Controls.Fail

Maxburn

November 1 (Tuesday) Please be patient until next week. We hope to be done by Monday. I will test it and let you know. November 14 (two Mondays after, but they didn't specify which Monday) New firmware and web app files sent. November 29 Back at site, uploaded firmware and web app files. Web app an...

Maxburn

October 13 Back at site with LTE modem and my own network. Set everything up and this time leave the chipkin gateway off my local network. Hunter panel connects to Centralus no problem at all, explore around and everything looks good. It offered to upload the local panel which worked. Connect chipk...

Maxburn

October 6 (in office) Set up web server in digital ocean on the two TCP ports hunter says they need to talk to for AWS. Demonstrate that my laptop behind the LTE modem can get those pages so not only can I resolve DNS for the specific IoT AWS thing they need to reach but my modem is not blocking th...

Maxburn

September 14 First site visit; Hunter panel sees LAN option as WiFi, and fails firmware update. Supplied SD card issues? Tried several different formats (not mentioned in hunter docs). Reached out to local Hunter support. September 19 Met hunter rep late in afternoon, they did firmware update with ...

Maxburn

This is my experience with integrating to a Hunter ACC2 irrigation panel via a Chipkin/MSA/Fieldserver gateway. This won't make me any friends but this is a true account and I think it needs to be told. All of this is in 2022, so far. Early April ; inquiry about irrigation system integration into ou...

Maxburn

On the dual ethernet module I'm seeing the LAN transformers and a group of relays to accomplish the failover, as you say that's all required. Does appear the two network ports and switch are on board with the CPU. https://www.ti.com/product/AM3352#features The dual ethernet models are 100M, the bigg...

Maxburn

On these small routers I'm dealing with I've noticed that a lot of them skip right over having individual ethernet chips; they go straight to having a network switch on die. WAN and LAN ports are defined by VLAN internally. It's cheap to get a bunch of ports that way. On BMS modules I haven't looked...

Maxburn

How do bid against others unless the spec is IP only? I think that's key, no engineer is going to spec this. Why would they? This is being thrown on us from manufacturers that are ditching serial buss and going with IP. At this point the components for IP are probably cheaper than serial network ha...

Maxburn

It seems ALC has thoroughly embraced the IP network to everything in the system in their new modules. They haven't strictly said ARCnet is going away but they know they have problems getting ARCnet silicon and there is a big push to go IP for new systems design. ALC doesn't seem to be unique in this...

Maxburn

True, I'm minimally involved in doing the same for one of our projects and seeing it from both ends like this is a big help. At least this project will have a screen involved from the start, which is a major problem when you can't get them. ALC is "supposed" to train these OEMs how to use ...

Maxburn

Four MAU units of varying vintage but all under 5 years old. All have ALC OEMCtrl modules in them. #4 has touch screen and is simplicity itself to configure baud, MAC, device ID. Units 1 and 2 have no screen. 1,2,4 all are IOFlex. Unit 3 is IOZone, nobody understands why what is on site differs from...

Maxburn

Bonus, the unit can be discovered by YABE and apparently CAS BACnet Explorer. But the point discovery is broken, neither YABE nor Automated Logic discovery can see any points in the units. Fortunately the points are explained in the PICS and you can manually map them. Shocker, it isn't on the BTL ce...

Maxburn

PICS not posted publicly that I can see but; BACnet Protocol Implementation Conformance Statement Vendor; BeaconMedæs ~ Data Link Layer Options ISO 8802-3 (“Ethernet”) LAN Turns out the panel actually communicates BACnet/IP. I guess technically that uses ethernet right? Now that we know the docs are...

Maxburn

Yes, third party is on board. Some of the M class boards off of ebay we got last year were from a repair outfit. I don't know where they get their stock though, I've never seen anyone buying old / broken boards.

Maxburn

Cost is quite reasonable. They won't fix board damage or obvious liquid damage. My biggest complaint was comm trouble boards sometimes coming back as no fault found. Sure it works fine on 3 feet of cable but in the big network it takes the whole thing down. Granted a lot of those could be one of our...

Maxburn

Status page

https://stats.uptimerobot.com/n61XGcGoRD

Maxburn

Really old ALC modules like the Z, T, R, and G line modules plus the S6104 may no longer be repaired by ALC. These modules are 18 to 25 years old, it was a good run.

Basically if you have anything running legacy CMnet exec6 or older you really should be getting that on a replacement/upgrade plan.

Maxburn

Yeah, I put them in uptime robot and they go down multiple times a day. Usually in the morning. Doesn’t last long though. I think they might be seeing some traffic from something unrelated like an amateur DOS.

Maxburn

Sounds like the smart solution to me. Nothing wrong with isolating and protecting the older stuff.

It’s just interesting they are ignoring older, sometimes current, systems capabilities with some of these requirements.

Maxburn

They may be getting attacked, basic DOS perhaps. I created a post in the help section and they said they got hit with a lot of traffic. Right this second I'm getting this; Database Error Database error The database has encountered a problem. Please try the following: Load the page again by clicking ...

Maxburn

Moar logs. Remember to add the five minute alarm threshold to the event duration in right column.

: winzabtoohigh.png (161.48 KiB) Viewed 1744 times

Maxburn

Now have four customers on Linux in Azure. It's a bit of a learning curve on the OS side but refreshing how much knowledge transfer there is in the Zabbix/OpenVPN areas. End result is a faster experience on the front end with less resources used. And just WTF is windows doing all the damn time? I fe...

Maxburn

Recent podcast "Hack the Plant Episode 11: Department of Defense Policy and ICS Security". Some talk of DFARS but more interesting was some specific talk about power meters being rejected because of things like they have bluetooth and optical connections. It's like they ignored they can be...

