Best Option Strategy Ever-Secret Revealed

[Free kindle ebook] Binary Options Trading – A Strategy Guaranteed To Beat The Brokers In 15 Minutes Flat by Jon McFarlane

[Free kindle ebook] Binary Options Trading – A Strategy Guaranteed To Beat The Brokers In 15 Minutes Flat by Jon McFarlane submitted by sasikumarbe to FreebooksUK [link] [comments]

Part 2: Tools & Info for Sysadmins - Mega List of Tips, Tools, Books, Blogs & More

(continued from part 1)
Unlocker is a tool to help delete those irritating locked files that give you an error message like "cannot delete file" or "access is denied." It helps with killing processes, unloading DLLs, deleting index.dat files, as well as unlocking, deleting, renaming, and moving locked files—typically without requiring a reboot.
IIS Crypto's newest version adds advanced settings; registry backup; new, simpler templates; support for Windows Server 2019 and more. This tool lets you enable or disable protocols, ciphers, hashes and key exchange algorithms on Windows and reorder SSL/TLS cipher suites from IIS, change advanced settings, implement best practices with a single click, create custom templates and test your website. Available in both command line and GUI versions.
RocketDock is an application launcher with a clean interface that lets you drag/drop shortcuts for easy access and minimize windows to the dock. Features running application indicators, multi-monitor support, alpha-blended PNG and ICO icons, auto-hide and popup on mouse over, positioning and layering options. Fully customizable, portable, and compatible with MobyDock, ObjectDock, RK Launcher and Y'z Dock skins. Works even on slower computers and is Unicode compliant. Suggested by lieutenantcigarette: "If you like the dock on MacOS but prefer to use Windows, RocketDock has you covered. A superb and highly customisable dock that you can add your favourites to for easy and elegant access."
Baby FTP Server offers only the basics, but with the power to serve as a foundation for a more-complex server. Features include multi-threading, a real-time server log, support for PASV and non-PASV mode, ability to set permissions for download/upload/rename/delete/create directory. Only allows anonymous connections. Our thanks to FatherPrax for suggesting this one.
Strace is a Linux diagnostic, debugging and instructional userspace tool with a traditional command-line interface. Uses the ptrace kernel feature to monitor and tamper with interactions between processes and the kernel, including system calls, signal deliveries and changes of process state.
exa is a small, fast replacement for ls with more features and better defaults. It uses colors to distinguish file types and metadata, and it recognizes symlinks, extended attributes and Git. All in one single binary. phils_lab describes it as "'ls' on steroids, written in Rust."
rsync is a faster file transfer program for Unix to bring remote files into sync. It sends just the differences in the files across the link, without requiring both sets of files to be present at one of the ends. Suggested by zorinlynx, who adds that "rsync is GODLY for moving data around efficiently. And if an rsync is interrupted, just run it again."
Matter Wiki is a simple WYSIWYG wiki that can help teams store and collaborate. Every article gets filed under a topic, transparently, so you can tell who made what changes to which document and when. Thanks to bciar-iwdc for the recommendation.
LockHunter is a file unlocking tool that enables you to delete files that are being blocked for unknown reasons. Can be useful for fighting malware and other programs that are causing trouble. Deletes files into the recycle bin so you can restore them if necessary. Chucky2401 finds it preferable to Unlocker, "since I am on Windows 7. There are no new updates since July 2017, but the last beta was in June of this year."
aria2 is a lightweight multi-source command-line download utility that supports HTTP/HTTPS, FTP, SFTP, BitTorrent and Metalink. It can be manipulated via built-in JSON-RPC and XML-RPC interfaces. Recommended by jftuga, who appreciates it as a "cross-platform command line downloader (similar to wget or curl), but with the -x option can run a segmented download of a single file to increase throughput."
Free Services
Temp-Mail allows you to receive email at a temporary address that self-destructs after a certain period of time. Outwit all the forums, Wi-Fi owners, websites and blogs that insist you register to use them. Petti-The-Yeti says, "I don't give any company my direct email anymore. If I want to trial something but they ask for an email signup, I just grab a temporary email from here, sign up with it, and wait for the trial link or license info to come through. Then, you just download the file and close the website."
Duck DNS will point a DNS (sub domains of duckdns.org) to an IP of your choice. DDNS is a handy way for you to refer to a serverouter with an easily rememberable name for situations when the server's ip address will likely change. Suggested by xgnarf, who finds it "so much better for the free tier of noip—no 30-day nag to keep your host up."
Joe Sandbox detects and analyzes potential malicious files and URLs on Windows, Android, Mac OS, Linux and iOS for suspicious activities. It performs deep malware analysis and generates comprehensive and detailed reports. The Community Edition of Joe Sandbox Cloud allows you to run a maximum of 6 analyses per month, 3 per day on Windows, Linux and Android with limited analysis output. This one is from dangibbons94, who wanted to "share this cool service ... for malware analysis. I usually use Virus total for URL scanning, but this goes a lot more in depth. I just used basic analysis, which is free and enough for my needs."
Hybrid Analysis is a malware analysis service that detects and analyzes unknown threats for the community. This one was suggested by compupheonix, who adds that it "gets you super detailed reports... it's about the most fleshed out and detailed one I can find."
JustBeamIt is a file-transfer service that allows you to send files of any size via a peer-to-peer streaming model. Simply drag and drop your file and specify the recipient's email address. They will then receive a link that will trigger the download directly from your computer, so the file does not have to be uploaded to the service itself. The link is good for one download and expires after 10 minutes. Thanks to cooljacob204sfw for the recommendation!
ShieldsUP is a quick but powerful internet security checkup and information service. It was created by security researcher Steve Gibson to scan ports and let you know which ones have been opened through your firewalls or NAT routers.
Firefox Send is an encrypted file transfer service that allows you to share files up to 2.5GB from any browser or an Android app. Uses end-to-end encryption to keep data secure and offers security controls you can set. You can determine when your file link expires, the number of downloads, and whether to add a password. Your recipient receives a link to download the file, and they don’t need a Firefox account. This one comes from DePingus, who appreciates the focus on privacy. "They have E2E, expiring links, and a clear privacy policy."
Free DNS is a service where programmers share domain names with one another at no cost. Offers free hosting as well as dynamic DNS, static DNS, subdomain and domain hosting. They can host your domain's DNS as well as allowing you to register hostnames from domains they're hosting already. If you don't have a domain, you can sign up for a free account and create up to 5 subdomains off the domains others have contributed and point these hosts anywhere on the Internet. Thanks to 0x000000000000004C (yes, that's a username) for the suggestion!
ANY.RUN is an interactive malware analysis service for dynamic and static research of the majority of threats in any environment. It can provide a convenient in-depth analysis of new, unidentified malicious objects and help with the investigation of incidents. ImAshtonTurner appreciates it as "a great sandbox tool for viewing malware, etc."
Plik is a scalable, temporary file upload system similar to wetransfer that is written in golang. Thanks go to I_eat_Narwhals for this one!
Free My IP offers free, dynamic DNS. This service comes with no login, no ads, no newsletters, no links to click and no hassle. Kindly suggested by Jack of All Trades.
Mailinator provides free, temporary email inboxes on a receive-only, attachment-free system that requires no sign-up. All @mailinator.com addresses are public, readable and discoverable by anyone at any time—but are automatically deleted after a few hours. Can be a nice option for times when you to give out an address that won't be accessible longterm. Recommended by nachomountain, who's been using it "for years."
Magic Wormhole is a service for sending files directly with no intermediate upload, no web interface and no login. When both parties are online you with the minimal software installed, the wormhole is invoked via command line identifying the file you want to send. The server then provides a speakable, one-time-use password that you give the recipient. When they enter that password in their wormhole console, key exchange occurs and the download begins directly between your computers. rjohnson99 explains, "Magic Wormhole is sort of like JustBeamIt but is open-source and is built on Python. I use it a lot on Linux servers."
EveryCloud's Free Phish is our own, new Phishing Simulator. Once you've filled in the form and logged in, you can choose from lots of email templates (many of which we've coped from what we see in our Email Security business) and landing pages. Run a one-off free phish, then see who clicked or submitted data so you can understand where your organization is vulnerable and act accordingly.
Hardening Guides
CIS Hardening Guides contain the system security benchmarks developed by a global community of cybersecurity experts. Over 140 configuration guidelines are provided to help safeguard systems against threats. Recommended by cyanghost109 "to get a start on looking at hardening your own systems."
Podcasts
Daily Tech News is Tom Merrit's show covering the latest tech issues with some of the top experts in the field. With the focus on daily tech news and analysis, it's a great way to stay current. Thanks to EmoPolarbear for drawing it to our attention.
This Week in Enterprise Tech is a podcast that features IT experts explaining the complicated details of cutting-edge enterprise technology. Join host Lou Maresca on this informative exploration of enterprise solutions, with new episodes recorded every Friday afternoon.
Security Weekly is a podcast where a "bunch of security nerds" get together and talk shop. Topics are greatly varied, and the atmosphere is relaxed and conversational. The show typically tops out at 2 hours, which is perfect for those with a long commute. If you’re fascinated by discussion of deep technical and security-related topics, this may be a nice addition to your podcast repertoire.
Grumpy Old Geeks—What Went Wrong on the Internet and Who's To Blame is a podcast about the internet, technology and geek culture—among other things. The hosts bring their grumpy brand of humor to the "state of the world as they see it" in these roughly hour-long weekly episodes. Recommended by mkaxsnyder, who enjoys it because, "They are a good team that talk about recent and relevant topics from an IT perspective."
The Social-Engineer Podcast is a monthly discussion among the hosts—a group of security experts from SEORG—and a diverse assortment of guests. Topics focus around human behavior and how it affects information security, with new episodes released on the second Monday of every month. Thanks to MrAshRhodes for the suggestion.
The CyberWire podcasts discuss what's happening in cyberspace, providing news and commentary from industry experts. This cyber security-focused news service delivers concise, accessible, and relevant content without the gossip, sensationalism, and the marketing buzz that often distract from the stories that really matter. Appreciation to supermicromainboard for the suggestion.
Malicious Life is a podcast that tells the fascinating—and often unknown—stories of the wildest hacks you can ever imagine. Host Ran Levi, a cybersecurity expert and author, talks with the people who were actually involved to reveal the history of each event in depth. Our appreciation goes to peraphon for the recommendation.
The Broadcast Storm is a podcast for Cisco networking professionals. BluePieceOfPaper suggests it "for people studying for their CCNA/NP. Kevin Wallace is a CCIE Collaboration so he knows his *ishk. Good format for learning too. Most podcasts are about 8-15 mins long and its 'usually' an exam topic. It will be something like "HSPR" but instead of just explaining it super boring like Ben Stein reading a powerpoint, he usually goes into a story about how (insert time in his career) HSPR would have been super useful..."
Software Engineering Radio is a podcast for developers who are looking for an educational resource with original content that isn't recycled from other venues. Consists of conversations on relevant topics with experts from the software engineering world, with new episodes released three to four times per month. a9JDvXLWHumjaC tells us this is "a solid podcast for devs."
Books
System Center 2012 Configuration Manager is a comprehensive technical guide designed to help you optimize Microsoft's Configuration Manager 2012 according to your requirements and then to deploy and use it successfully. This methodical, step-by-step reference covers: the intentions behind the product and its role in the broader System Center product suite; planning, design, and implementation; and details on each of the most-important feature sets. Learn how to leverage the user-centric capabilities to provide anytime/anywhere services & software, while strengthening control and improving compliance.
