• ilinamorato@lemmy.world
    link
    fedilink
    arrow-up
    127
    arrow-down
    3
    ·
    22 days ago

    I’ve only ever met two types of IT professional. Either:

    • Their home network is immaculate and smooth as butter. It connects quickly and integrates with everything. They can manage it all from their phone, but they don’t have to because it’s all automated. Their server room (a) exists and (b) is cable managed. There’s a wireless access point and connected smart speaker in every room, including the garage and the back patio, but they’re carefully located for maximum sound coverage and to prevent signal interference. Their home theater is substantially better than a movie theater, and their media server is packed to the gills with content. Network security is hardened, with bespoke subnets for every user and tunneling for the media server and smart home functions. You feel a sense of calm and ease when connected to their network. “Everything I do at work, I try out at home first.”

    Or:

    • Their “home network” is a single Belkin router from 2011. They’ve had it since college, and it takes 9 minutes to reboot (which they have to do daily). It doesn’t even have Tomato on it and still uses the default password. They still watch OTA TV and Blu-Rays, so the wifi is exclusively connected to the smart switch that their tea kettle is plugged into so they can start their hot water before they come downstairs. You feel guilty even asking for the wifi password. “Why would I do any network stuff here? I do IT all day at work, the last thing I want to do is even touch a Cat5 cable at home.”
    • marcos@lemmy.world
      link
      fedilink
      arrow-up
      39
      arrow-down
      1
      ·
      22 days ago

      “Everything I do at work, I try out at home first.”

      Absolutely no fucking way! And anything that touches work is isolated, their opsec sucks so much they didn’t even realized they mandate “security solutions” with known backdoors.

      • SleeplessCityLights@programming.dev
        link
        fedilink
        arrow-up
        24
        ·
        22 days ago

        I think it means they setup new tech on their homelab to learn how everything works and how to break it. Then when a problem arises where one of these solutions is needed at work, you can implement it without any large issues. It makes sense if your hobby is close to or adjacent your day job, and you are on Salary, and your boss treats you right.

        • marcos@lemmy.world
          link
          fedilink
          arrow-up
          12
          ·
          22 days ago

          Yes, I’m not doing almost any of the things we do at work in my network.

          I’m absolutely not running the same software. I’m not organizing the information the same way. I’m not using the same infrastructure abstraction, and even less configuring it in any similar way. I’m not writing the same languages.

          The work environment is dictated by consensus between many people, with varying expertise, and weighted by how much work one is willing to put into each aspect of it. Each of those parts lead to bad tech, even though they lead to good people organization.

          • SleeplessCityLights@programming.dev
            link
            fedilink
            arrow-up
            7
            arrow-down
            1
            ·
            22 days ago

            You are telling me that you can’t proof of concept something without a matching tech stack? Or learn exactly how a new tech works? It also sounds like you should never give your work any of your personal time, you won’t gain anything except for more work.

      • TubularTittyFrog@lemmy.world
        link
        fedilink
        arrow-up
        20
        arrow-down
        2
        ·
        edit-2
        22 days ago

        No, it’s 'my life is IT and i never stop working" guy, and “IT is just my job” guy.

        I just order a new router on Black Friday to replace my 10 year old one. I also only console game now because PC gaming is too much of a headache. I spend my money on outdoor gear and pets, not technology. My new router is $90 bucks. I can’t fathom why I’d ever need a wifi 7 quad band router with 9Gbps of throughput for a home network, other than pure bragging rights. All my devices are like 5-10 years old and barely support wifi 6 anyway.

        A couple of my co-workers are the former. They will be doing penetration testing at 2am form their home lab in the morning because they their default mode is work work work. If i’m up at 2 am i’m watching TV and snacking.

        I monitor security updates, but my co-workers like get excited and ramble on anytime a new patch/attack is documented. I don’t get it. They revel in doing updates and rebuilding their VMs fresh every few weeks, I groan and clone.

      • tempest@lemmy.ca
        link
        fedilink
        arrow-up
        5
        ·
        22 days ago

        Nah, I could afford nice shit but I’m still using a ubiquity edge router 8 from 10 years ago.

        There is probably something to be said that there is an in between to those two extremes. The “my network is made of a Hodgepodge of shit my employer threw out that still seems to work and brand new things I replaced because I had to”

        • ilinamorato@lemmy.world
          link
          fedilink
          arrow-up
          6
          ·
          22 days ago

          My first draft of this did mention that there was a version of the second type of IT guy who cobbled everything together with workplace castoffs and conference swag, but I couldn’t figure out how to make it work without just being over-wordy.

    • wizardbeard@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      12
      ·
      22 days ago

      I want to be the first, but I am definitely closer to the second. I’m trying to find a reasonable middle ground.

      Like, I want to have a nice home network with a proper NAS, Pihole DNS, Plex/Emby/Jellyfin media server, all my music properly tagged, little mediaplayer/emulation/game streaming endpoint boxes on each TV, etc. But I don’t have the time or money to do it right at the moment.

