I had the SCALEUP bug and insisted that having your users go on a scavenger hunt to prove that their error was merely visual wasn't a reasonable solution. My collection is massive, it was virtually impossible for me to prove the bug was visual, and no user should be required to do work figuring out such problems. They still can't tell me what cards I was allegedly granted.
Bought the ticket today at 10:00 (GMT +1) and got the timed research
Gold ticket allows you one free item from every shop in the world, however you have to travel to each shop, no buying online, once you have a free item from that shop you can't go back to it and get another free one, it is essentially ticked off the list.
$100 million tax free, no down sides
The watch has a special battery that will last about 3 years however it's a one of a kind battery and can't be replaced, watch can't reverse time or speed up time it can only stop/start time.
Edit: few things I need to clear up
- The golden ticket covers tax on all items.
- Real estate agents are not counted as shops
- To be considered a shop they have to be selling physical items that you can buy and take away, I will allow car dealerships
- If the battery is in the watch it will continue to lose power even if time is stopped, you can take the battery out to preserve power
Breaking news, hopefully we’ll hear from the A’s soon enough on their plans for season tickets and regular season tickets that have already been sold.
Good evening everyone! This post is a very important post if you have a Multi-Forest environment with Trusts. We have coming changes to harden Kerberos between forests. This will become a mandatory change in July.
Blog Post: https://techcommunity.microsoft.com/t5/Premier-Field-Engineering/Changes-to-Ticket-Granting-Ticket-TGT-Delegation-Across-Trusts/ba-p/440283
> # Changes to Ticket-Granting Ticket (TGT) Delegation Across Trusts in Windows Server (PFE edition)
> Hello Everyone! Allen Sudbring here, Premier Field Engineer at Microsoft. Today I’m putting a post out to get some critical information to everyone who supports Windows Server and Active Directory Domain Services.
> If you haven’t seen the KB article that this post references I encourage you to check out its content, I promise it’s important!
> KB4490425 – Updates to TGT delegation across incoming trusts in Windows Server
> With the introduction of Windows Server 2012, a new feature was added to Active Directory Domain Services that enforced the forest boundary for Kerberos unconstrained delegation. This allowed an administrator of a trusted forest to configure whether TGTs can be delegated to a service in the trusting forest. Unfortunately, an unsafe, default configuration exists within this feature when creating an inbound trust that could allow an attacker in the trusting forest to request the delegation of a TGT for an identity from the trusted forest.
> So what does this all mean?
> Let’s back up a little bit and do a brief explanation on Kerberos delegation.
> There are three kinds of Kerberos delegation in Active Directory:
> * Unconstrained
> >When a Domain Administrator configures a service’s account to be trusted for unconstrained delegation, that service has the ability to impersonate any user account to any other service. This is the most insecure delegation option, because a service could impersonate any user to any other service it likes. For a regular user account, not so bad, but for a Domain Admin or an Enterprise Admin, a rogue service could request information from the domain or change user account or group permissions in the name of the privileged account. For this reason, unconstrained Kerberos delegation is a high security risk.
> * Constrained
> > First introduced with Windows Server 20
... keep reading on reddit ➡Is there a way to detect kerberos golden tickets using the Windows event logs*?
I understand log entries are created when kerberos ticket granting tickets ('TGT') are requested (EventID 4768), but I can't for the life of me find out how to query the logs to determine if a TGT has a lifetime beyond the default value set in group policy.
Are there any other useful result codes to detect a forged ticket, e.g. looking for 4768 events in which:
- The client address isn't on our personal IP address range.
- The account name used is used on an IP address that's not on a defined address range.
- The account name used is not permitted to logon to a domain controller.
*My employer isn't currently looking to purchase a SIEM or other third-party solutions, so I've to do this using either Windows' tools or other open-souce threat detection tools.
UPDATE 10:20AM ET: Missions are now awarding Blockbuster tickets.
Hey everyone,
We’re aware of an issue that’s causing Mission Alert missions to still be granting Storm Tickets rather than the new Blockbuster tickets. This issue will be resolved when the mission alerts refresh later today.
Everyone who earned Storm Tickets during this time will be granted their Neon Llamas during our next down time.
Sorry for any inconvenience this has caused!
How many home games are you attending per year?
Go here and after choosing legends go to the bottom and click open support ticket!
I have a subscription and its telling me I do not, yet when I click to renew, it says my subscription is good till October. I'm on the iPhone 6s and my name is ruby rider 28.
If anyone's interested, I've just had an email from Lost in TV who do TV and radio audience tickets offering tickets for Rob Grant's new sitcom, The Nether Regions:
This may be an old man yells at clouds moment, but Nicknames are historically a big part of the sport and it seems like no one really gets a nickname anymore.
If I can wear my homer hat for a minute. Ja Morant is a player than needs a real nickname.
Hailing from Dalzell, SC (home also of Ray Allen), Ja Morant has so many opportunities for a really iconic nickname.
You could go with the Dalzell Dash or even the nickname of Dalzell fits him well. Ja "Razzle Dazzle" Morant.
What player on your team deserves an iconic nickname and what's your submission?
Basically they should work like Titanfall 2 XP tickets, imo they'll would be a lot more valuable this way and people would actually be prompted to buy them more
Is there a way to detect kerberos golden tickets using the Windows event logs*?
I understand log entries are created when kerberos ticket granting tickets ('TGT') are requested (EventID 4768), but I can't for the life of me find out how to query the logs to determine if a TGT has a lifetime beyond the default value set in group policy.
Are there any other useful result codes to detect a forged ticket, e.g. looking for 4768 events in which:
- The client address isn't on our personal IP address range.
- The account name used is used on an IP address that's not on a defined address range.
- The account name used is not permitted to logon to a domain controller.
*My employer isn't currently looking to purchase a SIEM or other third-party solutions, so I've to do this using either Windows' tools or other open-souce threat detection tools.