Network Warrior: Everything You Need to Know That Wasn’t on the CCNA Exam is a practical guide to network infrastructure. Provides an in-depth view of routers and routing, switching (with Cisco Catalyst and Nexus switches as examples), SOHO VoIP and SOHO wireless access point design and configuration, introduction to IPv6 with configuration examples, telecom technologies in the data-networking world (including T1, DS3, frame relay, and MPLS), security, firewall theory and configuration, ACL and authentication, Quality of Service (QoS), with an emphasis on low-latency queuing (LLQ), IP address allocation, Network Time Protocol (NTP) and device failures.
Beginning the Linux Command Line is your ally in mastering Linux from the keyboard. It is intended for system administrators, software developers, and enthusiastic users who want a guide that will be useful for most distributions—i.e., all items have been checked against Ubuntu, Red Hat and SUSE. Addresses administering users and security and deploying firewalls. Updated to the latest versions of Linux to cover files and directories, including the Btrfs file system and its management and systemd boot procedure and firewall management with firewalld.
Modern Operating Systems, 4th Ed. is written for students taking intro courses on Operating Systems and for those who want an OS reference guide for work. The author, an OS researcher, includes both the latest materials on relevant operating systems as well as current research. The previous edition of Modern Operating Systems received the 2010 McGuffey Longevity Award that recognizes textbooks for excellence over time.
Time Management for System Administrators is a guide for organizing your approach to this challenging role in a way that improves your results. Bestselling author Thomas Limoncelli offers a collection of tips and techniques for navigating the competing goals and concurrent responsibilities that go along with working on large projects while also taking care of individual user's needs. The book focuses on strategies to help with daily tasks that will also allow you to handle the critical situations that inevitably require your attention. You'll learn how to manage interruptions, eliminate time wasters, keep an effective calendar, develop routines and prioritize, stay focused on the task at hand and document/automate to speed processes.
The Practice of System and Network Administration, 3rd Edition introduces beginners to advanced frameworks while serving as a guide to best practices in system administration that is helpful for even the most advanced experts. Organized into four major sections that build from the foundational elements of system administration through improved techniques for upgrades and change management to exploring assorted management topics. Covers the basics and then moves onto the advanced things that can be built on top of those basics to wield real power and execute difficult projects.
Learn Windows PowerShell in a Month of Lunches, Third Edition is designed to teach you PowerShell in a month's worth of 1-hour lessons. This updated edition covers PowerShell features that run on Windows 7, Windows Server 2008 R2 and later, PowerShell v3 and later, and it includes v5 features like PowerShellGet. For PowerShell v3 and up, Windows 7 and Windows Server 2008 R2 and later.
Troubleshooting with the Windows Sysinternals Tools is a guide to the powerful Sysinternals tools for diagnosing and troubleshooting issues. Sysinternals creator Mark Russinovich and Windows expert Aaron Margosis provide a deep understanding of Windows core concepts that aren’t well-documented elsewhere along with details on how to use Sysinternals tools to optimize any Windows system’s reliability, efficiency, performance and security. Includes an explanation of Sysinternals capabilities, details on each major tool, and examples of how the tools can be used to solve real-world cases involving error messages, hangs, sluggishness, malware infections and more.
DNS and BIND, 5th Ed. explains how to work with the Internet's distributed host information database—which is responsible for translating names into addresses, routing mail to its proper destination, and listing phone numbers according to the ENUM standard. Covers BIND 9.3.2 & 8.4.7, the what/how/why of DNS, name servers, MX records, subdividing domains (parenting), DNSSEC, TSIG, troubleshooting and more. PEPCK tells us this is "generally considered the DNS reference book (aside from the RFCs of course!)"
Windows PowerShell in Action, 3rd Ed. is a comprehensive guide to PowerShell. Written by language designer Bruce Payette and MVP Richard Siddaway, this volume gives a great introduction to Powershell, including everyday use cases and detailed examples for more-advanced topics like performance and module architecture. Covers workflows and classes, writing modules and scripts, desired state configuration and programming APIs/pipelines.This edition has been updated for PowerShell v6.
Zero Trust Networks: Building Secure Systems in Untrusted Networks explains the principles behind zero trust architecture, along with what's needed to implement it. Covers the evolution of perimeter-based defenses and how they evolved into the current broken model, case studies of zero trust in production networks on both the client and server side, example configurations for open-source tools that are useful for building a zero trust network and how to migrate from a perimeter-based network to a zero trust network in production. Kindly recommended by jaginfosec.
Tips
Here are a couple handy Windows shortcuts:
Here's a shortcut for a 4-pane explorer in Windows without installing 3rd-party software:
(Keep the win key down for the arrows, and no pauses.) Appreciation goes to ZAFJB for this one.
Our recent tip for a shortcut to get a 4-pane explorer in Windows, triggered this suggestion from SevaraB: "You can do that for an even larger grid of Windows by right-clicking the clock in the taskbar, and clicking 'Show windows side by side' to arrange them neatly. Did this for 4 rows of 6 windows when I had to have a quick 'n' dirty "video wall" of windows monitoring servers at our branches." ZAFJB adds that it actually works when you right-click "anywhere on the taskbar, except application icons or start button."
This tip comes courtesy of shipsass: "When I need to use Windows Explorer but I don't want to take my hands off the keyboard, I press Windows-E to launch Explorer and then Ctrl-L to jump to the address line and type my path. The Ctrl-L trick also works with any web browser, and it's an efficient way of talking less-technical people through instructions when 'browse to [location]' stumps them."
Clear browser history/cookies by pressing CTRL-SHIFT-DELETE on most major browsers. Thanks go to synapticpanda, who adds that this "saves me so much time when troubleshooting web apps where I am playing with the cache and such."
To rename a file with F2, while still editing the name of that file: Hit TAB to tab into the renaming of the next file. Thanks to abeeftaco for this one!
Alt-D is a reliable alternative to Ctrl-L for jumping to the address line in a browser. Thanks for this one go to fencepost_ajm, who explains: "Ctrl-L comes from the browser side as a shortcut for Location, Alt-D from the Windows Explorer side for Directory."
Browser shortcut: When typing a URL that ends with dot com, Ctrl + Enter will place the ".com" and take you to the page. Thanks to wpierre for this one!
This tip comes from anynonus, as something that daily that saves a few clicks: "Running a program with ctrl + shift + enter from start menu will start it as administrator (alt + y will select YES to run as admin) ... my user account is local admin [so] I don't feel like that is unsafe"
Building on our PowerShell resources, we received the following suggestion from halbaradkenafin: aka.ms/pskoans is "a way to learn PowerShell using PowerShell (and Pester). It's really cool and a bunch of folks have high praise for it (including a few teams within MSFT)."
Keyboard shortcut: If you already have an application open, hold ctrl + shift and middle click on the application in your task bar to open another instance as admin. Thanks go to Polymira for this one.
Remote Server Tip: "Critical advice. When testing out network configuration changes, prior to restarting the networking service or rebooting, always create a cron job that will restore your original network configuration and then reboot/restart networking on the machine after 5 minutes. If your config worked, you have enough time to remove it. If it didn't, it will fix itself. This is a beautifully simple solution that I learned from my old mentor at my very first job. I've held on to it for a long time." Thanks go to FrigidNox for the tip!
Websites
Deployment Research is the website of Johan Arwidmark, MS MVP in System Center Cloud and Datacenter Management. It is dedicated to sharing information and guidance around System Center, OS deployment, migration and more. The author shares tips and tricks to help improve the quality of IT Pros’ daily work.
Next of Windows is a website on (mostly) Microsoft-related technology. It's the place where Kent Chen—a computer veteran with many years of field experience—and Jonathan Hu—a web/mobile app developer and self-described "cool geek"—share what they know, what they learn and what they find in the hope of helping others learn and benefit.
High Scalability brings together all the relevant information about building scalable websites in one place. Because building a website with confidence requires a body of knowledge that can be slow to develop, the site focuses on moving visitors along the learning curve at a faster pace.
Information Technology Research Library is a great resource for IT-related research, white papers, reports, case studies, magazines, and eBooks. This library is provided at no charge by TradePub.com. GullibleDetective tells us it offers "free PDF files from a WIIIIIIDE variety of topics, not even just IT. Only caveat: as its a vendor-supported publishing company, you will have to give them a bit of information such as name, email address and possibly a company name. You undoubtedly have the ability to create fake information on this, mind you. The articles range from Excel templates, learning python, powershell, nosql etc. to converged architecture."
SS64 is a web-based reference guide for syntax and examples of the most-common database and OS computing commands. Recommended by Petti-The-Yeti, who adds, "I use this site all the time to look up commands and find examples while I'm building CMD and PS1 scripts."
Phishing and Malware Reporting. This website helps you put a stop to scams by getting fraudulent pages blocked. Easily report phishing webpages so they can be added to blacklists in as little as 15 minutes of your report. "Player024 tells us, "I highly recommend anyone in the industry to bookmark this page...With an average of about 10 minutes of work, I'm usually able to take down the phishing pages we receive thanks to the links posted on that website."
A Slack Channel
Windows Admin Slack is a great drive-by resource for the Windows sysadmin. This team has 33 public channels in total that cover different areas of helpful content on Windows administration.
Blogs
KC's Blog is the place where Microsoft MVP and web developer Kent Chen shares his IT insights and discoveries. The rather large library of posts offer helpful hints, how-tos, resources and news of interest to those in the Windows world.
The Windows Server Daily is the ever-current blog of technologist Katherine Moss, VP of open source & community engagement for StormlightTech. Offers brief daily posts on topics related to Windows server, Windows 10 and Administration.
An Infosec Slideshow
This security training slideshow was created for use during a quarterly infosec class. The content is offered generously by shalafi71, who adds, "Take this as a skeleton and flesh it out on your own. Take an hour or two and research the things I talk about. Tailor this to your own environment and users. Make it relevant to your people. Include corporate stories, include your audience, exclude yourself. This ain't about how smart you are at infosec, and I can't stress this enough, talk about how people can defend themselves. Give them things to look for and action they can take. No one gives a shit about your firewall rules."
Tech Tutorials
Tutorialspoint Library. This large collection of tech tutorials is a great resource for online learning. You'll find nearly 150 high-quality tutorials covering a wide array of languages and topics—from fundamentals to cutting-edge technologies. For example, this Powershell tutorial is designed for those with practical experience handling Windows-based Servers who want to learn how to install and use Windows Server 2012.
The Python Tutorial is a nice introduction to many of Python’s best features, enabling you to read and write Python modules and programs. It offers an understanding of the language's style and prepares you to learn more about the various Python library modules described in 'The Python Standard Library.' Kindly suggested by sharjeelsayed.
SysAdmin Humor
Day in the Life of a SysAdmin Episode 5: Lunch Break is an amusing look at a SysAdmin's attempt to take a brief lunch break. We imagine many of you can relate!
Have a fantastic week and as usual, let me know any comments or suggestions.
u/crispyducks
submitted by crispyducks to sysadmin [link] [comments]

