LinuxBender

980 ms·

1. 18031.▲
   by LinuxBender 10y ago

   My solution is a linux router between my home network and the cable modem that intercepts ntp/dns requests and sends them on over several VPN paths to different VM's around the country, each using multiple resolvers that are not g
2. 18032.▲
   DNS lookups can reveal every web page you visit, says German boffin(theregister.co.uk)

   3 points by LinuxBender 10y ago|1 comments
3. 18033.▲
   by LinuxBender 10y ago

   That is bad. One should always use set -u on scripts that rm any files or perform any destructive actions. One can always unset that if you need to accept args further along in a script to use in a variable.
4. 18034.▲
   1.37bn records from somewhere to leak on Monday(theregister.co.uk)

   22 points by LinuxBender 10y ago|5 comments
5. 18035.▲
   by LinuxBender 10y ago

   Being a geek, I would have pre-registered the .net, .org and .com for many variations of any business I might start up, so there would be no need to pay a lot. I've seen people shaken down due to lack of hind-sight. I would pay a lot
6. 18036.▲
   by LinuxBender 10y ago

   For my own domains, I use rbldnsd on a couple of VM's in two datacenters with really high TTL's. No maintenance aside from the trivial yum update. At my workplace we use Dyn and Verisign. I wanted to also have our own name serve
7. 18037.▲
   by LinuxBender 10y ago

   My personal preference would be MPTCP, then BitTorrent, Googles idea for UDP HTTP, then plain TCP HTTP. Many things can benefit from MPTCP however, including BitTorrent.
8. 18038.▲
   by LinuxBender 10y ago

   If the open resolvers fail, people will have to go back to the method the internet has used since it's inception of utilizing the internet root servers.
9. 18039.▲
   by LinuxBender 10y ago

   ops-y + dev-y, isn't that supposed to evolve into DevOps? I know the term is a bit overloaded. Do the community chef, ansible and puppet cookbooks use secure defaults for MongoDB? Asking because I have never used MongoDB.
10. 18040.▲
    Insane blackhats behind world's most expensive ransomware forget to backup keys(forums.theregister.co.uk)

    4 points by LinuxBender 10y ago|0 comments
11. 18041.▲
    by LinuxBender 10y ago

    I had not seen that site before, thank you! I will keep an eye on the popular sites using IdenTrust.
12. 18042.▲
    by LinuxBender 10y ago

    Is there a list of major B2B and eCommerce sites using LE for their primary customer facing sites? This would be useful if our customers brought it up. Are there any plans or water-cooler discussions around supporting wildcard or multi-sub
13. 18043.▲
    by LinuxBender 10y ago

    Is it wrong of me to feel a little good about this? I realize extortion is bad and I hope nobody pays it. That said, are all 10k of these databases full of nothing but non-sensitive data that was already publicly available via the web brow
14. 18044.▲
    by LinuxBender 10y ago

    Would this not hurt SC more than it helps? If everyone is forced to purchase electronics online, then will local stores not suffer? How will they enforce this for online purchases? Maybe Amazon would eventually give in. There are many pl
15. 18045.▲
    by LinuxBender 10y ago

    Not to mention, the live hacks of moving vehicles have already occurred multiple times. Thankfully, there are not yet enough skiddie tools and the bar to entry is just high enough that mass casualties have not yet occurred. Give it a few
16. 18046.▲
    by LinuxBender 10y ago

    I agree with all of this. I would also add; that I will stay consider these vehicles to be unsafe until the manufacturers can prove to be beyond a shadow of doubt that I or the local computer are the ones piloting the vehicle. When a random
17. 18047.▲
    by LinuxBender 10y ago

    This may be a bit of a tangent; but if you wish for them to not watch your traffic (as much), encapsulate all of your data in pictures. Oh, you think I am about to suggest Stego? No way, super obvious! You will need to get a volunteer or
18. 18048.▲
    by LinuxBender 10y ago

    Visibility is good, but I have found SELinux to be rather simple. Most applications can be automatically configured and supported by Ansible with SELinux enabled. Most community chef cookbooks also support SELinux to some degree (dependin
19. 18049.▲
    by LinuxBender 10y ago

    The internet was not built by the users (as they are known today). It was designed and built by the department of defense, for the military to use initially. They let some universities make use of it since several helped research, documen
20. 18050.▲
    by LinuxBender 10y ago

    Absolutely, I am not suggesting a defeatist posture. Rather, just design around the problem because that is what folks here can do. Those are the only actionable items I envision folks at HN contributing to. That said, I could incorrectl
21. 18051.▲
    by LinuxBender 10y ago

    While this is sub-optimal, I would suggest that everyone should assume this is where most countries will eventually land. I would not waste too much energy debating this, in my humble opinion. Even if we don't all end up in dystopian
22. 18052.▲
    by LinuxBender 10y ago

    I have VM's at Linode, DigitalOcean and RamNode. My VM's are long running (vs. bursty spin-up, do a job then terminate) I prefer the UI and feature-set of Linode. I have found the technical staff of Linode to be superior to othe
23. 18053.▲
    by LinuxBender 10y ago

    I agree with all of this. I would add that if you host your own server, then your email is your property. On google, it's their property and they can discontinue their service and purge all content if they so desire. (Not that they w
24. 18054.▲
    by LinuxBender 10y ago

    I agree entirely.
25. 18055.▲
    by LinuxBender 10y ago

    We were on UltraDNS for a few years. They started receiving nearly quarterly DDoS attacks and then tried to try to sell us DDoS scrubbing services. From there we moved to Dyn and have been happy. The DDoS that took out Dyn for a while wo
26. 18056.▲
    by LinuxBender 10y ago

    I blocked their telemetry and not I can't even update my drivers. Not through windows update, nor through their installer. It hangs trying to talk back to them. No harm, no foul, probably time to give AMD cards a chance. Variety is
27. 18057.▲
    by LinuxBender 10y ago

    I completely agree that some businesses will play chicken. Fear of being dragged into court is a powerful thing.
28. 18058.▲
    by LinuxBender 10y ago

    AFAIK and from my own experience, non-competes are not enforceable in most states, or have little to no legal teeth. Anyone concerned should consult with an attorney. Somewhat related, where folks usually get into trouble is reuse of intel
29. 18059.▲
    by LinuxBender 10y ago

    Very unlikely. Websites run by small companies will not implement something unless they must do so to accept a payment. An example of this was the ICRA/PICS labeling system. Super easy to implement and self-regulate and hardly anyone
30. 18060.▲
    by LinuxBender 10y ago

    It's actually worse than that. Gmail, msn, yahoo, et al. are far from free. Anyone that wants to email all their customers that use those mail providers have to pay into whitelists and maintain UCE response policies with them. Those