Microsoft Vissa (from Mike Cook)
A couple years ago, after trying nearly everything to get my new Dell to work, I did the unthinkable. I called Dell’s tech support. After giving the service tag and all that other jazz, I explained the problem to the technician.

“According to the BIOS,” I said, “my computer has 4GB of RAM installed. But Vista Ultimate only shows 2GB.”

“Hmm,” the tech responded, “what is this Vissa software you are using?”

“Microsoft Vista Ultimate,” I explained, “you know, the new Microsoft OS?”

The rep paused. “I’m sorry, we don’t support third party software. But if you would like, I can help you restore your computer to its original state. Do you have your Dell Resource CD?”

“No, no,” I countered, “this isn’t third party software. It is the operating system that came with the computer when I purchased it from you.”

“What is the software called again?”

“Microsoft Vista,” I said slowly, “Ultimate Edition.”

The rep put me on hold for a few minutes and returned several minutes later. “Where did you get this Vissa program? I will see if anyone here has heard of it.”

“Well,” I wasn’t sure how to respond, “it’s Microsoft’s newest Operating System, and it is called Vista.”

“Ooooh,” the rep responded, “Vissa! Yes, I understand now.”

I just waited for a moment.

“Well Mr. Mike,” he said, “this is a problem with the Vissa software. We have notified Microsoft and they have informed us that you can not use more than 3GB of memory with this software. I suggest you uninstall it and install the XP Pro that came with your computer.”

“But, my computer came with Vista Ultimate installed on it. It is less than two weeks old.”

The technician seemed a little confused, “okay, but I can send you a copy of XP Pro?”

“No thank you,” I said, “my friend bought the exact same PC, and his shows the 4GB in Vista, so I don’t think it is a bug.”

“I see. So is there anything else I can help you with, Mr. Mike?”

“I would really like to find out how to resolve this,” I pleaded, “I read up a little on it on a website, but I cannot make changes to the BIOS with everything grayed out. I was hoping you could help me?”

“Unfortunately we don’t offer support for other software like Bios and Vissa, but we can help you restore your system back to its original configuration if you would like?”

“No,” I was started to get agitated, “I really would like see the 4GB in Vista.”

Without even acknowledging my request, the rep said “so is there anything else I can help you with Mr. Mike?”

“But can’t you tell me who else I could check with to try and find answer to this problem?”

In the same exact tone, the rep repeated “so is there anything else I can help you with Mr. Mike?”

I said no, and disconnected the call shortly thereafter.

But I Never Changed My Password! (from Billy Ray)
A user recently send this email to the support mail box. He was apparently having trouble logging into our production SAP system.

Hi, I’m new here (Emp#27263) and I can’t get into my SAP account. For the past two days, I’ve been inputting my SAP password (sunshine17), but it’s not allowing me to enter. This is the exact same password that I used with my previous employer (AMP Co), and they have SAP too. However, I’m constantly refused access. Thank you, Earle L——

I was so very tempted to ask him to contact his old employer for a password reset.

Support Yahoos (from Jonathan)
A few years ago, a common free email provider who we’ll call “Yooha” had an outage on one of their load balanced email servers. Since it was only a problem on accounts tied to that server (and because I was in the middle of a fairly time sensitive transaction), I thought I’d send them a note about it in case they hadn’t heard about the problem yet. Here is the text of my email:

—– Original Message —-
From: Jonathan Cortis
To: customersupport@y—-.com;
Sent: Saturday, July 22, 2006 7:01:20 PM
Subject: f606.mail.y—-.com

Server f606.mail.y—-.com is down and not responding to pings or requests. My wife’s email account is always directed to that server, so she cannot check her mail. For reference, her username is redacted. You might want to take that server out of the rotation.

Thank you, Jonathan

I was quite surprised by their grateful response:

Wow, Jonathan. Thanks for assessing a very complicated situation, and immediately coming up with a complete solution. In fact, we have so little idea of what’s going on over here, perhaps you can come on over and single- handedly solve it for us. We’ll get right on your commands, just as soon as we finish our donuts. Oh, and after our week off, too. And, then there’s the matter of finding out which extension cord that is plugged into… customersupport@y—-.com 818-555-1234

A Mute Point (from Sharon C)

After our Techical Support guy set up a DVD player and TV for a presentation in one of the conference rooms, the Admin staff member preparing for the event sent the following email to the Helpdesk.

Thanks for setting up the TV and DVD recorder. But the DVD must play as MUTE. Please come upstairs before 4:00pm and press MUTE.

Hey, That’s Ours! (from Jamey Westmoreland)

A few weeks ago, I had a server morning that had been giving me problems for a couple of days. My diagnosis: a failing mother board.

I knew the server was under support so I called up the Dell Computers. The tech asked the standard, “please tell us the express support code on the front,” so I read back the number on the machine.

“Hmm,” the tech responded, “that server is in our warehouse.”

“No no,” I said jovially, “I can assure you it’s in my rack. I’m looking right at it.”

“Oooooh,” the rep said, “so, our records show that a refund was issued for this server and you used that refund to purchase a more powerful server.”

“Huh,” I was a bit confused.

“Yeah,” he said, “you were suppose to ship that one back.”

After some more back and forth, we realized that the exchange was supposed to happen fifteen months ago, which was right about the time my predecessor had left. It seemed he never bothered to process the return of the server, and when I arrived it was racked and ready to go. And somehow, it slipped through the cracks on Dell’s end.

