rob-olmos

It'd be cool if payment cards had a built-in LCD screen for the PIN as a TOTP. That shouldn't be much harder for consumers than the existing card verification/security code.

Same here with my use cases being mostly for auth and control over cache objects.

I've found Fastly's Varnish recipes interesting though: https://developer.fastly.com/solutions/recipes

If the logs are stored in JSON, the jq tool can be used. I understand it's more complicated that grep for certain structures, but also having a library of jq filters for the app may be useful and can be shared.

Google Cloud also provides read/write serial ports over SSH: https://cloud.google.com/compute/docs/instances/interacting-... -- but I think AWS still doesn't.

One thing I've ran into was root not having a password since the cloud images are typically SSH key auth only. That was annoying when trying to fix something simple like iptables or entering maintenance mode for a disk check.

Commented on the original outage: Hopefully with this outage Cloudflare will provide non-Enterprise plans a CNAME record, allowing us to not use Cloudflare DNS and more quickly bypass Cloudflare if the need arises.

Hopefully with this outage Cloudflare will finally provide non-Enterprise plans a CNAME record, allowing us to quickly bypass Cloudflare.

(In case this isn't changed to the official AWS blog link)

"There are two other patches that impact the performance of the WordPress-NGINX benchmark, and both have been applied to master and PHP-7.4 branch:"

A patch to disable the use of huge pages in memory allocator fixed a 10% performance regression: https://github.com/php/php-src/commit/928c42211f737640e4dc3c...

The patch to enable the Zend Optimizer on ARM64 accounts for about 5% of better performance on M6g instances https://github.com/php/php-src/commit/4d7df449d0ab389b01b45f...

I don't think so. Project Silica talks about storing the data in droplet-looking voxels rather than etching language symbols. Cool video of the process: https://www.youtube.com/watch?v=6CzHsibqpIs

Similar opinion here. I put it off for when I could learn it better, and so far it's been fine... sometimes nice too when it has a feature I want that's already built-in (depending on version level and all that).

I wish RBAC was part of core rather than a paid addon. Oh well.

I've seen these these two user-agents from FB IPs, maybe others:

Mozilla/5.0 (iPhone; CPU iPhone OS 7_1_2 like Mac OS X) AppleWebKit/537.51.2 (KHTML, like Gecko) Version/7.0 Mobile/11D257 Safari/9537.53

Mozilla/5.0 (iPhone; CPU iPhone OS 13_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.1.1 Mobile/15E148 Safari/604.1

Which also execute javascript in some modified sandbox or something, causing errors, and executing error handlers. Interesting attempt to analyze the crawler here: https://github.com/aFarkas/lazysizes/issues/520#issuecomment...

For reference, related php-fpm config directives: listen.owner, listen.group, listen.acl_users, listen.acl_groups

And probably some SELinux config as well if the installed php package doesn't have them.

AWS support via Twitter said that the SHA256 digest of the payload is calculated and compared for S3 when using AWSv4 signature requests.

AWS support via Twitter said that the SHA256 digest of the payload is calculated and compared for S3 when using AWSv4 signature requests.

I use a Plantronics Legend bluetooth headset, which is pretty good at cutting out background noise. Tested with a phone.

Cheaper bluetooth headsets seem to pick up everything around them. Had that issue with a coworker where the headset was worse than using the internal mic.

Biggest and annoying issue though is consistent bluetooth disconnect/reconnect issues even on different MacOS machines. Latest firmware and such. Pretty sure it's not 2.4ghz interference.

Do you happen to know if AWSv4 with S3 also computes & compares the SHA256 of the payload/object or does it just use the specified x-amz-content-sha256 header's value?

FYI S3 Object Lock requires Content-MD5 header.

For the ETag, yes and no that it's an MD5 of the object depending on encryption and multipart upload: https://docs.aws.amazon.com/AmazonS3/latest/API/RESTCommonRe...

For the object upload, AWSv4 request signature uses SHA256 on the payload/object, but I don't know if S3 also computes & compares the digest or just uses the x-amz-content-sha256 header value.

Somewhat related recent curiosity: Is there anything new about 5G tower/backhaul infrastructure for edge computing that wasn't already feasible for 4G?

Not sure if Memex has this, but one feature I like with Toby is that I can a save window as a "session" and it makes a "collection" of all the tabs. Works well since I do window-per-topic that I'll come back to later.

I believe Toby lacks text search for the page's contents, so it's mainly just easier/better organization for bookmarks, and would be nice if the data wasn't only tied to their cloud, or if I could make an easy backup.

I think in addition to a spec, an official test suite that's used to certify an implementation as compliant would also greatly help.

This is the original announcement I'm aware of:

https://gsuiteupdates.googleblog.com/2019/12/less-secure-app...

I see. Although from the mmalone's comment it sounded like an AAAA record wasn't set at all, rather than set incorrectly.

Interesting. Any likely reasons why not having IPv6/AAAA make the site inaccessible to them?

Sounds like most of the internet would be inaccessible to them as well?

Impressive to me but $50 to retrieve 1TB vs cheaper tiers on AWS for slower. I don't know what GCP's retrieval throughput is though.

> Automate data back ups

This has always killed me about SaaS-es that don't provide any decent method for backups (and less so: restores), especially for data modifications (eg, accidental deletions) that there's no ability to rollback.

Somewhat related, I've been fond of flat-file or file-based configs as well. Such as Nagios/Icinga has configuration files, but now seem to suggest a database & UI/API.

File-based config made scripting the generation of the configs pretty easy and updating for changes by just overwriting the files and reloading the daemon.

IIRC, similarly TWiki also uses individual files for the pages and configs with RCS (Revision Control System) per-file to track changes.

Interesting. I did not think of the potential case that Asterisk could forward the STIR signature forward. Thanks!

How will it still be available and what underlying software work in Asterisk is being referred to?

Based on the given situation, the museum won't own the caller's cell phone number that they're trying to legitimately spoof for their staff's cell phone.

Is calling a custom script for an alert notification going to be an Enterprise level feature?

How did they go from 8 SATA ports to 32 SATA devices? The linked cable uses a SAS host/connector. Was a SAS card left out of the parts list?