DDub

8 ms·

1.
by DDub 7y ago
Security isn't just about intrusion prevention, it is also about ensuring that the resource is available to the people who need it when they need it. So, carry on with keeping bad actors off the network and ensuring that there is suffi
2.
by DDub 7y ago
Sysadmins should concentrate on managing and securing the devices and not the network. This is advantageous with todays mobile workforce where users expect the same experience at the office, coffee shop or home.
3.
by DDub 7y ago
actually I'd find running my ansible playbook much, much easier than transferring GB of disk image about. I maintain the playbook so that I can keep work laptop and personal laptop in sync. Although I am looking at Nixos as a possible
4.
by DDub 8y ago
E2E encryption allows for snooping if there are 3 ends.
5.
by DDub 8y ago
Is it not an implementation of double jeopardy? Since the referendum new facts have come to light, that of what an exit deal would look like. New facts should allow for a new vote. If remain had won, there would be no new facts so why would
6.
by DDub 8y ago
It's double jeopardy, there is a case for a fresh vote because new facts (May's deal/No Deal) are present. If there are new facts after this vote (for example a new A50 or similar) then there is the case for another one.
7.
by DDub 8y ago
As an example, if we look at https://github.com/GoogleCloudPlatform/container-vm-guestboo... then there are a couple of things here that are IPv4 only. The first is that the application is only configured to listen on
8.
by DDub 8y ago
It is slightly less secure than that as the password reset form has a notification mechanism built into it in that the next time you login you realise that you need to reset the password back to what you control, where the magic link does n
9.
by DDub 9y ago
It hasn't prevented a false alarm, which is why it hit the news... it's interesting that there is a lot of hang up on false negative (false alarm) and very little discussion about a false positive (hitting the test button instead
10.
by DDub 9y ago
I'm not scolding the ape, I'm scolding the organ grinder. When a drill deviates from the actions taken in an emergency it becomes a pantomime of little value. I totally agree that the solution should leverage obviation to prevent
11.
by DDub 9y ago
The point of a drill is to drill the procedure into people, so that when it is required the people are operating on autopilot without the need to actively think about the actions that they are performing. I would prefer to see the only two
12.
by DDub 9y ago
We're currently looking at moving our applications to k8s, and was wondering what deployment tools people are using? This week we are evaluating spinnaker, helm and bash wrappers for kubectl. There is concern over adding too many layer
13.
by DDub 9y ago
But I don't want to die from a disease contracted from a dirty telephone!
14.
by DDub 9y ago
Toronto; I usually strive to take the long way home because the most direct route is 2.5km
15.
by DDub 10y ago
Why do you believe that they are opposing activities? I can make a journey by helicopter or by walking but the destination is still the same, however as I walk there someone might point me at a better one.
16.
by DDub 10y ago
Sslh would give you this ability, if you're prepared to shim an extra program infront of your daemon; http://www.rutschle.net/tech/sslh.shtml
17.
by DDub 10y ago
Unless you're mirroring across more than 2 drives, you have an AID setup.
18.
by DDub 11y ago
It could be that the client device validates a checksum against the approved list at the store before installing? Haven't tested if this is the case, just spitballing a mechanism that would allow for the control without the hosting.
19.
by DDub 11y ago
From what I understand it is the opposite, that because it was much easier to turn uranium byproducts into nuclear warheads it was the technology that won out over thorium.
20.
by DDub 11y ago
Has anyone tried using these? - https://github.com/gustaebel/passext (Chrome) or - https://github.com/jvenant/passff (firefox)
21.
by DDub 11y ago
I use an alias to select when to, and not to, use host keys; alias ssht='ssh -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no' ssht floaty.vm # does not use host key checking ssh my.bastion.host # validates ho
22.
by DDub 13y ago
yes, but that doesn't make it not a dev problem.
23.
by DDub 14y ago
Does this require the authentication cookie to be constant? If, for example, I issue a new cookie to the client every connection then this is mitigated?
24.
by DDub 14y ago
Nope, it'll still rain