jlgaddis

86 ms·

781.
by jlgaddis 7y ago
> Try getting Debian working on a laptop. Those "non-free" packages in Ubuntu make a huge difference. I'm typing this on my "workstation" but, sitting here on my desk, there's a laptop running Debian on ei
782.
by jlgaddis 7y ago
> Also, I don't think you ever see motd on a desktop install. Whether you see it or not, it's still there and it's still running every ~12 hours.
783.
by jlgaddis 7y ago
> None of that code in the tweet actually runs at login. Except when there was a bug that caused it to do just that (and also caused a five second delay when logging in).
784.
by jlgaddis 7y ago
See also: - Bug #1701068, "motd.ubuntu.com currently shows media item (HBO's Silicon Valley using Ubuntu)" [0] - Dustin Kirkland's explanation here (on HN) back when this first happened [1]. --- [0]: https:/&#x2F
785.
by jlgaddis 7y ago
I mentioned it in another comment but this functionality is included with the "base-files" package: $ sudo apt remove base-files ... WARNING: The following essential packages will be removed. This should NOT be done unle
786.
by jlgaddis 7y ago
I can't speak to that either way (I haven't done a manual installation in a long time) but setting d-i passwd/root-login boolean false in a preseed file seems to still work just fine (to skip "creation" of a
787.
by jlgaddis 7y ago
One implication of this that some people don't realize is that a brand new Ubuntu instance -- whether a physical host, a virtual machine, an EC2 instance, whatever -- immediately calls home to Canonical as soon as it spins up for the f
788.
by jlgaddis 7y ago
How that part of the installer works is kinda stupid, too. The popularity-contest package is installed, you're asked whether you want to participate, and then the package is uninstalled when you say no -- as opposed to asking and then
789.
by jlgaddis 7y ago
To disable the part of the MOTD which calls home, setting ENABLED=0 in /etc/default/motd-news should be sufficient. To get rid of the entire "dynamic" MOTD, disable the timer unit: $ sudo systemctl disabl
790.
by jlgaddis 7y ago
Yep, one a day for the last month, on average -- and they post the shortened links instead of the "real" URLs. All but two have ended up [dead]
791.
by jlgaddis 7y ago
> ... over Indiana. > ... the nearby naval warfare research center, ... I'd be interested in more details (either here or via e-mail to my username at gmail) as to where you've seen these flying. I'm basically in be
792.
by jlgaddis 7y ago
It used to take me just over two hours to compile a (very minimal stripped down) kernel on my 25 MHz 80486 with 4 MB of RAM (in the late 2.0.x/early 2.2.x days).
793.
by jlgaddis 7y ago
There was (recently) some ransomware for (unpatched, IIRC) Synology devices.
794.
by jlgaddis 7y ago
So?
795.
by jlgaddis 7y ago
It uses the latest tech buzzwords, it seems.
796.
by jlgaddis 7y ago
> There’s a RAID card with 2GB cache and battery included. I can't speak for this particular card but, in the past, there were some HP RAID cards where you could not disable the RAID functionality if you wanted to. Assume that,
797.
by jlgaddis 7y ago
Note that ~5 years ago, HP started providing firmware updates and such "only to customers with a valid warranty, Care Pack Service or support agreement". They are no longer freely downloadable. In a post ironically entitled "
798.
by jlgaddis 7y ago
That would explain why I wasn't able to find "CONFIG_RANDOM_BLOCK" in my kernel configs. On a related note, I've been running jitterentropy-rngd on most of my machines for a long while now, including the ones that have i
799.
by jlgaddis 7y ago
Yes, most don't use X.509 for SSH (note: public key authentication is not the same thing).
800.
by jlgaddis 7y ago
Care to explain how you think this issue is even remotely related to the grey market for Cisco products? I'm having trouble trying to come up with any link between the two. --- In my opinion, with the exception of perhaps very small ne
801.
by jlgaddis 7y ago
> You really need a way to track who is using what and how they automatically get renewed a long time before expiry. If you have any sort of monitoring system in place, it should also be able to check for certificate expiration (or &qu
802.
by jlgaddis 7y ago
> I dont know if Cisco even supports the use of ssh with certificates. They do -- in addition to public key auth, as GhettoMaestro mentioned.
803.
by jlgaddis 7y ago
The animated adaptation [0] of this story is even better! [0]: https://www.mcsweeneys.net/pages/the-ballad-of-a-wi-fi-hero
804.
by jlgaddis 7y ago
> Or not. Linux 5.3 will turn back getrandom() into /dev/urandom with its never-blocking behavior, ... This can be disabled by passing the random.getrandom_block=on parameter to the kernel. --- EDIT: It appears that
805.
by jlgaddis 7y ago
Yep, I personally bought a Cisco firewall off of eBay several years ago that still had its entire configuration on it, including the PSKs for several IPSec VPN connections as well as SNMP (v2) communities, weak "type 7" hashes f
806.
by jlgaddis 7y ago
> Apparently their immediate response was just to reroute everything through the cables on the other side of the country that were still top, ... I'd be pretty surprised to learn that was a "manual" decision made by huma
807.
by jlgaddis 7y ago
Five-year-olds don't need to understand BGP.
808.
by jlgaddis 7y ago
It's probably for the best that you didn't go through it and -- although it obviously sucks that you lost $30K in the process -- hopefully you learned a lesson from it that prevented it from happening again!
809.
by jlgaddis 7y ago
I think the "delayed action" aspect is key to the use of the term "logic bomb" -- as in the phrase "a ticking time bomb waiting to go off" that we've probably all heard. As PeterisP mentioned, the delayed
810.
by jlgaddis 7y ago
About 30 years ago, when I was just a kid, my parents would make me go with them when they went shopping. I would always go wander around the electronics section of the store (I'm thinking of Walmart, specifically) to play with the com

More ›