News for hackers. Stuff that matters.
Re:The curious case of the Raspberry Pi in the network close... by liquidgecka on Monday January 08, 2024 @03:40PM (#38917782)
I saw the title and instantly thought of the "Load bearing mac mini" at Twitter.

In our server closet there was a mac mini sitting on another rack mounted server and plugged directly into a switch. IT found it, asked around and nobody knew what it was, so they unpugged it. Immediately the whole of engineering and support were basically offline.

Despite the thing looking suspicious as possible, I had set this thing up as an employee a year before. We were not allowed direct network access to our hosted prod network so as a "stop gap" I setup a SSH tunnel that listened on the mini's IP. At first we used this for access to the support web interface so it could be taken off the internet. At the time my request for a server was rejected. One by one more things got added to the list of things proxied over the device, eventually including basically all internal pages, git access, and about a dozen other random services. I finally got it moved into the server room, but not to real hardware. Once we built a DC we got peered access and the mini finally died.

Re:The curious case of the Raspberry Pi in the network close... by SoftTalker on Monday January 08, 2024 @04:39PM (#38918570)
Also proving yet again that the best way to find out if something is in use is to unplug it and see who complains.
Re:The curious case of the Raspberry Pi in the network close... by gurchik on Monday January 08, 2024 @04:44PM (#38918622)
So-called "scream test."
Re:The curious case of the Raspberry Pi in the network close... by shagie on Monday January 08, 2024 @05:00PM (#38918800)
There was an article by Microsoft back in November about their scream tests - https://www.microsoft.com/insidetrack/blog/microsoft-uses-a-...
Re:The curious case of the Raspberry Pi in the network close... by notnaut on Tuesday January 09, 2024 @12:58AM (#38922897)
They have about 8 layers of useless customer service acting as ear muffs to deafen the noise, is the problem I’ve had when screaming at them.
Re:The curious case of the Raspberry Pi in the network close... by csmattryder on Monday January 08, 2024 @04:49PM (#38918681)
Chesterton yelling from miles away "that's my damn fence, you moron!"
Re:The curious case of the Raspberry Pi in the network close... by Booourns on Monday January 08, 2024 @05:31PM (#38919244)
I once took over a decommissioning project of a DMZ set up for a connection to a third party no longer used. Everything documented showed that all connections were no longer active.

Step 1 was to do the ‘scream test’. Some how the enterprise routed the most random traffic through there as we took offline random servers and people’s desktops. Turns out the screaming that happens is at you for making things break instead of a pat on the back for discovering bad networking.

Re:The curious case of the Raspberry Pi in the network close... by euroderf on Tuesday January 09, 2024 @04:05AM (#38923895)
The information technology equivalent of popping pimples.
Re:The curious case of the Raspberry Pi in the network close... by tengwar2 on Monday January 08, 2024 @10:14PM (#38921819)
It's an effective way, but generally a very bad one. I used to work in telecoms, and some idiot took down a tunnel between the UK and Germany carrying 1kB/s of RADIUS traffic because someone (the idiot) owned the link it ran on and had failed to record the formal allocation of this tunnel to a production customer-facing public access WiFi service I ran. I on the other had remembered to record his telephone number and his boss's telephone number, and a certain amount of screaming went on. Moral: before doing a scream test, make sure your own documentation is watertight.
Re:The curious case of the Raspberry Pi in the network close... by yjftsjthsd-h on Monday January 08, 2024 @04:01PM (#38918048)
> so as a "stop gap"

There's Nothing as Permanent as a Temporary Solution™:)

Re:The curious case of the Raspberry Pi in the network close... by voiceblue on Monday January 08, 2024 @06:15PM (#38919825)
As immortalized by my favorite case[0] from the codeless code (based on real code [1] from Apollo 11).

[0] http://thecodelesscode.com/case/234

[1] https://github.com/chrislgarry/Apollo-11/blob/master/Luminar...

