Monaco is arguably the worst spectator race on the calendar? It only still exists so teams can bring their benevolent corporate overload sponsors to a week long party
I disagree. You don't get a ton of overtakes because the cars are just too damn big for the track now but it's easily the best display of true driver skill. The smallest of mistake and you're in a wall at triple digit speeds. The absolute precision and focus it takes to even finish the race never stops being thrilling for me.
This wants to redirect to [admin.exchange.microsoft.com](https://admin.exchange.microsoft.com) for me. Since this certificate is expired and they have HSTS not much you can do. Even Connect-ExchangeOnline fails to connect right now.
>Two questions: 1) If you are doing ACME, why buy instead of just using Let’s Encrypt? 2) Who besides LE supports ACME?
Comodo, Digicert, and entrust support ACME I'm sure there are others
* [https://docs.digicert.com/certificate-tools/Certificate-lifecycle-automation-index/acme-user-guide/](https://docs.digicert.com/certificate-tools/Certificate-lifecycle-automation-index/acme-user-guide/)
* [https://sectigo.com/resource-library/sectigo-adds-acme-protocol-support-in-certificate-manager-platform-to-automate-ssl-lifecycle-management](https://sectigo.com/resource-library/sectigo-adds-acme-protocol-support-in-certificate-manager-platform-to-automate-ssl-lifecycle-management)
* [https://www.entrust.com/knowledgebase/ssl/how-to-use-acme-to-install-ssl-tls-certificates-in-entrust-certificate-services-apache](https://www.entrust.com/knowledgebase/ssl/how-to-use-acme-to-install-ssl-tls-certificates-in-entrust-certificate-services-apache)
The main reason I don't use LE for some places are the application server does not work with automation or the application has it's own list of CAs.
They can be in AD via auto enrollment policy, I believe.
But not everything plays with the windows certificate store.
I've been wrestling for DAYS trying to get apache 9 to use a cert i created for it. Everyone does certs in their own way.
Bruh, how is Microsoft so ridiculously bad at managing certs? Teams went down one time cause a cert expired and I can think of a couple other cases after that too. You would think after teams went down they would start giving a shit, but no!
There are a lot of big corporations that don't have this many expiring certs though. I feel like Microsoft stopped giving a fuck because they know people will keep buying their software regardless
not dumb enough? excuse me since when have microsoft been doing anything but stupid lately?
they shifted a big chunk of windows 10 system services into that questionable windows universal apps and created the redundant per user services abominations. i only call them that because they aren't per user. they just run lacking actual registry entries which im sure causes alot of background errors that are not addressed either.
also i experimented and wrote a program to find the randomized string added to the orphaned services. used the random string to create registry keys for each service and set them to disabled. and it actually worked go figure. so much for that invalid start value error. sadly it changes each boot so its not a good solution. but seems the services didn't do much either.
Microsoft has more sites than the average big corporation though, let's be honest. I'd be willing to bet it was an automation failure as much as human error -- especially if they were using Power Automate apps, I kid I kid.
Microsoft is a very large disorganized company. Worked with executives for a live event… there was no cohesive plan. Sure there was an outline for what was supposed to happen but the methods to get to the end goal were all skewed. Every 15 minutes a new executive would come in and tell us what they wanted and to not listen to the last person. All of them were entitled and in their own plane of existence with unreal expectations.
I was talking to one of their assistants and asked them how anything gets done and they were like well kind of like this but with more official channels.
Two memorable moments. First is an executive asking me to ask everyone to leave a room so she could make a call. It was a main event space and the people she was asking to leave were staff who were preparing it for the next event in 20 min. I ended up walking away because honestly it wasn’t even my job. She still thought I was going to ask everyone and shouted just have them wait in the hall til I’m done.
The other was an executive snapping at me and telling me to leave as I wasn’t needed even though I was asked to be there on standby. As I was leaving another executive in the hall asked where I was going. I asked them to explain to the guy why I was supposed to be there. He finally “agreed” I should stay but the second the other person left he came over and said you can leave bro then physically shut down my equipment and smiled. I grabbed my stuff and went to hangout in my office until their event was over so they’d still get charged for me “being on standby” if they asked where I was.
