allset_

16 ms·

121.
by allset_ 7y ago
How does it know which OTP to type?
122.
by allset_ 7y ago
Assembled, not made.
123.
by allset_ 7y ago
Most SSH access doesn't use x.509, so yes that sounds right.
124.
by allset_ 7y ago
You should know your assets. If you know your assets, it's pretty trivial to write a script or program that checks when their certificate expires, sticks it in a database, and alerts you when it's getting close to time to renew. O
125.
by allset_ 7y ago
Everything in your comment has to do with general server maintenance, and is not specific to automating certificate renewal with certbot or a similar tool which is what is being discussed. Adding HTTPS to your site and setting up automatic
126.
by allset_ 7y ago
If someone has root, it's already game over. An attacker could just hook the syscalls directly which would be more stealthy that using BPF programs.
127.
by allset_ 7y ago
It can do much more than analyze packets. It's a way of running user defined programs in kernel space with fairly strong assurances that it won't crash the kernel.
128.
by allset_ 7y ago
Restic backs up my NAS to B2 without issue. I don't have a file set that changes much though, but it includes backup verification via `restic check`
129.
by allset_ 7y ago
Everything on one Yubikey? What if you lose it?
130.
by allset_ 7y ago
It saves locally and the syncs to the cloud every few seconds. Latency is zero.
131.
by allset_ 7y ago
How do you deal with the aggressive auto-correct? Many of my notes are code related and I cannot stand the auto-capitalization.
132.
by allset_ 7y ago
> enforced two-factor In what world do wire transfers require 2FA?
133.
by allset_ 7y ago
Yubico Authenticator for iOS was released today.
134.
by allset_ 7y ago
For bonus points, you can also sign your Git commits.
135.
by allset_ 7y ago
>This is a new OS completely I don't disagree with your point as a whole, but Catalina is is not a new OS, it's an incremental upgrade.
136.
by allset_ 7y ago
In well maintained networks the management interface (IDRAC, etc.) for each server is placed on a separate VLAN which the servers cannot access. This isn't to say that cheap providers actually do this, or that the VLAN can't be ac
137.
by allset_ 7y ago
> I use countless docker images Which is why you need to build your own if this is the threat model. > My PII/other data of value is also stored on a bunch of hosts who I have no oversight or control over, Correct, this is why co
138.
by allset_ 7y ago
If this is your threat model, fork the repo with the Dockerfile and build it yourself.
139.
by allset_ 7y ago
This has nothing about designing the solution. Very misleading title.
140.
by allset_ 7y ago
1hr delivery is $10ish, 2hr is $5ish. It depends on what you order. Edit: To clarify, most people don't use this most of the time, because most of the time 24-48hour delivery is fine. That said, it is VERY convenient when you realize y
141.
by allset_ 7y ago
Amazon Prime Now (select locations only) already has delivery within a couple hours. This is about reducing costs of such services.
142.
by allset_ 7y ago
The README is incorrect, the PyPi package name uses hyphens.
143.
by allset_ 7y ago
Every consumer router vendor, yes. If you spend a bit more for something in the prosumer line, such as Unifi or pfSense you get updates virtually forever.
144.
by allset_ 7y ago
>are there tools for parsing the firmware bin? Binwalk, IDA pro, etc. All the normal reverse engineering tools. >are they a threat vector? Absolutely. >is it like a settings file? No, it's code executing on the WiFi card.
145.
by allset_ 7y ago
Not only do Intel and AMD processors not share the same socket, processors change socket from generation to generation.
146.
by allset_ 7y ago
Your link is broken.
147.
by allset_ 7y ago
> Please explain to me how giving producers, traffickers and consumers of child pornography would not benefit from easy and hurdle-less end-to-end encryption. It already exists. WhatsApp, Signal, OTR, etc. provide robust E2E encryption
148.
by allset_ 7y ago
Only 802.11n and no TB3 unfortunately are deal breakers for me, otherwise I'd consider this option. Thankfully both Lenovo Thinkpads and Dell XPS machines work well with Linux.
149.
by allset_ 7y ago
I haven't seen this, but things like PagerDuty solve this. If you're not on call, your phone doesn't ring.
150.
by allset_ 7y ago
Those aren't that uncommon. We have the choice between a work provided phone and carrying 2 phones when on call, or a BYOD situation with a credit on our cell phone bill and only one phone. Either way, PagerDuty only rings us when we&#

More ›