Viewing profile — DDub

Security isn't just about intrusion prevention, it is also about ensuring that the resource is available to the people who need it when they need it. So, carry on with keeping bad …

Sysadmins should concentrate on managing and securing the devices and not the network. This is advantageous with todays mobile workforce where users expect the same experience at t…

actually I'd find running my ansible playbook much, much easier than transferring GB of disk image about. I maintain the playbook so that I can keep work laptop and personal laptop…

E2E encryption allows for snooping if there are 3 ends.

Is it not an implementation of double jeopardy? Since the referendum new facts have come to light, that of what an exit deal would look like. New facts should allow for a new vote.…

It's double jeopardy, there is a case for a fresh vote because new facts (May's deal/No Deal) are present. If there are new facts after this vote (for example a new A50 or similar)…

As an example, if we look at https://github.com/GoogleCloudPlatform/container-vm-guestboo... then there are a couple of things here that are IPv4 only. The first is that the applic…

It is slightly less secure than that as the password reset form has a notification mechanism built into it in that the next time you login you realise that you need to reset the pa…

It hasn't prevented a false alarm, which is why it hit the news... it's interesting that there is a lot of hang up on false negative (false alarm) and very little discussion about …

I'm not scolding the ape, I'm scolding the organ grinder. When a drill deviates from the actions taken in an emergency it becomes a pantomime of little value. I totally agree that …

The point of a drill is to drill the procedure into people, so that when it is required the people are operating on autopilot without the need to actively think about the actions t…

We're currently looking at moving our applications to k8s, and was wondering what deployment tools people are using? This week we are evaluating spinnaker, helm and bash wrappers f…

But I don't want to die from a disease contracted from a dirty telephone!

Toronto; I usually strive to take the long way home because the most direct route is 2.5km

Why do you believe that they are opposing activities? I can make a journey by helicopter or by walking but the destination is still the same, however as I walk there someone might …

Sslh would give you this ability, if you're prepared to shim an extra program infront of your daemon; http://www.rutschle.net/tech/sslh.shtml

Unless you're mirroring across more than 2 drives, you have an AID setup.

It could be that the client device validates a checksum against the approved list at the store before installing? Haven't tested if this is the case, just spitballing a mechanism t…

From what I understand it is the opposite, that because it was much easier to turn uranium byproducts into nuclear warheads it was the technology that won out over thorium.

Has anyone tried using these? - https://github.com/gustaebel/passext (Chrome) or - https://github.com/jvenant/passff (firefox)

I use an alias to select when to, and not to, use host keys; alias ssht='ssh -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no' ssht floaty.vm # does not use host key che…

yes, but that doesn't make it not a dev problem.

Does this require the authentication cookie to be constant? If, for example, I issue a new cookie to the client every connection then this is mitigated?

Nope, it'll still rain