Stupid Account

3:20:17 PM : Connected to some.stupid.business.chat.net”

3:20:17 PM : System: Thank you for contacting the Mega Wireless Employment Validation Processing Center. In order to serve you better, please only provide the information necessary for employment validation. Please do not provide any income or other sensitive information such as social security number or employee number or bank account numbers.

3:20:22 PM : System: Mikki has joined this session!

3:20:22 PM : System: Connected with Mikki. Your Reference Number for this chat is XXXXXXXX.

3:20:46 PM : Mikki: Hello.

3:20:52 PM : Mikki: How is your day going, Me?

3:21:11 PM : Me: Hi. I submitted my request to register with my work email address. I received the email and clicked the link. I takes me back to a standard Mega Wireless home page with no mention of corporate discounts. I have tried on multiple computers with multiple browser

3:22:29 PM : Mikki: Thank you for that information. I would be happy to assist with your discount today. Are you the primary on the account?

3:22:37 PM : Me: There is no account yet.

3:24:29 PM : Mikki: Thank you for that information. So you do need to have a Mega account in order to validate for a discount. It seems that your work email is registered as a way to validate.

3:25:39 PM : Mikki: Are you still there?

3:25:51 PM : Me: But when I am asked to register, I am given a choice of current customer or new customer.

3:26:04 PM : Me: Why am I given a choice of being a new customer if I need to have an account already?

3:26:34 PM : Mikki: New customer are able to see if their work email is registered as a way to validate.

3:27:12 PM : Me: I do not understand.

3:28:54 PM : Mikki: The discount would need to be linked to an account to be validated for a discount. One our website, you can enter in your work email as a new customer to see if your work email address is registered as a way to validate. But because you do not have an account, it does not link to anything.

3:29:24 PM : Me: So do I use my work account, create a new account, and then go to the discount page to try to make the site know I qualify for a discount?

3:30:49 PM : Mikki: You would qualify for the discount as long as you choose a plan that can have employment discounts.

3:30:59 PM : Mikki: Discounts apply to eligible plans and features. Please note that discounts do not apply to prepaid, promotional, Verizon Plan Unlimited, data only, and already discounted plans.

3:32:00 PM : Me: You are not answering my question, but thank you for trying.

Stupid Import

Me: I have 487 networks defined in my environment. Entering each one manually via the web interface will take prohibitively long. Is there an option to import them from a CSV file?

Support: If you provide us with a CSV file, we can import it for you.

Me: Here you go!

Support: You have both internal and external networks in this file. Did you mean to do that?

Me: Maybe not. We use public IPs for our “internal” networks. How should we do this?

Support: Public IPs should be added as Networks, and RFC1918 networks should be added as Internal Networks.

Me: Okay, so can you work with the file I supplied?

Support: You need to add the public IPs as Networks. For internal network, you should be able to import a CSV file.

Me: The original email I got said Support would do the import for me, implying I could not do so myself. If I can, I do not know how to do this. If I cannot, can you please do this for me?

Support: …

Me: I figured out how to do this with your API. You can close this request.

Stupid Pentest

While reviewing a list of systems vulnerable to a recent security vulnerability, we noticed this one on the list. The ramifications are left as an exercise to the reader.

Stupid Backup

Client: We are being audited by the IRS and they want backups of our accounting package from 2016 and 2017. Does our backup service include this?

Me: The el cheapo package you purchased goes back 3 whopping months. But I’ll log on to your system and see what I can find.

Me: I compiled all of the files I found into a folder and left it open on your desktop. [not shown: list of accounting backups, including name and date, spanning various months between 2016-2017]

Client: This is the file I copied to a thumb drive to give to the IRS. [attached photo taken of computer screen showing a single archive file with a date of October, 2018]

Stupid magnifying glass

NOTE: Top-posting email format (thanks, Microsoft) preserved for stupidity.

From: You<[email protected]
Sent: Thursday, April 25, 2019 12:19 PM
To: Me <[email protected]>
Subject: RE: What is this?

