sh-run

Yeah, I don't want to sound anti-union, but I really don't understand what the expectation is here.

Workers sitting around doing nothing all day? GM producing excess inventory?

I absolutely love my Tacoma. It's a 2009 4dr TRD Sport with 164,000 miles. I have no desire to 'upgrade' to something newer. My only regret is getting the short bed, I sleep in the back a few times a year and it'd be nice to not need to sleep in the diagonal.

The people I know who own the 3rd gen Tacomas seem to like them just as much as I like mine.

I grew up thinking you could substitute fruit for fruit juice. It turns out fruit juice has just as much sugar as soda and almost none of the benefits of raw fruit.

I think better health education would go a long way.

I agree that MPLS would be used for transport through the Infineras, but the article specifically states that this was caused by management traffic.

MPLS doesn't have a concept of a broadcast address and wouldn't have been used for management traffic (except maybe during transit). MPLS is really just used to get IP packets to their destination with less L3 overhead. Full disclosure I work in the DC space, not the provider space so I'm far from an expert on MPLS.

Ethernet famously doesn't have a TTL, so maybe this was just a typical Ethernet broadcast storm. In that case I don't know why TTL would've even been brought up.

They keep throwing around the word packet, which implies layer 3. Of course lots of people say packet when they mean frame.

Edit: There is a comment above saying they have an RFO stating this was a broadcast storm. So it was probably Ethernet and CenturyLink brought up TTL as a way to blame the protocol.

Assuming that by

> 3. no expiration time, meaning that the packet would not be dropped for being created too long ago; and

they mean the TTL was set to zero.

From RFC 1812:

> A router MUST NOT originate or forward a datagram with a Time-to-Live (TTL) value of zero.

So a packet with a TTL=0 should never be on the wire (Example a router receives a packet with TTL=1, if it's not destined for that specific router, then it gets discarded). My guess is the switching vendor had bad code that didn't handle TTL=0.

It's been a while since I was in a position where I regularly watched servers boot, but 2015ish I was doing a lot of 'boots on the ground' sysadmin and virtualization work. Servers do a lot of additional testing during boot-up, temperature sensors, RAID cache batteries, memory and RAID arrays are all checked. Some of those checks can be disabled, but you don't really reboot production servers regularly so you typically wouldn't want to. The extra 3 minutes of boot time is much easier to deal with than a bad host coming online.

On top of all that it's pretty standard (at least in the VMware world) to store the OS on an SD card. So the OS has to be read into memory and ESX is kinda slow to boot even if installed to a disk.

It's not even about freedom. The NSA and FBI would love to get legislation in place that weakens encryption, but the fact of the matter is you can't weaken encryption without breaking it.

Your options are basically to either force everyone to use short keys that can be brute forced by the NSA (and anyone with cash to throw at AWS) or to set up a trusted-third party to store everyone's private keys and then either enforce long key lives or come up with a mechanism to transport the keys to the third party as old ones expire.

Weakening encryption would lead to massive issues for both corporate and personal security. What's worse is there wouldn't be anything stopping anyone from rolling their own crypto without the NSA's permission (it's literally just math), so it'd be business as usual for terrorists and black-hats.

1) Install Django

2) django-admin startproject mysite

Edit: To be completely fair this doesn't anything for the front end, unlike create-react-app. I'm not a web developer so I don't really have a dog in this fight.

This is a question I've found myself asking quite a bit lately. Paper products are often marketed as a 'green' alternative to petroleum products. IIRC much of the plastic we use is made from a byproduct of the oil refinement process so it's something we have anyways. Even though paper products biodegrade quicker, it seems like unless the paper product is made from 100% post consumer waste a properly disposed plastic product is better for the environment.

I do think part of the problem is that so many of our landfills are poorly managed. In high school I used to spend my summers working for the public works department in the rural community I grew up in. A few days out of the month we had to go out to the fields near the landfill and pick up plastic bags and other bits of trash that had blown out of the landfill before being covered.

I say this as someone who avoids single use plastics, drinks tap water, recycles, etc.

Do you have custom rules enabled? I'm running the default uBlock Origin (version 1.18.6) on Firefox (60.8.0esr - company machine) and didn't have any problems. uBlock reports that it blocked seven requests to four domains (ads-twitter.com, bing.com, facebook.net and googletagmanager.com)

I'd like to see more done in the open networking space. Cumulus Linux was talked about a ton just a few years ago, but it seems like I haven't heard about it as much lately. Probably because Juniper and Cisco have (mostly) managed to catch up on the automation front.

I couldn't find anything concrete on the CERN website, but in their virtual DC tour I noticed HP Procurves as top-of-rack switches. I was really hoping to see whitebox switches.

