jlgaddis

58 ms·

541.
by jlgaddis 6y ago
Many manufacturers, invluding Lenovo, are starting to support the "Linux Virtual Firmware Service" [0]. Honestly, I would not be surprised if one of them, at some point, tried something like this with Linux, too. --- [0]: https:&
542.
by jlgaddis 6y ago
What does "up to date OCSP" even mean? Have you configured your browser(s) to "fail closed" when it comes to OCSP queries? CRL and OCSP behavior has been, well, "not ideal" since basically forever.
543.
by jlgaddis 6y ago
As I mentioned in another comment, I've had at least two and perhaps even three ("loaded") MacBook Pros in the same timeframe that I've had my ThinkPad W530. The MBPs have came and went but the W530 is still being used n
544.
by jlgaddis 6y ago
Hell, my 7-year-old W530 has had 32 GB (4 x 8 GB) since the day I got it -- and it's not soldered in either!
545.
by jlgaddis 6y ago
FWIW, PowerTOP [0] and tlp [1] used to be the "go-to" utility for this sort of thing. --- [0]: https://en.wikipedia.org/wiki/PowerTOP [1]: https://linrunner.de/tlp/
546.
by jlgaddis 6y ago
High Sierra (10.13) will continue to receive security updates until nearly the end of this year.
547.
by jlgaddis 6y ago
Please pick that up and deposit it properly in the garbage bin.
548.
by jlgaddis 6y ago
I've got multiple laptops -- including multiple ThinkPads -- and my 7-year-old W530 is still my favorite out of all of them. The W530 was dubbed a "mobile workstation" (by Lenovo) and it really is a beast (hell, it's had
549.
by jlgaddis 6y ago
Would it? Couldn't the "hacker" have simply generated a new GPG key and added it to the account he had control of?
550.
by jlgaddis 6y ago
What makes you think that CALEA applies to Zoom (in the U.S.)? IANAL, but I'm reasonably confident that it does not.
551.
by jlgaddis 6y ago
The issue is a third-party having control of your private key.
552.
by jlgaddis 6y ago
Exhibit A: CVE-2013-2228. As described inthe relevant entry [0] on Debian's Security Tracker: > SaltStack RSA Key Generation allows remote users to decrypt communications The fix [1]: - gen = RSA.gen_key(keysize, 1, callback=l
553.
by jlgaddis 6y ago
> homebrew crypto AES-256?
554.
by jlgaddis 6y ago
One of DigiCert's Certificate Transparency logs was likewise open to the entire Internet -- and likewise compromised [0]: > I'm sad to report that we discovered today that CT Log 2's key used to sign SCTs was compromised
555.
by jlgaddis 6y ago
I always heard it as, "Those who can, do. Those who can't, teach." OTOH, I worked at a .edu for several years (networking) and was asked to teach a course when the contracted instructor suddenly had to back out at the last mi
556.
by jlgaddis 6y ago
Out of curiosity, has (the print version of) Ansible for DevOps been updated since it was first published? I purchased the dead-tree version probably three or four years ago and, unfortunately, it was basically already outdated by that ti
557.
by jlgaddis 6y ago
I don't recall which one but years ago I used one of the many email-to-FAX services. I'd just attach a PDF to an email message addressed to <phone number>@<myaccountname>.example.com and I'd get the acknowledgemen
558.
by jlgaddis 6y ago
Original article/warning from Threatpost: https://threatpost.com/salt-bugs-full-rce-root-cloud-servers...
559.
by jlgaddis 6y ago
So because perhaps some '"power users" can't be trusted" (in your opinion), that makes it's okay to just take away their own control of their own computers? (That kinda reminds me of "trust us, we'r
560.
by jlgaddis 6y ago
> ... I'll continue to recommend Debian testing. I run the "unstable" branch, personally -- but I've been using Debian for ~22 years now. It's definitely not for everyone (and not for production!) but a lot o
561.
by jlgaddis 6y ago
FWIW, you can pass the "-t" parameter to "df" to limit the output to specific filesystem types (e.g., "ext4", "xfs", etc.).
562.
by jlgaddis 6y ago
> Snapshotting is natively supported on Windows and Macs, not sure about linux. JFTR, this is supported on Linux as well and, especially when using LVM, is quite simple and straightforward. You can do it manually [0,1] or using tools m
563.
by jlgaddis 6y ago
> ... using gzip compression over the wire seems pretty stone-age. Really? Probably half of all web servers on the Internet (using HTTP/1.1) use it. > The proper solution is surely to use a modern lossy video-compression algor
564.
by jlgaddis 6y ago
> I don't really get why wg-jail also needs default-router to be pointed to bridge0 when the author addms epair-b to bridge0 on the host. The epair0 interfaces provide the layer 2 (Ethernet) connection between the jail and the h
565.
by jlgaddis 6y ago
Tuning? I thought "the cloud" eliminated the need for that!? The impression that I get from HN comment threads is that developer time is expensive and so "the right way" to handle problems like this is to simply spin up
566.
by jlgaddis 6y ago
So, an RCE that requires you to know the admin password?
567.
by jlgaddis 6y ago
> Ohhhh how I would have liked to just write DisallowRemoteAccess=true in a .service file and be done with it. Sounds like IPAddressDeny/IPAddressAllow would essentially let me do that. You could set the PrivateNetwork= opt
568.
by jlgaddis 7y ago
You might want to look for a provider who is a member of the "Bandwidth Alliance" [0]. --- [0]: https://www.cloudflare.com/bandwidth-alliance/
569.
by jlgaddis 7y ago
> That's the first time I've heard "open source" used to refer to a warez site. I think "open-source intelligence" [0] is probably a little more commonly used but both terms basically refer to the same thi
570.
by jlgaddis 7y ago
> FNAC In this case, " feature, not a company " (I believe).

More ›