Search found 83 matches

by Maxburn
Thu Jun 04, 2020 2:59 pm
Forum: Other
Topic: Traefik; easily and cheaply add HTTPS to almost any BAS front end
Replies: 1
Views: 4601

Traefik; easily and cheaply add HTTPS to almost any BAS front end

For a while now myself and others have been looking into a way to add Let’s Encrypt support to WebCTRL. The underlying Tomcat web server and Windows platform present some unique “challenges” when you look at the Let’s Encrypt ACME client options. ALC support reached out to me with the method below a...
by Maxburn
Tue Jun 02, 2020 8:50 pm
Forum: Forum Administration
Topic: Hello World!
Replies: 2
Views: 6197

Re: Hello World!

Promoted to pro, give that a try again.
by Maxburn
Tue May 26, 2020 7:19 pm
Forum: Automated Logic
Topic: WC7 U7 "soon"
Replies: 1
Views: 4295

Re: WC7 U7 "soon"

Oh boy. I shared this inside my dealer; Please hold off on WebCTRL 7 patch 7 at this time. Systems with this patch may have problems with displaying view graphics. Errors shown might be tan page with 500 error, or pop up black box JSP error. View graphic will not show in either case. I'm working wit...
by Maxburn
Wed May 13, 2020 7:40 pm
Forum: General
Topic: vBulletin CVE
Replies: 3
Views: 5925

vBulletin CVE

This could be the one; https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12720 https://www.tenable.com/blog/cve-2020-12720-vbulletin-urges-users-to-patch-undisclosed-security-vulnerability Heard on security now, apparently they aren't publishing much info about it but there are some that have ...
by Maxburn
Tue Apr 21, 2020 8:15 pm
Forum: Automated Logic
Topic: PSA; ALC optiflex under AAR; very long download times.
Replies: 6
Views: 7089

Re: PSA; ALC optiflex under AAR; very long download times.

Yeah, seems to be hyper sensitive to latency and/or BACnet atomic file might be a bad file transfer method. I've started discussions internally at ALC and others are experiencing it. I have not played with max master polling or any timing or sizing, ALC sets some defaults in these areas and with all...
by Maxburn
Mon Apr 20, 2020 2:28 pm
Forum: Events around the world
Topic: Webinar: IoT Hacking 101 – Firmware Funhouse
Replies: 0
Views: 4703

Webinar: IoT Hacking 101 – Firmware Funhouse

https://www.ethicalhacker.net/eh-net-tv/eh-net-live/webinar-iot-hacking-101-firmware-funhouse/?utm_source=SilverpopMailing&utm_medium=email&utm_campaign=Invite%20email%202%20-%20from%20EH-Net%20(1)&utm_content=&spMailingID=42290855&spUserID=OTExNzI0MTU1NTM5S0&spJobID=17418726...
by Maxburn
Mon Apr 20, 2020 1:50 pm
Forum: Automated Logic
Topic: PSA; ALC optiflex under AAR; very long download times.
Replies: 6
Views: 7089

Re: PSA; ALC optiflex under AAR; very long download times.

First off on this thread all those test times are with a laptop straight to the module, no VPN. IMO you know its an issue then with that setup. You mean the VPN tunnel is creating the problem? I'm putting together an article with my thoughts on this but I don't see how that's the case. That's an ex...
by Maxburn
Wed Apr 15, 2020 3:22 pm
Forum: Events around the world
Topic: NE BACnet User Group May 13, 202
Replies: 4
Views: 5948

Re: NE BACnet User Group May 13, 202

That's what they used slack for, during the meeting and after. Not really as good as a conference though.
by Maxburn
Wed Apr 15, 2020 3:21 pm
Forum: Automated Logic
Topic: PSA; ALC optiflex under AAR; very long download times.
Replies: 6
Views: 7089

Re: PSA; ALC optiflex under AAR; very long download times.

First off on this thread all those test times are with a laptop straight to the module, no VPN. VPN results ----------------------------------------------------------------------------------------- Server in Azure, OpenVPN connection to site and G5RE on ethernet. drv_fwex_101-00-2056 -> drv_fwex_103...
by Maxburn
Tue Apr 14, 2020 11:27 am
Forum: Events around the world
Topic: NE BACnet User Group May 13, 202
Replies: 4
Views: 5948

Re: NE BACnet User Group May 13, 202

I was very impressed BSides Atlanta moved their conference to virtual with a combination of slack and zoom. Wonder why more conferences don't do this, with all the tools we have today?
by Maxburn
Tue Apr 14, 2020 11:25 am
Forum: Automated Logic
Topic: PSA; ALC optiflex under AAR; very long download times.
Replies: 6
Views: 7089

PSA; ALC optiflex under AAR; very long download times.

