u/omegaproxima

This is great news, I hope they keep this up...

Worked for IOS, trying to find out what happens with android...

I know token concatenation works for IKEv1 for sure, have you also tried on IKEv2?

Καταλαβαίνεις οτι η ανάγνωση χιλιάδων emails με διαφορετική δομή και απαιτήσεις θα είναι πολύ δύσκολη σε μια -είμαι σίγουρος- απροετοίμαστη για κάτι τέτοιο εταιρία. Εννοείται να το κάνουν ούτως ή άλλως και να πληρώσουν πρόστιμα για κενά στην ασφάλεια και για καθυστερήσεις στις απαντήσεις. Στα επίσημα κανάλια υποχρεούται να απαντήσει "το λάβαμε αλλά στείλτε το στο επίσημο κανάλι για GDPR για να προχωρήσουμε", από όσο ξέρω. Δεν είναι το ίδιο.

Τεράστιες εταιρίες που μπροστά τους το skroutz είναι σκουπίδι δεν έχουν ανταποκριθεί σωστά. Υπάρχει μεγάλη αοριστία στο τι υποχρεούται να πληρεί μια εταιρία σε θέματα cybersecurity. Θα πληρώσουν ένα υποφερτό πρόστιμο στην χειρότερη.

Εγώ θέλω πάντως να τους τιμωρήσεις, το μόνο που ξέρουν είναι να εισπράτουν κ να λένε ψέμματα. Να σου λένε με extra 1,5 ευρώ παραλαμβάνεις αύριο και να μην έρχεται αύριο, ή να κλείνουν καταστήματα, να τρώνε λεφτά από κόσμο και το skroutz να το παίζει χωρίς ευθύνες.

Θα μπορούσες να πεις οτι ξεχασες να το αναφέρεις, δεν καταλαβαίνω τα 3 επιχειρήματα σου

α. Δεν δικαιουται ο Υπευθυνος προστασίας δεδομένων να τα δωσει σε οποιον απλα τα ζητήσει, επειδή έγραψε ενα mail και κάποια στοιχεία (και ας εχουν διαρρεύσει), δεν χρειάζεται να ασχολείσαι με GDPR για να το καταλάβεις αυτό

β. Δεν ανεφερες πουθενα οτι σταλθηκε από το ίδιο email (του account) και είναι το πιο σημαντικό αλλιώς παει το αίτημα άκλαυτο. Είναι το πρώτο που έπρεπε να λεει το κείμενο σου και δεν θα το σκεφτούν όλοι. Το να αρχίσουν ερωτοαπαντήσεις με ελλειπή email έχει μόνο το νόημα τιμωρίας και οχι αποτελέσματος.

γ. Φυσικά και μόνο η εταιρία το ελέγχει το κανάλι και είναι όντως συγκεκριμένα το email του, αλλά μπορεί να είναι και άλλο μέσο όπως το support.

Αν θες να τους τιμωρήσεις (και καλά κάνεις) μπορείς να στείλεις μαζί με άλλους μερικές 100αδες χιλιάδες emails και να αργήσεις να πάρεις απάντηση σε όλα αυτά που πρέπει να επαληθευτούν και να έχουν διαχειριστικό και οικονομικό κατ' επέκταση κόστος.

Αν θέλεις να κάνεις τη δουλειά σου, δηλαδή να μάθεις πραγματικά τι διέρρευσε καλό θα ήταν να ακολουθήσεις το κανάλι που θα σου πουν. Αν θέλουν να εξυπηρετήσουν τον κόσμο δεν θα δουλέψει το email, θα πρέπει να τυποποιήσουν τη διαδικασία, αν είναι ελάχιστα σοβαροί θα το κάνουν.

Δεν ειναι σοβαρό να ζητάτε γνωστοποίηση δίνοντας απο κάτω για ταυτοποίηση τα προσωπικά δεδομένα που έχουν κλαπεί, δεν θα έπρεπε να σας στείλει κανένας τίποτα. Μόνο από το email του λογαριασμού πρέπει να σταλεί κάτι τέτοιο ή μέσω διαδικασίας support του skroutz.

It happened to me too, never before have I spent all my tokens in 30 minutes using Opus 4.8 High thinking. It always felt too good to be true tbh, so I will start looking for alternatives, and only if I have to, wait for something new. This is non viable.

edit: My 5h limit ended and I made a single reply to claude, which missed an obvious official forum link solving the issue we were discussing about. It cost me 30% usage... this is insane.