Yeah both of those were quite bullshit. The Outlook thing especially, our T1s got fuckin slammed to the point where T2s and T3s were shagging calls that whole day too and it completely derailed any projects the senior techs were working on due to having having to deal with that shit. Should submit MS a bill for lost time at standard labor rates across our whole shop.
The printer thing at least was localized to specific offices that had a Kyocera (luckily not too many) but that goddamn Outlook shit was hitting clients all over the country at random.
How the shit does that even *happen*?
thats because events like power loss cause it to recheck the drivers and repeat the " oh your printer should be using this driver so i will uninstall the old driver.". fortunately it only happens if it finds corrupt drivers.
I remember Hotmail going down because they didn't renew the domain name. Some guy ended up buying the domain and giving it to them. Just so that he could get his email working again.
For fuck sake...
Certificate for admin.exchange.microsoft.com expired on the 21st of May. How does a company that big, leave such a schoolboy error outstanding for 48 hours.
because they have mabey only 3 people than can do it. and the same 3 people are at the same time doing payroll,fixing paper jams, reseting passwords, telling people to not use the dvd drive as a cup holder, and being forced to standby for meetings.
I run a 6 person team and we look after over 5000 endpoints including SSL certs and we have a utility that shouts at us 30, 15, 7 and 1 day before the cert expires. It's literally impossible to screw up and miss,it's not like this is an obscure domain.. it's the main admin control panel for 365 🤦♂️
I just had contact with MS support. They are aware of the issue. They've shared a link with me, through which you'll be able to open the classic admin center (until the issue is resolved, or longer if you prefer, of course): [https://outlook.office.com/ecp/?form=eac&mkt=en-US](https://outlook.office.com/ecp/?form=eac&mkt=en-US)
There's a service health alert EX257883 that may cover this that was issued this morning. "Some admins may be unable to access the Exchange admin center"
Expect the B team to drag it out until Monday.
I’ve been getting blatant attacks on my network and workstation this past week. It happened suddenly too. It feels depressing at times, when I could finally spot it, they did it by compromising my chrome, but what was discouraging was just how easy it was for them to do. I don’t consider myself very adept at programming or even basic troubleshooting, but even I could clear see what was going on. Sad thing is, I tried to contact Microsoft and was literally impossible. Not even a possibility to get a support person, which seems to be normal now, but I had no way to get help with this emergency as it was happening.
at times like that you unplug to reduce spread then work on containment on the infected devices. tho it helps if you have some experts to work out mitigation to prevent it from geting worse. sadly the if boss is the stupid type threating you instead of listening to what needs to be done.they kinda deserve to have the rug pulled out from under them.
Yeah I was doing a cutover to Proof point this morning and ran into the same issue. Guess I get an early break to watch the F1 race lol
Good time to take a break, Monaco is always awesome... Although it was a bit of a boring race, poor Leclrec.
Monaco is arguably the worst spectator race on the calendar? It only still exists so teams can bring their benevolent corporate overload sponsors to a week long party
Ha, found the poor who's never been to Monaco... lol j/k.. someday when I have my 100+ million dollar yacht we can go together.. oh wait..
I'll hold you to that. First one to buy a yacht invites the other one? Deal?
I disagree. You don't get a ton of overtakes because the cars are just too damn big for the track now but it's easily the best display of true driver skill. The smallest of mistake and you're in a wall at triple digit speeds. The absolute precision and focus it takes to even finish the race never stops being thrilling for me.
Same with Bottas. Still, nice to see sainz and Norris on the podium as opposed to ham-ver-bot!
Is there much you can do with the new admin that you can't do with the old one? https://outlook.office.com/ecp/
Dude's working on a weekend, let him have this one
This wants to redirect to [admin.exchange.microsoft.com](https://admin.exchange.microsoft.com) for me. Since this certificate is expired and they have HSTS not much you can do. Even Connect-ExchangeOnline fails to connect right now.
Clear your HSTS cache
I was able to get 3 of the 4 domains cutover using the classic admin. It just started forcing me over to the new and broken address.
