benjojo12

10 ms·

61.
by benjojo12 5y ago
For what it's worth, I've these endpoints in use for VPCs that still had internet access. Meaning that if you attempted to read the "real" internet address you put your VPC subnet on, they would be unreachable. It's
62.
by benjojo12 5y ago
My personal experience with UCEPROTECT was that they had blacklisted 2 or 3 IPs in my /24 that were not routed to anything, nor had they ever been routed to anything, a fresh new block from RIPE NCC too. Of course they offered to unb
63.
by benjojo12 5y ago
Ah, ok fair enough! I should have pointed that out more clearly!
64.
by benjojo12 5y ago
I mention this in the post itself
65.
by benjojo12 5y ago
If you have 500TB of tape, the chances are that you are reading at least one tape while also needing to write stuff. I've personally never experienced that scale, I'm sure the industry has some recommended ratio of drives to tapes
66.
by benjojo12 5y ago
The header image is the insides of a LTO 5 tape
67.
by benjojo12 5y ago
I agree somewhat. Encryption is more critical on tape because there is no easy path to wiping a tape, and in a company situation if you need to erase something in your backups too (think GDPR erasure), then encryption is reasonably critical
68.
by benjojo12 5y ago
How did the Helios64 Tank? I own one and it's fine?
69.
by benjojo12 5y ago
Oh huh! Oh well. My main effort was to conceal the MAC's
70.
by benjojo12 5y ago
Mono-cultures are bad! I'm British. The blog is my blog, not a corporate blog. I think it's fair for my own content to genuinely be me.
71.
by benjojo12 5y ago
Where can you see serial numbers? I thought I got them all
72.
by benjojo12 5y ago
Who says you can see the side they swapped the optic on? For datacenter cross connect links, its not uncommon for the other side of the link to be somewhere you can't see/have access to.
73.
by benjojo12 5y ago
> Ben, do you plan on playing around some more with these to find out if they can be hacked to run your own OS? Nope, I'm probably going to use it as a remote monitoring/out of band device when the time comes. The device is use
74.
by benjojo12 5y ago
(Author of post) They advertise this as a network appliance, so it makes sense that they use Debian since being able to install packages via things like apt makes the whole experience much easier. A lot of career network engineers are not t
75.
by benjojo12 5y ago
There is also https://www.bleepingcomputer.com/news/security/you-can-bypas... Since HP do not make it easy to get iLO updates if you don't have a support contract with them. I suspect many machines are vulner
76.
by benjojo12 5y ago
Yes. ZeroSSL.com (Aka Comodo), BuyPass.com, SSL.com All offer 90 days or more free SSL certs
77.
by benjojo12 5y ago
If the MITM CA is installed (maybe only via Group Policy) then browsers relax their requirements for CA's. But some domains (like google) are strictly locked down to a specific set of CA's in Chrome. Since TLS Interception is crit
78.
by benjojo12 5y ago
Nice! I wrote something like this ages ago as well: https://github.com/benjojo/mcod
79.
by benjojo12 5y ago
Really? (Author here) What browser are you using?
80.
by benjojo12 5y ago
Because people give them bgp tables to get better stats on websites like bgp.he.net, I (bgp.tools) have to do the same thing, see list: https://bgp.tools/credits
81.
by benjojo12 5y ago
What part of yesterday was showing that it was possible to use BGP dangerously? If you are certain in this argument, then you master electric switch is dangerous because you could switch off the power to your house.
82.
by benjojo12 5y ago
(Keeping in mind that replacing BGP is similar hard-ness as replacing SMTP, and thus, might not be worth it) Honestly, the issue that exists with BGP is not the protocol. The issue is attached to trust, and there is not a instantly fixable
83.
by benjojo12 5y ago
To add on, BGP has a very much "meme" status of being scary and dangerous, and any touching will break youtube etc. [Mostly perpetuated by infosec circles] It's really not the 2000's anymore, BGP is mostly safe and filte
84.
by benjojo12 5y ago
Who said I tested non-live? The actual beta builds/sanity checks were done just with two VMs peered with each other, but the live internet one was done in one take (and never again, at least by me)
85.
by benjojo12 5y ago
Author of the post here, Ask me almost anything I guess(?)
86.
by benjojo12 5y ago
I think the "Mix SSD vendors/batch numbers" is a hold over from the very early days of SSDs where a handful of people get seriously slimed by having 90%~ of their same-brand-same-batch drives in a single machine fail at once
87.
by benjojo12 5y ago
In a previous life (2013?) this software got forced on me and the team/company I worked on as "boss-ware". Unsure if the founders were aware of this or just "well shit happens", but it defo means I can't see th
88.
by benjojo12 5y ago
(Post Author here) The non POE N1100's are fanless, Thankfully don't really contain any features that would require licencing, that being said also has no hardware Layer 3 capability, so not really in the same class as the N3XXX o
89.
by benjojo12 5y ago
(Author here) These switches got a lot more expensive at the start of the pandemic, I think the chipsets became hard to source.
90.
by benjojo12 5y ago
via support ticket with cloudflare. They didn't explicitly confirm it, but my experience is that they would have corrected me if that was wrong :)

More ›