Re:The curious case of the Raspberry Pi in the network close... by luca3v on Tuesday January 09, 2024 @02:43AM (#38923473)
Somewhat relatex XKCD: https://xkcd.com/2730/
Re:The curious case of the Raspberry Pi in the network close... by orenlindsey on Monday January 08, 2024 @04:06PM (#38918120)
I always thought the load bearing Mac mini was a myth, it's such an impossible story and it's been so widely shared. I guess it's just a case of programmers taking the easiest route and having it backfire.
Re:The curious case of the Raspberry Pi in the network close... by dijit on Monday January 08, 2024 @04:15PM (#38918246)
Things like this happen all the time.

"Shadow IT" is the official name for circumstances that lead to this and it's the consequence of:

A) Deprioritising "non-urgent" but "important" tasks consistently

and

B) IT being bureaucratic and/or unable to allocate budget

I had a Mac Pro (trashcan) at Ubisoft that was the only way people were able to play our studios live game from within the office. (Ubisoft had a "NO OUTBOUND CONNECTIONS TO INTERNET" policy for Studios)

That same Mac Pro was running our internal slack bot to run Maintenances (and, insult people).

I left Ubisoft 5 years ago, as far as I know that Mac Pro is still plugged in on my former desk chugging along, last time I asked my former manager about it was last year.

----

At another company (now owned by Oracle), we had an internal IRC (this was before Slack) and nobody thought about it.

One day it went down, and traceroute had indicated it was in our server room; after checking every single server we could not find it, until someone noticed an ethernet cable that went through a run into the floor but didn't come back out.

After opening the suspended floor we noticed a laptop running Solaris. That was our IRCd and the OS had an uptime of close to 8 years.

Re:The curious case of the Raspberry Pi in the network close... by lostlogin on Monday January 08, 2024 @04:48PM (#38918668)
> Shadow IT

Universities seem to install unlimited hurdles to achieving anything. The stuff staff and students do within the network to make shit work is amazing.

Re:The curious case of the Raspberry Pi in the network close... by Aerbil313 on Wednesday January 10, 2024 @03:21PM (#38942575)
Yet they forget to put a password to BIOS so I am able to write this comment from a school computer, on NixOS running from a USB drive. Though I'd probably crack it even if they did.
Re:The curious case of the Raspberry Pi in the network close... by stefan_ on Monday January 08, 2024 @04:28PM (#38918421)
Don’t forget IT ignorance. A lot of places IT is full of Microsoft MVPs that have no understanding of the needs of people developing in and for Linux systems.
Re:The curious case of the Raspberry Pi in the network close... by gmfawcett on Monday January 08, 2024 @07:53PM (#38920781)
Ah, never attribute to malice or incompetence that which can be attributed to the pain response from trying to secure a heterogeneous OS environment.
Re:The curious case of the Raspberry Pi in the network close... by DiggyJohnson on Monday January 08, 2024 @04:36PM (#38918520)
Ding ding ding. So much friction from this factor alone.
Re:The curious case of the Raspberry Pi in the network close... by echohack5 on Monday January 08, 2024 @04:19PM (#38918294)
> request was denied

> mac mini proxy server

I love that the programmer's solution is more expensive than doing it the right way had OP's request been approved.

Re:The curious case of the Raspberry Pi in the network close... by liquidgecka on Monday January 08, 2024 @05:20PM (#38919095)
... At the end of the the deal with had two mac mini's with auto fail over configured via health checking. Thank goodness we got rid of the service provider that refused to let us pair with the network. Once that happened the networking team could just do normal peering with a standard router.

But yea, in the early days that mac sat on my desk. It only got moved when I pointed out the issue to our new security team and their jaw hit the floor. =)

Re:The curious case of the Raspberry Pi in the network close... by tomjakubowski on Monday January 08, 2024 @04:25PM (#38918390)
I would have thought so too, before I worked on a team where we had our own load-bearing Mac Mini installed at a client site - in that case, load-bearing for A/V reasons (no one was able to get PulseAudio working in time).