First of all this doesn't currently work unless you change system.properties file setting bacnet.segmentation.on = false. Doesn't seem to be recommended to leave it there either but it will allow the driver download to complete. My conclusion is if you have one of these under an AAR and need to do s...
by Maxburn
Mon Apr 13, 2020 1:07 pm
Forum: Other
Topic: Ubiquiti Edgerouter Wireguard VPN
Replies: 0
Views: 4500

Ubiquiti Edgerouter Wireguard VPN

Bunch of links regarding wireguard VPN on Ubiquiti Edgerouter. https://www.reddit.com/r/Ubiquiti/comments/fxua3u/edgerouter_wireguard_resource_links/ EdgeRouter WireGuard Resource Links EdgeRouter WireGuard community thread: https://community.ui.com/questions/Release-WireGuard-for-EdgeRouter/3765d2a...
by Maxburn
Tue Apr 07, 2020 2:20 pm
Forum: Forum Administration
Topic: URL bbcode tag issue
Replies: 3
Views: 4187

Re: URL bbcode tag issue

Finger pointing commences.
https://tracker.phpbb.com/browse/PHPBB3-16422
I think some basic input sanitation is a good idea.
by Maxburn
Tue Apr 07, 2020 11:32 am
Forum: General
Topic: Training
Replies: 6
Views: 6524

Re: Training

Pluralsight offering full access free for month of April

https://www.pluralsight.com/
by Maxburn
Thu Apr 02, 2020 3:32 pm
Forum: Other
Topic: PSA; Cisco SDA and DNA default settings break broadcasts and BACnet discovery
Replies: 0
Views: 4683

PSA; Cisco SDA and DNA default settings break broadcasts and BACnet discovery

This was posted to an internal user group but could potentially impact many of us; Here's what I've got that I shared with our group: Affected Cisco switches: (so far…) 3850 3650 93xx 94xx Based on testing, “Multicast support” has to be enabled in their setup for our ports/equipment, which is not on...
by Maxburn
Thu Apr 02, 2020 2:30 pm
Forum: Forum Administration
Topic: URL bbcode tag issue
Replies: 3
Views: 4187

Re: URL bbcode tag issue

Invisible characters at the end of the URL...
by Maxburn
Thu Apr 02, 2020 12:27 pm
Forum: Forum Administration
Topic: URL bbcode tag issue
Replies: 3
Views: 4187

URL bbcode tag issue

Working on it; https://www.phpbb.com/community/viewtop ... #p15469716

Broken on their forum too...
by Maxburn
Thu Apr 02, 2020 12:09 pm
Forum: Automated Logic
Topic: ALC connecting to Linux PostgreSQL
Replies: 1
Views: 3899

ALC connecting to Linux PostgreSQL

Currently dealing with this and hitting a brick wall. Seems some others are dealing with it too, except for the ones that aren't. Either I'm missing something fundamental or there's a bug somewhere. So far it's very repeatable and I webexed support yesterday to demonstrate it, getting the impression...
by Maxburn
Mon Mar 30, 2020 2:48 pm
Forum: General
Topic: Training
Replies: 6
Views: 6524

Re: Training

I'm sure the learning experience is great there but for a lot of what I'm doing I can readily find what I need. I know some tech companies do sponsor that for their staff too.
by Maxburn
Mon Mar 30, 2020 12:40 pm
Forum: Events around the world
Topic: BSides Atlanta
Replies: 0
Views: 4697

BSides Atlanta

BSides Atlanta went on as planned this weekend but they turned it into a virtual meeting. All talks will eventually be posted to youtube as well.

https://www.youtube.com/channel/UC5y24x ... OPaIqeZZdg

Slides are on slack

https://bsidesatl.slack.com/archives/C010BK0EBJ9
by Maxburn
Wed Mar 25, 2020 4:59 pm
Forum: General
Topic: Training
Replies: 6
Views: 6524

