gnufx

25 ms·

1. 301.▲
   by gnufx 5y ago

   Congratulations if you have security that would recognize the issue and be able to do something about it other than just blame Duo somehow! In my experience most technical people don't actually recognize the problem, like many other r
2. 302.▲
   by gnufx 5y ago

   From what I've seen of people who go along with using their own phone for this, you can get the mobile prompt many times without doing anything, even when you're not being attacked (as far as we could tell, but I don't know w
3. 303.▲
   by gnufx 5y ago

   Yes, but I'm not sure this is limited to "older" people! It really helps to have a security model people can understand, operating like something they already know. You don't get phished at the front door either (if we
4. 304.▲
   by gnufx 5y ago

   I can talk about namespaces in HPC distributed systems, and they don't look anything like Plan 9 to me. They make life harder in various respects, and even dangerous with Linux features that don't take them into account (like at
5. 305.▲
   by gnufx 5y ago

   I talk about the practice in HPC, not theory, and this stuff is literally standard (remote memory of various types and the same thing running the same, modulo performance and resources, on a 32-core node as on one core each of 32 nodes). H
6. 306.▲
   by gnufx 5y ago

   It doesn't count as resilient in the mainframe sense, but in an effort to encourage system management, I ran the Node Health Check system on our "commodity" HPC cluster and found multiple failed DIMMs and a failed socket no-o
7. 307.▲
   by gnufx 5y ago

   > in the 90s with "Beowulf" clusters In case of any confusion, that sort of thing wasn't a generic Beowulf feature, but it sounds like Bproc. I don't know if it's still used. (The Sourceforge version is ancient
8. 308.▲
   by gnufx 5y ago

   For what it's worth, the HPC-standard way of checkpointing/migrating distributed execution (in userspace, unlike CRIU) is https://dmtcp.sourceforge.io/ It supports X via VNC -- I've never tried -- but I guess
9. 309.▲
   by gnufx 5y ago

   If you yearn for Plan 9 -- I'm not sure I do -- Minnich's current incarnation of the inspiration seems to be https://github.com/u-root/cpu
10. 310.▲
    by gnufx 5y ago

    Distributed computation with message passing (and RDMA) is the essence of HPC systems. SGI systems supported multi-node Linux single system images up to ~1024 cores a fair few years ago, but they depend on a coherent interconnect (NUMAlink
11. 311.▲
    by gnufx 5y ago

    How do you do GSSAPI with PAM? (Does OpenBSD support PAM now?)
12. 312.▲
    by gnufx 5y ago

    Suppose you only want a replacement for the key management part of keybase, what is there to be recommended? I know of https://keys.pub/ and https://keyoxide.org/ but the former (from someone ex-keybase) h
13. 313.▲
    by gnufx 5y ago

    Static for 25+ years, but "super new"?? Of implementations, CMUCL even predates Common Lisp, but I don't know when it implemented CL. GNU Common Lisp was available GPL'd around the time of the standard and, I think Cli
14. 314.▲
    by gnufx 5y ago

    I was going by the top of the thread and choosing to assume the rest wasn't just non sequitor. I don't actually see all resources in GNU/Linux (for instance) available for me to mount remotely into my namespace via a uniform
15. 315.▲
    by gnufx 5y ago

    For what it's worth, qemu-user-static is more general, e.g. for a foreign container image that won't find the shared library. (Wheeled out when it was said people needed to build ppc64le images on x86 boxes and it was impossible,
16. 316.▲
    by gnufx 5y ago

    An aside on BFD, which doesn't seem to have come up, and I suspect relatively few people have read the History node of the ‘Binary File Descriptor’ Library manual on the back-constructed name: “The name came from a conversation David
17. 317.▲
    by gnufx 5y ago

    Heaven knows what someone conflating cgroups and namespaces means in connexion with Qubes. Anyway, if you want to know what I mean, read the paper "Security in Plan 9". "Linux" is irrelevant, and the various Plan 9 stu
18. 318.▲
    by gnufx 5y ago

    If you're talking about security, and regarding namespaces as a coarse-grained capability system, it was late to the game.
19. 319.▲
    by gnufx 5y ago

    Can anyone compare Qubes and Genode from a security or usability point of view? Genode now advertises hardware acceleration (on Intel and Vivante GPUs only) in contrast to Qubes, per discussion here.
20. 320.▲
    by gnufx 5y ago

    Oh, I didn't realize you could even buy them direct now. I was looking at >~£1200 in shops or ~£1400 for the models in stock where I got mine. (The cheapest used to be single speed, and 3-speed is stretching it for non-trivial hill
21. 321.▲
    by gnufx 5y ago

    I don't know about encouraged, but HPC-oriented container systems are certainly demanded, particularly Singularity (which I'd avoid). There was Shifter originally and now also at least Charliecloud and Enroot. The normal resourc
22. 322.▲
    by gnufx 5y ago

    I'd hope the filesystem isn't provided from the login node, but otherwise, yes. That said, they may still run jobs with unprivileged -- I hope -- container images. There are some that seem to feel the need to make life more comp
23. 323.▲
    by gnufx 5y ago

    And even on train lines that do allow bikes, like the Liverpool-Manchester line, you probably won't get a full-sized one on at rush hour, and even feel anti-social with a Brompton. At least in the past; I haven't done it for two
24. 324.▲
    by gnufx 5y ago

    In which country can you get (a new) Brompton so cheaply?
25. 325.▲
    by gnufx 5y ago

    At least for Duo, you can extract the HOTP secret [1] and use it in any OATH tool, e.g. with the otp extension of pass(1) on GNU/Linux (which uses uses oathtool(1) underneath). You can also do it a more difficult way, e.g. using the D
26. 326.▲
    by gnufx 5y ago

    Obviously if you don't have driver support for the kernel you run, you can't use old stuff if you want to, but we had SDR IB running quite a long time without support. I don't have happy experience of HPC vendor support anyw
27. 327.▲
    by gnufx 5y ago

    For what it's worth, I've had rather more trouble with Ethernet than IB, especially given IB management facilities.
28. 328.▲
    by gnufx 5y ago

    I wasn't there, but understood it was intended for general machine-room -- I dislike "datacentres" -- use; Wikipedia implies it was intended for ~everything... Anyway, IB at least had lower latency than Myrinet, which is what
29. 329.▲
    by gnufx 5y ago

    And so you should be. Smerge is a useful addition, including as a find-file hook for resolving conflicts.
30. 330.▲
    by gnufx 5y ago

    > Nobody uses the x87 instructions any more Check the current GCC code from inlined fmod (e.g. -Ofast). Whether that's appropriate is the question.