      So I have my desktop set up to share out my media folders as SMB shares when it’s powered on, and I’ve used a few tools to get my video content organized right for Kodi. I’ve got Kodi installed as an app on the Xbox Series X plugged into the family room TV. The other TV has a Chromecast dongle with VLC sideloaded and set up to connect to the SMB shares, because I’m too lazy to get my Kodi setup on it. Every room in the house has an ethernet port, and most rooms have a dumb switch so as much hardware can have ethernet connection as possible. I’ve run my music collection through MusicBrainz Picard, and separated it into a properly tagged and organized folder, and one for stuff that isn’t.

    • TeddE@lemmy.world
      link
      fedilink
      arrow-up
      5
      ·
      22 days ago

      I’m in the middle. At work, I play it fairly conservative, applying well established solutions to well-known problems.

      I have friends whom I advise and assist with their networks that absolutely fall into the first category.

      MY network is is like the lab of a mad scientist, everything tinkered with right up to the edge of breaking. My home router collapses multiple times a year due to the wonky chaos I ask it to do. Home automaton sequences that are more complex than most rube goldberg machines. Metaphorical sharp edges and loose clutter everywhere, but an unholy abomination that works better than it has any right to - until I scrap it all to rebuild it from scratch next week.

      • ilinamorato@lemmy.world
        link
        fedilink
        arrow-up
        5
        ·
        22 days ago

        I spent way more time than I care to think about figuring out how to get my porch lights to come on at 7am and turn off 10 minutes before sunrise without breaking when sunrise happened before 7am. I tried some serious Rube Goldberg nonsense in multiple iterations, until finally I decided to just add another “turn off the lights” at 9am every day. Most of the time it doesn’t do anything because the lights are already off, but on DST day it accomplishes my goal of making sure they don’t run all day, since 9am is always after sunrise.

        • couch1potato@lemmy.dbzer0.com
          link
          fedilink
          arrow-up
          4
          ·
          22 days ago

          If you’re using home assistant there is a “sun” integration.

          My lights turn on 30 minutes before sunset and turn off 30 minutes after sunrise.

          My wife didn’t want them turning on and off at the same time every day because observers could see the pattern… at least this way it’s a little more hidden.

          • AtariDump@lemmy.world
            link
            fedilink
            arrow-up
            1
            ·
            22 days ago

            Yep. You can also use the sun’s position in the sky as well; I had one of the AIs write up the YAML.

          • ilinamorato@lemmy.world
            link
            fedilink
            arrow-up
            1
            ·
            21 days ago

            (Side note, I just realized I said the times slightly wrong. We actually wanted it on at 6:30 and off 15 minutes before sunrise.)

            Yeah, I had it turning off before sunrise just fine. The problem is that we didn’t want to turn them on until 6:30, but on the longest day of the year, sunrise actually happens at 6:14, which means that the lights would get the signal to turn off before they got the signal to turn on, which would mean that the lights would stay on all day until the night automation turned them back off again at 10pm. Which…probably doesn’t make a difference, but it would bug my totally-not-neurodivergent brain.

            Anyway, I don’t use Home Assistant, but that’s probably the one I’ll choose the next time I move.

          • ilinamorato@lemmy.world
            link
            fedilink
            arrow-up
            1
            ·
            21 days ago

            The porch lights in question are actually string lights, and I just assumed that the power outlet they’re plugged into was too deep on the porch for a light sensor to be reliable. I could definitely be wrong, though.

    • Big_Boss_77@lemmynsfw.com
      link
      fedilink
      English
      arrow-up
      3
      ·
      22 days ago

      I work on this shit daily… it’s fucking infuriating…why on God’s green earth would I want to spin up a bunch of shit that’s gonna give me more hassle than its worth, for free, when I can just…not, ya know?

      • ilinamorato@lemmy.world
        link
        fedilink
        arrow-up
        1
        ·
        9 days ago

        “tomato” is an open-source router firmware package. You can use it to access settings that the manufacturer intentionally hides away, or to set up features like UPnP more easily. Some versions even enable features like a built-in NAS (just bring your own drives), networked printer support, or running a publicly-facing website on your router.

        Along with packages like DD-WRT, it’s a pretty common modification for a lot of tech-savvy users to make.

        Though, to be honest, I’m not entirely certain that a 2011 Belkin router would be compatible with Tomato (probably?).

  • Redredme@lemmy.world
    link
    fedilink
    arrow-up
    56
    ·
    21 days ago

    Guest vlan? Smart.

    Blocking 80/443 knowing all to well everything depends on those: evil.

    Throttling to 56k: the original original poster just being a dick.

    Took 45 minutes: Maybe find another job. You’re not good at it.

    Conclusion: The sister was right. Evil incompetent dick.

