Friday, October 4, 2024

Linux Fresh install - Just plain out dumb!

 

This is not a question but a statement!

What put me off Linux soo many years ago, were that First you install and set up everything to your liking, then whenever you have to switch to a new version, everyone says fresh install, which means you loose everything you did to make it look and act the way you wanted it.

And I went "What? That is stupid"!

And today its still stupid!

Yeah, most distro can upgrade to newer version by command line or through software(Why I chose Linux Mint) - But people still say "Its better with fresh install"!

This makes me angry, it is true that fresh install might be more stable, and people most likely have Written down their steps to set up their system again - But people, its a stupid way and you will never get those hours back!

We are in 2024 and no one has figured out to do this in a safe way so fresh install is not needed? That is why many people choose Windows(Not good choice, but better than this stupid sh. t), instead of Linux.

In my days as a supporter I did things the right way, I often heard "fresh out of College" so called IT support, tell customers to just do reinstall for any problem and I mean any problem. Because that would shorten the time of the call and the supporter could get more calls in a day.

My call log were not as good as the "Just reinstall guys", but I got to be the manager of Compaq, HP(not same company as that time), and Packard Bell accounts. These were business accounts, reinstall were the last option, as the field engineers, architects and other specialist couldn't afford to loose their data and I would fight to the last drop of blood for those guys, and my company knew that.

To this day I see more and more "lazy support", because todays IT is Quantity over Quality.

I call this fresh install lazy IT!

Rolling distro is not much better, but at least they got the upgrade working!

That your system might catch fire and burn down because of an bad upgrade(because these days nobody check their updates before posting them), that we are used to from Windows and Mac, these days everyone makes backups(Right😉).

Demand more of your distribution and if they can't handle it, change to something else!
Yes, its free, but I take pride in doing something the right way, shouldn't the makers of your distro do the same?

Or is it a race to be at the top of distrowatch? 

Wednesday, July 31, 2024

Firmware problem on many newer ThinkPads

Many dealers in the Philippines are not aware of this problem or don't care enough to keep themselves informed, this problem is from 2019 up until 2024.


If you have stock of these models you better read on. You need to update the firmware immediately, if you have not already done it.


Or you will end up with systems that can't be repaired and Lenovo don't care about out of warranty laptops. You should also contact all the customers that you sold these models to and make sure the Firmware get updated or you might end up with a lot of angry people who want refund! 


Symptom

Systems may experience any of the following symptoms:


USB-C port not working

Intel Thunderbolt controller not visible in the OS/Device Manager

USB-C or Thunderbolt docking stations not visible or having connectivity problems

HDMI output not available

System battery not charging with a USB-C power adapter connected to the USB-C port

Intel Thunderbolt pop-up error message

Intel Thunderbolt safe mode error message

BIOS Thunderbolt communication error or hang during POST

These symptoms may occur after 6 to 12 months of typical usage.


Applicable Systems

P43s (Type 20RH, 20RJ)

P51 (Type 20MM, 20MN)

P51 (Type 20HH, 20HJ)

P51s (Type 20HB, 20HC)

P51s (Type 20JY, 20K0)

P52 (Type 20M9, 20MA)

P52s (Type 20LB, 20LC)

P53s (Type 20N6, 20N7)

P71 (type 20HK, 20HL)

T470 (Type 20HD, 20HE)

T470 (Type 20JM, 20JN)

T470s (type 20HF, 20HG)

T470s (type 20JS, 20JT)

T480 (Type 20L5, 20L6)

T480s (type 20L7, 20L8)

T490 (Type 20N2, 20N3)

T490 (Type 20RY, 20RX)

T490 (Type 20Q9, 20QH)

T490s (Type 20NX, 20NY)

T570 (Type 20H9,20HA)

T570 (Type 20JW, 20JX)

T580 (Type 20L9, 20LA)

T590 (Type 20N4, 20N5)

X1 Carbon 5th Gen - (Type 20HR, 20HQ)

X1 Carbon 6th Gen - (Type 20KH, 20KG)

X1 Carbon 7th Gen - (Type 20QD, 20QE)

X1 Carbon 7th Gen - (Type 20R1, 20R2)

X1 Yoga 2nd Gen (Type 20JD, 20JE, 20JF, 20JG)