Does anyone know if the Audio pass-through freeze is fixed?

Whats your AV solution? Do u have any RDP traffic inspection?

For reference this is the payroll before taxes for 2026-2027, about 35mil excluding the coaches and stuff. Pana surely can offer about 10mil $ net, if the player wants come back closer to his home and country.

Reported net figures converted at €1 ≈ $1.155.

Player	Salary (EUR)	Salary (USD)
Kendrick Nunn	€4.5M	$5.20M
Nigel Hayes-Davis	€4.5M	$5.20M
Guerschon Yabusele	€4.0M	$4.62M
Mathias Lessort	€2.7M	$3.12M
Juancho Hernangomez	€2.5M	$2.89M
Isaac Bonga	€2.15M	$2.48M
Kostas Sloukas	€2.0M	$2.31M
Moustapha Fall	€1.6M	$1.85M
Dinos Mitoglou	€1.5M	$1.73M
Jerian Grant	€1.4M	$1.62M
Brancou Badio	€1.3M	$1.50M
Nikos Rogkavopoulos	€1.1M	$1.27M
Panagiotis Kalaitzakis	€0.45M	$0.52M
Dimitris Moraitis	€0.35M	$0.40M
Lefteris Mantzoukas	€0.30M	$0.35M
Ioannis Kouzeloglou	€0.15M	$0.17M
TOTAL	≈ €30.5M	≈ $35.2M

*Note: these are net (after-tax) figures as reported — i.e., take-home pay. For professional basketball players in Greece, there's a special flat rate of 22% — not the standard progressive income tax scale. It used to be something like 45%.

Coaching staff

Staff	Salary (EUR)	Salary (USD)
Zeljko Obradovic (head coach)	€4.0M	$4.62M
Assistant coaches (combined)	€1.0M	$1.16M
Staff total	≈ €5.0M	≈ $5.78M

Players + coaching staff: ≈ €35.5M ≈ $41.0M

Why is this not mentioned enough in this subreddit? Im using Opus 4.8 thinking and Im doing some of the best work Ive ever done in 1/10th of the time.

Claude Opus 5 Extra, some don't look that possible (for example you got no 2025 DC), but it brings in some new ideas:

Good news first: there are no active known issues for 25H2 that match this, so you're almost certainly chasing an environmental problem rather than waiting on a Microsoft fix. Microsoft's release health dashboard currently lists no active known issues for Windows 11, version 25H2. Microsoft Learn

Now the part I'd push back on, because I think it's steering the whole investigation wrong.

"Reconnecting the network fixes it" rules out a deadlock

This is the most important detail in the post and it's buried at the bottom. A genuine lsass.exe / LSAIso hypervisor thread deadlock is cleared by one thing: a reboot. Bouncing the NIC does nothing to an internal lock.

If disable/enable on the adapter restores service, then the blocked thread isn't spinning on a mutex — it's parked in a socket wait that gets aborted when the interface drops. The lock it holds gets released, the queue drains, everything unfreezes. That's not a deadlock, that's one stuck network I/O with a lock held behind it, and every other SSPI caller (RDP, Chrome, curl, PuTTY) is just queued behind the same serialized Kerberos package.

"Zero packets" is also not the evidence you think it is

If the capture is started after the freeze begins, zero packets is the expected result under this theory. The request already went out. lsass is sitting in recv() on an established TCP session waiting for a reply that will never come. There is nothing left to transmit, so there is nothing to capture.

You need a continuous ring-buffer capture running before the hang, not a capture started once a user complains:

netsh trace start capture=yes maxSize=512 fileMode=circular tracefile=C:\temp\krb.etl

or dumpcap with -b filesize:100 -b files:10. Then correlate the hang timestamp against what happened 30–60 seconds earlier.

The single command that splits the problem in half

During an active hang, from an elevated prompt:

netstat -anob | findstr ":88" You see an ESTABLISHED session from lsass.exe to a DC on port 88 → confirmed blackholed socket. Root cause is in the network path, not in Windows. You see nothing at all → then it really is local, and the LSA plugin / leftover-driver angle below becomes primary.

Also grab klist query_bind and nltest /dsgetdc:<domain> while it's hung.

Where I'd actually look, ranked

1. The Sophos HA pair silently dropping established sessions. An HA failover flushes the connection tracking table. Existing TCP sessions get dropped without a RST — packets just vanish. lsass keeps waiting. This fits every symptom including the NIC-bounce recovery. Pull the Sophos HA failover log and correlate timestamps against user complaints. Separately, check whether DC traffic even needs to traverse the firewall — if the Sophos is the inter-VLAN gateway, it is in the KDC path whether you intended that or not.