Tools & Info for MSPs #2 - Mega List of Tips, Tools, Books, Blogs & More

(continued from part #1)
Unlocker is a tool to help delete those irritating locked files that give you an error message like "cannot delete file" or "access is denied." It helps with killing processes, unloading DLLs, deleting index.dat files, as well as unlocking, deleting, renaming, and moving locked files—typically without requiring a reboot.
IIS Crypto's newest version adds advanced settings; registry backup; new, simpler templates; support for Windows Server 2019 and more. This tool lets you enable or disable protocols, ciphers, hashes and key exchange algorithms on Windows and reorder SSL/TLS cipher suites from IIS, change advanced settings, implement best practices with a single click, create custom templates and test your website. Available in both command line and GUI versions.
RocketDock is an application launcher with a clean interface that lets you drag/drop shortcuts for easy access and minimize windows to the dock. Features running application indicators, multi-monitor support, alpha-blended PNG and ICO icons, auto-hide and popup on mouse over, positioning and layering options. Fully customizable, portable, and compatible with MobyDock, ObjectDock, RK Launcher and Y'z Dock skins. Works even on slower computers and is Unicode compliant. Suggested by lieutenantcigarette: "If you like the dock on MacOS but prefer to use Windows, RocketDock has you covered. A superb and highly customisable dock that you can add your favourites to for easy and elegant access."
Baby FTP Server offers only the basics, but with the power to serve as a foundation for a more-complex server. Features include multi-threading, a real-time server log, support for PASV and non-PASV mode, ability to set permissions for download/upload/rename/delete/create directory. Only allows anonymous connections. Our thanks to FatherPrax for suggesting this one.
Strace is a Linux diagnostic, debugging and instructional userspace tool with a traditional command-line interface. Uses the ptrace kernel feature to monitor and tamper with interactions between processes and the kernel, including system calls, signal deliveries and changes of process state.
exa is a small, fast replacement for ls with more features and better defaults. It uses colors to distinguish file types and metadata, and it recognizes symlinks, extended attributes and Git. All in one single binary. phils_lab describes it as "'ls' on steroids, written in Rust."
rsync is a faster file transfer program for Unix to bring remote files into sync. It sends just the differences in the files across the link, without requiring both sets of files to be present at one of the ends. Suggested by zorinlynx, who adds that "rsync is GODLY for moving data around efficiently. And if an rsync is interrupted, just run it again."
Matter Wiki is a simple WYSIWYG wiki that can help teams store and collaborate. Every article gets filed under a topic, transparently, so you can tell who made what changes to which document and when. Thanks to bciar-iwdc for the recommendation.
LockHunter is a file unlocking tool that enables you to delete files that are being blocked for unknown reasons. Can be useful for fighting malware and other programs that are causing trouble. Deletes files into the recycle bin so you can restore them if necessary. Chucky2401 finds it preferable to Unlocker, "since I am on Windows 7. There are no new updates since July 2017, but the last beta was in June of this year."
aria2 is a lightweight multi-source command-line download utility that supports HTTP/HTTPS, FTP, SFTP, BitTorrent and Metalink. It can be manipulated via built-in JSON-RPC and XML-RPC interfaces. Recommended by jftuga, who appreciates it as a "cross-platform command line downloader (similar to wget or curl), but with the -x option can run a segmented download of a single file to increase throughput."
Free Services
Temp-Mail allows you to receive email at a temporary address that self-destructs after a certain period of time. Outwit all the forums, Wi-Fi owners, websites and blogs that insist you register to use them. Petti-The-Yeti says, "I don't give any company my direct email anymore. If I want to trial something but they ask for an email signup, I just grab a temporary email from here, sign up with it, and wait for the trial link or license info to come through. Then, you just download the file and close the website."
Duck DNS will point a DNS (sub domains of duckdns.org) to an IP of your choice. DDNS is a handy way for you to refer to a serverouter with an easily rememberable name for situations when the server's ip address will likely change. Suggested by xgnarf, who finds it "so much better for the free tier of noip—no 30-day nag to keep your host up."
Joe Sandbox detects and analyzes potential malicious files and URLs on Windows, Android, Mac OS, Linux and iOS for suspicious activities. It performs deep malware analysis and generates comprehensive and detailed reports. The Community Edition of Joe Sandbox Cloud allows you to run a maximum of 6 analyses per month, 3 per day on Windows, Linux and Android with limited analysis output. This one is from dangibbons94, who wanted to "share this cool service ... for malware analysis. I usually use Virus total for URL scanning, but this goes a lot more in depth. I just used basic analysis, which is free and enough for my needs."
Hybrid Analysis is a malware analysis service that detects and analyzes unknown threats for the community. This one was suggested by compupheonix, who adds that it "gets you super detailed reports... it's about the most fleshed out and detailed one I can find."
JustBeamIt is a file-transfer service that allows you to send files of any size via a peer-to-peer streaming model. Simply drag and drop your file and specify the recipient's email address. They will then receive a link that will trigger the download directly from your computer, so the file does not have to be uploaded to the service itself. The link is good for one download and expires after 10 minutes. Thanks to cooljacob204sfw for the recommendation!
ShieldsUP is a quick but powerful internet security checkup and information service. It was created by security researcher Steve Gibson to scan ports and let you know which ones have been opened through your firewalls or NAT routers.
Firefox Send is an encrypted file transfer service that allows you to share files up to 2.5GB from any browser or an Android app. Uses end-to-end encryption to keep data secure and offers security controls you can set. You can determine when your file link expires, the number of downloads, and whether to add a password. Your recipient receives a link to download the file, and they don’t need a Firefox account. This one comes from DePingus, who appreciates the focus on privacy. "They have E2E, expiring links, and a clear privacy policy."
Free DNS is a service where programmers share domain names with one another at no cost. Offers free hosting as well as dynamic DNS, static DNS, subdomain and domain hosting. They can host your domain's DNS as well as allowing you to register hostnames from domains they're hosting already. If you don't have a domain, you can sign up for a free account and create up to 5 subdomains off the domains others have contributed and point these hosts anywhere on the Internet. Thanks to 0x000000000000004C (yes, that's a username) for the suggestion!
ANY.RUN is an interactive malware analysis service for dynamic and static research of the majority of threats in any environment. It can provide a convenient in-depth analysis of new, unidentified malicious objects and help with the investigation of incidents. ImAshtonTurner appreciates it as "a great sandbox tool for viewing malware, etc."
Plik is a scalable, temporary file upload system similar to wetransfer that is written in golang. Thanks go to I_eat_Narwhals for this one!
Free My IP offers free, dynamic DNS. This service comes with no login, no ads, no newsletters, no links to click and no hassle. Kindly suggested by Jack of All Trades.
Mailinator provides free, temporary email inboxes on a receive-only, attachment-free system that requires no sign-up. All @mailinator.com addresses are public, readable and discoverable by anyone at any time—but are automatically deleted after a few hours. Can be a nice option for times when you to give out an address that won't be accessible longterm. Recommended by nachomountain, who's been using it "for years."
Magic Wormhole is a service for sending files directly with no intermediate upload, no web interface and no login. When both parties are online you with the minimal software installed, the wormhole is invoked via command line identifying the file you want to send. The server then provides a speakable, one-time-use password that you give the recipient. When they enter that password in their wormhole console, key exchange occurs and the download begins directly between your computers. rjohnson99 explains, "Magic Wormhole is sort of like JustBeamIt but is open-source and is built on Python. I use it a lot on Linux servers."
EveryCloud's Free Phish is our own, new Phishing Simulator. Once you've filled in the form and logged in, you can choose from lots of email templates (many of which we've coped from what we see in our Email Security business) and landing pages. Run a one-off free phish, then see who clicked or submitted data so you can understand where your organization is vulnerable and act accordingly.
Hardening Guides
CIS Hardening Guides contain the system security benchmarks developed by a global community of cybersecurity experts. Over 140 configuration guidelines are provided to help safeguard systems against threats. Recommended by cyanghost109 "to get a start on looking at hardening your own systems."
Podcasts
Daily Tech News is Tom Merrit's show covering the latest tech issues with some of the top experts in the field. With the focus on daily tech news and analysis, it's a great way to stay current. Thanks to EmoPolarbear for drawing it to our attention.
This Week in Enterprise Tech is a podcast that features IT experts explaining the complicated details of cutting-edge enterprise technology. Join host Lou Maresca on this informative exploration of enterprise solutions, with new episodes recorded every Friday afternoon.
Security Weekly is a podcast where a "bunch of security nerds" get together and talk shop. Topics are greatly varied, and the atmosphere is relaxed and conversational. The show typically tops out at 2 hours, which is perfect for those with a long commute. If you’re fascinated by discussion of deep technical and security-related topics, this may be a nice addition to your podcast repertoire.
Grumpy Old Geeks—What Went Wrong on the Internet and Who's To Blame is a podcast about the internet, technology and geek culture—among other things. The hosts bring their grumpy brand of humor to the "state of the world as they see it" in these roughly hour-long weekly episodes. Recommended by mkaxsnyder, who enjoys it because, "They are a good team that talk about recent and relevant topics from an IT perspective."
The Social-Engineer Podcast is a monthly discussion among the hosts—a group of security experts from SEORG—and a diverse assortment of guests. Topics focus around human behavior and how it affects information security, with new episodes released on the second Monday of every month. Thanks to MrAshRhodes for the suggestion.
The CyberWire podcasts discuss what's happening in cyberspace, providing news and commentary from industry experts. This cyber security-focused news service delivers concise, accessible, and relevant content without the gossip, sensationalism, and the marketing buzz that often distract from the stories that really matter. Appreciation to supermicromainboard for the suggestion.
Malicious Life is a podcast that tells the fascinating—and often unknown—stories of the wildest hacks you can ever imagine. Host Ran Levi, a cybersecurity expert and author, talks with the people who were actually involved to reveal the history of each event in depth. Our appreciation goes to peraphon for the recommendation.
The Broadcast Storm is a podcast for Cisco networking professionals. BluePieceOfPaper suggests it "for people studying for their CCNA/NP. Kevin Wallace is a CCIE Collaboration so he knows his *ishk. Good format for learning too. Most podcasts are about 8-15 mins long and its 'usually' an exam topic. It will be something like "HSPR" but instead of just explaining it super boring like Ben Stein reading a powerpoint, he usually goes into a story about how (insert time in his career) HSPR would have been super useful..."
Software Engineering Radio is a podcast for developers who are looking for an educational resource with original content that isn't recycled from other venues. Consists of conversations on relevant topics with experts from the software engineering world, with new episodes released three to four times per month. a9JDvXLWHumjaC tells us this is "a solid podcast for devs."
Books
System Center 2012 Configuration Manager is a comprehensive technical guide designed to help you optimize Microsoft's Configuration Manager 2012 according to your requirements and then to deploy and use it successfully. This methodical, step-by-step reference covers: the intentions behind the product and its role in the broader System Center product suite; planning, design, and implementation; and details on each of the most-important feature sets. Learn how to leverage the user-centric capabilities to provide anytime/anywhere services & software, while strengthening control and improving compliance.
Network Warrior: Everything You Need to Know That Wasn’t on the CCNA Exam is a practical guide to network infrastructure. Provides an in-depth view of routers and routing, switching (with Cisco Catalyst and Nexus switches as examples), SOHO VoIP and SOHO wireless access point design and configuration, introduction to IPv6 with configuration examples, telecom technologies in the data-networking world (including T1, DS3, frame relay, and MPLS), security, firewall theory and configuration, ACL and authentication, Quality of Service (QoS), with an emphasis on low-latency queuing (LLQ), IP address allocation, Network Time Protocol (NTP) and device failures.
Beginning the Linux Command Line is your ally in mastering Linux from the keyboard. It is intended for system administrators, software developers, and enthusiastic users who want a guide that will be useful for most distributions—i.e., all items have been checked against Ubuntu, Red Hat and SUSE. Addresses administering users and security and deploying firewalls. Updated to the latest versions of Linux to cover files and directories, including the Btrfs file system and its management and systemd boot procedure and firewall management with firewalld.
Modern Operating Systems, 4th Ed. is written for students taking intro courses on Operating Systems and for those who want an OS reference guide for work. The author, an OS researcher, includes both the latest materials on relevant operating systems as well as current research. The previous edition of Modern Operating Systems received the 2010 McGuffey Longevity Award that recognizes textbooks for excellence over time.
Time Management for System Administrators is a guide for organizing your approach to this challenging role in a way that improves your results. Bestselling author Thomas Limoncelli offers a collection of tips and techniques for navigating the competing goals and concurrent responsibilities that go along with working on large projects while also taking care of individual user's needs. The book focuses on strategies to help with daily tasks that will also allow you to handle the critical situations that inevitably require your attention. You'll learn how to manage interruptions, eliminate time wasters, keep an effective calendar, develop routines and prioritize, stay focused on the task at hand and document/automate to speed processes.
The Practice of System and Network Administration, 3rd Edition introduces beginners to advanced frameworks while serving as a guide to best practices in system administration that is helpful for even the most advanced experts. Organized into four major sections that build from the foundational elements of system administration through improved techniques for upgrades and change management to exploring assorted management topics. Covers the basics and then moves onto the advanced things that can be built on top of those basics to wield real power and execute difficult projects.
Learn Windows PowerShell in a Month of Lunches, Third Edition is designed to teach you PowerShell in a month's worth of 1-hour lessons. This updated edition covers PowerShell features that run on Windows 7, Windows Server 2008 R2 and later, PowerShell v3 and later, and it includes v5 features like PowerShellGet. For PowerShell v3 and up, Windows 7 and Windows Server 2008 R2 and later.
Troubleshooting with the Windows Sysinternals Tools is a guide to the powerful Sysinternals tools for diagnosing and troubleshooting issues. Sysinternals creator Mark Russinovich and Windows expert Aaron Margosis provide a deep understanding of Windows core concepts that aren’t well-documented elsewhere along with details on how to use Sysinternals tools to optimize any Windows system’s reliability, efficiency, performance and security. Includes an explanation of Sysinternals capabilities, details on each major tool, and examples of how the tools can be used to solve real-world cases involving error messages, hangs, sluggishness, malware infections and more.
DNS and BIND, 5th Ed. explains how to work with the Internet's distributed host information database—which is responsible for translating names into addresses, routing mail to its proper destination, and listing phone numbers according to the ENUM standard. Covers BIND 9.3.2 & 8.4.7, the what/how/why of DNS, name servers, MX records, subdividing domains (parenting), DNSSEC, TSIG, troubleshooting and more. PEPCK tells us this is "generally considered the DNS reference book (aside from the RFCs of course!)"
Windows PowerShell in Action, 3rd Ed. is a comprehensive guide to PowerShell. Written by language designer Bruce Payette and MVP Richard Siddaway, this volume gives a great introduction to Powershell, including everyday use cases and detailed examples for more-advanced topics like performance and module architecture. Covers workflows and classes, writing modules and scripts, desired state configuration and programming APIs/pipelines.This edition has been updated for PowerShell v6.
Zero Trust Networks: Building Secure Systems in Untrusted Networks explains the principles behind zero trust architecture, along with what's needed to implement it. Covers the evolution of perimeter-based defenses and how they evolved into the current broken model, case studies of zero trust in production networks on both the client and server side, example configurations for open-source tools that are useful for building a zero trust network and how to migrate from a perimeter-based network to a zero trust network in production. Kindly recommended by jaginfosec.
Tips
Here are a couple handy Windows shortcuts:
Here's a shortcut for a 4-pane explorer in Windows without installing 3rd-party software:
(Keep the win key down for the arrows, and no pauses.) Appreciation goes to ZAFJB for this one.
Our recent tip for a shortcut to get a 4-pane explorer in Windows, triggered this suggestion from SevaraB: "You can do that for an even larger grid of Windows by right-clicking the clock in the taskbar, and clicking 'Show windows side by side' to arrange them neatly. Did this for 4 rows of 6 windows when I had to have a quick 'n' dirty "video wall" of windows monitoring servers at our branches." ZAFJB adds that it actually works when you right-click "anywhere on the taskbar, except application icons or start button."
This tip comes courtesy of shipsass: "When I need to use Windows Explorer but I don't want to take my hands off the keyboard, I press Windows-E to launch Explorer and then Ctrl-L to jump to the address line and type my path. The Ctrl-L trick also works with any web browser, and it's an efficient way of talking less-technical people through instructions when 'browse to [location]' stumps them."
Clear browser history/cookies by pressing CTRL-SHIFT-DELETE on most major browsers. Thanks go to synapticpanda, who adds that this "saves me so much time when troubleshooting web apps where I am playing with the cache and such."
To rename a file with F2, while still editing the name of that file: Hit TAB to tab into the renaming of the next file. Thanks to abeeftaco for this one!
Alt-D is a reliable alternative to Ctrl-L for jumping to the address line in a browser. Thanks for this one go to fencepost_ajm, who explains: "Ctrl-L comes from the browser side as a shortcut for Location, Alt-D from the Windows Explorer side for Directory."
Browser shortcut: When typing a URL that ends with dot com, Ctrl + Enter will place the ".com" and take you to the page. Thanks to wpierre for this one!
This tip comes from anynonus, as something that daily that saves a few clicks: "Running a program with ctrl + shift + enter from start menu will start it as administrator (alt + y will select YES to run as admin) ... my user account is local admin [so] I don't feel like that is unsafe"
Building on our PowerShell resources, we received the following suggestion from halbaradkenafin: aka.ms/pskoans is "a way to learn PowerShell using PowerShell (and Pester). It's really cool and a bunch of folks have high praise for it (including a few teams within MSFT)."
Keyboard shortcut: If you already have an application open, hold ctrl + shift and middle click on the application in your task bar to open another instance as admin. Thanks go to Polymira for this one.
Remote Server Tip: "Critical advice. When testing out network configuration changes, prior to restarting the networking service or rebooting, always create a cron job that will restore your original network configuration and then reboot/restart networking on the machine after 5 minutes. If your config worked, you have enough time to remove it. If it didn't, it will fix itself. This is a beautifully simple solution that I learned from my old mentor at my very first job. I've held on to it for a long time." Thanks go to FrigidNox for the tip!
Websites
Deployment Research is the website of Johan Arwidmark, MS MVP in System Center Cloud and Datacenter Management. It is dedicated to sharing information and guidance around System Center, OS deployment, migration and more. The author shares tips and tricks to help improve the quality of IT Pros’ daily work.
Next of Windows is a website on (mostly) Microsoft-related technology. It's the place where Kent Chen—a computer veteran with many years of field experience—and Jonathan Hu—a web/mobile app developer and self-described "cool geek"—share what they know, what they learn and what they find in the hope of helping others learn and benefit.
High Scalability brings together all the relevant information about building scalable websites in one place. Because building a website with confidence requires a body of knowledge that can be slow to develop, the site focuses on moving visitors along the learning curve at a faster pace.
Information Technology Research Library is a great resource for IT-related research, white papers, reports, case studies, magazines, and eBooks. This library is provided at no charge by TradePub.com. GullibleDetective tells us it offers "free PDF files from a WIIIIIIDE variety of topics, not even just IT. Only caveat: as its a vendor-supported publishing company, you will have to give them a bit of information such as name, email address and possibly a company name. You undoubtedly have the ability to create fake information on this, mind you. The articles range from Excel templates, learning python, powershell, nosql etc. to converged architecture."
SS64 is a web-based reference guide for syntax and examples of the most-common database and OS computing commands. Recommended by Petti-The-Yeti, who adds, "I use this site all the time to look up commands and find examples while I'm building CMD and PS1 scripts."
Phishing and Malware Reporting. This website helps you put a stop to scams by getting fraudulent pages blocked. Easily report phishing webpages so they can be added to blacklists in as little as 15 minutes of your report. "Player024 tells us, "I highly recommend anyone in the industry to bookmark this page...With an average of about 10 minutes of work, I'm usually able to take down the phishing pages we receive thanks to the links posted on that website."
A Slack Channel
Windows Admin Slack is a great drive-by resource for the Windows sysadmin. This team has 33 public channels in total that cover different areas of helpful content on Windows administration.
Blogs
KC's Blog is the place where Microsoft MVP and web developer Kent Chen shares his IT insights and discoveries. The rather large library of posts offer helpful hints, how-tos, resources and news of interest to those in the Windows world.
The Windows Server Daily is the ever-current blog of technologist Katherine Moss, VP of open source & community engagement for StormlightTech. Offers brief daily posts on topics related to Windows server, Windows 10 and Administration.
An Infosec Slideshow
This security training slideshow was created for use during a quarterly infosec class. The content is offered generously by shalafi71, who adds, "Take this as a skeleton and flesh it out on your own. Take an hour or two and research the things I talk about. Tailor this to your own environment and users. Make it relevant to your people. Include corporate stories, include your audience, exclude yourself. This ain't about how smart you are at infosec, and I can't stress this enough, talk about how people can defend themselves. Give them things to look for and action they can take. No one gives a shit about your firewall rules."
Tech Tutorials
Tutorialspoint Library. This large collection of tech tutorials is a great resource for online learning. You'll find nearly 150 high-quality tutorials covering a wide array of languages and topics—from fundamentals to cutting-edge technologies. For example, this Powershell tutorial is designed for those with practical experience handling Windows-based Servers who want to learn how to install and use Windows Server 2012.
The Python Tutorial is a nice introduction to many of Python’s best features, enabling you to read and write Python modules and programs. It offers an understanding of the language's style and prepares you to learn more about the various Python library modules described in 'The Python Standard Library.' Kindly suggested by sharjeelsayed.
SysAdmin Humor
Day in the Life of a SysAdmin Episode 5: Lunch Break is an amusing look at a SysAdmin's attempt to take a brief lunch break. We imagine many of you can relate!
Have a fantastic week and as usual, let me know any comments.
Graham | CEO | EveryCloud
Fyi - I've set up a subreddit /itprotuesday, where we feature / encourage posts of some additional tools, tips etc. throughout the week. Pop over and subscribe if you’re interested.
submitted by crispyducks to msp [link] [comments]

