jlgaddis

15 ms·

91.
by jlgaddis 6y ago
Were you using some awesome new cryptographically secure method to manage the passphrases of the newly generated keys (and communicate them to the user)? Or, more likely, were all of these new private keys granting access to all of your hos
92.
by jlgaddis 6y ago
> Also ssh supports "from" stanza, which allows you to limit networks from where you can login. Additionally, sshd supports "Match", which can limit where any or all of your users can log in from. There's also
93.
by jlgaddis 6y ago
That's why we all protect (encrypt) any private keys on disk with a strong passphrase, right?
94.
by jlgaddis 6y ago
Hopefully your Yubikey was manufactured AFTER the last bug in the (Infineon) key generation library was found and fixed.
95.
by jlgaddis 6y ago
Assuming one existed, how would it handle the passphrases used to protect your ("the user's") new keys and how would it securely communicate the new key's passphrase to you ("the user")?
96.
by jlgaddis 6y ago
On the other hand, I chose the first option (several years ago) -- and doing so saved me from having to generate new keys (and rotate them on every host I used) when I got my Yubikeys replaced the second time (due to a bug in the key gene
97.
by jlgaddis 6y ago
> ... perhaps through port forwarding ... See " ProxyJump " in the " ssh " (client) man page.
98.
by jlgaddis 6y ago
> ... what I would actually like is the ability to configure OpenSSH to require multiple things to log in, ... With OpenSSH, you can require multiple authentication methods to succeed before access is granted. For example, "public
99.
by jlgaddis 6y ago
> I wonder if there's something similar for the ssh_host_key ... There is, since version 6.8 (~6 years ago) [0]. Make sure you have "UpdateHostkeys" set to "yes" (or "ask") on the client side. It was
100.
by jlgaddis 6y ago
> If so, then why isn't this already a feature in common Linux distros? It is. It's called auditd , is quite possibly already installed (albeit probably not configured to do much), and can easily ship its logs off to another
101.
by jlgaddis 6y ago
TL;DR: > ... our next-generation VR system will be coming to PlayStation 5, ... [but] it won’t be launching in 2021. That's pretty much the only actual information in this post. Well, and that there will be a "new VR controll
102.
by jlgaddis 6y ago
This is by design. If an MX RR isn't present, the spec says MTAs are to try to deliver majl to the host that the A RR points at. If you don't want that, create the appropriate MX RR. If you don't want e-mail for a given domai
103.
by jlgaddis 6y ago
> I did that because it worked ... These things tend to -- until they don't (by which time you don't notice). > ... and nobody told me not to until years later. Instead of trying to enumerate all of the wrong ways to do
104.
by jlgaddis 6y ago
> Why not fix Courier? It isn't "broken".
105.
by jlgaddis 6y ago
AFAIK, it's still there if/when using framebuffer mode.
106.
by jlgaddis 6y ago
On the other hand, I don't care which license class you are, whether you passed a code test or not, or even if you just got your ticket yesterday. Welcome to the hobby, it needs more folks like you (if nothing else, it'll help out
107.
by jlgaddis 6y ago
Yes, if memory serves, was the primary reason.
108.
by jlgaddis 6y ago
Since 1) this is supposed to be for "a non-technical audience" and 2) the target audience is parents of young children who feel it's necessary to monitor (in real-time) their child(ren)'s day care facilities in the fir
109.
by jlgaddis 6y ago
> ... and archive for consolidating notes into monthly archive files. Why not just perform the consolidation automatically (the first time textnote is executed after the first of the month), allowing you to do away with the subcommand?
110.
by jlgaddis 6y ago
> Currently, Vim is the only supported text editor. Are you familiar with the $EDITOR and/or $VISUAL environment variables? Text-based (i.e., CLI) applications which spawn a text editor should respect/support them as much as
111.
by jlgaddis 6y ago
There isn't any difference, of course -- other than perhaps giving control of the keys to the kingdom to some Silicon Valley startup! I was deploying cellular devices (from Digi and, later, Opengear) at power substations in rural areas
112.
by jlgaddis 6y ago
You realize that pretty much all of that happens when you use Windows 10, yes?
113.
by jlgaddis 6y ago
Hmm, would the playing of music by the police constitute a "public performance" (per copyright law)?
114.
by jlgaddis 6y ago
And the U.S. Government isn't making a phone call to get the data. They have a "law enforcement portal" they can log in to in order to request the data.
115.
by jlgaddis 6y ago
> why is prosecution going with that lab/software only? Presumably becquse that lab/software gave them the answer they were looking for. Why pay for even more lab/software testing when you've already got what you wa
116.
by jlgaddis 6y ago
> per-say https://en.wiktionary.org/wiki/per_se
117.
by jlgaddis 6y ago
What was the plan if they needed another subnet?
118.
by jlgaddis 6y ago
No, 192.0.0.0/24 and 192.0.2.0/24 are completely separate networks. See "Classless Inter-Domain Routing" [0] (a.k.a. "CIDR") -- [0]: https://en.wikipedia.org/wiki/Classless_Inter-Domain_Rou
119.
by jlgaddis 6y ago
At the risk of showing my age... In my own private home lab -- which has grown way too large -- I like using names of the Garbage Pail Kids [0] as hostnames. There's a few benefits to this naming scheme, when dealing with physical mach
120.
by jlgaddis 6y ago
Well, probably (at least) half of those billion people are using one of the large public DNS servers (Google, Cloudflare, et al.). Plus, the answers returned by the root servers more often than not include resource records with very high TT

More ›