2. PMTU blackhole on large Kerberos responses. TCP handshake succeeds, small AS-REQ goes out, the DC's reply carrying a fat PAC exceeds path MTU with DF set, gets silently dropped. This is intermittent by group membership — users in many AD groups break, users in few don't. That would explain why it hits some people and not others. Test: ping -f -l 1472 <DC-IP>, then walk the size down. Check MSS clamping on the HA VIP.

3. Leftover EDR kernel components. "Completely uninstalled" rarely means removed. A WFP callout driver that pends connection decisions awaiting a verdict from a user-mode service that no longer exists produces exactly this signature. Check fltmc filters, netsh wfp show filters, non-Microsoft NDIS lightweight filters in adapter properties, and HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Security Packages. Most vendors ship a dedicated cleanup tool separate from the uninstaller — run it.

4. Duplicate SIDs. Cheap to rule out and it's a confirmed 24H2/25H2 issue. Microsoft has documented Kerberos and NTLM authentication failures caused by duplicate SIDs on 24H2, 25H2, and Server 2025 after the August 29, 2025 updates onward, arising from cloning without Sysprep. Look for LsaSrv Event ID 6167 in the System log. If your 25H2 fleet came off a non-generalized image, check this today. Microsoft Support

Two things to correct regardless

MaxPacketSize = 1 is doing nothing. The default for this value on Windows Vista and later is 0, meaning the Windows Kerberos client never uses UDP. You've been forcing TCP that was already mandatory. Remove it — not because it's harmful, but because it's giving you false confidence that you changed something. Microsoft Learn

Credential Guard is a weak suspect. Microsoft's position is that Kerberos-dependent services like file shares and remote desktop continue to work under Credential Guard and aren't affected by it, though applications that hook LSAIso.exe can cause performance problems. That hooking caveat points right back at your EDR remnants. Still worth a pilot ring with VBS off as a control — just don't lead with it. Microsoft Learn

If you need to prove it internally

Enable Kerberos client logging (LogLevel DWORD = 1 under HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\Parameters) and Netlogon debug (nltest /dbflag:0x2080ffff, output at %windir%\debug\netlogon.log). For a real thread-stack answer you'd need an lsass dump, but with LSA protection enabled you can't dump it normally — either disable RunAsPPL on one lab box and reboot first, or take a complete memory dump via a keyboard-initiated crash and pull the stacks in WinDbg.

Fastest possible test if you have the access: put one affected machine on a segment with a direct route to a DC, no Sophos in the path. If the hang stops occurring, you're done arguing about lsass.

Nah, PC gamers usually compare apples to apples. Or at least they try to. This is ridiculous. Presentation gives you one point, making mistakes gives you one point, too. So many youtubers right now are sloppier than AI was when it first got released.

Doesn't work for me, tried it a week ago, it closes the store completely... I agree that closing it is not a good idea, so you either are exposed by the users adding apps or by the core store apps not getting updates...

I, too, cant use Audio pass-through with 7.1 DTS-HD. Potplayer freezes and if you click on its window you get the not responding message. I went back to Aprils version and it works fine. Though sometimes with Aprils version the sound stops for about 1 second and then continues. It could happen once every 2 hours or not at all for 8 hours straight.

For me some replies are worse when using Fable. The Thinking switch offers a lot more accuracy between all Claude models and its missing from Fable.

Thanks a lot, do you by any chance have the best timings without increasing the voltage? Specifically CL, tRCD, tRP, tRAS, tRC?

Which IPSec ESP is it? Critical or Error?

If Jokic thinks the Eurobasket has anything to do with the Euroleague he isn't following the Euroleague. It was a bad example.

We have some WorkForce Pro WF-C579RDWF, WorkForce Pro WF-5399DW, WorkForce Pro EM-C800RDWF, WorkForce Enterprise AM-C5000.

Zero issues, low ink & power consumption. We left HP, the maintenance kits were more expensive than a brand new printer.

I'm getting some warnings , -Backup agent installation is not required- and -Failed to remove checkpoints for the backup xxxx from the repository AWS S3 Bucket: Transport installed on xxx server is out of date-.

have you installed the October updates? I have read that some people are having tcp ip issues with printers. Try uninstalling if possible.

Thank you for reporting this.