Client's IT loved to unplug that thing.

Re:The curious case of the Raspberry Pi in the network close... by NavinF on Monday January 08, 2024 @04:21PM (#38918328)
I think it was pretty common in the 2000s when devs could't provision machines/VMs without asking for permission
Re:The curious case of the Raspberry Pi in the network close... by SoftTalker on Monday January 08, 2024 @04:41PM (#38918597)
Also when you could just plug something into a switch and a) the port is active and b) it goes unnoticed.

Probably still the case in a lot of startups.

Re:The curious case of the Raspberry Pi in the network close... by liquidgecka on Monday January 08, 2024 @05:22PM (#38919121)
Most startups I deal with these days don't even have offices anymore, let alone network ports. =)

But yea.. same deal with wifi. Its amazing how often the wifi password is posted on something visible. In fact I have found the password in so many public images which means somebody on the street could just connect to the wifi network fomr the street.

Re:The curious case of the Raspberry Pi in the network close... by NavinF on Monday January 08, 2024 @10:57PM (#38922118)
That's only a denial of service issue, not a security issue. Wifi is too cheap to meter
Re:The curious case of the Raspberry Pi in the network close... by crtasm on Monday January 08, 2024 @11:18PM (#38922254)
Unknown persons getting onto the company wifi is not a security concern?
Re:The curious case of the Raspberry Pi in the network close... by lmm on Tuesday January 09, 2024 @12:33AM (#38922733)
It shouldn't be. Treat the network as public, require credentials for any access whether it comes from inside or outside.
Re:The curious case of the Raspberry Pi in the network close... by woleium on Tuesday January 09, 2024 @12:00AM (#38922523)
With work from home the security perimeter is the machine. All networks are untrusted.
Re:The curious case of the Raspberry Pi in the network close... by NavinF on Tuesday January 09, 2024 @03:07AM (#38923593)
Correct. Company wifi is just like any other network. Why would there be any services on it that don't use encryption and authentication?
Re:The curious case of the Raspberry Pi in the network close... by crtasm on Tuesday January 09, 2024 @05:50PM (#38933440)
In the context of this thread - how many startups do you think strictly adhere to best practices?
Re:The curious case of the Raspberry Pi in the network close... by NavinF on Wednesday January 10, 2024 @04:47PM (#38943706)
In this context, almost all of them? The whole concept of a "secure network" is very enterprisey
Re:The curious case of the Raspberry Pi in the network close... by JohnFen on Wednesday January 10, 2024 @03:31PM (#38942680)
> I guess it's just a case of programmers taking the easiest route and having it backfire.

Or a case of IT not actually providing needed services. That, too, is more common than it should be.

Re:The curious case of the Raspberry Pi in the network close... by hinkley on Monday January 08, 2024 @06:39PM (#38920116)
One of the last contracts I worked, they provided such awful hardware that the company and employees ended up BYOD. Not enough memory for a modern IDE to start up levels of awful.

As the project ramped down they ended up having to buy an iMac off of us. Someone stopped using it and before the case even got cold I had installed a CI build agent on it to run Karma tests. Which ended up being invaluable but also never managed to get replaced with a real piece of hardware. So they just dragged that thing around as the project went into maintenance.

Re:The curious case of the Raspberry Pi in the network close... by neilv on Monday January 08, 2024 @09:24PM (#38921449)
I consider the labelmaker to be a crucial item of sysadmin gear. :)
Re:The curious case of the Raspberry Pi in the network close... by davely on Monday January 08, 2024 @11:19PM (#38922263)
To ensure no one will ever touch it, you can pull the hardware equivalent of adding a comment to a piece of code:

// AUTOGENERATED DO NOT DELETE

Re:The curious case of the Raspberry Pi in the network close... by majewsky on Tuesday January 09, 2024 @04:34AM (#38924078)
We have a labelmaker in our hackerspace. The box containing it has a label on it "Please do not print unnecessary labels". Below it is a label reading "ok". :)