X1 Yoga 3rd Gen (Type 20LD, 20LE, 20LF, 20LG)

X1 Yoga 4th Gen (Type 20QF, 20QG)

X1 Yoga 4th Gen (Type 20SA, 20SB)

X1 Tablet 3rd Gen (Type 20KJ, 20KK)

X280 (Type 20KF, 20KE)

X380 Yoga (Type 20LH, 20LJ)

X390 (Type 20Q0, 20Q1)

X390 Yoga (Type 20NN, 20NQ)

Yoga 370 (Type 20JJ, 20JH)


https://support.lenovo.com/ie/en/solutions/ht508988-critical-intel-thunderbolt-software-and-firmware-updates-thinkpad



Thursday, July 25, 2024

Converge Security issues - Protect yourself from intruders!

Converge ICT, one of the Major ISP's in the Philippines, has shipped ALL their Fiber ZTE F760L Modem Routers, with serious Security issues, they are listed here and below each issue, is the solution :

1. All the ZTE F760L modems come with a standard Setup password, the same on ALL the modems, and someone in Converge ICT has leaked this password to the internet, so anyone can access the modems and change whatever they want. 

This is really bad, and happened because Converge ICT careless IT Department cloned all the modems with the same Config file, and didn't bother to assign individual Password linked to each modems serial number, before shipping them out. I raised this issue with them 2 years ago, but nothing has been done to rectify the situation, they just ignored it(as usual). I have raised it with them again, but still nothing has been done. 

Solution : Access the modem on http://192.168.1.1 with 

Username admin 

Password Converge@zte123 

Go to Administration -> User User Management ->WEB User Management

Type in the standard password from Converge ICT in Old Password Converge@zte123 

Then type your New password make sure it is at least 8 characters long and has special signs. I would make it longer than 8 characters, as AI now can hack your password, since some Dumbasses carelessly made it available to anyone in the world(Google, Microsoft). 

Confirm the New password 

Click on SUBMIT in bottom right corner of the Setup screen. 

You have now saved yourself from serious future headaches. 




2. The WIFI password is written on the back of the modem, this again pose a serious Security issue, because anyone who can see the back of the modem, can access it through WIFI. 

Solution : You have to change the standard password to one of your own. 

Login into the modem on 5Ghz, as you did above, then go to Network -> WLAN Radio2.4G- > Security

Here you click the small check box next to WPA Passphrase, delete what is there and type your own WIFI password, make it longer than 8 characters and use special signs, when finished Click on SUBMIT in the bottom right corner of the screen. 

Make sure to login to 2.4Ghz with this new password and make sure to write it down. 

Next, Login into the modem on 2.4Ghz, as you did above, then go to Network -> WLAN Radio5G- > Security

Here you click the small check box next to WPA Passphrase, delete what is there and type your own WIFI password(For convenience you can use the same password as you did with the 2.4Ghz WIFI, or make a different one), make it longer than 8 characters and use special signs, when finished Click on SUBMIT in the bottom right corner of the screen. 

Make sure to login to 5Ghz with this new password and make sure to write it down. 



3. There is another security issue, Converge ICT set the modem to be able to accept any login through WIFI, all you need is the password, this is ok but this modem is not secure enough and anyone with a Password scanner app can get the Password to your WIFI, then use your internet for whatever they want, even illegal activities. Converge is aware of this, because I told them, they just don't care to fix it! 

NOTE : Be aware, the following fix means that nobody can access your WIFI unless you add them yourself! Just do the same as below, for anyone you want to add to your WIFI. 

Solution : Find your phones MAC Address either in your settings or on the Box it came in, write it down as you will need it next. Also make sure your phone is set to use Device MAC Address and not Randomized MAC Address. 

Login to your WIFI as 5Ghz, go to Network -> WLAN Radio2.4G -> Access Control List and change the Mode from Disabled to Permit.

In the small boxes below add your MAC Address and click on Add, then click on SUBMIT. Make sure you can connect to the 2.4Ghz WIFI and then continue to next step. 

If you can't connect, make sure your MAC Address is correct in the list below, if not then add the correct MAC Address and delete the wrong one. 

Now login to the 2.4Ghz WIFI, go to Network -> WLAN Radio5G -> Access Control List and change the Mode from Disabled to Permit.

