if you look you Um, try to think of the best site to do it There's there's a ton of instructions of how to boot off of a rescue seat look for rescuing System so you can do that. That's probably the best way to do it Chasm v and c is cool You can have a docker firefox. Yes I'm self hosting it. Yes Uh thoughts on unrated. I don't feel like I hear or recommend it often I think it's falling out of popularity. Um, it homemade seems to be really popular amongst home users But you can outgrow it. It's not as robust as true nas But it does have some niche features with the way it runs some containers that make people really happy I've never used it. I don't plan to use it. Um, it doesn't scale to what I need and it doesn't have the performance I need so I don't have a use case for it Yeah, j did a review of chasm. Uh, it's solid It's it says it's a neat. I'll throw a throw it in here I'll give a shout out even though they didn't sponsor me because I did I didn't reply to them They've asked they've reached out to me and I didn't reply Oh, my wife wants to know my thoughts and go to Ikea. Yeah, I was just thinking about winding this down It's been going for an hour and 20 minutes. So you're ready to go to Ikea, honey I like that. My wife has joined a live stream. She must be between tv shows Uh, big on raid fan awesome I don't like the Ikea meatballs Let's give an opinion poll on the Ikea meatballs. Oh, that's my wife. Do you like the white? Do you like the Ikea? Meatballs. I actually I like the fish Actually, there's another question. What are we going to eat while we're out there? Are we going to go to eat at Ikea or should we stop at an indian place while we're out there? There's some good indian food right by Ikea Never had I don't I don't recommend Going to Ikea for food. It's not the food place, but it's definitely a good place for other things The um, I've got a whole office tour that I've done and let me pull this up real quick We got to talk about where we're buying at Ikea before I get off this live stream. Where is it at? Because I sent it to Brett There we go These this is actually what I'm getting from Ikea for anyone wondering. Oh, this is how I build all my benches I I like Ikea countertops um So this is what my current Desk is built out of I'm getting a wider one to build my workspace that way all my stuff is universally the same in here I just like doing it myself and using built-ins. They make really affordable solid kitchen countertop stuff and I like the wood that keeps with the theme I have here in my office So that that's where my next trip is I like I you know what I do like a good hot dog. I'm not gonna lie I made a work bunch out of one of those. Yeah Uh, would you add RGB to the table? Maybe You like Swedish meatballs, but the Ikea ones are see I I think that Probably if I went to Sweden, I would get really really good meatballs. I don't think that the furniture store is the Proper representation of how good Swedish meatballs probably are because I mean I've heard they're good But I just think with furniture stores. It's like I don't know They primarily are a furniture store not a food store throwing it out there. So But now all of you have made me hungry and I realize I need to eat That being said I'm going to wind this live stream down And maybe I'll do a Christmas Eve live stream. I don't know these are fun I like doing live streams and now that I have a way to Uh, go back apply some AI tools and index them for people that don't want to watch me babble for an hour and 20 20 hour and 22 minutes and find all the time indexes for the things I talked about And uh, that is going forward in the future. I will get that done I just gotta I just gotta automate the workflow on it, but it's not gonna be too hard to do When food becomes the main part of streaming time to quit. Yes Yes, I mean I like answering everyone's questions. It's always fun to engage with everyone, but Thanks everyone for joining. This was awesome. This was fun and uh, take care We have planned. Well, no, I'll do it Christmas Eve morning That's that's the solution Christmas Eve morning. I will do this So enjoy everyone and for some reason my way finds the task for me that doesn't have me doing this Christmas Eve morning I will see you on Thursday. So have happy holidays. Merry Christmas and all that fun stuff later Oh, uh, sign up for my newsletter at lauren systems.com