old-gregg

14 ms·

91.
by old-gregg 6y ago
The proxy does not authenticate users. When a user shows up without a certificate, a proxy simply redirects to an OAuth2 / SAML endpoint such as Github or Google. When OAuth redirect comes back, the proxy forwards user's identity
92.
by old-gregg 6y ago
TBH I don't use sound, and the GPU there is very basic ASpeed chip, the primary "UI" is IPMI, it's a server motherboard after all. But when you connect to a Windows VM via RDP, there's an option to pipe sound back t
93.
by old-gregg 6y ago
Heh, that's a neat idea and cheap to implement on top of existing SSH tooling!
94.
by old-gregg 6y ago
I'm one of the maintainers of https://github.com/gravitational/teleport Another one to look at is https://github.com/Netflix/bless Also, if you want to stick with what you have (most likely O
95.
by old-gregg 6y ago
Author here. I mentioned a couple of other benefits in the post, namely TTL (time to live) and the ability to have fine-grained role-based access control. Your servers should use certificate-based auth too, to join a production environment.
96.
Infrastructure Security Without Slowing Down Developers(gravitational.com)
37 points by old-gregg 6y ago|15 comments
97.
by old-gregg 6y ago
I have a home server with 32GB of RAM that's been up 24/7. I've been running Debian testing on it. I started with Ryzen 1700, then upgraded to Ryzen 2700. It's been running a dozen of VMs with Windows and Linux. Linux VM
98.
by old-gregg 7y ago
Thank you, Gaelan! I am not the author, but will pass this along to Gus.
99.
by old-gregg 7y ago
Disclaimer: I work at Gravitational, one of our engineers is the author of the article. The added complexity is indeed significant, that's why we built Teleport [1] which is much, much simpler open source alternative to OpenSSH for suc
100.
by old-gregg 7y ago
https://gravitational.com/teleport Free and open source, made by the authors of the article.
101.
How to SSH Properly(gravitational.com)
584 points by old-gregg 7y ago|158 comments
102.
The Future of Women at Gravitational(gravitational.com)
5 points by old-gregg 7y ago|0 comments
103.
by old-gregg 7y ago
Gravitational | Security and Software Engineers | Seattle, Toronto, Oakland | Full Time | ONSITE | https://gravitational.com Come here to write open-source software in Go. We are hiring in Seattle, Toronto or Oakland. We have v
104.
by old-gregg 7y ago
Ian, Consider adding Linux as the underlying platform for some of your tests. Not only it's usually easier to script repeatable developer-oriented workloads, but your reviews will be more comprehensive as well. The Linux scheduler is q
105.
by old-gregg 7y ago
There are other reasons to switch: - Google's blatant Youtube spam in search results. They no longer keep them in the "video" tab. It's becoming increasingly difficult to keep YouTube out. - Better UX: no sticky headers,
106.
by old-gregg 7y ago
Interesting... Based on what I've read about airships, their biggest weakness is inability to deal with inclement weather. Conventional aircraft spend very little time in the clouds and usually fly above most storms (and they're f
107.
by old-gregg 7y ago
To me, the best "old internet" site is Wikipedia. Although they also partially succumbed to madness of breaking the web (opening images in JavaScript popups?? breaking the "Back" browser button??) it's mostly a well
108.
by old-gregg 7y ago
The central I/O die does not have any cache on it. L3 caches are shared across just 4 cores in a CCX (not even CCD). IIRC the next generation of Ryzen will introduce CCD or even I/O die caches. I think one of Intel's Broadwel
109.
by old-gregg 7y ago
> [US healthcare] needs to be torn down and rebuilt from scratch... Here are some numbers, just to provide perspective: [1] The worst recession in recent history (2008-09) featured a drop of US GDP by -2.5%. The US healthcare spending p
110.
AMD launches 64-core EPYC server processor for liquid cooled systems(anandtech.com)
2 points by old-gregg 7y ago|0 comments
111.
by old-gregg 7y ago
Thank you. Sharing files and URLs is going to work just fine. What about communicating? I tend to avoid typing on my phone, and I heavily rely on the pattern of receiving SMS or iMessage messages on the phone and replying later when I get t
112.
by old-gregg 7y ago
I've been quite happy with my 6s, going to replace the battery again soon. But eventually iOS updates will cease coming, yet I absolutely cannot live without a headphone jack. Honest question: how would you even approach the Android? M
113.
SMT Solving on an iPhone(cs.utexas.edu)
1 points by old-gregg 7y ago|0 comments
114.
by old-gregg 7y ago
It's a taboo word for many reasons that are easy to explain, but mainly because there's nothing that can be done about it. You can try and "build more housing", you can "make it more expensive", you can "i
115.
by old-gregg 7y ago
Sure... and it means that Swift and Clojure are just as useless as Julia for numerous use cases where start-up times matter, like piping CLI commands together, in Julia's case you're looking at pathetic 3 execs per second. Moreove
116.
by old-gregg 7y ago
Ugh... that's crazy. Instead, look at ASRock X470D4U AM4 server motherboard (with IPMI and ECC) paired with something Ryzen 2700, which should give you near complete silence, 25W idle power usage and 8 modern cores boosting up to 4Ghz,
117.
by old-gregg 7y ago
AMD CPUs should be cheaper to manufacture, because their chips are much smaller. Xeons are built using giant monolithic dies, so the defect rate per wafer matters a lot. EPYC processors from AMD are built using 9 separate chips under one pa
118.
by old-gregg 7y ago
Majority of data center users replace their gear within 3-5 years. There are outliers, of course, who replace hardware with each generation or those who run their servers into the ground, but 3-5 years is far more common, so 4 years on aver
119.
by old-gregg 7y ago
:) I grepped for the wrong thing. Here's a better version: $ sudo spectre-meltdown-checker | grep "Not affected" | wc -l On Skylake: 0 On Ryzen : 10 I don't have an Ivy Bridge CPU to test this on, but AM
120.
by old-gregg 7y ago
Not true. Copy-pasting from my Ryzen terminal: $ spectre-meltdown-checker | grep "NOT VULNERABLE" | wc -l 12

More ›