nsheridan

9 ms·

1.
by nsheridan 2y ago
Expires header in the past is typically used to prevent caching. The lower-case headers is part of the http2 specification.
2.
by nsheridan 3y ago
An SSH private key isn't "something you have" - it's not a physical object, you can make copies of it. To me it falls into "something you know". You might not be able to type it from memory into a file but in p
3.
by nsheridan 3y ago
Lead solder is totally attainable for hobbyists - I bought a 100g spool a few weeks ago.
4.
by nsheridan 4y ago
I use them for personal machines, and have deployed them in the past in work environments. A few years ago I wrote a CA which can exchange oauth tokens for signed keys: https://github.com/nsheridan/cashier Auth is hand
5.
by nsheridan 4y ago
> I always thought it was funny that I did the same job before and after the certs. It’s often more advantageous for the company to have people with certs (it was with MCSE and such in the 90s anyway) - more MCSE etc on staff meant it wa
6.
by nsheridan 4y ago
SLA - correct. That’s the contract between the operator and the users which describes the penalties for not meeting agreed-upon SLO SLO - service level objective, the stated availability (or latency or durability etc) of the service. Usuall
7.
by nsheridan 4y ago
Not to mention fire suppression systems and electrical risks.
8.
by nsheridan 9y ago
There's noting stopping you from scanning the barcode multiple times
9.
by nsheridan 10y ago
I'm very happy with inoreader
10.
by nsheridan 10y ago
This exists - http://man7.org/linux/man-pages/man1/ssh-keygen.1.html#CERTI... - though the tooling is a bit bare-bones. There are some tools written to use certificates though, such as Netflix's BLESS (
11.
by nsheridan 10y ago
Ireland: 360/36 €60pm. No tv.
12.
by nsheridan 10y ago
I really wish AWS would introduce domain verification for 'domain-shaped' bucket names.
13.
by nsheridan 10y ago
For (possibly) smaller scale I wrote a self-service SSH CA: https://github.com/nsheridan/cashier
14.
by nsheridan 10y ago
This is interesting. I wrote a service for issuing user ssh certs but it doesn't manage host certs. https://github.com/nsheridan/cashier
15.
by nsheridan 14y ago
It's pretty much unmaintained. Every host it's installed on has to be properly tuned. Fine for large setups where finely tuned TCP stacks are the norm and maintaining your own ssh isn't much overhead, probably not fine for most setups where
16.
by nsheridan 14y ago
I lost interested in everything for.. a while, right around when I was diagnosed with depression. After eventually getting on the right brain medicine, I found my desire to work on the things I enjoy came back with a vengeance. Now I just n
17.
by nsheridan 14y ago
Witchcraft!
18.
by nsheridan 14y ago
Worse, this script goes on to install homebrew using 'curl -k ...|ruby'. Yeah, no thanks.
19.
by nsheridan 14y ago
I can't be the only person who hates install instructions like 'curl -L some.host|bash'. Not to mention that the yeoman install script happily installs homebrew using 'curl -k ... |ruby'. No thanks.
20.
by nsheridan 14y ago
My .vimrc contains: set pastetoggle=<F2> Life is suddenly easier :)
21.
by nsheridan 15y ago
3.0 was for tablets, not for phones.
22.
by nsheridan 15y ago
I'd recommend against putting the socket in /tmp. Anyone can reuse the connection.
23.
by nsheridan 15y ago
http://www.google-watch-watch.org/