In the small boxes below add your MAC Address and click on Add, then click on SUBMIT. Make sure you can connect to the 5Ghz WIFI. 

NOTE : If your Phone has different MAC Addresses for 2.4Ghz and 5Ghz, make sure to use the correct ones. Most cheap phones only have 1 MAC Address. 


4. Converge ICT left the modem open to hackers, by not enabling Anti-Hacking Protection, I seriously don't understand this one, it means that anyone can hack your modem. A friend of mine has 21 unwanted users on his WIFI, I will be going there to fix that in the near future. 

Solution : Go to Security -> Firewall and put a check in Enable Anti-Hacking Protection, then click on SUBMIT. 



This what you can expect from Converge ICT, I can't recommend anyone to chose them as their ISP, their service level is good in the start, but after some time its really bad. 

If you have issue with your connection, you might have to contact them 20 times before they fix it - IF they fix it - I am 3 months in a service, or lack of, that should have been fixed on April 23(they came April 28), my Fiber cable has a break that show up in strong wind, and only strong wind, so it can't be detected in their office or on the modem, because its Random and only for a few seconds to minutes. But it break any up/download! Support never read what I write, always assign new case numbers, and every new Agent have me do stupid shit to troubleshoot, which I have done 20 times before. 


Stay safe and have a nice day😉




Tuesday, May 9, 2023

GCASH number 1 problem

The number one problem with GCASH is that if you need to contact customer service immediately, then you can't, you have to use their ticket system and it takes up to 24 hours for them to get back to you - If they even do that!

I seriously don't understand how Philippine goverment can allow this behaviour. 

There are posts on the net that you can call 2882 from a Globe phone, but that does not work anymore.

There are posts that claim you can contact them on Messenger on m.me/gcashcare but that does not work at all.

And the landline numbers does not work either. Even their email addresses doesn't work anymore. 

You can try to chat with Gigi, GCASH chat bot, but it will only suggest you to file a ticket.

The ticket system is useable, but it ask for things that the App ought to have pulled by itself, because you are already logged in, like:

Your email address 

Registered GCASH account name

Phone number 

Mobile OS version 



For me that is just dumb. 


There are other online payment options available here in the Philippines, take Palawanpay at least they offer you a hotline you can call if you need immediate assistance. 

And the GCASH problems are most likely just to add, not to be solved, since Globe is behind it, and we all know how difficult it is to contact them! 

Just this morning, Pay bills in GCASH, have been down for several hours. No explanation to why or any estimated time for when it will be back online. 

That is just total disregard to the GCASH customers! 



Saturday, March 4, 2023

GLOBE SIM registration disaaster

Whenever a Prepaid customer register their SIM card this go without major hickups, 

BUT when a Postpaid customer try to register their SIM card, they are met with a message that this is not possible and a customer service agent is going to contact them.

Unfortunately this rarely happens, instead Globe sends a text message to the customer to register their SIM card, and then its like the snake eating its own tail - a never ending story!

That is just stupid!

Face it Globe, test your solutions before implementing them. It will cost you customers and thereby money - but then again, you never listen anyway, so good luck to you!


Monday, December 26, 2022

Globe and Sim registration law - problems again!

 The new sim card registration law is implemented from today december 27 2022, but Globe made mistake as usual. 

The website for registration is not working https://new.globe.com.ph/simreg 




Customers are sent back to the https://www.globe.com.ph/help/sim-registration-act.html page instead of going to the registration portal.


Also, Globe use outdated information in the FAQ and procedure for registration, they want foreigners who are here as tourists to provide copy of Passports main page with biodata and the page where the current VISA is stamped - only problem is that Immigration has not used the stamped procedure for more than 5 years now, instead they give a document with the information on the current VISA status.


But the portal is not asking for a document and will most likely not accept that as documentation.


These days its not humans that check these registrations, its a computer(sometimes called bot) and if something is a little bit off from the programming then its rejected - A human would be able to understand the reasoning for the document instead of Passport page, a bot will not.