Understandably, the tech support guy said that he couldn’t help me without a contract… or, for that matter, a server that they owned.

Fortunately, we were able to get a new server ordered right away, and this time, we actually owned it.

Source: http://thedailywtf.com/Articles/Microsoft-Vissa,-Hey-Thats-Ours,–More-Support-Stories.aspx

Der Domain Name Service ist momentan in aller Munde. Schon allein weil die Provider ja per DNS mutmassliche Kinderpornogucker auf Stopp-Server umlenken sollen.

Was DNS macht ist vereinfacht gesagt folgendes: Es uebersetzt die fuer uns leichter zu merkenden Namen von Servern die wir erreichen wollen in IP Adressen ueber die die Rechner letztendlich miteinander kommunizieren. Dieser Service wird oft als das Rueckgrat des Internets bezeichnet. Man sollte also tunlichst zusehen diesen Dienst abzusichern.

Rainer hat sich mal angesehen welche Informationen er so aus den Nameservern fuer die Zone bka.de rausziehen kann.

Was man normalerweise unter anderem auf gar keinen Fall als Admin eines DNS Servers oder als Kunde eines solchen Admins will ist, dass jeder die Versionsnummer der benutzten BIND Version oder gar die ganze Zone einer Domain auslesen kann.

Mit Information ueber die verwendete Version koennte man gezielt bekannte Schwachpunkte dieser Version ausnutzen. Juckt aber irgendwie scheinbar niemanden.

$ dig @$dns-server +short CHAOS TXT version.bind
"BIND 8.3.3"

Falls nicht gefaked schon etwas aelter. Dabei laesst sich das recht einfach abschalten. Es gibt in den Optionen vom BIND extra ein Substatement fuer die Version.

options {
[...]
version "Das geht dich nix an";
};

Wenn man will kann man auch alle Versionsanfragen loggen lassen.

In der Zone bzw. dem Zonefile einer Domain stehen alle Zuordnungen von Namen zu IP Adressen drin. Fuer Server wie www.example.com oder mail.example.com waer das sicher nicht so wild, denn das sind gaengige Bezeichnungen von denen man eh oft wiss das sie von aussen angesprochen werden. Aber es muss ja nicht jeder wissen das es da noch secretserver.example.com oder finance.example.com gibt. Aus diesem Grund laesst man einen Zonentransfer in der Regel nur vom Master Server, also dem Server auf dem das Zonenfile liegt und bearbeitet wird wenn Aenderungen anstehen, zu den Slave Servern zu. Das BKA bzw. die T-Systems die ihre Nameserver betreibt sehen das wohl anders. Man kann von bka.de einen AXFR, Zonen Transfer, anfordern und bekommt den auch beantwortet.
Auch das liesse sich recht einfach verhindern. Zum einen kann man Zonentransfer pro Zone ueber das Substatement allow-transfer regeln:

zone "bka.de" in {
type master;
file "path/to/zonefiles/db.bka.de";
allow-transfer { slave-ns-1; slave-ns-2; };
};

Oder auch wieder global ueber ein entsprechendes Statement in den Options und mit eigenen Access-Listen (Zensursula steht auf Access-Listen). Das ist nur die Spitze des Eisbergs. Wer Versionsabfragen und Transfers fuer bestimmte Netze zulassen will/muss kann verschiedene Views definieren. Ist alles ganz einfach.

Zusaetzlich beantwortet einer der Server auch noch DNS Anfragen fuer jedermann nach ueberall. Das will man eigentlich auch nicht unbedingt. Vielleicht fuer die internen Netze und dann sollte man das wieder ueber die Views regeln, fuer alle anderen Anfragen von extern sollte ein “recursion no;” in den Optionen stehen.

Kombiniert man das alles und denkt ein paar Monate zurueck stellt man sich eine Frage. Richtig.

$dns-server is POOR: 39 queries in 75.6 seconds from 1 ports with std dev 0

Aber vielleicht wollen sie uns das ja auch nur glauben lassen

Also, liebe BIND Admins von der T-Systems und auch sonstwo: bitte ein wenig mit dem Thema befassen, das ein oder andere Buch lesen und mal ins “Secure BIND Template” gucken.

Es gibt Geschichten, an die kommt auch das Kino nur schwer ran. Beispielsweise diese hier: Mutter von drei Kindern setzt diese in Italien in einer Pizzaria aus. Sie war mit ihrem Freund auf der Flucht und mittellos. Auf der Flucht deshalb, weil der Freund nach einem Hafturlaub nicht wieder in die Zelle zurueckgekehrt ist, die er sich mit dem Mann der Mutter und Vater der Kinder teilt, welcher wiederum einsitzt weil er ein weiteres gemeinsames Kind so schwer misshandelte, dass es verstarb. Jetzt mal im Ernst… the FUCK!?

Das ehemalige Nachrichtenmagazin erfreut diesbezueglich auch durch zum Schutz der Privatsphaere grob verpixelte Bilder von Mutter und Freund. Direkt neben einem Link zu einem unverpixelten Video ueber den Fall. Gratuliere.

Irgendwie erinnert mich das Setting aber auch schwer an “Bang Boom Bang“.

This is my daily WTF.  This weight loss suit makes the snuggie look like a tuxedo.