subway

38 ms·

331.
by subway 9y ago
IPMI is fantastic, so long that the understanding is in place that access to your IPMI vlan may as well be considered root access to the node. BMCs tend to be pretty miserable when it comes to security. It's generally a good idea to ha
332.
by subway 9y ago
This post makes me so glad to have been forced into vi all those years ago. Its everywhere, its quick, and unless you've done some pretty nutty stuff in your configs, basic usage is the same between a heavily customized vi and the vi y
333.
by subway 9y ago
Does HashiCorp have a single product with published pricing? How long have folks been waiting on you to get around to figure this out? I'd almost certainly have personally pushed for purchasing your software a number of times, but si
334.
by subway 9y ago
Oh sweet, lots of new enterprise features, along with "give us your contact info so we can figure out how much you can afford" pricing. fuck that.
335.
by subway 9y ago
While I know the likelihood of a mishap is miniscule, I can't help but feel mildly uneasy about an RF hackathon happening at an airport.
336.
by subway 9y ago
Build integrity is inherently a security issue.
337.
by subway 9y ago
https://github.com/folkswithhats/fedy/blob/master/plugins/an... I made it 10 lines into the very first plugin before hitting a point where the installer script is downloading a file over an insecure
338.
by subway 9y ago
I know plenty of folks who've ridden motorcycles helmetless for years without any issue. It's a collection of script written in a non-idempotent manner, and run in an uncontrolled, undefined environment. The benefit of binary pack
339.
by subway 9y ago
Coreboot has some pretty solid ARM support too. Modern Chromebooks (both x86 and ARM) use Coreboot with a "depthcharge" payload. You can even use Libreboot at this point to bring up an RK3288, and boot into ChromeOS or a tradition
340.
by subway 9y ago
After initially recoiling in horror at running a `curl|bash` installer, I opened the installer in a browser planning on reading the install script. "Helpfully" the script is served up as `binary/octet-stream`, so instead of l
341.
by subway 9y ago
I think a lot of it is that leaky abstractions don't get noticed by folks with a firm understanding of what's happening under the hood, but present themselves as bugs to folks who haven't spent as much time on lower parts of
342.
by subway 9y ago
"cannabis distillate fruit terpenes" without the quotes will get you going. Sadly most of the commercial producers are incredibly tight lipped about their processes, but there are some sites like https://skunkpharmresea
343.
by subway 9y ago
This, so very much. I've been excited watching the extracts in WA evolve over time -- initially cartridges were just BHO or CO2 oil, then processors started pumping out THC distillates, followed by CBD distillates. Now they're rec
344.
by subway 9y ago
But this one's written in... Oh.
345.
by subway 9y ago
And Mali?
346.
by subway 9y ago
It's at least partially ARM's fault, as ARM doesn't publish documentation for their cores. SoC vendors are just as bad, if not worse, but ARM doesn't get off scott-free.
347.
by subway 9y ago
My point is societal pressure doesn't have to end with laws. If a company wants to play the 'but-it-isnt-illegal' game, they should still be subject to suffering a rejection by the public, and as members of the public, we hav
348.
by subway 9y ago
It's everyone's responsibility.
349.
by subway 9y ago
To be fair, Warewulf largely 'suffered' from the same issue -- you could pack a fat initrd to be delivered over the network, but doing that at every boot with the full stack needed for compute at the time was crazy slow, and in so
350.
by subway 9y ago
xcat claims support for diskless service nodes on their website. I can't speak for how long it's been officially supported, but I seen to recall IBM claiming support in 2009, when they sold us a pair of iDataPlex clusters at UC. A
351.
by subway 9y ago
Bare metal in and of itself doesn't necessitate a long-running "substrate" operating system. Systems like Warewulf^WPerceus^WWarewulf[1] and xcat[2] have made it easy to provision stateless bare-metal hosts with almost docker
352.
by subway 9y ago
I think a lot of it is that there are folks who want to contribute to security awareness, and their skills lie with design/branding rather than with low level security concepts. I can't speak for what the value-add is there, but I
353.
by subway 9y ago
If you can find the relevant documentation, sure. Modern hardware is made from black boxes on top of black boxes.
354.
by subway 9y ago
Not really. You probably need to use FUSE or similar to pull something like that off.
355.
by subway 9y ago
Not to mention incredibly limited IP support. You can forward a few specific ports, or use SOCKS, but that's about it.
356.
by subway 9y ago
https://www.seattletimes.com/seattle-news/bikini-barista-die... Yes.
357.
by subway 9y ago
...yes. lost a battle with autocorrect after a few beers.
358.
by subway 9y ago
Then they bust out Hollywood style accounting. Each game gets it's own LLC, then pays the studio exorbitant rates for handling G&A, and put liability for keeping the servers online with the disposable LLC.
359.
by subway 9y ago
DKMS is a relevantly relevantly development in the decades of pain nvidia has inflicted on linux users.
360.
by subway 9y ago
To anyone writing checks, these features are not intended to provide security, but instead to tick a checkbox on a compliance audit. Odds are if something goes wrong, they'll find a way to pass the buck to another party. Or just get a

More ›