IT Pro Tuesday #64 (part 2) - Mega List of Tips, Tools, Books, Blogs & More

(continued from part 1)
Captura is a flexible tool for capturing your screen, audio, cursor, mouse clicks and keystrokes. Features include mixing audio recorded from microphone and speaker output, command-line interface, and configurable hotkeys. Thanks to jantari for the recommedation.
Unlocker is a tool to help delete those irritating locked files that give you an error message like "cannot delete file" or "access is denied." It helps with killing processes, unloading DLLs, deleting index.dat files, as well as unlocking, deleting, renaming, and moving locked files—typically without requiring a reboot.
IIS Crypto's newest version adds advanced settings; registry backup; new, simpler templates; support for Windows Server 2019 and more. This tool lets you enable or disable protocols, ciphers, hashes and key exchange algorithms on Windows and reorder SSL/TLS cipher suites from IIS, change advanced settings, implement best practices with a single click, create custom templates and test your website. Available in both command line and GUI versions.
RocketDock is an application launcher with a clean interface that lets you drag/drop shortcuts for easy access and minimize windows to the dock. Features running application indicators, multi-monitor support, alpha-blended PNG and ICO icons, auto-hide and popup on mouse over, positioning and layering options. Fully customizable, portable, and compatible with MobyDock, ObjectDock, RK Launcher and Y'z Dock skins. Works even on slower computers and is Unicode compliant. Suggested by lieutenantcigarette: "If you like the dock on MacOS but prefer to use Windows, RocketDock has you covered. A superb and highly customisable dock that you can add your favourites to for easy and elegant access."
Baby FTP Server offers only the basics, but with the power to serve as a foundation for a more-complex server. Features include multi-threading, a real-time server log, support for PASV and non-PASV mode, ability to set permissions for download/upload/rename/delete/create directory. Only allows anonymous connections. Our thanks to FatherPrax for suggesting this one.
Strace is a Linux diagnostic, debugging and instructional userspace tool with a traditional command-line interface. Uses the ptrace kernel feature to monitor and tamper with interactions between processes and the kernel, including system calls, signal deliveries and changes of process state.
exa is a small, fast replacement for ls with more features and better defaults. It uses colors to distinguish file types and metadata, and it recognizes symlinks, extended attributes and Git. All in one single binary. phils_lab describes it as "'ls' on steroids, written in Rust."
rsync is a faster file transfer program for Unix to bring remote files into sync. It sends just the differences in the files across the link, without requiring both sets of files to be present at one of the ends. Suggested by zorinlynx, who adds that "rsync is GODLY for moving data around efficiently. And if an rsync is interrupted, just run it again."
Matter Wiki is a simple WYSIWYG wiki that can help teams store and collaborate. Every article gets filed under a topic, transparently, so you can tell who made what changes to which document and when. Thanks to bciar-iwdc for the recommendation.
LockHunter is a file unlocking tool that enables you to delete files that are being blocked for unknown reasons. Can be useful for fighting malware and other programs that are causing trouble. Deletes files into the recycle bin so you can restore them if necessary. Chucky2401 finds it preferable to Unlocker, "since I am on Windows 7. There are no new updates since July 2017, but the last beta was in June of this year."
aria2 is a lightweight multi-source command-line download utility that supports HTTP/HTTPS, FTP, SFTP, BitTorrent and Metalink. It can be manipulated via built-in JSON-RPC and XML-RPC interfaces. Recommended by jftuga, who appreciates it as a "cross-platform command line downloader (similar to wget or curl), but with the -x option can run a segmented download of a single file to increase throughput."
Free Services
Temp-Mail allows you to receive email at a temporary address that self-destructs after a certain period of time. Outwit all the forums, Wi-Fi owners, websites and blogs that insist you register to use them. Petti-The-Yeti says, "I don't give any company my direct email anymore. If I want to trial something but they ask for an email signup, I just grab a temporary email from here, sign up with it, and wait for the trial link or license info to come through. Then, you just download the file and close the website."
Duck DNS will point a DNS (sub domains of duckdns.org) to an IP of your choice. DDNS is a handy way for you to refer to a serverouter with an easily rememberable name for situations when the server's ip address will likely change. Suggested by xgnarf, who finds it "so much better for the free tier of noip—no 30-day nag to keep your host up."
Joe Sandbox detects and analyzes potential malicious files and URLs on Windows, Android, Mac OS, Linux and iOS for suspicious activities. It performs deep malware analysis and generates comprehensive and detailed reports. The Community Edition of Joe Sandbox Cloud allows you to run a maximum of 6 analyses per month, 3 per day on Windows, Linux and Android with limited analysis output. This one is from dangibbons94, who wanted to "share this cool service ... for malware analysis. I usually use Virus total for URL scanning, but this goes a lot more in depth. I just used basic analysis, which is free and enough for my needs."
Hybrid Analysis is a malware analysis service that detects and analyzes unknown threats for the community. This one was suggested by compupheonix, who adds that it "gets you super detailed reports... it's about the most fleshed out and detailed one I can find."
JustBeamIt is a file-transfer service that allows you to send files of any size via a peer-to-peer streaming model. Simply drag and drop your file and specify the recipient's email address. They will then receive a link that will trigger the download directly from your computer, so the file does not have to be uploaded to the service itself. The link is good for one download and expires after 10 minutes. Thanks to cooljacob204sfw for the recommendation!
ShieldsUP is a quick but powerful internet security checkup and information service. It was created by security researcher Steve Gibson to scan ports and let you know which ones have been opened through your firewalls or NAT routers.
Firefox Send is an encrypted file transfer service that allows you to share files up to 2.5GB from any browser or an Android app. Uses end-to-end encryption to keep data secure and offers security controls you can set. You can determine when your file link expires, the number of downloads, and whether to add a password. Your recipient receives a link to download the file, and they don’t need a Firefox account. This one comes from DePingus, who appreciates the focus on privacy. "They have E2E, expiring links, and a clear privacy policy."
Free DNS is a service where programmers share domain names with one another at no cost. Offers free hosting as well as dynamic DNS, static DNS, subdomain and domain hosting. They can host your domain's DNS as well as allowing you to register hostnames from domains they're hosting already. If you don't have a domain, you can sign up for a free account and create up to 5 subdomains off the domains others have contributed and point these hosts anywhere on the Internet. Thanks to 0x000000000000004C (yes, that's a username) for the suggestion!
ANY.RUN is an interactive malware analysis service for dynamic and static research of the majority of threats in any environment. It can provide a convenient in-depth analysis of new, unidentified malicious objects and help with the investigation of incidents. ImAshtonTurner appreciates it as "a great sandbox tool for viewing malware, etc."
Plik is a scalable, temporary file upload system similar to wetransfer that is written in golang. Thanks go to I_eat_Narwhals for this one!
Free My IP offers free, dynamic DNS. This service comes with no login, no ads, no newsletters, no links to click and no hassle. Kindly suggested by Jack of All Trades.
Mailinator provides free, temporary email inboxes on a receive-only, attachment-free system that requires no sign-up. All @mailinator.com addresses are public, readable and discoverable by anyone at any time—but are automatically deleted after a few hours. Can be a nice option for times when you to give out an address that won't be accessible longterm. Recommended by nachomountain, who's been using it "for years."
Magic Wormhole is a service for sending files directly with no intermediate upload, no web interface and no login. When both parties are online you with the minimal software installed, the wormhole is invoked via command line identifying the file you want to send. The server then provides a speakable, one-time-use password that you give the recipient. When they enter that password in their wormhole console, key exchange occurs and the download begins directly between your computers. rjohnson99 explains, "Magic Wormhole is sort of like JustBeamIt but is open-source and is built on Python. I use it a lot on Linux servers."
EveryCloud's Free Phish is our own, new Phishing Simulator. Once you've filled in the form and logged in, you can choose from lots of email templates (many of which we've coped from what we see in our Email Security business) and landing pages. Run a one-off free phish, then see who clicked or submitted data so you can understand where your organization is vulnerable and act accordingly.
Hardening Guides
CIS Hardening Guides contain the system security benchmarks developed by a global community of cybersecurity experts. Over 140 configuration guidelines are provided to help safeguard systems against threats. Recommended by cyanghost109 "to get a start on looking at hardening your own systems."
Podcasts
Daily Tech News is Tom Merrit's show covering the latest tech issues with some of the top experts in the field. With the focus on daily tech news and analysis, it's a great way to stay current. Thanks to EmoPolarbear for drawing it to our attention.
This Week in Enterprise Tech is a podcast that features IT experts explaining the complicated details of cutting-edge enterprise technology. Join host Lou Maresca on this informative exploration of enterprise solutions, with new episodes recorded every Friday afternoon.
Security Weekly is a podcast where a "bunch of security nerds" get together and talk shop. Topics are greatly varied, and the atmosphere is relaxed and conversational. The show typically tops out at 2 hours, which is perfect for those with a long commute. If you’re fascinated by discussion of deep technical and security-related topics, this may be a nice addition to your podcast repertoire.
Grumpy Old Geeks—What Went Wrong on the Internet and Who's To Blame is a podcast about the internet, technology and geek culture—among other things. The hosts bring their grumpy brand of humor to the "state of the world as they see it" in these roughly hour-long weekly episodes. Recommended by mkaxsnyder, who enjoys it because, "They are a good team that talk about recent and relevant topics from an IT perspective."
The Social-Engineer Podcast is a monthly discussion among the hosts—a group of security experts from SEORG—and a diverse assortment of guests. Topics focus around human behavior and how it affects information security, with new episodes released on the second Monday of every month. Thanks to MrAshRhodes for the suggestion.
The CyberWire podcasts discuss what's happening in cyberspace, providing news and commentary from industry experts. This cyber security-focused news service delivers concise, accessible, and relevant content without the gossip, sensationalism, and the marketing buzz that often distract from the stories that really matter. Appreciation to supermicromainboard for the suggestion.
Malicious Life is a podcast that tells the fascinating—and often unknown—stories of the wildest hacks you can ever imagine. Host Ran Levi, a cybersecurity expert and author, talks with the people who were actually involved to reveal the history of each event in depth. Our appreciation goes to peraphon for the recommendation.
The Broadcast Storm is a podcast for Cisco networking professionals. BluePieceOfPaper suggests it "for people studying for their CCNA/NP. Kevin Wallace is a CCIE Collaboration so he knows his *ishk. Good format for learning too. Most podcasts are about 8-15 mins long and its 'usually' an exam topic. It will be something like "HSPR" but instead of just explaining it super boring like Ben Stein reading a powerpoint, he usually goes into a story about how (insert time in his career) HSPR would have been super useful..."
Software Engineering Radio is a podcast for developers who are looking for an educational resource with original content that isn't recycled from other venues. Consists of conversations on relevant topics with experts from the software engineering world, with new episodes released three to four times per month. a9JDvXLWHumjaC tells us this is "a solid podcast for devs."
Books
System Center 2012 Configuration Manager is a comprehensive technical guide designed to help you optimize Microsoft's Configuration Manager 2012 according to your requirements and then to deploy and use it successfully. This methodical, step-by-step reference covers: the intentions behind the product and its role in the broader System Center product suite; planning, design, and implementation; and details on each of the most-important feature sets. Learn how to leverage the user-centric capabilities to provide anytime/anywhere services & software, while strengthening control and improving compliance.
