lmns

206 karma · joined April 22, 2015

lmnson OPNsense and HardenedBSD are parting ways

I would trust a distribution with systemd _more_ than I would trust one without it. Systemd has a lot of knobs for sandboxing services now.

lmnson The Raspberry Pi can boot off NVMe SSDs now

I don't know what librem5 is doing there, but 7s is quite fast for a general purpose os. I wouldn't expect it to get much faster to be honest.

lmnson Hardware SAS Raid on the Raspberry Pi CM4

Are there any decent cases for the CM4 with the I/O board? Last time I checked there weren't any.

lmnson Cockpit – Integrated, glanceable, web-based interface for servers

You could have the best of both worlds and only modify the state of your system through a well defined API and then serialize the change in some kind of config file if and only if the change was successful (rollback to the last good state otherwise).

lmnson Ditching Excel for Python in a legacy industry

> An excel spreadsheet is usually easily auditable. The visual presentation and layout lends itself to review by others.

Tell that the next poor soul who has to edit some organically grown spreadsheets powered by VBA and malformed CSV files which generate your company's financial reports.

lmnson CentOS Project shifts focus to CentOS Stream

It's basically the beta of the next RHEL minor release, not a beta of a next major release.

lmnson 72% of smart TVs and 46% of game consoles hardcode DNS settings

Deutsche Telekom hijacked NXDOMAINs for over 10 years, though (maybe even longer). It's not like they did it for a few months and then got sued.

lmnson PHP 8

Have you tried Caddy as your reverse proxy? It's much simpler compared to nginx and it has very robust, integrated LE support. It's also packaged for Debian and CentOS now.

Write a systemd unit file for your golang service, put Caddy in front of it and you are good to go. It's not a PaaS, but it's simple and shouldn't be too difficult to maintain.

lmnson OpenSUSE MicroOS

The space is probably required for btrfs snapshots and to keep the last "good" image around in case a rollback is needed.

lmnson Stop using RSA (2019)

The point is that the alternatives aren't "green" and their implementations are mature, arguably even better understood than RSA and its implementations.

lmnson Raspberry Pi 400 Desktop PC

With USB sticks it's a different story. There are some manufacturers like Sandisk who claim they use wear leveling in all of their current USB sticks.

microSD is a mess in this regard. Wear leveling is less common there and only present in very specific and expensive niche models.

lmnson Raspberry Pi 400 Desktop PC

How do you know that complaints about the storage system are rare?

lmnson Raspberry Pi 400 Desktop PC

SD cards with wear leveling and error correction are hard to find and can easily be more expensive than similar SSDs.

lmnson Awk: `Begin { ` Part 1

You have to provide a schema anyway, so you can treat specific columns as integers.

lmnson Awk: `Begin { ` Part 1

I know, there is no easy fix for that.

lmnson Awk: `Begin { ` Part 1

Sqlite3 can import and export CSV via the CLI application. Both Ruby and Python provide CSV parsers in their standard library.

lmnson Letter to 20 Years Ago

Maybe it refers to cgroups and systemd?

lmnson Riot is now Element

Which is exactly the point of the name, isn't it? The name makes you think of leisure time, but in fact you are still working and discussing work-related things while using it.

lmnson Why does OpenBSD still include Perl in its base installation?

subprocess.run() isn't too bad.

lmnson The modern HTTPS world has no place for old web servers

The problem is not so much people snooping on your traffic, but injecting their own malicious content. Confidentiality isn't the only security goal of TLS.

lmnson Python 2.7.18, the last release of Python 2

CentOS / RHEL 8.2 will ship with 3.8.

lmnson Keeping a Bibliography

This is also my experience with JabRef on macOS. If I remember correctly, I had some problems where it silently corrupted parts of my bibliography. I'm not sure if it was related to me using it with subversion or some other problem, but I was a little bit surprised to say the least.

lmnson Employing QUIC Protocol to Optimize Uber’s App Performance

TCP congestion control is end-to-end. Routers don't need any support for it.

lmnson Red Hat Enterprise Linux 8 released

They do have their Software Collections with new major releases for nodejs, python etc., though. It is only the base system that moves slowly.

lmnson Why 'worthless' humanities degrees may set you up for life

Bumping the difficulty to make it credible is basically video game logic, though. It should be as difficult (or easy) as it needs to be.

lmnson Apache web server bug grants root access on shared hosting environments

That's not true, Red Hat actually has nginx in its Software Collections: https://access.redhat.com/documentation/en-us/red_hat_softwa...

lmnson Is there hope for IPv6?

> Are you confident that 100% of the devices you own use privacy addresses and do not leak non-privacy addresses?

I've heard stories, but I've never seen a modern operating system without privacy extensions in the wild. Maybe XP, but did XP have IPv6 enabled by default? As far as I know it didn't.

lmnson HP Ink Printers Remote Code Execution

For whatever reason my printer (8610) provides an automatic update via the webinterface, but it can't find any update. Also the HP firmware updater for macOS isn't signed. Oh well.

lmnson Going IPv6 Only [pdf]

You should have a look at the IPv6 privacy extensions. IPv6 doesn't work as you think it does. Your devices use temporary IPs even with a static IPv6 prefix.

lmnson Why the Luddites Matter

https://blogs.technet.microsoft.com/networking/2008/02/08/no...

tl;dr from the article:

> If the network name of a wireless network (SSID) is not broadcast, the clients must search for it with probe requests. So if you have one AP and 100 wireless devices, you partially limit exposure of the network name with one device while causing 100 devices to expose it instead.