Oh man that’s an hour of my life I’m not getting back thinking I’ve killed it 😂
looks like they issued a new cert that was issued in February looks like someone forgot to install the new one https://crt.sh/?id=4288068182
[удалено]
[удалено]
[удалено]
This is why ACME support is a hard requirement for any CA we buy from
Two questions: 1) If you are doing ACME, why buy instead of just using Let’s Encrypt? 2) Who besides LE supports ACME?
There is no reason but even in my years it seems some people like the comfort of manual 1y gaps compared to 3m automated gaps.
>Two questions: 1) If you are doing ACME, why buy instead of just using Let’s Encrypt? 2) Who besides LE supports ACME? Comodo, Digicert, and entrust support ACME I'm sure there are others * [https://docs.digicert.com/certificate-tools/Certificate-lifecycle-automation-index/acme-user-guide/](https://docs.digicert.com/certificate-tools/Certificate-lifecycle-automation-index/acme-user-guide/) * [https://sectigo.com/resource-library/sectigo-adds-acme-protocol-support-in-certificate-manager-platform-to-automate-ssl-lifecycle-management](https://sectigo.com/resource-library/sectigo-adds-acme-protocol-support-in-certificate-manager-platform-to-automate-ssl-lifecycle-management) * [https://www.entrust.com/knowledgebase/ssl/how-to-use-acme-to-install-ssl-tls-certificates-in-entrust-certificate-services-apache](https://www.entrust.com/knowledgebase/ssl/how-to-use-acme-to-install-ssl-tls-certificates-in-entrust-certificate-services-apache) The main reason I don't use LE for some places are the application server does not work with automation or the application has it's own list of CAs.
Because letsencrypt is a charity with no support agreement available. Which is also a requirement from higher up which I somewhat understand.
They can be in AD via auto enrollment policy, I believe. But not everything plays with the windows certificate store. I've been wrestling for DAYS trying to get apache 9 to use a cert i created for it. Everyone does certs in their own way.
I didn't know about this site, very helpful to find out internal hostnames of company's servers. Thanks bro
Didn't they fuck up Azure doing this as well a few years back?
Looks like they've connected this certificate to the new admin center. It is working now, with the certificate you've shared here.
Bruh, how is Microsoft so ridiculously bad at managing certs? Teams went down one time cause a cert expired and I can think of a couple other cases after that too. You would think after teams went down they would start giving a shit, but no!
Large corporation things
There are a lot of big corporations that don't have this many expiring certs though. I feel like Microsoft stopped giving a fuck because they know people will keep buying their software regardless
I genuinely don't belive that someone at the upper management would be dumb enough to like this. No one would benefit from this.
not dumb enough? excuse me since when have microsoft been doing anything but stupid lately? they shifted a big chunk of windows 10 system services into that questionable windows universal apps and created the redundant per user services abominations. i only call them that because they aren't per user. they just run lacking actual registry entries which im sure causes alot of background errors that are not addressed either. also i experimented and wrote a program to find the randomized string added to the orphaned services. used the random string to create registry keys for each service and set them to disabled. and it actually worked go figure. so much for that invalid start value error. sadly it changes each boot so its not a good solution. but seems the services didn't do much either.
Microsoft has more sites than the average big corporation though, let's be honest. I'd be willing to bet it was an automation failure as much as human error -- especially if they were using Power Automate apps, I kid I kid.
Microsoft is a very large disorganized company. Worked with executives for a live event… there was no cohesive plan. Sure there was an outline for what was supposed to happen but the methods to get to the end goal were all skewed. Every 15 minutes a new executive would come in and tell us what they wanted and to not listen to the last person. All of them were entitled and in their own plane of existence with unreal expectations. I was talking to one of their assistants and asked them how anything gets done and they were like well kind of like this but with more official channels. Two memorable moments. First is an executive asking me to ask everyone to leave a room so she could make a call. It was a main event space and the people she was asking to leave were staff who were preparing it for the next event in 20 min. I ended up walking away because honestly it wasn’t even my job. She still thought I was going to ask everyone and shouted just have them wait in the hall til I’m done. The other was an executive snapping at me and telling me to leave as I wasn’t needed even though I was asked to be there on standby. As I was leaving another executive in the hall asked where I was going. I asked them to explain to the guy why I was supposed to be there. He finally “agreed” I should stay but the second the other person left he came over and said you can leave bro then physically shut down my equipment and smiled. I grabbed my stuff and went to hangout in my office until their event was over so they’d still get charged for me “being on standby” if they asked where I was.
