back
user profile
LinuxBender
57,650karma·19,241submissions·June 16, 2015
about
I am not for everyone. To ignore me in uBlock Origin, add to "My filters":
news.ycombinator.com##tr.athing.comtr:has(a.hnuser):has-text(/\bLinuxBender\b/)
(\_/)
(='.'=)
(")_(")recent activity (19,241 total)
comment
We were on UltraDNS for a few years. They started receiving nearly quarterly DDoS attacks and then tried to try to sell us DDoS scrubbing services. From there we moved to Dyn and have been happy. T…
comment
I blocked their telemetry and not I can't even update my drivers. Not through windows update, nor through their installer. It hangs trying to talk back to them. No harm, no foul, probably time …
comment
I completely agree that some businesses will play chicken. Fear of being dragged into court is a powerful thing.
comment
AFAIK and from my own experience, non-competes are not enforceable in most states, or have little to no legal teeth. Anyone concerned should consult with an attorney. Somewhat related, where folks us…
comment
Very unlikely. Websites run by small companies will not implement something unless they must do so to accept a payment. An example of this was the ICRA/PICS labeling system. Super easy to imple…
comment
It's actually worse than that. Gmail, msn, yahoo, et al. are far from free. Anyone that wants to email all their customers that use those mail providers have to pay into whitelists and maintain…
comment
I've had my mail servers at Linode for about 8 years now, no problems at all. If anything, I am more restricted on mail processing rules than anyone else.
comment
Perhaps. I would just put the equipment in the "Band Room". i.e. Sound proof, you can't even hear the drummer. Power conditioners will stop most signal leakage. There are no windows…
comment
Any process running as you can piggy-back on those default-enabled channels without authentication or logging on the destination servers.
comment
Someone is even beating me to it. [1] [1] https://news.ycombinator.com/item?id=12256866
comment
By any chance have you run iperf3 when routing through a couple hops? I would be very interested in the numbers. Today I accomplish that behavior using Tinc vpn, but it is slow when routing through …
comment
I can't speak for developers. I can speak as an engineer however. Building from source, I can ensure all the latest glibc hardening options are applied to the builds of the software I use. e.g…
comment
If this becomes popular, I will build a new internet.
comment
I would like to add that security through obscurity is not bad when it used as layers in the security cake. Delicious red velvet cake with cool fluffy chocolate frosting and a side of ice cream.
comment
That helps, but you would still need to disable ssh multiplexing on all of your servers.
comment
I wish everyone checked their authorized_keys file like you do. Sadly, this is rarely the case across the board, based on my experience. People are lazy. There are good aspects of being lazy, but t…
comment
There are also some significant vulnerabilities [1] in SSH by design / by default that must be disabled if used everywhere. [1] https://news.ycombinator.com/item?id=11052745 …
comment
Wasn't this the basis for the movie "I Am Legend"?
comment
I deleted my facebook account shortly after being talked into creating it. Why? 1) I started to lose respect for my friends, after watching their drama on FB. TMI. 2) I was being bombarded with smal…
comment
I got that from The Register and I agree with their assessment. I can't walk 50 feet without seeing someone with their face buried in their phone, even while they are walking around town, oblivi…
comment
Fair enough. Maybe it's like an arms race, or a shell game. but you are probably right.
comment
Two can play at this game. Surely folks here at HN can create something that is not technically or legally encryption, but accomplishes the same goal.
comment
I agree with you. Every time I bring that up, I get down-voted due to the cognitive dissonance that folks have with their fondle-slabs. Now people are being conditioned to think it's normal for…
comment
To add to that, sshd should never be exposed directly on the internet. There are a myriad of ways to hide it. Port-knocking, poor-mans port-knocking using iptables and xt_recent, Ostiary server/…
comment
I agree. Someone is still hosting the servers and services. It is just someone else. It is also just a re-spin of the term Application Service Provider. That term never gained popularity. There ar…
comment
You probably know this, but any public channel a user is in can be relayed to a 3rd party (entirely) if that user subscribes to an app that was approved. All of those messages are also available for…
comment
Some of the newer machines don't look for anything other than the Microsoft folder in EFI. Instructions for ubuntu are similar for others. mount /dev/sda1 /mnt
cd /…
comment
This limit must be due to the older versions we have in CentOS 6. screen-4.0.3-19.el6.x86_64