Network Warrior: Everything You Need to Know That Wasn’t on the CCNA Exam is a practical guide to network infrastructure. Provides an in-depth view of routers and routing, switching (with Cisco Catalyst and Nexus switches as examples), SOHO VoIP and SOHO wireless access point design and configuration, introduction to IPv6 with configuration examples, telecom technologies in the data-networking world (including T1, DS3, frame relay, and MPLS), security, firewall theory and configuration, ACL and authentication, Quality of Service (QoS), with an emphasis on low-latency queuing (LLQ), IP address allocation, Network Time Protocol (NTP) and device failures.
Beginning the Linux Command Line is your ally in mastering Linux from the keyboard. It is intended for system administrators, software developers, and enthusiastic users who want a guide that will be useful for most distributions—i.e., all items have been checked against Ubuntu, Red Hat and SUSE. Addresses administering users and security and deploying firewalls. Updated to the latest versions of Linux to cover files and directories, including the Btrfs file system and its management and systemd boot procedure and firewall management with firewalld.
Modern Operating Systems, 4th Ed. is written for students taking intro courses on Operating Systems and for those who want an OS reference guide for work. The author, an OS researcher, includes both the latest materials on relevant operating systems as well as current research. The previous edition of Modern Operating Systems received the 2010 McGuffey Longevity Award that recognizes textbooks for excellence over time.
Time Management for System Administrators is a guide for organizing your approach to this challenging role in a way that improves your results. Bestselling author Thomas Limoncelli offers a collection of tips and techniques for navigating the competing goals and concurrent responsibilities that go along with working on large projects while also taking care of individual user's needs. The book focuses on strategies to help with daily tasks that will also allow you to handle the critical situations that inevitably require your attention. You'll learn how to manage interruptions, eliminate time wasters, keep an effective calendar, develop routines and prioritize, stay focused on the task at hand and document/automate to speed processes.
The Practice of System and Network Administration, 3rd Edition introduces beginners to advanced frameworks while serving as a guide to best practices in system administration that is helpful for even the most advanced experts. Organized into four major sections that build from the foundational elements of system administration through improved techniques for upgrades and change management to exploring assorted management topics. Covers the basics and then moves onto the advanced things that can be built on top of those basics to wield real power and execute difficult projects.
Learn Windows PowerShell in a Month of Lunches, Third Edition is designed to teach you PowerShell in a month's worth of 1-hour lessons. This updated edition covers PowerShell features that run on Windows 7, Windows Server 2008 R2 and later, PowerShell v3 and later, and it includes v5 features like PowerShellGet. For PowerShell v3 and up, Windows 7 and Windows Server 2008 R2 and later.
Troubleshooting with the Windows Sysinternals Tools is a guide to the powerful Sysinternals tools for diagnosing and troubleshooting issues. Sysinternals creator Mark Russinovich and Windows expert Aaron Margosis provide a deep understanding of Windows core concepts that aren’t well-documented elsewhere along with details on how to use Sysinternals tools to optimize any Windows system’s reliability, efficiency, performance and security. Includes an explanation of Sysinternals capabilities, details on each major tool, and examples of how the tools can be used to solve real-world cases involving error messages, hangs, sluggishness, malware infections and more.
DNS and BIND, 5th Ed. explains how to work with the Internet's distributed host information database—which is responsible for translating names into addresses, routing mail to its proper destination, and listing phone numbers according to the ENUM standard. Covers BIND 9.3.2 & 8.4.7, the what/how/why of DNS, name servers, MX records, subdividing domains (parenting), DNSSEC, TSIG, troubleshooting and more. PEPCK tells us this is "generally considered the DNS reference book (aside from the RFCs of course!)"
Windows PowerShell in Action, 3rd Ed. is a comprehensive guide to PowerShell. Written by language designer Bruce Payette and MVP Richard Siddaway, this volume gives a great introduction to Powershell, including everyday use cases and detailed examples for more-advanced topics like performance and module architecture. Covers workflows and classes, writing modules and scripts, desired state configuration and programming APIs/pipelines.This edition has been updated for PowerShell v6.
Zero Trust Networks: Building Secure Systems in Untrusted Networks explains the principles behind zero trust architecture, along with what's needed to implement it. Covers the evolution of perimeter-based defenses and how they evolved into the current broken model, case studies of zero trust in production networks on both the client and server side, example configurations for open-source tools that are useful for building a zero trust network and how to migrate from a perimeter-based network to a zero trust network in production. Kindly recommended by jaginfosec.
Tips
Here are a couple handy Windows shortcuts:
Here's a shortcut for a 4-pane explorer in Windows without installing 3rd-party software:
(Keep the win key down for the arrows, and no pauses.) Appreciation goes to ZAFJB for this one.
Our recent tip for a shortcut to get a 4-pane explorer in Windows, triggered this suggestion from SevaraB: "You can do that for an even larger grid of Windows by right-clicking the clock in the taskbar, and clicking 'Show windows side by side' to arrange them neatly. Did this for 4 rows of 6 windows when I had to have a quick 'n' dirty "video wall" of windows monitoring servers at our branches." ZAFJB adds that it actually works when you right-click "anywhere on the taskbar, except application icons or start button."
This tip comes courtesy of shipsass: "When I need to use Windows Explorer but I don't want to take my hands off the keyboard, I press Windows-E to launch Explorer and then Ctrl-L to jump to the address line and type my path. The Ctrl-L trick also works with any web browser, and it's an efficient way of talking less-technical people through instructions when 'browse to [location]' stumps them."
Clear browser history/cookies by pressing CTRL-SHIFT-DELETE on most major browsers. Thanks go to synapticpanda, who adds that this "saves me so much time when troubleshooting web apps where I am playing with the cache and such."
To rename a file with F2, while still editing the name of that file: Hit TAB to tab into the renaming of the next file. Thanks to abeeftaco for this one!
Alt-D is a reliable alternative to Ctrl-L for jumping to the address line in a browser. Thanks for this one go to fencepost_ajm, who explains: "Ctrl-L comes from the browser side as a shortcut for Location, Alt-D from the Windows Explorer side for Directory."
Browser shortcut: When typing a URL that ends with dot com, Ctrl + Enter will place the ".com" and take you to the page. Thanks to wpierre for this one!
This tip comes from anynonus, as something that daily that saves a few clicks: "Running a program with ctrl + shift + enter from start menu will start it as administrator (alt + y will select YES to run as admin) ... my user account is local admin [so] I don't feel like that is unsafe"
Building on our PowerShell resources, we received the following suggestion from halbaradkenafin: aka.ms/pskoans is "a way to learn PowerShell using PowerShell (and Pester). It's really cool and a bunch of folks have high praise for it (including a few teams within MSFT)."
Keyboard shortcut: If you already have an application open, hold ctrl + shift and middle click on the application in your task bar to open another instance as admin. Thanks go to Polymira for this one.
Remote Server Tip: "Critical advice. When testing out network configuration changes, prior to restarting the networking service or rebooting, always create a cron job that will restore your original network configuration and then reboot/restart networking on the machine after 5 minutes. If your config worked, you have enough time to remove it. If it didn't, it will fix itself. This is a beautifully simple solution that I learned from my old mentor at my very first job. I've held on to it for a long time." Thanks go to FrigidNox for the tip!
Websites
Deployment Research is the website of Johan Arwidmark, MS MVP in System Center Cloud and Datacenter Management. It is dedicated to sharing information and guidance around System Center, OS deployment, migration and more. The author shares tips and tricks to help improve the quality of IT Pros’ daily work.
Next of Windows is a website on (mostly) Microsoft-related technology. It's the place where Kent Chen—a computer veteran with many years of field experience—and Jonathan Hu—a web/mobile app developer and self-described "cool geek"—share what they know, what they learn and what they find in the hope of helping others learn and benefit.
High Scalability brings together all the relevant information about building scalable websites in one place. Because building a website with confidence requires a body of knowledge that can be slow to develop, the site focuses on moving visitors along the learning curve at a faster pace.
Information Technology Research Library is a great resource for IT-related research, white papers, reports, case studies, magazines, and eBooks. This library is provided at no charge by TradePub.com. GullibleDetective tells us it offers "free PDF files from a WIIIIIIDE variety of topics, not even just IT. Only caveat: as its a vendor-supported publishing company, you will have to give them a bit of information such as name, email address and possibly a company name. You undoubtedly have the ability to create fake information on this, mind you. The articles range from Excel templates, learning python, powershell, nosql etc. to converged architecture."
SS64 is a web-based reference guide for syntax and examples of the most-common database and OS computing commands. Recommended by Petti-The-Yeti, who adds, "I use this site all the time to look up commands and find examples while I'm building CMD and PS1 scripts."
Phishing and Malware Reporting. This website helps you put a stop to scams by getting fraudulent pages blocked. Easily report phishing webpages so they can be added to blacklists in as little as 15 minutes of your report. "Player024 tells us, "I highly recommend anyone in the industry to bookmark this page...With an average of about 10 minutes of work, I'm usually able to take down the phishing pages we receive thanks to the links posted on that website."
A Slack Channel
Windows Admin Slack is a great drive-by resource for the Windows sysadmin. This team has 33 public channels in total that cover different areas of helpful content on Windows administration.
Blogs
KC's Blog is the place where Microsoft MVP and web developer Kent Chen shares his IT insights and discoveries. The rather large library of posts offer helpful hints, how-tos, resources and news of interest to those in the Windows world.
The Windows Server Daily is the ever-current blog of technologist Katherine Moss, VP of open source & community engagement for StormlightTech. Offers brief daily posts on topics related to Windows server, Windows 10 and Administration.
An Infosec Slideshow
This security training slideshow was created for use during a quarterly infosec class. The content is offered generously by shalafi71, who adds, "Take this as a skeleton and flesh it out on your own. Take an hour or two and research the things I talk about. Tailor this to your own environment and users. Make it relevant to your people. Include corporate stories, include your audience, exclude yourself. This ain't about how smart you are at infosec, and I can't stress this enough, talk about how people can defend themselves. Give them things to look for and action they can take. No one gives a shit about your firewall rules."
Tech Tutorials
Tutorialspoint Library. This large collection of tech tutorials is a great resource for online learning. You'll find nearly 150 high-quality tutorials covering a wide array of languages and topics—from fundamentals to cutting-edge technologies. For example, this Powershell tutorial is designed for those with practical experience handling Windows-based Servers who want to learn how to install and use Windows Server 2012.
The Python Tutorial is a nice introduction to many of Python’s best features, enabling you to read and write Python modules and programs. It offers an understanding of the language's style and prepares you to learn more about the various Python library modules described in 'The Python Standard Library.' Kindly suggested by sharjeelsayed.
SysAdmin Humor
Day in the Life of a SysAdmin Episode 5: Lunch Break is an amusing look at a SysAdmin's attempt to take a brief lunch break. We imagine many of you can relate!
Have a fantastic week and as usual, let me know any comments.
Graham | CEO | EveryCloud
submitted by crispyducks to ITProTuesday [link] [comments]