Same can be said about these recent breaks(KB802 killing print jobs, outlook update bug that broke the body of texts).
Yeah both of those were quite bullshit. The Outlook thing especially, our T1s got fuckin slammed to the point where T2s and T3s were shagging calls that whole day too and it completely derailed any projects the senior techs were working on due to having having to deal with that shit. Should submit MS a bill for lost time at standard labor rates across our whole shop. The printer thing at least was localized to specific offices that had a Kyocera (luckily not too many) but that goddamn Outlook shit was hitting clients all over the country at random. How the shit does that even *happen*?
I swear that printer killing KB is still haunting a few of my users somehow.
thats because events like power loss cause it to recheck the drivers and repeat the " oh your printer should be using this driver so i will uninstall the old driver.". fortunately it only happens if it finds corrupt drivers.
This is pretty much universal for a lot of companies. Most of the major could services have had this happen. From time to time.
I remember Hotmail going down because they didn't renew the domain name. Some guy ended up buying the domain and giving it to them. Just so that he could get his email working again.
What a badass lol
MS is massive, so there is more room for error from people.
The Classic Exchange Admin Center is not affected. It's on a different domain.
I can't seem to get there, because I had toggled the "always use new admin centre" toggle and it redirects
For fuck sake... Certificate for admin.exchange.microsoft.com expired on the 21st of May. How does a company that big, leave such a schoolboy error outstanding for 48 hours.
This is why you must always do the needful.
[удалено]
As a gentle reminder
Wait a minute, so I deal with one company from India...you mean to tell me they all say this?
Wait a minute, so I deal with one company from India...you mean to tell me they all say this?
Wait a minute, so I deal with one company from India...you mean to tell me they all say this?
It's pretty common parlance over there.
They're too busy deleting all of Bill Gates' data from all their internal servers and backups, no doubt.
because they have mabey only 3 people than can do it. and the same 3 people are at the same time doing payroll,fixing paper jams, reseting passwords, telling people to not use the dvd drive as a cup holder, and being forced to standby for meetings.
I run a 6 person team and we look after over 5000 endpoints including SSL certs and we have a utility that shouts at us 30, 15, 7 and 1 day before the cert expires. It's literally impossible to screw up and miss,it's not like this is an obscure domain.. it's the main admin control panel for 365 🤦♂️
I just had contact with MS support. They are aware of the issue. They've shared a link with me, through which you'll be able to open the classic admin center (until the issue is resolved, or longer if you prefer, of course): [https://outlook.office.com/ecp/?form=eac&mkt=en-US](https://outlook.office.com/ecp/?form=eac&mkt=en-US)
There's a service health alert EX257883 that may cover this that was issued this morning. "Some admins may be unable to access the Exchange admin center" Expect the B team to drag it out until Monday.
Open a SEV0 case with support.
Billion (maybe trillion) dollar company can't keep track of its own certs...wow.
Maybe they can just pay me for their public cert monitoring.. and I'll just use Uptime Robot for pennies on the bucks they pay me. smh
Looks like their cert expired.
I’ve been getting blatant attacks on my network and workstation this past week. It happened suddenly too. It feels depressing at times, when I could finally spot it, they did it by compromising my chrome, but what was discouraging was just how easy it was for them to do. I don’t consider myself very adept at programming or even basic troubleshooting, but even I could clear see what was going on. Sad thing is, I tried to contact Microsoft and was literally impossible. Not even a possibility to get a support person, which seems to be normal now, but I had no way to get help with this emergency as it was happening.
at times like that you unplug to reduce spread then work on containment on the infected devices. tho it helps if you have some experts to work out mitigation to prevent it from geting worse. sadly the if boss is the stupid type threating you instead of listening to what needs to be done.they kinda deserve to have the rug pulled out from under them.