This is really interesting. I'm fortunate enough to live in a city that collects yard waste and composts it. I've never considered that it could be used as an energy source, much less a carbon negative one. I doubt I could produce a usable amount of electricity by myself with something like this, but I'd be curious to see how much energy a city of 900,000 could produce with yard waste.

Edit: From the feedstocks page (http://www.allpowerlabs.com/support/support-feedstock) it looks like this works best with wood and woodlike fuels. I'd still be curious if grass clippings could be processed in a way to make them work similarly.

I've got a lab mix who used to have horribly itchy dry skin. Since his coat is black, this also led to visible dandruff in his coat.

I tried several different types of shampoo (and a lack of shampoo), along with a spay on solutions. None of those helped. My vet suggested Iams, but that didn't seem to change anything, so I started using grain free dog food (at first Diamond Naturals) and he quickly improved.

Of course this was nearly 6 years ago, maybe now that he's older he'll be less sensitive.

I've got a t470s, it's really not that bad. Roughly equivalent to swapping parts on my 2010 MBP, you remove the bottom and everything is right there. I don't love that I only have one DIMM slot, but it's still a very serviceable machine.

I also had an x220 (I actually keep it around my office as a spare). Adding a second SSD to the WWAN slot required basically a complete teardown of the machine. The swappable battery seemed nice, but the battery in mine falls out because the locking mechanism broke.

For my use I actually prefer the newer style thinkpads. If I need to replace the battery I'll deal with the 5 screws on the bottom. Regarding the t490 RAM, it's like my T470s, one stick soldered and one DIMM slot.

I'll also add that although Lenovo is far from perfect (superfish), they do have a history of correcting bad design decisions based on customer feedback (see the t440/x240 trackpads).

Above you mentioned setting this up as a scheduled job. In this case the job would need to run as root (or you'd need to assign the appropriate permissions in the sudoers file, but people are lazy). If a non-root user had write privileges to the file, they could modify the script and thereby gain root code execution.

Naturally it's on the user to properly configure the permissions.

I'm not saying this isn't a worthy project, I'm just adding to the discussion on why people should be cautious when running scripts with root permissions.

Yep, finding and modifying a script that runs with root privileges, but is writable by non-root users is the oldest privesc trick in the book.

With the proper permissions something like this should be ok, but I'd tread lightly. Especially with something that dynamically updates your hosts file.

I've flown carry-on only most of my life and I've done up to two week trips (business and personal) with only carry on luggage. I'm also not the type of person that just hangs out in my hotel room after work. Of course if you need to wear anything nicer than a polo shirt to work this may not be possible.

1. Wear your bulkiest shoes to the airport

2. Find pants that can be used for work and play (I like Kuhl Slax)

3. Plan on doing laundry (or paying someone to do laundry) on trips over a week. Make sure you bring clothes to wear on laundry day!

4. Don't bring crap you won't use, but it is ok to bring items that you don't necessarily need if as long as they add value to your trip. As an example, I always travel with my Olympus EM5.2 and two lenses.

Interestingly, linux has ksplice despite being monolithic. To be fair I've never used it and I understand that it's fairly limited in what all can be patched without a reboot.

End users should never see emails that fail DKIM or SPF checks. Sender address spoofing is a solved problem.

If a company gets owned because they failed to implement SPF or DKIM properly, IT is at fault, not the employee.

I've been a Fort Worth resident for nearly 4 years.

Anecdotal, but my old neighborhood (far south - near Crowley) had tons of residential solar (relatively speaking - probably 1/6 of the homes). It was a new development with no mature trees. TXU actually has a pretty attractive [residential solar program](https://www.txu.com/savings-solutions/renewable-energy/solar...) that lots of my neighbors took advantage of.

I've since bought a house built in the 60s. My new neighborhood (Ridglea) has lots of mature trees. There is no way solar would work here. My roof only gets sunlight for a couple of hours a day.

As a Network Engineer at an org with decent staffing and a great cyber sec program and as someone who recently started working through the OSCP material. I'd like to agree with you and I will say I'm not overly worried about this (we'll still patch the second we can).

Cisco isn't exactly making things hard on attackers. Here's a couple of other vulnerabilities that could be used in conjunction with this one: Hardcoded credential vulnerability in IOS-XE (CVE-2018-0150). IOS-XE hasn't been without privledge escalation vulnerabilities either(eg CVE-2019-1754, among others)

Many orgs are unwilling to take a network outage for patching, especially in places like their DCs, internet or WAN edges where many of these devices would be deployed. I'm also aware of companies that are understaffed, where employees don't have the extra cycles to patch or apply workarounds. These are the same places that don't have active cyber security departments (no red-team, no vulnerability scanning, no dot1x and no written cyber security requirements) and don't budget for redundancy (making it even harder to patch). It only takes one forgotten NAT and firewall rule or a misplaced/unapplied ACL to end up with something exposed to the internet that shouldn't be. With how sophisticated some attackers have become and the slow rollout of network patches, this will probably be actively exploited even if it hasn't been already.