Open thread, July 2017

This is an open thread to discuss items of interest. I may also use it to drop thoughts as they occur to me as well -- something of a replacement of my former "tab closure" posts, as ... well, it seems tabs are simply running away from me. Consider this an experiment that's been mulling for some time.
If you've got a question, observation, link, or anything else, feel free to post it, with a thought to the lair rules -- like house rules, but larrier.

Plugs

I strongly recommend eleitl's subreddit, /collapsademic/. "Low-volume, low-noise, moderated discussion of our coming collapse".
That's one of a set of "limits and collapse" subs I've created a multireddit for:

Facebook's secret sauce wasn't software, it was Harvard

That is, Facebook was once literally Harvard. Something it very much isn't anymore, a point I noted after cries of "but the normal people are coming" rang out on Mastodon. It's a point danah boyd has also made in her research.
There's a corollary: if your interest is in creating the next Facebook, or even merely disrupting the present one, then it strikes me one viable option would be to identify whatever your next Harvard is -- a cohort of intelligent, attractive, interesting people, who aren't much impressed by Facebook Which Is No Longer Harvard -- and kick some funding and technical support at them.
Your Next Harvard doesn't have to be Harvard, mind, though that's probably a good (and symbolic) target to include. And I can pretty much guarantee that the folks at 1 Hacker Way will go into a blind panic.
Which might just be a sufficient disruption.

Veritasium: What YouTube's algorithm selects for

Derek Muller, among the higher-quality YouTube creators, has reflected from time to time on what makes for successful YouTube content. Much of that (as with other social channels) is strongly dependent on what the site's own algorithms incentivise for. This 12 minute video looks at recent changes, and what this suggests.
Why YouTube Used to Prefer Quality.
This ties in with a ... much larger .. reflection I've been engaged in on media generally. It also highlights one of many failings with The Information Diet, which is that the information appearing online, at social media sites such as Facebook, Twitter, or Reddit, or on the sites and content farms feeding those maws, depends tremendously on what is being selected for and promoted.
Muller also fails to consider a few elements:

Tech Ontology -- Blocking factors

I'm trying to explore a few concepts before writing a post (or posts? or book?) on the idea of an ontology of technological mechanisms. In particular a few bits:
Identifying what technology is, specifically, and how it differes from both science and the liberal arts / humanities. There's a very good passage from John Stuart Mill in his Essays on some unsettled Questions of Political Economy:
One of the strongest reasons for drawing the line of separation clearly and broadly between science and art is the following:—That the principle of classification in science most conveniently follows the classification of causes, while arts must necessarily be classified according to the classification of the effects, the production of which is their appropriate end. Now an effect, whether in physics or morals, commonly depends upon a concurrence of causes, and it frequently happens that several of these causes belong to different sciences. Thus in the construction of engines upon the principles of the science of mechanics, it is necessary to bear in mind the chemical properties of the material, such as its liability to oxydize; its electrical and magnetic properties, and so forth. From this it follows that although the necessary foundation of all art is science, that is, the knowledge of the properties or laws of the objects upon which, and with which, the art dons its work; it is not equally true that every art corresponds to one particular science. Each art presupposes, not one science, but science in general; or, at least, many distinct sciences.
Comparing existing ontologies of technology. The Encyclopedia Britannica, the Bacons (Francis and Roger), the Library of Congress Classification System, the Random House Encyclopedia, and Joseph Needham's classifications come to mind.
Comparison with mechanisms within biology. Why biology? Because human technology is, as I see it, an extension of biological mechanisms, at least in large part. Nick Lane in particular has some very interesting work here.
Are the mechanisms themselves technologies? I think my answer here is no, though I want to check myself on this.
The fundamental mechanisms. All the categories boil down to "do less" or "use more", I think.
The Network Elements. Numerous of the categories I've defined have or represent network-type effects. I'm asking myself if these cannot be simplified.
Keeping the end in mind. The ultimate goal of any classification scheme is to find an underlying and simplifying pattern. The realisation as I started putting this together was that each of the mechanisms implied specific benefits, and disadvantages, for the associated mechanisms, as well as a set of common features.
Disruption. I'm looking for ways Clayton Christensen's concept comes in to play. See also Jill Lepore's The Disruption Machine: What the gospel of innovation gets wrong (2014).

John Baez, Category & Network Theory

Category theory and Network Theory are areas of research of University of California, Riverside, physics professor John Baez. I've been playing catch-up with his G+ profile and Azimuth blog. Baez has maths I don't have, but the ideas he's pursuing strike me as similar to where I'm going with my own.
See particularly his Oxford Network Theory collection.

Can privacy be quantified?

This presupposes a few other questions, including defining what privacy is.
Jill Lepore, again, has a University of Kansas lecture, "Unseen - the History of Privacy" (April, 2017), which suggests a progression from mystery to secrecy, then privacy:
Lepore also notes that "the case for privacy always comes too late" -- after the horse is out of the barn. Debates over privacy always lag advances in technology.
There's a related set of etymologies: cabinet, a chamber of secrets, secretary, one entrusted to secrets, and secret itself: "set apart, withdrawn; hidden, concealed, private", from PIE root *krei- "to sieve," thus "discriminate, distinguish".
It seems to me that privacy is the abilty to set, define, and defend boundaries. (A source of rather constant friction with Google.) In which case some of the possiblities for measurement:
That's a partial and speculative list, but it gives some sense of where I'm looking.

Employment and Automation: Why is factory work different?

The focus on the automation debate is over the likely falling wages, and apparently job security, of labour. This frequently prompts the counterargument that factory work was an earlier age's version of automation, and ultimately paid well.
One though that occurs: What if manufacturing-based factory work was an exception?
And if so, an exception to what, exactliy, and why?
A few points come to mind, with Arnold Toynbee's Lectures on the Industrial Revolution and Robert Gordon's The Rise and Fall of American Growth supplying much of the background here.
Adam Smith writes of the five factors which provide for a premium on wages:
first, the agreeableness or disagreeableness of the employments themselves; secondly, the easiness and cheapness, or the difficulty and expense of learning them; thirdly, the constancy or inconstancy of employment in them; fourthly, the small or great trust which must be reposed in those who exercise them; and, fifthly, the probability or improbability of success in them.
Several of these apply to factory work:
That's four of the five factors.
The real key to me though is that the role of human workers was as the brains and control element of a structured, automated, and powered process. Factory work is very much literally a force multiplier of raw human skill. A single man, plus machines, could have his output multiplied many times. And due to the considerations above, plus unionisation, eventually claimed a high wage.
The question is how these factors extend into the coming world of work. I have concerns. And I don't see any of the discussion of this point following the lines of analysis I've given here.
Further development in a comment at The Other Place.
And, back to unionisation: factories represent both a strength and a weakness of monopoly-as-network-control.
On the one hand, a factory is a nexus of capital, access to financing, marketing and vendor relationships, transport, power or energy, and labour. On the other, a factory is much like a mine: you cannot simply pick it up an move it to another location. Or at least this was far less true in the 19th and much of the 20th century. Over the past 50 years or so, mobility of capital, and the ability to finance and construct new factories largely at-will has increased, with labour organisation falling largely in parallel.