    • andioop@programming.dev
      link
      fedilink
      English
      arrow-up
      11
      ·
      21 days ago

      I have a feeling this is satire, and I’m usually the type of person to miss the joke and think it’s genuine

    • Captain Aggravated@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      25
      ·
      22 days ago

      The experience of managing a consumer-grade LAN appliance:

      Open web browser

      Start typing 192.168.0.1

      It auto-inserts 192.168.0.12 because that’s the IP address of your NAS, and you’ve logged into it to adjust something at some point in the last six months. You register it has done this as you’re releasing the Enter key.

      click Back.

      Type the IP address again, this time carefully deleting the 2 it oh so helpfully inserted.

      Wait 3 to 5 business weeks while the 16-bit ARM microcontroller they put in these things serves a web page like old people fuck. It loads to a completely useless stats page that has no information that anyone has ever needed to know.

      Click LAN Setup.

      Wait 3 to 5 business weeks while the 16-bit ARM microcontroller they put in these things serves a web page like old people fuck.

      Parse the wall of acronyms before you, click the link that says DHCP.

      Wait 3 to 5 business weeks while the 16-bit ARM microcontroller they put in these things serves a web page like old people fuck.

      It continues in that fashion until you get what you need done or your network stops working and you have to get a pen and press the Reset button on the back of the device.

      • dejected_warp_core@lemmy.world
        link
        fedilink
        arrow-up
        2
        ·
        21 days ago

        Wait 3 to 5 business weeks while the 16-bit ARM microcontroller they put in these things serves a web page like old people fuck.

        This also goes for some NAS appliances and the in-dash console of newer cars. Underpowered ARM implementations are the scourge of this decade.

  • bizarroland@lemmy.world
    link
    fedilink
    English
    arrow-up
    46
    ·
    22 days ago

    What idiot IT specialist does not run a segregated VLAN for guest wifi access? That is just rude.

  • Lucidlethargy@sh.itjust.works
    link
    fedilink
    arrow-up
    38
    arrow-down
    1
    ·
    22 days ago

    Lol wtf? Why even spend 45 minutes doing that if you’re going to completely block those ports?

    Just tell him “no”.

    • mojofrododojo@lemmy.world
      link
      fedilink
      English
      arrow-up
      20
      arrow-down
      1
      ·
      22 days ago

      “oh I’m trying to fix it just give me a few more minutes away from everyone” lights joint

    • Scoopta@programming.dev
      link
      fedilink
      arrow-up
      4
      ·
      22 days ago

      Yeah, he did that…and then kept going for some reason. A separate subnet in a separate firewall zone that doesn’t forward anywhere but the internet should be sufficiently safe

    • cm0002@mander.xyzOP
      link
      fedilink
      arrow-up
      10
      ·
      22 days ago

      Lol generally I’ll refer to the OS builtin tooling (XProtect/MS Defender) and EDRs as “Antivirus” otherwise the non-techies will freak OmG wE hAVe NO aV! And then the “anti”-viruses like mcafee and Kaspersky mysteriously spawns

      And also on-demand AV software can be good for spot checks or if you’re sus of something.

      It’s the “Real-time” shit that hooks into the kernel that needs to be avoided like the plague

      • krooklochurm@lemmy.ca
        link
        fedilink
        arrow-up
        3
        ·
        22 days ago

        When i was a windows person many moons ago i ran into viruses once or twice. Kaspersky was the only av in those days that effectively cleaned them from my system.

        Now i am a linux dude. Where there doesnt really seem to be an effective antivirus solution because, even though malware exists, it’s so fucking sophisticated and stealthy you may never know it.

  • Bosht@lemmy.world
    link
    fedilink
    English
    arrow-up
    20
    ·
    21 days ago

    I legitimately can’t tell if this is a joke or some dude trying to do a humble brag post on LinkedIn. So many ‘look what I can do’ posts on that damn site.

    • FunkFactory@lemmy.world
      link
      fedilink
      English
      arrow-up
      9
      ·
      21 days ago

      No one that serious about network security wouldn’t already have a network dedicated to untrusted devices relatives could use. Definite joke, still entertaining 😂

  • bitjunkie@lemmy.world
    link
    fedilink
    arrow-up
    13
    ·
    22 days ago

    This reads like a parody greentext except you know OP is a sysad so there’s no fucking way he’s that self-aware

    • pulsewidth@lemmy.world
      link
      fedilink
      arrow-up
      1
      ·
      21 days ago

      I’m 95% sure this is parody because if it was real there’s no way this person’s family would ask them to host Thanksgiving. And nobody blocks 443 on a guest wifi… that’d block everything they’d even need the guest wifi for.

  • mlg@lemmy.world
    link
    fedilink
    English
    arrow-up
    12
    ·
    22 days ago

    wth is the point of a guest network if you have 443 blocked lmao.

    Even my VPN port is 443 so it gets past basic port filtering because HTTPS is usually the only one allowed compared to other protocols.