corford

102 ms·

961.
by corford 14y ago
This isn't a problem unique to Linode though. The same risk is present for every system that needs a password/passphrase to decrypt. This is why effective security (not absolute - which is impossible for any system that has to connect with
962.
by corford 14y ago
What exactly do you propose as an alternative? At some point the card details need to be decrypted. Security always boils down to somewhere between total lock down and being able to actually get things done. The only semi reasonable alterna
963.
by corford 14y ago
I think the most likely answer is pretty simple and non shocking: the key is loaded via an agent on boot (subject to the correct passphrase being entered) and stays resident in memory (either permanently or for x minutes/hours). Where's the
964.
by corford 14y ago
I'm pretty sure UnoriginalGuy understands that. What he says is correct, the attackers now have the private key file so all that prevents them from decrypting the CC data is the passphrase. They don't know what this is but they can try and
965.
by corford 14y ago
Yeah but most of these are generic problems with providing a remote serial console (excluding LISH allowing multiple shared connections to one console, which is obviously bad). They've now reset all the passwords and fixed the bug that mean
966.
by corford 14y ago
I haven't got online statements going back far enough to check right now (will have to do it with paper copies when I get home if I can be bothered). You're probably right though :) I guess they either keep the passphrase in memory (someon
967.
by corford 14y ago
Interesting. Whenever I make changes that affect how much I'll be billed, the amounts get added or removed and take effect when the card next gets charged (which happens once a month). At least that's how I remember it... going to dig throu
968.
by corford 14y ago
Also (and correct me if my understanding of this is wrong since I've never used it), LISH is just a remote terminal service. You still need to know the VM's root password. And frankly, if you're doing it right, the root password should be a
969.
by corford 14y ago
This is what Caker (founder of Linode IIRC?) has to say about the strength of the passphrase: "our private key is stored only in encrypted format. The passphrase is not guessable, sufficiently long and complex, not based on dictionary words
970.
by corford 14y ago
30 here. For me it was websites and discovering that you could see the source code. I thought it was amazing and instantly wanted to learn how to make one. I found out my ISP offered free web space, stumbled on to Arachnophilia, discovered
971.
by corford 14y ago
OP here, this is what I'd do: - Drop everything and convince my parents to re-mortgage their house - Use the money to start a domain reselling business - Buy a handful of great un-registered domain names that could be sold later if things t
972.
Ask HN: You wake up tomorrow, it's 1997 again. What would you do?
1 points by corford 14y ago|1 comments
973.
by corford 14y ago
Great to hear you're planning to do some Postgres benchmarks! To improve fairness, you might want to consider using pgbouncer (setup to only offer simple session pooling) in between the Postgres db and any framework that doesn't have intern
974.
by corford 14y ago
Another 512 data point (London DC, all 5 tests run within a ~30 second window): 201326592 bytes (201 MB) copied, 2.61587 s, 77.0 MB/s 201326592 bytes (201 MB) copied, 3.06237 s, 65.7 MB/s 201326592 bytes (201 MB) copied, 5.70759 s, 35.3 MB/
975.
by corford 14y ago
That is one hell of a review. Thanks for the link.
976.
by corford 14y ago
Another "2013 start up" guy here on the march towards a first public release and it really does read like a case-study. He's beautifully articulated the philosophy I've adopted to get from light bulb moment to something real and the resulti
977.
by corford 14y ago
I think one reason for that is because it was originally Slicehost before Rackspace bought them and a lot of people (me included) thought it went to shit after the buyout. Fortunately, in my case at least, the excellent Linode was there to
978.
by corford 14y ago
tbh I have no idea as the London DC has been rock solid for me. On the odd occasion I've learned of Linode DCs having problems (usually here on HN) it seems to frequently be Fermont that's mentioned. As for alerts, maybe they only automatic
979.
by corford 14y ago
>It's not entirely rational So true. I moved a mail server I manage over to digital ocean recently because it needed more RAM and the price difference between a 4GB DO instance and a 4GB Linode one was just too much to swallow. Very hap
980.
by corford 14y ago
If it helps, I moved a mail server that's been running on a 2GB Linode vm for the last two years over to a 4GB DO vm and so far (~4 weeks in) it's been problem free (in the Amsterdam DC).
981.
by corford 14y ago
Apparently Fremont is their oldest DC and seems to attract the lion's share of the downtime. I've had 8 linode's running in their London DC for almost 3 years now and can't remember any DC related downtime. The only hiccup I've ever experi
982.
by corford 14y ago
Thanks mrb, I missed that a cold power up was needed. I'm going to try again now but it's a bit tricky as the affected machines are in a different country and I don't have access to full remote power cycling (I can only reset the machines).
983.
by corford 14y ago
My servers all have the affected cards (two per machine - yikes!) but so far I can't reproduce the bug (yay). There are subtle differences between the offsets I get when I run "ethtool -e interface" versus those in the article that indicate
984.
by corford 14y ago
Love it. If anyone would like roughchart.com or tensecondreview.com hit me up. Address in profile (or reply here), first come first served. Note: domains are on Dyn so you'll have to cover the transfer fee but that's it.
985.
by corford 14y ago
Re: Windows Domain Controllers - I wasn't aware they didn't have the ability to salt hashes (I last used domain controllers and active directory back in the Win2K days). I could be facetious and say "move to open ldap, samba 4, zarafa and a
986.
by corford 14y ago
All this focus on the sophistication of the Chinese hackers irritates me slightly. Reading between the lines, it seems the NYT would likely have weathered this "sophisticated" attack a lot better if they had observed a few simple security b
987.
by corford 14y ago
Damn. I just moved 4 domains to them earlier today, would have waited if I'd had known about this. In case it's useful for anyone else, I moved them because they're currently running a promo for transferred domains where they'll throw in a
988.
by corford 14y ago
What's confusing about it? I use it personally and also regularly set it up for most of the clients I consult for. I've never had anyone come to me and say they've found the interface confusing. It just works.
989.
by corford 14y ago
As a quick follow up in case anyone's interested (having just bought and spun up a 4GB instance), the raw vm performance is fantastic but the control panel functionality is fairly basic in comparison to Linode. AFAICT, you can't: - Choose d
990.
by corford 14y ago
Despite being a long time (and happy!) Linode user, the prices and SSD are just too interesting to pass over. I'm running a small Zarafa based mail server on a 2GB plan with Linode and it could do with more RAM. Perfect opportunity to try o

More ›