The Brain and the Eighth Hand

I was reminded of a fantastical riff Yonatan Zunger posted to G+ a while back in which he created an entire wealth, class, and informational complexity theory around Star Wars vaporator droids. This is fiction-on-fiction, mind, but a wonderful set of imagery:
When Owen asked C-3PO if he spoke the binary language of moisture vaporators, the proper answer for him to give (in binary) would have been "with neither too many hands nor too few," that being the idiom for speaking politely and properly. Moisture vaporators use their hands as communication ports, each finger transmitting or receiving a single channel, and touch hands to one another in order to speak; if you were to speak with more hands than the listener had available, they would miss part of what you were saying, and (especially if that were crucial metadata) they would not be able to understand you. Conversely, if you spoke with fewer hands than they listened with, your transmissions would be slow, stilted, taking far too much time. Speaking with the appropriate number of hands is a key aspect of their culture.
But as with many societies, etiquette conceals notions of class: the number of hands a moisture vaporator has is largely determined by wealth and their role. As a result, a common worker with only two or three hands will always seem slow-witted and foolish when trying to speak to a five-handed member of their bourgeoisie, and that burgher would in turn feel profoundly uncomfortable in "seven-handed society."
An eighth hand, by law and by custom, is permitted only to their Emperor, and in fact "the eighth hand" is both a symbol of and metaphor for Imperial power.
So, we get communications, class, wealth, status, and complexity of thought, in one package.
I'd run across an item at Nautilus (fantastic online source, by the way, and they're actively soliciting support currently), "How Your Brain Decides Without You:
The structure of the brain [Lisa Feldman Barrett] notes, is such that there are many more intrinsic connections between neurons than there are connections that bring sensory information from the world. From that incomplete picture, she says, the brain is “filling in the details, making sense out of ambiguous sensory input.” The brain, she says, is an “inference generating organ.” She describes an increasingly well-supported working hypothesis called predictive coding, according to which perceptions are driven by your own brain and corrected by input from the world. There would otherwise simple be too much sensory input to take in. “It’s not efficient,” she says. “The brain has to find other ways to work.” So it constantly predicts. When “the sensory information that comes in does not match your prediction,” she says, “you either change your prediction—or you change the sensory information that you receive.”
To which I obseved on the Inevitability of the Eighth Hand, by the Emperor, that is, the decisionmaking centre of society:
Thus: the emperor must always have the eighth hand, and proper interpretation and framing of the Universe requires more processing power then sensing power, and/or the obligation to discard information which cannot be integrated into the receiving frame.
On which I'll note that the most startling element of this whole episode was that I was actually able to find it using G+ search -- otherwise almost wholly useless.

"Forward to the Past" -- the Digital Library as the problem, not the solution

Eric van der Velde writes on my newfound obsession, libraries, in "Forward to the Past". I've points of disagreement and agreement.
What particularly caught my attention, though, is this:
Why is there no scholarly app store, where students and faculty can build their own libraries?
Though I disagree with the market-based approach, the premise of a self-controlled, self-contained facility for personal information management ... yeah, I'm kinda hankering that way myself.

Subreddit styling: Geopolitics has a wonderful thread-collapse design

I'd first run across this some time back ... and then couldn't recall which subreddit it was. /Geopolitics has a very slick CSS where the "collapse thread" control runs the full height of the left-hand margin, for each nesting level of a comment thread. If you've decided you've had enough of a particular digression, you can close any level of it with a single click, without having to hunt up-thread for the relevant comment. See this archived post for an example.
I'm impressed and may well steal the concept. Good UI is very rare. This is a good UI.
Why? It puts the control directly in context, makes it easy, makes it obvious, and, should you close an item by accident, makes undoing the action trivially easy.

China and classifications of industrial sectors

In a YouTube video, Mark Anderson of INVNT/IP makes mention of a classification by China of the global economy into 417 sectors, and apparently is targeting those for economic espionage. On inquiring as to where that classification is made: the Communist Party of China's 12th Five Year Plan, 2011 - 2015.
Which I now feel I need to find an English translation of.
I did track down a U.S. government assessment of the plan, however. And in that, a further interesting note on what it considers to be a failure of the plan: though the performance targets of the plan were generally hit (and fairly impressively so), the analysis argues that the structural foundations of the economy weren't adequately addressed. This strikes me as an interesting possible response to various "things are going so amazingly awfully terrifically swell!!!" glurge posts which emerge from time to time. Interesting how vision clears when focused outward....

The Tech Ontology Purity Test: Filters

Another aspect of the tech ontology: I'm somewhat stuck on the point of various purification processes and mechanisms and how these fit within the notional framework I've conceived. Especially as this capability is a highly fundamental biological process, one that is key to virtually any process. Actually, it gets us straight back to entropy and de-entropisation.
A process by which a conglomeration of two (or more) things can be reduced to two (or more) separate collections, each with only one set of components to it, is what de-entroposiation is all about.
That might be a mechanical sorting (e.g., hand-picking), size-based filters (sieves, nets, filters), density differentials (wheat/chaff sorting, bouancy, air-jet separation, charged beam, gas diffusion, centrifuge), magnetic properties, distillation processes, chemical solutions, ion-diffussion / proton-pump mechanisms (cell-wall), etc. The upshot is: how do you distinguish between what you want, and then, somehow, act differentially on the one vs. the other?
Is this strictly a process knowlege, in which case it falls under "technology"? Is it a class of actions? Is it material properties? Systems management?

Asset price inflation and Adam Smith

A wonderful Smith quote:
As soon as the land of any country has all become private property, the landlords, like all other men, love to reap where they never sowed, and demand a rent even for its natural produce.
-- Adam Smith, Wealth of Nations, Book I, Chapter VI
See previously, Asset Price Inflation of Maslovian and Productive Goods.

Robert Behn and "Gresham's Law of Leadership Strategies"

From his book The performanceStat potential a leadership strategy for producing results, Robert Behn distills what I see as a statement of Gresham's Law as a generalised constraint on complexity within systems:
He starts with the pithy observation:
Simple leadership strategies drive out the complex.
But then expands this more completely, showing the information-theoretical underpinnings of the fundamental Gresham's mechanism:
Simple, easily explained, easily comprehended, explicit-knowledge descriptions of a leadership strategy dive out subtle, complicated, tacit-knowlege appreciation for the potential of a complex leadership strategy to influence organizational behavior in ways that improve performance.
He continues to note that this comes in two forms:
  1. We humans prefer simple leadership strategies to complex ones.
  2. We also prefer simple explanations of complex leadership strategies to the subtle and complicated reality.
What I particularly like is the focus on several elements of psychology and cognition:
This suggests a subsuming mechanisms for Gresham's Law which jibes with concepts from Darwinian evolution: that systems evolve complexity costs, and that among the selective pressures which exist are those for a minimisation of complexity in light of such costs. There's an article on a computational evolution experiment, "Meet the Animats", which notes that there is a minimum complexity bound to various maze-traversal "animat" bots, though, without a complexity cost factor, the experiment found no constraint on the upward bound of complexity.
A few minor edits -- mostly deletions -- makes Behn's formulation on page 42 (appropriate) much more general:
"Simple, easily explained, easily comprehended, explicit-knowledge, descriptions ... drive out subtle, complicated, tacit-knowledge appreciation for the potential of a complex model."

Pilots vs. software users

From HN, ncallaway and kbuttler note that the airline industry's safety record is based on pushing beyond "pilot error" as an acceptable prime factor in accidents, and that the software industry might well do similarly.
While I agree generally with that sentiment, there's a key difference.
Airplane pilots are licensed, certified, trained, and regulated. There's a clear floor to who is allowed in the cockpit (barring extreme emergencies, e.g., incapacitation of a pilot). By contrast, software is made available to pretty much the entire world. And it turns out that two thirds of all adults have "poor", "below poor", or no computer skills at all. Which is to say, the qualifications floor is nonexistent. It's the tyranny of the minimum viable user.
If you're designing a one-size-fits-all system, you've got to design for this. The results, I'd argue, are ... not particularly satisfactory.
I'm not saying "don't design for the user in mind", or "don't dismiss user error". But rather, than when your floor is zero, you're going to have a remarkably difficult challenge.

One last thing ...

Do you like what you're reading here? Would you like to see a broader discussion? Do you think there are ideas which should be shared more broadly?
The Lair isn't a numbers game, my real goal is quality -- reaching, and hopefully interacting with, an intelligent online community. Something which I've found, in several decades of online interactions, difficult to achieve.
But there's something which works surprisingly well: word of mouth. Shares, by others, to appropriate venues, have generated the best interactions. I do some of that, but I could use your help as well.
So: if you see something that strikes you as particularly cogent (or, perhaps, insipid), please share it. To another subreddit. To Twitter or Facebook or G+. To the small-but-high-quality Metafilter. To your blogging circle, or a mailing list. If you work in technology, or policy, or economics, there as well.
Thanks, Morbius.
submitted by dredmorbius to dredmorbius [link] [comments]

Stark Trading System Review -Perfect Method For You

Stark Trading System Review -Perfect Method For You Stark Trading System Review The Bow Legs No More System is a ebook, which can be downloaded instantly in a PDF (e-book) format or viewed online. It is 100 % characteristic and safe consequently it should be possible in the protection of your home. It is demonstrated and extremely reasonable henceforth justified regardless of your thought. Trust this Bow Legs No More survey will help you to settle on an astute choice and stroll with certainty. Stark Trading System Are you looking for a way to get rich fast using binary options? Stark Trading System is a auto quick software is a new trading app. This system is very easy to use and completely automates the binary trading experience. Stark Trading System is new trading system that helps investors when predicting their positions in binary options. It shows you where not to invest if the market is not favorable to become profitable for you which can really save any trader their hard earned investment funding. It is the finest software designed to provide both professional and novice traders.
What Is Stark Trading System The Stark Trading System system offers more than just a software, and some useless membership; it gives you insider tips, and trains you in everything that you will need to know about binary trading. This primary goal of this tool is to watch nearly over the business and search for beneficial trades for its users. The entire set of drilling and points of interest you have to take advantage of programming is clarified when utilizing the product so there’s no compelling reason to worry about that, eminently any beginner simply getting in. Anyone who will take enough time to download The Stark Trading System software and begin trading can make the most profitable investments since the software is boasting a considerable 91% rate of success.
How Does Stark Trading System Works The software watches over the current binary options market 24 hours a day and then stores all the market movements and data to give out advice to which binary options trades will be profitable to invest in. The software is simple enough to navigate that even novice users will be able to make it work for them. The software itself is being offered for free but only on a limited basis. Once you set up your account, you deposit the money you will be using to trade with and the app itself will automatically make the trades that fit into its criteria to generate maximum profits. Learning The Stark Trading System application and making money is straightforward as activating the program and waiting for a signal to tell you exactly what option to place a trade on.
What Do You Learn From Stark Trading System The newly developed Stark Trading System software is a program that assists traders with finding the right binary options to invest in. Using the Stark Trading System software is completely free. You will never be charged a commission or finders fee for how many profitable trades they find you. You can find out more about this particular piece of software online, or by watching introductory videos. When the program finds a trade you can head over right to your options trading broker to make the trade which will be either a call, or a put. Stark Trading System will show all the binary options that are available and open for trading and where they are moving in real time. Positive Points: This program also reduces the complexity for the charts and payout of a certain percentage of the value on the underlying asset. The method of trading being simple is easy to understand. This is a real opportunity for convincing yourself of the power of the tool. Ease of use, plenty of information regarding the steps you need to take in order to take advantage of the system. It is quick money where in you can earn substantially by putting in just 20-25 minutes of your day. The software is very easy to use and there is you have to install to get started. Negative Point: Stark Trading System available in online only.
Conclusion You can actually make some good money by using this system. However, you are not going to become rich in a short amount of time, and you will need to spend a little bit of money before you see any profits. This software include wonderful customer support so don't worry about anything. Many people wonder if it’s possible to even earn anything with binary options and think it usually is all a scam. The truth is that many people all over have great success with binary options if using the most suitable strategies and tools.
==> Click Here To Get Free Instant Access Stark Trading System <==
.
.
.
.
.
.
.
.
.
.
Stark Trading System review reviews software reviews software download login website system malware pro contact tutorial results forum a scam brokers bonus review software scam testimonials virus youtube proof app complaints con does it work real review real reviews emotional facebook is scam is it real in action legit or scam members area not working. service phone number pro version password robot download sign up. software download free trading tutorial video service Review. login sign up. contact results a scam service review software scam testimonials youtube proof app complaints download pro version members area legit or scam bonus testimonials results tutorial.
Claim Your Bonus Now: http://bit.ly/1QPhTsw
Stark Trading System review Claim Your Bonus Now: http://bit.ly/1QPhTsw
Discover How You Can Make Over $200 Within The Next Hour Using Our Secret Free Traffic Hack > Stark Trading System. Stark Trading System Review # According to the creator of this training, Stark Trading System will teach you how to start making $200/day with free traffic
tag :
Stark Trading System Stark Trading System review Stark Trading System bonus Stark Trading System pro Stark Trading System review and bonus Stark Trading System review ehy buy it Stark Trading System review get it now
Claim Your Bonus Today http://bit.ly/1QPhTsw
submitted by goodreview2 to binary2reviews [link] [comments]

