john37386

14 ms·

91.
by john37386 7y ago
I'm using borg and I honestly like it. Not ready to only rely on it. I try to use the 3-2-1 principle of backup strategy and borg is really a space and bandwidth saver! My collection grew from few Gb to some Tb. It's already more
92.
by john37386 7y ago
Then, I guess I quit at the right time. I would definitely not pay more than what I was paying at the time. Thanks for bringing up this point
93.
by john37386 7y ago
I'm a consultant and I rented some space at WeWork Montreal. When I visit my clients in their office, which are not IT related, I often notice how grey or dark brown'ish are the walls. The vibe is kind of depressing in some old st
94.
by john37386 7y ago
Maybe it has something to do with all the recent speculative side channel attacks. Intel seems to have more hardware vulnerabilities than AMD.
95.
by john37386 7y ago
I'm in the same situation as many people here. Started as a small personal email projects many years ago just to learn. I really enjoyed it, reading all the specs and making it always better year after year. Dmarc felt like a total ach
96.
Show HN: Office365 Admin Portal Down?
1 points by john37386 7y ago|1 comments
97.
by john37386 8y ago
Quic is secure and doesn't allow spoofing. But, since it runs on UDP, a hacker could attack few DNS servers and amplify a UDP attack toward a Quic server. This is true for all reflection and amplification attacks. Hence, Quic is vulner
98.
by john37386 8y ago
Most of the deadliest DDoS attacks happen over UDP. Spoofing, reflection and amplification just to name a few. Many businesses just deny UDP to protect themself against the on going DDoS threats. I feel this move won't make internet a
99.
by john37386 8y ago
"Backups? Forget it. This is the Dark Web. Winzen told ZDNet that there ain’t no such thing as backups on Daniel’s Hosting, by design:" I'm wondering why encrypted backup is not an option for them?
100.
Airbnb: Israeli uproar as firm bars West Bank settlements(bbc.com)
3 points by john37386 8y ago|0 comments
101.
by john37386 8y ago
I come from a similar background as you and I've done CISSP from (ISC)2. I always thought it would be useless as I thought that I can't learn new stuff because I am sysadmin/SRE/shitty dev. What I observed from a sysadmi
102.
by john37386 8y ago
Some /24 are more critical than other. There is a price to security and for sure advertising only /24 is probably not viable. The article mentionned that some networks within the /19, in this incident, were critical. So yes,
103.
by john37386 8y ago
If google advertised several /24 for these ip networks instead of /19, this would have not happenned.
104.
by john37386 8y ago
Maybe these social networks could be manage by the community. A bit like HN. Here if you post crap, people can downvote your crap to the bottom so that no one can see it. If you want to be seen and red, you need to post quality and gain rep
105.
by john37386 8y ago
Was iptables running? Maybe they hit a conntrack limit
106.
by john37386 8y ago
I'm sure that your ruby can hold +100k connctions with enough RAM.
107.
by john37386 8y ago
Yep I mistaken Security groups with Network Acl. Thanks. It's in the best practices to not track dns for big systems. From powerdns https://doc.powerdns.com/recursor/performance.html
108.
by john37386 8y ago
EC2 throttles everything by default and PPS is no exception. What can you do when your system needs more bandwidth, cpu, ram or any other kind of resources? You can either scale vertically... which is not bad at beginning of a project, but
109.
by john37386 8y ago
By default, Amazon uses stateless firewall. It means that by default it's not tracking connections.
110.
by john37386 8y ago
So this afect only apache? Anyone have any thoughts on nginx, IIS and other web servers like tomcat, websphere?
111.
Zero-day in jQuery plugin sample code exploited for at least three years(zdnet.com)
216 points by john37386 8y ago|68 comments
112.
Cannabis is legal in Canada: What you need to know(cbc.ca)
327 points by john37386 8y ago|328 comments
113.
by john37386 8y ago
Will it rollover smoothly? Feel free to report any issue here:
114.
Follow DNS Root Zone KSK Rollover(icann.org)
2 points by john37386 8y ago|1 comments
115.
by john37386 8y ago
Really nice place here. I read it daily and constantly learn new technos and trends. Thanks Paul
116.
by john37386 8y ago
Cool stuff, I would personally enforce the "count" packet to 100 or 1000 by default. This way, you make sure that no one crashes this powerful device. If someone knows what is doing, then he could just disable it. Sniffing at +10G
117.
by john37386 8y ago
I always load test my webpages with https://ddostest.me/load-test/ before advertising them on HN. Strangely, I often find a little something missing. Nice article worth reading even though I got a few 504. It looks mo
118.
by john37386 8y ago
Sha is a cryptograpic algo used for secure hashing hence the name SHA. The main goal of hashing is confirming the integrity of an object. This mean the object you read now is the same object as when it was stored. The goal was never to encr
119.
by john37386 8y ago
I use zabbix a lot with PG database and there are 2 tables that grow indefinitely. The zabbix housekeeper lags a bit when the tables become +200GB. I tried the autopartitioning and the housekeeper becomes irrelevant. I can now easily keep 1
120.
by john37386 8y ago
Like you said it's a good starting point. I wouldn't take all that is written for granted, but hey! We are at least 2 that agree that there is something to start your introspection in there. It's very easy to read also.

More ›