Hacker News Reader

tomaacon Stop Disabling SELinux: A Real-World Guide

This is non-persistent and after reboot this seboolean will be set back to 0. You must use -P flag to make it persistent.

tomaacon A Quick Introduction to Flatpak

And to make it even more confusing there is also http://snapper.io/

tomaacon Bee Bread

Do you have any evidence or source that proves your claims about radioactive bee bread in Latvia and Lithuania? These countries actually were not affected that much. Much less than Scandinavia https://en.wikipedia.org/wiki/Chernobyl_disaster#National_an...

You should actually be worried about pesticides which kills bees and poisons bee honey and bread https://en.wikipedia.org/wiki/Pesticide_toxicity_to_bees

tomaacon Mikrotik router as OpenVPN Client

That is not quite true. They have soho product group: http://routerboard.com/products/group/20

tomaacon How to Protect Your Infrastructure Against the Basic Attacker

You should also tweak your guide for RHEL7 based distros. Things like journald, firewalld etc. Also remember that in RHEL7 sysctl and security.conf are configured a little bit different now.

Red Hat Enterprise Linux 7 Security Guide is a good reference.

tomaacon Norwegians campaign to give Finland a mountain

While it sounds like a nice gesture, it is quite dangerous actually. Maybe this generation of norwegians don't mind to give away part of their country but next generation will do. They might demand to give it back for some reason and here you go - endless disputes and friendship turns in hatred.

tomaacon Trojan found in Filezilla downloaded from SourceForge

https://cyberduck.io/

They have some issues with SSL certificate, though.

tomaacon List of genocides by death toll

That list is incomplete. It is missing the whole colonialism era and genocide of indigenous people https://en.wikipedia.org/wiki/Genocide_of_indigenous_peoples

Especially Spanish colonization of the Americas: It is estimated that during the Spanish conquest of the Americas up to eight million indigenous people died, marking the first large-scale act of genocide of the modern era

tomaacon Why Red Hat Acquired Ansible

Thanks and congrats! I have been using Ansible since version 0.2 when there were like 5 modules. Since then I have introduced and promoted it to every company I have been working for. Well done!

tomaacon Why Red Hat Acquired Ansible

I really would like to hear his opinion about this. Is this how he imagined Ansible when he started this project?

tomaacon Red Hat is buying Ansible

It is official now https://www.redhat.com/en/about/press-releases/red-hat-acqui...

tomaacon VMware vs. bhyve Performance Comparison

and proxmox

tomaacon The Art of Command Line

Hosted on Sourceforge which is now blocked almost everywhere.

tomaacon NixOS Linux

I am not sure if this is the same, but Redhat's Project Atomic does similar thing using rpm-ostree

http://www.projectatomic.io/

tomaacon Over 30% of Official Images in Docker Hub Contain Security Vulnerabilities

Check out Project Atomic http://www.projectatomic.io/. Or its downstream project RHEL Atomic Host. The whole update process for the host is much simpler. Read more abou it here: http://rhelblog.redhat.com/2015/04/01/red-hat-enterprise-lin...

Note: I am not related to Redhat, but we are considering Docker, too. And we are evaluating how would Atomic fit in our infrastructure.

tomaacon Over 30% of Official Images in Docker Hub Contain Security Vulnerabilities

And what happens when you launch new container from the same image? You need to run apt-get/yum again. Or rebuild image.

tomaacon Bamboo: Lua web framework based on Mongrel2, ZeroMQ and NoSQL

Not to be confused with Atlassian Bamboo https://www.atlassian.com/software/bamboo

tomaacon Theo de Raadt on OpenSSL vulnerabilities coming on the 19th

He is referring to https://mta.openssl.org/pipermail/openssl-announce/2015-Marc...

tomaacon Best Linux server backup system?

If you mention Bacula then you also need to mention Amanda http://www.amanda.org/

tomaacon Introducing the “rhel-tools” for RHEL Atomic Host

With systemd we are almost there http://www.freedesktop.org/software/systemd/man/systemd-nspa...

tomaacon HAProxy 1.5

What about SSL? HAProxy supports SSL offloading.

tomaacon Putin among Nobel Peace nominees

Nobel prize is presented in Oslo not Stockholm.

tomaacon Use SQL subqueries to count distinct 50x faster

Yes..

tomaacon Use SQL subqueries to count distinct 50x faster

Is there any reason why would one Start Every Word In Sentence With Capital Letter? I find it hard to read. Sorry for offtopic.

tomaacon Lavabit founder turned over the private SSL keys as an 11 page printout

Depending on font he used, I believe for OCR some characters might be difficult:

o01|IO

And even one wrong character makes SSL key wrong.

tomaacon System Administrator wanted

All reasonable requirements, but SHOES! Why shoes? It contradicts "Minimalist life philosophy preferred."

tomaacon Latvia blocking extradition of Gozi writer due to disproportionate US sentencing

Today it was decided to extradite him to USA.

tomaacon Build your own private, encrypted, open-source Dropbox clone

That is not true. Owncloud provides both SSL and file encryption:

http://doc.owncloud.org/server/5.0/admin_manual/configuratio...

tomaacon Salt: Like Puppet, Except It Doesn’t Suck

Ansible can use SSH or ZeroMQ, which is much faster.

tomaacon Priced out of Paris

You should come to Oslo and you will have other meaning of word "expensive".

For comparison: http://www.numbeo.com/cost-of-living/compare_cities.jsp?coun...