Maxburn

Maxburn wrote: ↑Thu May 20, 2021 10:34 am That didn't take long, hvac-talk down as I write this.

Again.

Maxburn

Still says Linux-3.4.39. Will say most of the CVE issues will be resolved by not having those functions in use on this. Anything in the IP stack though...

Maxburn

That didn't take long, hvac-talk down as I write this.

Maxburn

Remember that big disruption when hvactalk went down, then came back up and was upgraded to current version of vbulletin but broke all links and other stuff, then got downgraded to the old unsupported version again? That got kicked off by being forgotten about and deleted. They didn't even have a cu...

Maxburn

It's just nice to have something that's a little more in our control and not tied to a marketing agency that "forgets" all about that forum and deletes all copies of it.

Maxburn

Comparing things, ALC latest release drvier reports this in logs; Linux version 3.12.10-alc (buildcomp@rdvm-yocto1404) (gcc version 4.7.3 20130226 (prerelease) (crosstool-NG linaro-1.13.1-4.7-2013.03-20130313 - Linaro GCC 2013.03) ) #1 PREEMPT Tue Jun 11 19:25:09 EDT 2019 The latest beta I'm aware o...

Maxburn

Only thing that jumps out to me is inux-3.4.39 is about 2013 vintage, Very old. This page suggests there might be 269 CVSS on it but I can't get it to display. https://www.cvedetails.com/vulnerability-list.php?vendor_id=33&product_id=47&version_id=160797&page=2&hasexp=0&opdos=0&a...

Maxburn

OK, saw my first DFARS request today from the front office. Looks expensive.

Maxburn

Oh, haven't seen that one yet. Reminds me about the XKCD regarding standards.

Maxburn

I shared it in the other place but I've got a FW series that was installed in a hot location for about two years and is leaking too. It was a beta test...

Maxburn

My first stab at what it takes to get a server on it's feet with Ubuntu to host WebCTRL.

Maxburn

I shared this stuff with my contacts in JCI channel manager and Broudy a while back. Not expecting anything to come back to me about this but EasyIO has known that there's awareness of this in the community for about three weeks now.

Maxburn

Patches? Please, they don't even load DRIVERS to get the hardware running. So they have these 42" something like 3k monitors that can't be set beyond 1024x768 because it's missing a video driver. Nobody is supporting these machines at all, it's actually scary the amount of thought that goes int...

Maxburn

It's nice to have options. The big upset with the forum was also a reminder of who owns the site and why, which doesn't really sit right with some people. Current banner on it is an example of that.

Maxburn

Too bad.
https://mailchi.mp/ahrexpo/2nd-call-mak ... 2ab44bb93b

Maxburn

USAF CE network is super secure. So secure that no machine is allowed to reach out to windows update. Supposedly some administrator somewhere is supposed to update these machines manually, like with sneakernet. The inevitable result is machines that never get an update and they have the hard shell c...

Maxburn

Bonus, this isn't some mechanical space, this is the MDF room next to IT offices.

: IMG_Aug272020at112943AM - Copy.jpg (207.96 KiB) Viewed 1411 times

Maxburn

Self signed basically says it came from such and such and the file isn't corrupted. It's verifiable if they post their public key like you probably have seen with downloads and MD5 hashes. If they spend a couple dollars it can be trusted with a little work that isn't really that bad. After a recent ...

Maxburn

More news https://view.email.sans.org/?qs=5afb8bf5bc8cd7762f607debde393af5a2cf2f24e09212e441841bf5d28d2f7cb9fdbc7092d026068fcc772938b1bd13d1b1b09ca2c1f42169f3cb7e1f2c714bc7f7666995dcb3ef Home Router Study Finds “Alarming” Security Issues (July 6, 2020) A study of 127 home routers from seven manufact...

Maxburn

Far as intel goes I was recently shocked when I learned you could not only not get an intel branded motherboard any more but they also recently dropped all support for the ones they made in the past. Seems to be an apple move, they are cutting off edge products and focusing on core business. This wa...

Maxburn

I guess this is an area where the free market took advantage of everyone? This kit is all pretty cheap and sells everywhere. By the way I never posted the list. Belkin Linksys Dlink TrendNET Asus TP link Archer Cisco - So many hard coded passwords, switches default LAN broadcasts off (WTF), no firmw...

Maxburn

Looks like they are piping the forum through a proxy. That's probably/hopefully a web application firewall.

https://hvac-talk.com/vbb/showthread.ph ... d-in/page3

Least that's what it looks like, I don't think vbulletin runs on nginx.

Maxburn

I have a list of networking kit to never buy. People ask me why and I just tell them to google the vendor name and hit news, it's not hard to find stuff like this. Heard on Risky Biz that the guy that found this wanted a little vacation from regular work and looking for an easy target turned to Dlin...

Maxburn

For a while now myself and others have been looking into a way to add Let’s Encrypt support to WebCTRL. The underlying Tomcat web server and Windows platform present some unique “challenges” when you look at the Let’s Encrypt ACME client options. ALC support reached out to me with the method below a...

Maxburn

Promoted to pro, give that a try again.

Maxburn

Oh boy. I shared this inside my dealer; Please hold off on WebCTRL 7 patch 7 at this time. Systems with this patch may have problems with displaying view graphics. Errors shown might be tan page with 500 error, or pop up black box JSP error. View graphic will not show in either case. I'm working wit...

Maxburn

This could be the one; https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12720 https://www.tenable.com/blog/cve-2020-12720-vbulletin-urges-users-to-patch-undisclosed-security-vulnerability Heard on security now, apparently they aren't publishing much info about it but there are some that have ...

Search found 79 matches