jlgaddis

50 ms·

421.
by jlgaddis 6y ago
I didn't know this was even possible but now I'll be looking into it. Thanks.
422.
by jlgaddis 6y ago
Assuming that Paragon is willing to actually follow the process to get this included in the mainline kernel, it will likely be at least several months before this is fully available in the kernel (and a bit longer for it to become availab
423.
by jlgaddis 6y ago
> Obviously, at scale you have to control OSPF to avoid update floods. But BGP also needs to be controlled so bad entries aren't trusted and propagated; Well, sure, but why would this be an issue inside your datacenter? As tptacek
424.
by jlgaddis 6y ago
Is this why AWS doesn't support IPv6? Because they're running OSPF (v2) across their datacenters? After all the work they (apparently) had to do to get OSPF to work, I can understnd why they'd not want to repeat all of that
425.
by jlgaddis 6y ago
PSA: When it comes time to replace your APC UPS batteries, check if you have a "Batteries Plus" (or similar) franchise in your area (in the U.S., at least). You can purchase replacement batteries from them for roughly half the pri
426.
by jlgaddis 6y ago
Indeed. I, too, learned that lesson the hard way many, many years ago! I also know several other folks who learned that the same way that you and I did. Although I'm a bit "old school" and generally prefer serial (RS-232) por
427.
by jlgaddis 6y ago
> The loud can't turn it off beeps when power is out. That depends on the UPS, it seems. I have a pair of Back-UPS 1500s with the external battery packs. They have a button on the front-panel for disabling/enabling the audibl
428.
by jlgaddis 6y ago
Search for "HotPlug" on YouTube.
429.
by jlgaddis 6y ago
> Jerry Perry Barlow That'd be John, not Jerry. https://en.wikipedia.org/wiki/John_Perry_Barlow
430.
by jlgaddis 6y ago
Assuming the ransomers aren't completely incompetent and are using 256-bit or even 128-bit AES, why would you assume that "the NSA most certainly has the keys"? They might be good but they aren't good enough to randomly
431.
by jlgaddis 6y ago
Apparently the "friendly" warnings of the last few decades have largely went ignored. Unfortunately, a much stronger tone is often needed in order to to get people to pay attention.
432.
by jlgaddis 6y ago
You are, of course, absolutely right. No one likes to admit that they screwed up, though -- and we all know that the truth can hurt sometimes. --- Unfortunately, you were (likely) downvoted mostly because your blunt, honest statement comes
433.
by jlgaddis 6y ago
Old multi-port serial consoles can often be found used quite cheap. Personally, I'm a big fan of the OpenGear units. They're *much^ more than just basic serial consoles and are quite extendable. You can even write your own scripts
434.
by jlgaddis 6y ago
... and, if you don't have Serial-over-LAN (SOL) access via IPMI, etc., you can always just wire the serial port up to another host to give yourself access to that serial port remotely. Then, just SSH in to the other host and use somet
435.
by jlgaddis 6y ago
"conserver" (which the author is hsing) is really handy for quickly and easily accessing and/or monitoring the (serial) console of not just physical machines (like the author is doing) but also virtual machines as well. I&#x2
436.
by jlgaddis 6y ago
> Maybe I missed it, but what device is on the other end of the COM connection? His router? The plan was to use a Raspberry Pi to access the two PCs (via USB-to-serial adapters), though he hasn't made it to that point yet ("I
437.
by jlgaddis 6y ago
Nice find. That certainly indicates the exact opposite of "non-malicious".
438.
by jlgaddis 6y ago
I had a $cow-orker who once did the exact same thing -- configured an interface to use a /8 subnet mask -- except it was on the new Cisco ASA firewall we were deploying for one of our customers (a government water utility) and it wasn&
439.
by jlgaddis 6y ago
I guess it's easy to become complacent when you're a networking expert at Cloudflare and likely making several of these ad-hoc, on-the-fly config changes every single day, but it's always good to remember why Juniper introduc
440.
by jlgaddis 6y ago
> ... as computers are added to AD, you get a PTR record automatically in windows. This is, of course, configurable and can be turned on or off. > ... it would be a pain to autocreate their PTR records in bind. Yes, it would. Fort
441.
by jlgaddis 6y ago
Perhaps more correctly, all domain controllers can optionally be DNS servers as well. Even when first setting up a new forest and new domain for the first time, installing a Microsoft DNS server is not required.
442.
by jlgaddis 6y ago
Yeah, there are certainly numerous benefits of AD-integrated DNS, such as built-in zone replication via AD replication, secure dynamic updates, updates can be made on any DNS server (e.g., "multi-master"), DHCP integration, and pr
443.
by jlgaddis 6y ago
SRV records are part of the DNS standards and supported by pretty much every DNS server in existence. While properly functioning Active Directory and Exchange deployments both require SRV RRs, they certainly aren't Exchange- or Windows
444.
by jlgaddis 6y ago
You do understand that the corporate world runs on Microsoft Windows and Active Directory, right? DNS is an absolutely critical component of Active Directory (there's even an old joke that, when dealing with Active Directory issues,
445.
by jlgaddis 6y ago
> ... this vulnerability is not currently known to be used in active attacks ... Give it 24 hours. --- So the problem is with TCP DNS responses larger than 65280 bytes... With a CVSS score of 10.0, something tells me this is gonna be p
446.
by jlgaddis 6y ago
(This is my second attempt at "constructive criticism"; my previous attempt failed spectacularly. Sorry this ended up being such long-winded but after rushing to post my previous, off-the-cuff comment, I wanted to avoid doing that
447.
by jlgaddis 6y ago
The CLI utility written in NodeJS!? Seriously, you like it? That... "thing"... is absolutely horrendous (mostly, I think, as a result of the bad choice of NodeJS itself)!
448.
by jlgaddis 6y ago
A single round of SHA256 used as a master password is definitely NOT what you "should" do. --- (I apologize in advance. I don't typically make comments like this on HN but I feel it really is warranted here.) Key Derivative
449.
by jlgaddis 6y ago
<rant type="offtopic"> Others have already mentioned several reasons that would justify their choices. I completely understand why a company of Netflix's size has half a dozen different databases. Recently, I ran into a
450.
by jlgaddis 6y ago
If memory serves, they've been offered but the bounties are always been given to charity. I'm guessing that's a policy/requirement of Project Zero as, presumably, the P0 folks are making "enough" already.

More ›