Me,

That would be great except I don’t seem to have a magnifying glass L

From: Me <[email protected]
Sent: Thursday, April 25, 2019 12:13 PM
To: You<[email protected]>
Subject: RE: What is this?

Just click the magnifying glass in the search box. In the new interface:

or in the classic interface:

From: You<[email protected]
Sent: Thursday, April 25, 2019 12:06 PM
To: Me <[email protected]>
Subject: RE: What is this?

And where could I see a list of servers that I have access to?

From: Me <[email protected]
Sent: Thursday, April 25, 2019 12:04 PM
To: You<[email protected]>
Subject: RE: What is this?

That’s where you put the name of the computer to which you want to connect.

From: You<[email protected]
Sent: Thursday, April 25, 2019 12:02 PM
To: Me <[email protected]>
Subject: RE: What is this?

Actually, I asked Chad and he did not know either.  I want to know what to enter in the last field?

From: Me <[email protected]
Sent: Thursday, April 25, 2019 11:58 AM
To: You<[email protected]>
Subject: RE: What is this?

Hi YOU,

Looks pretty self-explanatory to me. What, specifically, are you asking about?

Me

From: You<[email protected]
Sent: Thursday, April 25, 2019 11:55 AM
To: Me <[email protected]>
Subject: What is this?

Stupid Endpoint Protection Product

Me: Specific Windows Admin, we are testing New Web Protection Product. Please make a Current Endpoint Protection Product policy that doesn’t include web filtering, and apply it to these workstations:

  • Workstation 1
  • Workstation 2
  • Workstation 3

Specific Windows Admin: …

Me: Windows Admin on Call, , we are testing New Web Protection Product. Please make a Current Endpoint Protection Product policy that doesn’t include web filtering, and apply it to these workstations:

  • Workstation 1
  • Workstation 2
  • Workstation 3

Windows Admin On Call: You can open a ticket with User Support for this.

Me: User Support, Windows Admin On Call says you can do this, but I am skeptical. We are testing New Web Protection Product. Please make a Current Endpoint Protection Product policy that doesn’t include web filtering, and apply it to these workstations:

  • Workstation 1
  • Workstation 2
  • Workstation 3

User Support Tech: Uhh… no. We can just remove Current Endpoint Protection Product.

Me: Windows Admin on Call, User Support cannot do this.

Different Windows Admin: I hear you want to remove Endpoint Protection Product from a couple machines.

Me: NO I AM NOT TRYING TO REMOVE ENDPOINT PROTECTION PRODUCT! I JUST WANT A SIMPLE POLICY CHANGE IN CURRENT ENDPOINT PROTECTION PRODUCT FOR A FEW SYSTEMS THAT DOES NOT INCLUDE WEB FILTERING!

Stupid Coffee

Vendor: I’ll be in the City Area next week, and would love to meet to discuss blah blah.

Me: Sure. I work from home in the City Area and will NOT be at My Employer that day.

Vendor : Please confirm the following address: <_inserts address of a Completely Unrelated Business in City area_>

Me: That’s Completely Unrelated Business…

Vendor : Sorry, still waiting for the coffee to kick in. How about this….

<_inserts address of My Employer _>

Me: You need more coffee.

Stupid Customer

7:53 pm Barry: Hello Me, good day!

7:53 pm Me: Hello! My customer owns the domain example.com, which was set up in Office 365. However, she does not know her _________.onmicrosoft.com tenant ID.

7:55 pm Barry: Is this for a customer?

7:55 pm Me: …

Stupid Request

Project Manager: I’m checking on the status of this request. <includes a graphical screenshot of an email thread in which a request for system access is made, discussion is had around the request, and a mention of difficulty getting access to the system is also made.>

Me: What exactly are you asking: if access was granted to this system, or if the trouble connecting which was reported was resolved?

PM: I am checking on the status of the request.

Me: I still don’t know what you’re asking. If you’re asking if access was provisioned, it was, over six months ago. If you’re asking about the difficulty connecting, I know nothing of that.

PM: thank you