[Just Launched] Options Domination Binary Trading - [Amazing System] - True Risk Free Trades! [New for 2015]

Many brokers or services will market something called “risk free” trades in which a certain number of your first trades you can get your money back should the signals they give you prove to be of bad quality. In most cases there are many regulations that require you to keep investing a certain amount before you can withdraw your “risk free” trades. This is the sign of a bad signal provider that probably makes more money selling their signals then they do actually implementing them themselves.
In our case study of the system we won 5 out of 7 of the trades and pocketed $250 in profit which is a 25% return on a small investment. We were very impressed with these results. At that time we could have elected to withdraw our original $1,000 and essentially be playing with the $250 “on the house”. CLICK HERE TO GET YOUR RISK FREE TRADES NOW!
CLICK HERE TO GET YOUR RISK FREE TRADES NOW!
Using their basic system of signals we were able to accumulate over $10,000 in our account in just 30 days! These are better results then we have gotten with other binary signals costing 10 times the amount of what options domination is charging. For a simple $50 a month you get multiple daily signals, keep in mind they don’t send you 1,000’s of signals a day like most services as they are focusing on the quality of the signal and not just sending you a bunch of garbage signals like many of the other companies do.
binary options trading, binary options trading signals, binary options trading strategy, binary options trading system, binary options trading signals review, binary options trading software, binary options trading platform, binary options trading robot, binary options trading signals franco, binary options trading hours, binary options trading + , binary options trading signals, binary options trading strategy, binary options trading system, binary options trading signals review, binary options trading review, binary options trading software, binary options trading platform, binary options trading robot, binary options trading signals franco, binary options trading hours, binary options trading + a, binary options trading alerts, binary options trading affiliate program, binary options trading api, binary options trading australia, binary options trading account, binary options trading articles, binary options trading app, binary options trading advice, binary options trading academy, binary options trading assets, binary options trading + b, binary options trading brokers, binary options trading books, binary options trading bot, binary options trading blog, binary options trading basics, binary options trading best sites, binary options trading + c, binary options trading course, binary options trading calculator, binary options trading charts, binary options trading course online, binary options trading companies, binary options trading companies in usa, binary options trading canada, binary options trading competition, binary options trading contest, binary options trading complaints, binary options trading + d, binary options trading demo account, binary options trading demo, binary options trading definition, binary options trading demo account without deposit, binary options trading dubai, binary options trading does it work, binary options trading demo account uk, binary options trading daily, binary options trading discussion, binary options trading dangers, binary options trading + e, binary options trading etrade, binary options trading education, binary options trading examples, binary options trading explained, binary options trading ebook, binary options trading etoro, binary options trading europe, binary options trading eztrader, binary options trading experience, binary options trading experts, binary options trading + f, binary options trading for beginners, binary options trading forum, binary options trading franco, binary options trading forex, binary options trading for dummies pdf, binary options trading free, binary options trading for dummies, binary options trading free demo, binary options trading for us citizens, binary options trading for usa, binary options trading + g, binary options trading guide, binary options trading game, binary options trading groups, binary options trading guide pdf, binary options trading good or bad, binary options trading glossary, binary options trading graphs, binary options trading gambling, binary options trading gurus, binary options gold trading, binary options trading + h, binary options trading hours, binary options trading help, binary options trading history, binary options trading halal or haram, binary options trading halal, binary options trading how does it work, binary options trading how to, binary options trading hack, binary options hourly trading system, 60 second binary options trading hours, binary options trading + i, binary options trading in the us, binary options trading indicators, binary options trading in the usa, binary options trading illegal, binary options trading in america, binary options trading income secrets, binary options trading in united states, binary options trading is it real, binary options trading in south africa, binary options trading india, binary options trading + j, binary options trading journal, binary options trading jobs, binary options trading + k, binary options trading in kenya, making money with binary options trading starter kit, binary options trading + l, binary options trading low deposit, binary options trading legal us, binary options trading low minimum deposit, binary options trading live signals robot 2014, binary options trading lessons, binary options trading legit, binary options trading license, binary options trading loss, binary options trading legal in canada, binary options trading live charts, binary options trading + m, binary options trading minimum deposit, binary options trading methods, binary options trading mentor, binary options trading meaning, binary options trading millionaires, binary options trading malaysia, binary options trading make money, binary options trading market, binary options trading minimum deposit 100, binary options trading martingale, binary options trading + n, binary options trading nadex, binary options trading news, binary options trading no minimum deposit, binary options trading no deposit bonus, binary options trading nz, binary options trading new zealand, binary options trading nigeria, binary options trading newsletter, binary options trading nifty, binary options trading nairaland, binary options trading + o, binary options trading on weekends, binary options trading online, binary options trading on mt4, binary options trading or gambling, binary options trading opinions, binary options trading oanda, binary options trading - optionbit, binary options trading hours, binary options trading good or bad, binary options trading course online, binary options trading + p, binary options trading platform, binary options trading practice account, binary options trading practice, binary options trading program, binary options trading pdf, binary options trading paypal, binary options trading platform reviews, binary options trading platform comparison, binary options trading plan, binary options trading psychology, binary options trading + q, binary options trading questions, binary options trading + r, binary options trading review, binary options trading robot, binary options trading room, binary options trading robot review, binary options trading real time charts, binary options trading regulations, binary options trading real, binary options trading recommendations, binary options trading + s, binary options trading signals, binary options trading strategy, binary options trading system, binary options trading signals review, binary options trading software, binary options trading signals franco, binary options trading scams, binary options trading sites, binary options trading signals free, binary options trading strategy youtube, binary options trading + t, binary options trading training, binary options trading times, binary options trading tools, binary options trading td ameritrade, binary options trading techniques, binary options trading tips, binary options trading tutorial, binary options trading tutorial pdf, binary options trading tricks, binary options trading the news, binary options trading + u, binary options trading usa, binary options trading united states, binary options trading using paypal, binary options trading uk, binary options trading uae, binary option trading uk reviews, binary options trading youtube, binary options trading system upto 90 accuracy, binary options trading legal us, binary options trading platform uk, binary options trading + v, binary options trading videos, binary options trading volume, binary options trading vs gambling, binary options trading vs forex, binary options virtual trading, binary options virtual trading account, free binary options trading videos, vault options binary trading, options trading vs binary options, track elite v1.2 binary options trading system, binary options trading + w, binary options trading wiki, binary options trading websites, binary options trading with franco, binary options trading with no minimum deposit, binary options trading what is, binary options trading winning strategy, binary options trading without investment, binary options trading with no deposit, binary options trading with bollinger bands, binary options trading with paypal, binary options trading + y, binary options trading yahoo answers, binary options trading youtube, binary options trading strategy youtube, binary options trading signals youtube, does binary options trading work yahoo, binary options trading + z, binary options trading new zealand, binary options trading + 1, binary options trading 101, binary options trading $100 minimum deposit, binary options trading top 10, $1 binary options trading, top 10 binary options trading platform, binary options 1 minute trading, 10 minute binary options trading system, binary options trading + 2, binary options trading 2014, binary options trading 2013, binary options trading 2012, binary options trading 24, binary options trading system 2014, binary options trading system 2013, binary options trading signals 2013, free binary options trading signals 2014, best binary options trading platform 2013, 24 hour binary options trading, binary options trading + 3, 3 binary options trading strategies for beginners, binary options trading + 4, binary options trading for beginners, binary options trading for dummies, binary options trading for a living, binary options trading for usa, binary options trading for us citizens, binary options trading for dummies pdf, binary options trading for free, binary options trading for mt4, binary options trading strategies for beginners, binary options trading signals for free, binary options trading + 5, binary options trading 50 deposit, 5 minute binary options trading, 5 minute binary options trading strategy, 5 min binary options trading strategy, binary options trading + 6, binary options trading 60 second strategy, binary options trading 60 seconds, 60 second binary options trading system, 60 sec binary options trading strategies, 60 seconds binary options trading signals, 60 second binary options trading hours, 60 second binary options trading demo account, 60 second binary options trading software, binary options trading + 7, binary options trading, binary options trading signals, binary options trading strategy, binary options trading system, binary options trading signals review, binary options trading review, binary options trading demo account, binary options trading platform, binary options trading in india, binary options trading forum, binary options trading + 8, assaxin 8 binary options trading system, binary options trading + 9, binary options trading system upto 90 accuracy, binary options trading system striker9, striker9 pro binary options trading system
submitted by optionsdomination to optionsdomination [link] [comments]

Best Binary Options Strategy 2020 - 2 Min Strategy Live ... Winning Binary Options Trading Strategy eBook by Stephen ... Binary Options Strategy 2020  100% WIN GUARANTEED ... Winning Binary Options Trading Strategy eBook by Stephen ... BEST 5 BINARY OPTIONS STRATEGIES IN 2020!

A Complete Guide to Binary Options Trading By Meir Liraz Binary Options Trading Requires Very Little Experience. The common misconception is that binary options trading and forex trading can only be done by one that has a certain amount of experience in the area. There is no requirement to have any previous experience in financial trading and with a little time, any skill level can grasp the concept of binary options trading. 3. The Flow of Decisions in a Binary Options Trade 4. Advantages and Disadvantages of Binary Options Trading 5. Binary Trading Risk Management 6. What You Need to Succeed in Binary Options 7. How Much Money You Need to Start Trading 8. Technical Analysis As a Tool for Binary Trading Success 9. Developing a Binary Options Strategy and Entry ... Binary Options Price Action Strategy PDF. To get my Binary Options price action Strategy, including lot of tips and my proven strategy or binary options, you just need to choose one of the Options below: Follow my Fanpage on Facebook and message me there to get your Strategy PDF file send directly! Click here to follow!

[index] [2217] [4319] [265] [1934] [2401] [3287] [3891] [3967] [537] [4027]

Best Binary Options Strategy 2020 - 2 Min Strategy Live ...

IQ Option (Free Demo) http://www.cryptobinarylivingway.com/IQOption1 💰💲FULL BEGINNER? Join My PERSONAL TRAINING!💴💵 BLW Trading Academy: http://www ... The road to success through trading IQ option Best Bot Reviews Iq Option 2020 ,We make videos using this softwhere bot which aims to make it easier for you t... Visit Our Website: https://bit.ly/3adQov7 - Winning Binary Options Trading Strategy eBook by Stephen Check to see what kinds of support the very best binary ... Read More Here: https://bit.ly/3fG9Lyl - Getting My Iq option ufficial ebook broker binary options strategies To Work On Monday, I broke from my typical rout... Learn This Here Now: https://bit.ly/3gJE5t9 - Winning Binary Options Trading Strategy eBook by Stephen Updated Aug, 2020 Classification - World 68 Views Toda...

#