On the iPhone Xr power + volume down brings you to the emergency call screen and disables faceID. Technically either volume button works, but if the phone is awake power + volume up just takes a screenshot. On my Xr with apple pay enabled mashing the power button 5 times just brings up apple pay, puts the phone to sleep and then wakes it back up.

I'm not sure if it's the same on other iPhone X models.

I recently bought a house built in the 1960s. It's surprisingly easy to add Cat6 to an older home as the interior walls aren't insulated. I've been adding drops as needed and it takes me about 30 minutes start to finish to run a new drop.

I'm out the cost of materials (maybe $200?) and the price of having an electrician add an outlet to my "MDF"/hall closet ($175).

I go backpacking a couple times a year with an almost identical tent (https://www.sixmoondesigns.com/collections/tents/products/lu...). The six moon's version of this tent does include a couple of small poles that slide into the top of the canopy, which I think is to improve water shedding. I've used the tent without them before and didn't have any problems.

Overall I'm a huge fan of the design. It's super easy to setup and tear down, you can control the airflow by raising or lowering the base of the canopy, it packs small and I've never had a problem with water getting in.

I grew up in Carson county. 166mph isn't ever really safe, but the Texas Panhandle is flat (I mean seriously flat) and I40 is a pretty well kept highway. If your going to go 166 on public roads, that might be one of the best places to do it..

I will add 10:22am there would've been quite a bit of traffic (relatively speaking) and highway patrol loves hanging out on I40 (as it's a major drug corridor).

In 2012 I switched from a 2010 MBP 13" to a Thinkpad T410 running linux for personal use and haven't looked back. I distro hopped for a while (Ubuntu, OpenSUSE, CrunchBang, Debian and Arch) before settling on Fedora. I'm seeing quite a few complaints about usability issues in Linux. I think that's fair for the most part, but as a counterpoint, I've had very few issues and these days it seems like most things just work.

Fedora is not perfect out of the box, but it's pretty easy to fix.

1. Install Fedy (folkswithhats.org), provides one click installs for pretty much every application I use that isn't in the fedora repos. It also has a script that improves the font rendering. 2. Install Gnome Tweak Tool, I wish this was included by default. It makes it easy to change themes, keybinds, etc. 3. Install a decent looking theme (I use Arc). IMHO at this point the UI looks far better than my wife's Macbook Air and is significantly more usable (of course that's coming from a long time gnome user).

At that point I'm pretty much done. You no longer need to install TLP or powertop to get good battery life. I can't remember the last time I had a kernel panic (while my Windows 7 machine at work BSOD'd this morning). I vastly prefer the trackpoint on my thinkpad to any touchpad I've used (although my old MBP had the best touchpad I've ever used). As a bonus I spend lots of time at work logged into a redhat server, so having the same CLI on my personal machine is great.

Another point is that you can activate a Windows 10 VM using the OEM key. I keep a Windows VM installed just in case, but I seldom use it.

I will say that I'm getting ready to pull the trigger on a T480 and am going to stick with the 1080p display because I've heard horror stories about scaling in linux.

This article incorrectly refers to ACS as a firewall system. ACS is used primarily to control management access to Network Devices via TACACS+ or RADIUS. It offers no firewall functionality whatsoever.

This is arguably worse than it just being a firewall. I imagine that it wouldn't be a huge leap for someone to use this exploit to create a local account and policies to give themselves access to every router, switch, firewall and appliance in an enterprise.

Another data point, I grew up in a small town outside of Amarillo and now live in Fort Worth.

I went down (south) to Lubbock for College and over to Fort Worth (east) when I graduated. I still head over (west) to Lubbock occasionally because I have a sister going to Texas Tech. I go up (north) to Amarillo to visit my parents.

Maybe it's just me, but I haven't really noticed anyone using "out" to describe a direction. People do head "out" and go "out" all the time though.

We still use tapes at my enterprise. I'm on the network team, so I don't really work with the tapes directly, but it doesn't seem as inconvenient as it might sound.

We have a few large "tape libraries" in our data centers. The tape libraries have a robotic arm that handles the bulk of the tape swapping and organization. Humans are involved in loading the tape library and carrying the tapes offsite for storage.

I'm speaking as someone who has had a couple of casual conversations about the tape libraries and am not involved in the management of them in any way. They could actually be a huge pain.

I've lived in Fort Worth, TX for about a year. I was already aware of the existence of these devices. I had no clue that my local PD was spending such an insane amount of money on surveillance. It's also worth mentioning that our population is only 792K.

I've lived in Texas most of life and in general I think the people here are great. However, Texans do have a tendency to blindly support anything the Military and Police want to do, while at the same time complaining about big government.

I guess I'd better start bringing this up in my circles. I don't think many people are fully aware of what's going on.