LinuxBender

156 ms·

1. 17821.▲
   by LinuxBender 9y ago

   Disclaimer: Using the following methods could be seen as bypassing the intent of the port restrictions set by your org. I commit to github using ssh on port 443. # git remote set-url origin git@<host-in-ssh-config>:<username
2. 17822.▲
   by LinuxBender 9y ago

   Absolutely. Depending on your use case, you can queue downloads to your VPS nodes, then prune out things you don't need and even compress data before pulling it to your home.
3. 17823.▲
   by LinuxBender 9y ago

   Are you also doing UDP encapsulation and any additional NAT's? I'm using transport mode on strongswan. I get about 3% overhead with strongswan and about 5% with tinc, but the throughput on tinc caps out much sooner for me than w
4. 17824.▲
   by LinuxBender 9y ago

   For my use case, yes. My DNS requests are cached / forwarded on my VPS nodes. My ISP can neither see nor tamper with my DNS requests. I do something unorthodox and set a min-ttl both on my home linux router and on my VPS resolvers u
5. 17825.▲
   by LinuxBender 9y ago

   I despise open work-spaces. It is distracting. Between slack and open work-spaces, my productivity is significantly lower. This has not changed in a long time. I've read decades of advice on improving this and reject all of it. It
6. 17826.▲
   by LinuxBender 9y ago

   +1 for tinc. I've used it for years in VPS providers and from home to VPS to cloak DNS from the ISP eyes and tampering. It's not as fast as strongswan or wireguard, but it has dynamic mesh routing. If one of my nodes is down, I
7. 17827.▲
   by LinuxBender 9y ago

   For the VM, follow the same OS hardening standards you would apply in a non VPS environment. Each OS distribution has its own NIST, CIS hardening guides. Do not use pre-built images created by someone else, as you have no idea if they are
8. 17828.▲
   by LinuxBender 9y ago

   I am not looking to convince anyone. I know what I experienced. My friends know what they experienced. That is more than enough for me to have left KP and to warn my friends regarding my experiences. I have advised various agencies of m
9. 17829.▲
   by LinuxBender 9y ago

   Do any countries have laws that enforce compliance and have serious consequences for violations?
10. 17830.▲
    by LinuxBender 9y ago

    CentOS is only community supported, so that is ok. I am not suggesting customizing kernels.
11. 17831.▲
    by LinuxBender 9y ago

    Somewhat off topic: Is there an effort similar to this for CentOS 7? The centos minimal image is still rather large and I have to do some really ugly things to prune it down. Even then I can not get it down anywhere close to 80 MB. That
12. 17832.▲
    by LinuxBender 9y ago

    Have any criminals also started using AI bots? i.e. Assassination by drone, bank heist drones, graffiti drones (for those hard to reach places), vandalizing drones, ...etc I know there are already many peeping-tom drones.
13. 17833.▲
    by LinuxBender 9y ago

    Do all command line / API utilities support TLS 1.2+ now? Many linux distros ship really old libraries, is why I ask. Then there are the older unix systems with even older libraries. Based on their stats about 5% of connections will
14. 17834.▲
    by LinuxBender 9y ago

    I was with Kaiser for a long time because I never needed a doctor. When I did, I had to fire kaiser. They nearly killed me. Talking to my coworkers, it turns out this is quite common. They hire a lot of people that received their medica
15. 17835.▲
    by LinuxBender 9y ago

    Terrorists? Try 12 year old angst filled kids that get bullied in school and/or at home. How many 10 to 17 year old angst filled kids have access to the internet?
16. 17836.▲
    by LinuxBender 9y ago

    Yup, and some insurance companies are convincing people to connect a cell phone fob to their OBD-II in exchange for lower insurance rates. In exchange, they have access to your cars computer, GPS coordinates, basically anything you do, the
17. 17837.▲
    by LinuxBender 9y ago

    Numerous internet connected cars are remotely hackable and you can take over engine controls, steering, breaking. This was performed on live highways multiple times. DOT investigated at least one of the incidents involving some SUV's
18. 17838.▲
    by LinuxBender 9y ago

    This is just my own methodology, but I ask the local police / sheriff who the most reliable mechanic is. I then validate the number of tattoos on their team members. They must have a lot of tattoos and they have to be grumpy and thei
19. 17839.▲
    by LinuxBender 9y ago

    Perhaps in another thread. I would derail this thread by extending the topic that much.
20. 17840.▲
    by LinuxBender 9y ago

    My vehicle is ODB-II and can not talk to the internet. I was part of the OBD-III debates.
21. 17841.▲
    by LinuxBender 9y ago

    Potentially, yes. Instead of 30k spread across one year, the very possible opportunity for 30k in one mass-hack exists. I will defer to others to debate this. Perhaps financial regulators, safety departments, transportation regulators, i
22. 17842.▲
    by LinuxBender 9y ago

    Unpopular opinion ahead. Having worked in the security industry for a few thousand years (computer years), I can say I would never own a car that can talk to the internet. I plan to move far away from cities very soon for this and several
23. 17843.▲
    Ask HN: Hypothetical Scenario: What if blood pressure drugs were outlawed

    2 points by LinuxBender 9y ago|4 comments
24. 17844.▲
    by LinuxBender 9y ago

    Text messages are stored forever (or until storage arrays are full) on the SMS gateways for the provider. They are stored in plain text and are backed up if the admins are doing their job. You can grep on MSISDN or text strings. The only
25. 17845.▲
    by LinuxBender 9y ago

    They left off "frictionless". I hear that all the time as reasoning for leaving out security and privacy considerations.
26. 17846.▲
    by LinuxBender 9y ago

    I agree with everything johnklos said and I do the same for the same reasons. I enforce TLS for certain domains and sometimes for all domains, depending on if I am subscribing to something for the first time and unsure if they support TLS.
27. 17847.▲
    by LinuxBender 9y ago

    Murmur and Mumble[0]. I have murmur running on a little VM and can handle thousands of gamers. It's not has happy clicky as discord, but it provides end to end voice encryption with great sound quality. You could run it on a RasPi p
28. 17848.▲
    by LinuxBender 9y ago

    This is no longer the case. Murmur / Mumble 1.3.0 have multiple forms of echo cancellation. It works great.
29. 17849.▲
    by LinuxBender 9y ago

    You're welcome! We were trying to unravel that post about PCID as well. It appears the first PCID code was merged in 4.14.12 so you will probably have that in the coming days / weeks. CoreOS is also 4.14.11. For those on LTS rel
30. 17850.▲
    by LinuxBender 9y ago

    Usenet is still very much alive. In fact, many of the spammers have left and now target other more popular resources. The text only groups are accessible for free from multiple servers. It's only the binary groups that you have to p