LinuxBender

418 ms·

1. 18001.▲
   by LinuxBender 9y ago

   I've never run across one that does, but that is certainly a risk too.
2. 18002.▲
   by LinuxBender 9y ago

   Use whatever option you are comfortable with. I know people that can't bother to use more than 1 password everywhere and certainly can't use more than 6 characters.
3. 18003.▲
   by LinuxBender 9y ago

   We will just have to disagree. With time, all passwords can be brute forced. If you change them periodically, using a pw manager and/or a strong methodology, then it becomes more expensive to keep brute forcing. History shows us that
4. 18004.▲
   by LinuxBender 9y ago

   > First and most importantly, you have the chronology backwards No, you and I are saying the same thing. Perhaps I worded it poorly? My point is they are fixating on a specific cipher they believe everyone should and will use. As it
5. 18005.▲
   by LinuxBender 9y ago

   NIST have an interesting history around security. One such example would be AES. They favored Rijndael over Serpent, despite Serpent clearly winning on technical merit. Also, Rijndael is the one cipher that intel have offloaded on their
6. 18006.▲
   by LinuxBender 10y ago

   Unless my post is related to my workplace, I am certain my employer would just tell them to play hide and go f themselves and to stop wasting their time. This seems to me an attempt to get folks spun up talking about the BBC. Are they hurt
7. 18007.▲
   by LinuxBender 10y ago

   Static content in a ram disk and haproxy+apache replicas grown as required. No CDN. Even the most "dynamic" sites in terms on non user-specific content can be turned into a static snapshot via a simple cron job. That means the d
8. 18008.▲
   by LinuxBender 10y ago

   Ransomware is doing a good job of partitioning sensitive data from those that should not be (mis)managing it.
9. 18009.▲
   by LinuxBender 10y ago

   Right now, only a little bit. In the future, very likely. Systemd will eventually be functionally overloaded with network requests much like svchost.exe is (over)used on Microsoft Windows. That is just one example. This is also useful for
10. 18010.▲
    by LinuxBender 10y ago

    So just like spam, malware and other shenanigans that would have been trivial to fix the root cause, we are instead going to wrap this with yet another business model? More power to the CDN's that find new money on this old problem.
11. 18011.▲
    by LinuxBender 10y ago

    Why not benefits of local and cloud, using only local? Just put your controls in a DMZ and allow SSH. I know, sounds too hard, but you could give people a simple config file and/or script that could be called by a desktop icon to brin
12. 18012.▲
    by LinuxBender 10y ago

    I am OK with this as well. If you put up a script on github and email an org, asking for help debugging and your script drops an ssh key, then daemonize a reverse tunnel running as that user to a VM you control, then I would blame companie
13. 18013.▲
    by LinuxBender 10y ago

    Stoplights are often installed after {n} number of people die at an intersection to justify the cost. Is that cool? Regulations are put on companies after their freedom of choice; when abused, starts harming people. I think IoT is a perfe
14. 18014.▲
    by LinuxBender 10y ago

    The person bricking IoT's isn't getting money from that. If they did, I would hope they or you did, I would hope each of you would donate to charities.
15. 18015.▲
    by LinuxBender 10y ago

    Simplified to 15% across the board for businesses and individuals alike?
16. 18016.▲
    by LinuxBender 10y ago

    Is there a way to get this legalized so that I can ask for this in my coffee and so that my state can reap the tax benefits from it?
17. 18017.▲
    by LinuxBender 10y ago

    Will Pres. Trump also consider removing AMT?
18. 18018.▲
    by LinuxBender 10y ago

    I've seen a few good presentation given on TED. David Grady's talk [1] on meetings is one such example. This is just my opinion, but unless I can be assured a return on my investment, I am certain I can find better things to spen
19. 18019.▲
    by LinuxBender 10y ago

    Where can I get some disease-free youngling blood?
20. 18020.▲
    by LinuxBender 10y ago

    I've not been able to update my NVidia drivers ever since they started doing this. I don't allow outbound connectivity from software updates, nor from Nvidia, nor to any telemetry sites. This blocks Windows Update from updating
21. 18021.▲
    by LinuxBender 10y ago

    I agree that humans will do what humans can do and bots will do what bots can do. Laws are murky and I don't wish to donate to lawyers. I believe engineering solutions when possible is the answer. Using simple conditional tests in ha
22. 18022.▲
    by LinuxBender 10y ago

    I predict there will be more of this pattern with time. It doesn't take a rocket surgeon to realize a small UI dev team can slap something shiny in front of a simple IRC cluster then add their own marketing widgets. There are already
23. 18023.▲
    by LinuxBender 10y ago

    Maybe I misread the entire article, but the title is very misleading. This is not some new currency (in the senses of crypto-currency); but rather, virtual money to be used by all the Microsoft services. I would equate this to the gold that
24. 18024.▲
    by LinuxBender 10y ago

    Some day we may reach that point. Today, I deal with businesses that require us to enable a firewall restricted vip for them so they can use SSLv3. Some can't remove RC4 from SSH. Some use antiquated software that can only do DNS ov
25. 18025.▲
    by LinuxBender 10y ago

    Turns out, others beat me to this ages ago. There are already loads of scripts for automation of VPN's, proxies, etc. Search for Streisand, AutoVPN. There are also many scripts, including Ansible playbooks to spin up Linode, DigitalO
26. 18026.▲
    by LinuxBender 10y ago

    Anyone using postfix already has smtp-sink in their arsenal. You already have a fake SMTP server.
27. 18027.▲
    by LinuxBender 10y ago

    My script isn't ready for public consumption, as it is specific to my home setup and use cases, but I could certainly make one that is more generic. I probably should anyway, with all the changes around ISP's and customer data.
28. 18028.▲
    by LinuxBender 10y ago

    I created my own mesh of VPN nodes on multiple VPS providers using tinc. [1] It is very simple to script and automate. [1] http://tinc-vpn.org/
29. 18029.▲
    by LinuxBender 10y ago

    Thankyou for that. I might contact Digicert and get one to test with. I can see a use case where tor proxy -> server needs TLS. Tor can not protect that last hop if it isn't on the same machine.
30. 18030.▲
    by LinuxBender 10y ago

    Does LetsEncrypt support .onion sites yet?