HNHacker News
TopNewBestAskShowJobs

jaryd

861 karma · joined April 19, 2011

ops @ DuckDuckGo
submissionscomments
jaryd··on DuQu Mystery Language Solved With the Help of Crowdsourcing
While I agree that it is reasonable to expect trending towards an alarmist reaction, there are significant enough similarities between DuQu and Stuxnet to suggest that the authors of the former had access to the source code of the latter. If you read the W32.Stuxnet Dossier (http://www.symantec.com/content/en/us/enterprise/media/secur...) from Symantec it pretty objectively articulates the complexity and sophistication of the creation of Stuxnet. I personally don't think it's an alarmist opinion to believe Stuxnet had national interest behind it, and so am pretty wary of DuQu until more information is uncovered.
jaryd··on DuQu Mystery Language Solved With the Help of Crowdsourcing
http://seclists.org/fulldisclosure/2012/Mar/78

The FD discussion, if you're interested :)

jaryd··on Security vulnerability found in Nginx
Indeed this is what I was looking for (however I will be updating the software on CentOS) sprinkled with a few snippets of wisdom from the above posters.

Thank you all for your thoughtful replies.

jaryd··on Security vulnerability found in Nginx
Hey guys,

Looking for a consensus on the most stable way to update nginx installations from source.

Thanks!

jaryd··on The Linux Setup, Noah Lorang, 37signals
I use a filco majestouch tenkeyless with brown switches. I love it but it is pretty clicky. drives my girlfriend nuts. I have a bt apple chiclet keyboard hanging around for when she gets extra annoyed.
jaryd··on [dead]
Amazing how common this is!
jaryd··on Boilerstrap: A beautiful mashup of HTML5 Boilerplate & Twitter Bootstrap 2.0
It's usually helpful to include a demo with these things :)
jaryd··on Horde backdoored
kernel.org, vsftpd, unrealircd, who will fall next?
jaryd··on Heroku down
Thanks for the thoughtful reply. I think that you raise some valid points here.

Regarding "If you are big you are paying an incredible premium to be on Heroku": Sure, Heroku is great (or cheap) for development and small-time deployment, however it is likely true that people get locked into it and (hopefully) grow quickly before they can scale away from a PaaS solution. In these cases, it is imperative to consider the marginal cost of alternative/off-site failover vs. the cost of downtime. This is what I meant by "separate the men from the boys". Those guys who are paying the incredible premium to continue to host on Heroku likely -know- that they are doing so, and have made that decision consciously.

While the situation is different, I am reminded of when AWS went down awhile back and the sites that had automated failover to alternative clouds really stood out.

The bottom line is that no one solution is ever enough. Tiny apps can likely get away with unexpected//unplanned downtime, however it ultimately delegitimizes them in the eyes of their users (read: customers), and that is universally bad.

jaryd··on Heroku down
Lets hope the simplicity of 'git push heroku' hasn't distracted most developers (and customers of Heroku) from Werner Vogels' core tenet of administration:

Everything fails all the time. (http://technocation.org/files/videos/original/mysqlconf2008/...)

This might separate the men from the boys (excuse the idiom) to see who has adequately prepared a DR/redundancy plan for when the cloud fails.

Edit: Improved link to Vogels' MySQL keynote from which the quote originated.

jaryd··on 22 EU states sign the ACTA ‘Internet censorship’ treaty
The Mayans were right!!!</panic>
jaryd··on Free online course: Programming for the Web with Ruby (Satish Talim)
You may want to work through Michael Hartls' "Ruby on Rails Tutorial" (http://ruby.railstutorial.org/) as well
jaryd··on Salary Negotiation: Make More Money, Be More Valued
http://salarytutor.com/ this is a pretty good and fast read on the subject with some actionable advice that will help prepare you for the conversation.
jaryd··on The Noun Project: Icons for everything
need a trailing "

edit: this is also useful

#!/bin/bash

for i in {1..1036}

do

unzip svg_$i.zip;rm svg_$i.zip

done

jaryd··on FreeBSD 9.0-Release Announcement
You raise some interesting points. 1) What makes it look like the project is no longer maintained? The latest patch release on the website is for 5.8p1 -- this is just 1 point beneath current (http://openbsd.org.ar/pub/OpenBSD/OpenSSH/portable/). 2) Great question. I would be interested in seeing the response this gets from the FBSD mailing list. 3) It is true that it is challenging (or rare) to get public internet speeds that will make HPN worthwhile, however I find HPN most useful on a LAN (typically within the same datacenter). I perform most of my data replication with rsync over HPN-SSH. It's multi-threaded and generally cuts CPU load over time. Thanks for linking to that thread over on LWN -- that was an interesting read.
jaryd··on FreeBSD 9.0-Release Announcement
It's awesome that they're including High Performance SSH (HPN-SSH) by default. This is a great project that deserves more attention: http://www.psc.edu/networking/projects/hpn-ssh/
jaryd··on Deobfuscating malicious code layer by layer
Check this one out too: http://synapse-labs.com/EN/Reversing%20step%20by%20step%20of...
jaryd··on CentOS 6.2 Released
Agreed. This is a great resource for tracking the dev team: http://qaweb.dev.centos.org/qa/blog
jaryd··on SOPA markup to continue this coming Wednesday
Stream live at: http://judiciary.house.gov/hearings/mark_12152011.html
jaryd··on Rep. Zoe Lofgren doing a SOPA-related AMA on Reddit
Mostly disappointing questions.. Nothing really new here
jaryd··on Insidious Bug or Comedy of Errors?
Oblig: http://globalnerdy.com/wordpress/wp-content/uploads/2007/12/...
jaryd··on Live video of House SOPA hearing
"If we can't get the definition of domestic internet site right then we're not ready for prime time." Chaffetz
jaryd··on Judge gives Universal Music 24 hours to explain takedown spree
Actually, it's in the process of getting worse!
jaryd··on Live video of House SOPA hearing
We can only hope...
jaryd··on Live video of House SOPA hearing
"Lets bring the nerds in and get this right" -- awesome
jaryd··on Live video of House SOPA hearing
it's a matter of course to read the amended bill into record before they proceed. everyone sitting there is presumed to have already been familiarized with the textual revisions
jaryd··on Live video of House SOPA hearing
Looks like today... http://www.dailypaul.com/193200/breaking-news-sopa-being-vot...
jaryd··on Live video of House SOPA hearing
Hopefully they have already dedicated a good chunk of time to reviewing the bill before sitting through the open reading...
jaryd··on Live video of House SOPA hearing
Stream Address: mms://a1481.l6576439480.c65764.n.lm.akamaistream.net/D/1481/65764/v0001/reflector:39480 Video Codec: WMV3 Audio Codec: WMA2
jaryd··on Red Hat Enterprise Linux 6.2 Now Available
Countdown to CentOS update! Keep an eye out over here: http://qaweb.dev.centos.org/qa
← PreviousPage 6 of 7Next →