Training

In light of the COVID thing are there any online training opportunities opening up or being reduced in price?
by Maxburn
Mon Mar 16, 2020 7:37 pm
Forum: Automated Logic
Topic: NIST 800-37.2 and federal Risk Management Framework; all SCADA systems
Replies: 2
Views: 4575

Re: NIST 800-37.2 and federal Risk Management Framework; all SCADA systems

You ask, and ask, and ask nobody knows nothing. You ignore it and just move ahead like this doesn't exist.Then a week after training and warranty letter some gov inspector comes in to approve it and the crap hits the fan. Where is all this documentation, why was this started before completing x,y,z...
by Maxburn
Mon Mar 16, 2020 1:27 pm
Forum: Automated Logic
Topic: NIST 800-37.2 and federal Risk Management Framework; all SCADA systems
Replies: 2
Views: 4575

NIST 800-37.2 and federal Risk Management Framework; all SCADA systems

Some thoughts about this, I was relieved recently to find that ALC corporate is making great strides in generating materials to perform a "type accreditation" for their system. What I found interesting was that under these NIST standards there is no such thing as a across the board product...
by Maxburn
Mon Mar 16, 2020 11:55 am
Forum: For Shame
Topic: Jumper wire anyone?
Replies: 4
Views: 6140

Re: Jumper wire anyone?

Seen some really crappy things that just seem to hang around like that. Far as I'm concerned certificate of occupancy should require renewal every 10 years or so. Especially for things like schools and government buildings, those should set the standard. Also somehow churches get a huge pass on lots...
by Maxburn
Mon Mar 16, 2020 11:50 am
Forum: For Praise
Topic: Piping
Replies: 2
Views: 6368

Re: Piping

I don't know how much more it costs but that green conduit and the green comm cable we use is worth it.
by Maxburn
Sun Mar 15, 2020 10:48 am
Forum: For Praise
Topic: Black Mesa Fail
Replies: 0
Views: 5217

Black Mesa Fail

Sometimes it would be helpful if certain controllers had a big display to show FAILURE.

Related; Black Mesa just went final on Steam. Bet you can't guess where this username comes from.

fail2sm.jpg
fail2sm.jpg (103.26 KiB) Viewed 5217 times
fail1sm.jpg
fail1sm.jpg (128.23 KiB) Viewed 5217 times
by Maxburn
Sun Mar 15, 2020 10:39 am
Forum: For Praise
Topic: Piping
Replies: 2
Views: 6368

Piping

Our installers do some really good work, this one really stuck out to me.
pipingsm.jpg
pipingsm.jpg (378.3 KiB) Viewed 6368 times
by Maxburn
Sun Mar 15, 2020 10:07 am
Forum: For Shame
Topic: Controls still running, disconnect off
Replies: 1
Views: 4768

Controls still running, disconnect off

Bonus; school district.

Fuse was good, actual disconnect portion on that leg was bad.
disconnectbypass.jpeg
disconnectbypass.jpeg (36.09 KiB) Viewed 4768 times
by Maxburn
Sun Mar 15, 2020 10:05 am
Forum: For Shame
Topic: Protect and extend the network
Replies: 0
Views: 5240

Protect and extend the network

Someone doesn't quite get the function of the protect board in daisy chaining wiring.
prot1.jpeg
prot1.jpeg (39.69 KiB) Viewed 5240 times
prot2.jpeg
prot2.jpeg (37.16 KiB) Viewed 5240 times
by Maxburn
Sun Mar 15, 2020 9:38 am
Forum: For Shame
Topic: Engineer fails
Replies: 0
Views: 4984

Engineer fails

Three 800 ton chillers feeding these three towers. Sequence calls for rotating the towers. Another paragraph of the sequence a bit later calls for modulating bypass to maintain CW temp during cold season. Somehow these two things never got put together, then it was built and now it will never get pu...
by Maxburn
Sun Mar 15, 2020 9:26 am
Forum: For Shame
Topic: Jumper wire anyone?
Replies: 4
Views: 6140

Re: Jumper wire anyone?

Was it a permanent fix? I see stuff like this so much on construction it doesn't even phase me any more.
by Maxburn
Sat Mar 14, 2020 1:28 am
Forum: For Shame
Topic: Condenstate trap?
Replies: 2
Views: 5132

Re: Condenstate trap?

OK, I think that's the most flat out holy crap moment I've witnessed in HVAC.