cmsj

57 ms·

661.
by cmsj 12y ago
Thanks for the reply :) I suspect an ideal state to be in would be that there was no firmware flashing at all, the various bits of hardware would have some version of the firmware in ROM and could load a replacement firmware into RAM, but n
662.
by cmsj 12y ago
No part of "tax parcel map" sounds even remotely sexy to me, so you're setting a pretty low bar ;)
663.
by cmsj 12y ago
Still want to know how they're mitigating firmware attacks :)
664.
by cmsj 12y ago
I, for one, dislike HN posts that just link to some page with no interstitial exposition. Is it so hard to write a blog post providing some context, and a link to whatever content you want us to look at.
665.
by cmsj 12y ago
Very cool app, I migrated almost all of my Slate config to it (since Slate is unmaintained at this point). Really looking forward to 1.1 bringing event triggers, so I can get the rest of my Slate config over and go wild :D
666.
by cmsj 12y ago
Woo! Love this tool :)
667.
by cmsj 12y ago
I'd also add that firmware folk tend to be pretty conservative about updates and it's an area of machines that's not used to being hardened. you only need to own it once and you can lie forever about the attempts to reflash i
668.
by cmsj 12y ago
The time to provision doesn't really affect the size of the security problem, but it does make it easier to deploy malicious firmware across a fleet of hardware, because everything is behind an API.
669.
by cmsj 12y ago
The question about that (at about 19:30 in the video) was asked by one of the Ironic developers on my team :) The answer is basically "we don't do it, we'd like to see it happen". I wasn't at that session, but I was
670.
by cmsj 12y ago
Just because the dedicated server hosting industry hasn't been dealing with the problem, doesn't mean it's not there :) If I flash the BIOS (or the network card firmware or the LOM device firmware or the disk controller firmw
671.
by cmsj 12y ago
Still not seen a discussion of how they are dealing with the huge security nightmare of direct customer hardware access.
672.
by cmsj 12y ago
Agreed, but at the scale they're talking about, trying to rank competent people out of the tens of thousands being let go... you're gonna need a lot of Bobs ;)
673.
by cmsj 12y ago
Real reason this post exists.... "Never accept a counter offer because we are a job hunting website and don't get paid if you stay in your job".
674.
by cmsj 12y ago
Without wishing to seem rude, they clearly weren't paying very much attention to the "Thou shall not kill" bit of the bible!
675.
by cmsj 12y ago
Forget about words like "fad" and "backlash". Data. That's all that matters. I am not up on the research, but I would at least like to see articles like this talk to people who are, instead of talking to random peop
676.
by cmsj 12y ago
Note: beta7 is out as of 90 minutes ago, everyone update!
677.
by cmsj 12y ago
This is why we have IdentityFile :) (also afair you usually get more like 5 key attempts before failure)
678.
by cmsj 12y ago
Yes, but use an RSA key. It doesn't really matter how many you have, you still need to protect them. Encrypt your laptop, lock your screen when you get up for a break, etc, etc.
679.
by cmsj 12y ago
FWIW, I think it can be helpful to discover features of tools in smaller chunks, in the context of a blog post. man pages can be very dry and it's not always easy to think of all the possible ways some particular flag could help you. I
680.
by cmsj 12y ago
There are also lots of legitimate uses for a SOCKS proxy, such as sshing to a useful machine in a corp network and using something like FoxyProxy to direct *.intranet sites via the SOCKS proxy. It's not all about fricken video piracy :
681.
by cmsj 12y ago
so, I would say that the easiest solution here is tab completion. Suitably modern bash-completion should expand entries in ~/.ssh/config (as well as ~/.ssh/known_hosts if its not hashed). Host hosta.mycompany.com
682.
by cmsj 12y ago
Correct, but sometimes it's unavoidable, particularly when talking to dumb management devices :(
683.
by cmsj 12y ago
see also my post from a couple of years ago: http://www.tenshu.net/2012/02/sysadmin-talks-openssh-tips-an...
684.
by cmsj 12y ago
The chmod commands listed can be chained into a single one: chmod u=rw,go-rwx /path/to/lol
685.
by cmsj 13y ago
Wrong wrong wrong. Linux does need secure boot, it's a very important security feature, if you care about early boot stage compromises. What Sam fails to mention is that the MS specs for secure boot require that users be able to load t
686.
by cmsj 13y ago
Roy is pretty intense in his articles, he still acts like it's 10 years ago any Microsoft is to be feared.
687.
by cmsj 13y ago
Go go mjg59! :D
688.
by cmsj 13y ago
I don't like the idea of having the notifications be parented under the current app's toolbar (also what if it doesn't have a toolbar), but I do like the little bubble appearing and needing a slide to action, that looks cute.
689.
by cmsj 13y ago
Perhaps I am insufficiently familiar with the ventures of Elon Musk, but doesn't he mostly make advanced technology for rich people?
690.
by cmsj 13y ago
"Just for sake of argument, here's a possible conversation that could be twisted into fitting the above description:" Your example cannot be twisted into a reasonable description of "very inappropriate". Overall you

More ›