--

This is the information from Globe Telecom : For foreigners visiting as tourists, their registered SIMs shall only be valid for 30 days, and shall automatically be deactivated upon expiration of the SIM. The requirements are as follows: 

Passport (i.e., copy of the bio-page and pages where the current visa is stamped or shown); and

Proof of address in the Philippines (booking in a hotel or other type of accommodation, or in the absence thereof, an affidavit/letter from the owner of the house or residence where such foreign national will stay); and

Return ticket to country of origin or to another country indicating date and time of departure from the Philippines

Foreign nationals with other types of visas shall present:

Passport (i.e., copy of the bio-page and pages where the current visa is stamped or shown) indicating passport number, full name and nationality; and

Proof of address in the Philippines (booking in a hotel or other type of accommodation, or in the absence thereof, an affidavit/letter from the owner of the house or residence where such foreign national will stay); and 

Other pertinent document, whichever is applicable:

Alien Certificate of Registration Identification Card (ACRI-Card) from the Bureau of Immigration or other types of official ID issued by any other visa-issuing agency;

Alien Employment Permit from the Department of Labor and Employment School registration and ID for students; or

For Persons of Concern or POCs, the type of travel or admission document validly issued by the Department of Justice

---


As an IT Consultant and IT Blogger through many years, I find it despicable that Globe have not checked the facts before implementing these rules and I suggest that every person with problem contact Globe through their Messenger, I already did yesterday, but arrogant as they are Globe Support(not real Globe, but a company that handles their support), did not forward my concerns to 2nd level support (the real Globe). 


Then we just have to wait and see if things will get in order, though my experience with Globe say that Globe shot themselves in the foot. Because if people have so much problems with the registration and Globe don't fix the problems(usually it takes them years to fix anything), before the sim cards expire, then people will cancel Globe and go to another teleprovider, like SMART or Dito. 


And Globe will have huge losses in income. 


But you can't cure matigas ulo!


UPDATE: Globe finally got their matigas ulo in check and fixed the problem - use https://new.globe.com.ph

and choose Register SIM in the menu at the top right corner. 


Saturday, October 15, 2022

MitID and the consequences it will have for Globe Telecom

Since 2020, the goverment in Denmark, have been pushing out a new National Digital ID solution, named MitID to take over for NemID - for all danish citizens. This is old news.

What is not old news, is the consequences this have and will have in the future for Globe Telecom and the app. 20.000 danish Globe Telecom users, living permanently in the Philippines.

Many danish citizens know by now, that there is a serious problem with recieving SMS from MitID when having a mobile number with Globe Telecom, and many have made a temporary solution and registered and activated their MitID with a SMART SIM card.

SMART do not have as good coverage in the Philippines, as Globe Telecom have. 

Here comes the problem for Globe Telecom and their danish users, the use of MitID demands that SMS can be sent out to the user, when ever there is activity on their MitID account, so in order for that to be future proof, the 20.000 danish citizens will have to make a permanent switch to SMART - unless Globe Telecom finally fix the 17 years old communication problem they have with TDC in Denmark!

The reason for this problem, is as mentioned above, 17 years old and has to do with TDC not having a roaming agreement with Globe Telecom and vice versa.

TDC is used by majorly all goverment agentcies and offices, and also Banks, Hospitals, and now everything that has to do with MitID.

This is because TDC is the company with the most resources and the largest Nation wide network and the one, that the developer of the MitID solution, Nets, has chosen to use. 

So either Globe Telecom and TDC. finally figure out to solve their communication problem or Globe Telecom will most likely loose 20.000 costumers. 

Globe Support has been far from helpful in registering that there is a serious problem or even offer any solutions. 

The same can be said for Nets, who is the one in Denmark, responsible for chosing a tele provider that can't deliver worldwide. And even after they were made aware of the situation and the major problem, they did nothing to solve it and blamed Globe Telecom. 

For Nets, the solution is easy, switch to Telia or Telenor and the problem is solved. Because both of these companies have for years been able to deliver SMS to Globe Telecom, without any problems at all. 

For the users, there is only 1 solution and it is a bad one, if they are so unlucky to live in an area with no coverage by SMART. 

In the end it seems that neither Nets nor Globe Telecom actually care about this. 

When Globe Telecom, eventually are scratching their heads and asking "what happened?" - the answer is simple:

You set up a system where nobody can contact you, so nobody could inform you! The company you hired to take care of your support, failed to inform you about the problem - because of the way you set it up! 

You could have been ahead of this, but in the end, its your own fault!