terom

11 ms·

61.
by terom 3y ago
Yes, `cryptsetup luksFormat` selects the LUKS1 key slot pbkdf iteration count parameter at runtime by benchmarking against a target `--iter-time` [1] [2], which is either 1s or 2s depending on version [3]. For a LUKS1 image created with Ubu
62.
by terom 3y ago
You're underestimating the default PBKDF parameters used by LUKS1, `cryptsetup luksFormat` [1] benchmarks the `--pbkdf` function at runtime when configuring the keyslot, and the default iteration count is based on a target `--iter-time
63.
by terom 3y ago
Nothing wrong with linear regulators in the appropriate applications. In fact, the switching converter/controller IC will generally include a small LDO to generate an internal Vcc supply for the control logic. Just don't make the
64.
by terom 3y ago
This end should point toward the ground if you want to go to space. If it starts pointing toward space you are having a bad problem and you will not go to space today. [1] [1] https://xkcd.com/1133/
65.
by terom 4y ago
And then don't forget to setup key revocation as well, and make sure that an attacker in a position to MITM the connection cannot cause the revocation checks to fail-open. I hope you don't need that SSH connection to fix your brok
66.
by terom 4y ago
The ESP-32 is a $2 microcontroller that has a Fast Ethernet MAC. It won't handle gigabit, but it can do plenty. Having support for 100BASE-TX solves a lot of problems with Wi-Fi.
67.
by terom 4y ago
If you are deleting the organizational data and effectively archiving [1] all the images, keeping only the option for public images to be pulled but not updated... then how will affected maintainers be able to delete their now out of date p
68.
by terom 4y ago
This is an important implication that needs to be brought up in the FAQ explicitly. In other words, the public repos are being archived. If I was a maintainer responsible for providing up-to-date and secure images, then I think it would ind
69.
StrongSwan Vulnerability (CVE-2023-26463)(strongswan.org)
3 points by terom 4y ago|0 comments
70.
by terom 4y ago
There's a GitHub issue to fix this, arguing that the doc fixes are insufficient, consider it to be a design mistake, and argue that it can be changed without breaking backwards compatibility (current GC behavior is not deterministic):
71.
by terom 4y ago
That commit is adding the same disclaimer for the `shield` function, the original one-line mention for `create_task()` is a little older, but also only November 2021, so during 3.11 development...? [1] https://github.com/pyt
72.
“In roughly two hours, 1647 devices are about to be wiped”(infosec.exchange)
603 points by terom 4y ago|341 comments
73.
by terom 4y ago
I dearly hope the regulations actually live up to their estimated benefits, and that the cost of compliance also includes the indirect negative impact on future product research and development, not just direct impacts on existing businesse
74.
by terom 4y ago
Start working 80% time, and spend more of your limited mental energy on your own fulfilling endeavors of choice.
75.
by terom 4y ago
How so? It refutes that right there in the advisory: > Okta does not rely on the confidentiality of its source code as a means to secure its services. Would it be more professional for them to host their code in a public repo?
76.
by terom 4y ago
A way to sign PDFs would be great, but then we also need a way to verify the signatures. And verify that it was signed by whoever issued the document, not someone else who tampered with it. Not really sure what the state of the art there ac
77.
by terom 4y ago
Re timing, logs like nginx access logs have their timestamp from when the request completed, not when the request came in. That's a significant difference for long duration (~10s+) requests, and matters when trying to correlate logs or
78.
by terom 4y ago
My guess would be that you need to let used IPv4 addresses age out for a while before you can reassign them to a new customer, and they need to reduce churn - and avoid people intentionally burning IPv4 addresses by rotating through new, cl
79.
by terom 4y ago
Disregarding the emphasis on XML -> replaced with JSON, isn't this actually mostly spot-on re the popularity of Single-Page Apps (SPA)? There is very little if any HTML in the form of the text-based markup involved in a modern SPA -
80.
by terom 4y ago
By a vocal minority.
81.
by terom 4y ago
https://news.ycombinator.com/item?id=33373729 details about the problematic 12VHPWR adapter shipped by nVidia, with extremely questionable engineering (14AWG wires soldered to thin tabs), which should absolutely be recalled
82.
by terom 4y ago
Imagine my disappointment after working on a fixed-allocation HTTP server stack to discover that even `esp_log.h` does several malloc() calls [1] per log output line... thankfully that was only on the ESP8266_RTOS_SDK, and esp-idf isn'
83.
by terom 4y ago
https://tme.eu does a better job of this. If you enter "16V", it knows to also select the 12-20V ranges. It also works the other way around, you can enter "10-22u" in the parameteric search and it will find b
84.
by terom 4y ago
I wonder if that benchmark actually loaded the PCIe bus to any significant degree after the initial benchmark startup, or just updated a couple small parameters on a single scene and thus mainly just tested the local computation on the GPU?
85.
by terom 4y ago
It's intended to be the opposite with fewer IPv6 prefixes needed, compared to the level of fragmentation for global IPv4 deployments combining many smaller prefixes to scavenge enough address space. IPv4 930k -> 515k aggregated htt
86.
by terom 4y ago
Just like you setup multiple instances across different availability zones for redundancy, you also need multiple billing contacts in case one of them fails and causes an outage. Not sure how to mitigate these risks for providers that only
87.
Redirect Syslog to stderr(gist.github.com)
1 points by terom 4y ago|0 comments
88.
by terom 4y ago
> Email: dontdeletethisuser@email.com I wonder how many Confluence Updates -emails World Media Group has received, and what they plan on doing with them... if you're going to hardcore an email address, at least use an `foobar@exampl
89.
by terom 4y ago
Hopefully not 123 -> 312 but e.g 231. AFAIK phase order matters for e.g. three-phase motors, they will spin in the wrong direction if wired with the phases in the wrong order.
90.
by terom 4y ago
For really small SMD (electronics) parts, you need something with a completely sealed compartment. Anything with removable separators or a gap between the dividers and the lid is a no-go, or you'll be tossing a couple hundred unmarked

More ›