jlgaddis

Joined 13 years ago

Karma
11,467
Submissions
4,950
Member since
Jan 21
senior network engineer, linux/bsd sysadmin, open source advocate

blog : http://evilrouters.net/

email: `echo si.ddag@nh | rev` (or see gpg key)

gpg: https://keybase.io/jlgaddis/key.asc

fpr: E5A0 25DA EBB3 B46E CCE9 6517 7A58 9B9E 077B A949

View on Hacker News

Recent submissions

Comment · 4 years ago
I upgraded my home network from a Cisco 3750G to a Brocade ICX 6610 a couple years ago...

  - 40 GbE to the "new" (in process of being set up and deployed) NAS

  - 10 GbE to the "old" (being phased out) NAS (was: 40 GbE)

  - 40 GbE to my workstation

  - 10 GbE to the "other machine" on my desk

  - n x 10 GbE to the cluster of ESXi servers

  - 10 GbE to other misc. servers in the rack

  - Multiple 10 GbE and 1 GbE links to the PTP GrandMasters and NTP servers

  - Plus all the various PoE devices (APs, VoIP phones, etc.) and miscellaneous other hosts (NTP appliances, DRACs, PDUs, NetBotz, etc.) at 1 GbE and/or 100 Mbps
Unfortunately, I'm just about out of 10 GbE ports so I may need to get another ...

Highly recommend the ICX 6610 in particular. The only other Brocade (Ethernet) switches I've personally managed are the "access layer" FCX switches (in an old position 10+ years ago).

Comment · 4 years ago
Play stupid games, win stupid prizes.
Comment · 4 years ago
Comment · 4 years ago
As a "normal" driver, the pulsating lights absolutely are annoying... and don't even get me started on those loud ass pipes!

Now, as a motorcyclist who has been hit head-on more than once by drivers who swore "I didn't even see him!" -- with the last crash leaving me with multiple broken bones and an inability to walk for several months -- you better believe I now have both a pulsating headlamp and a nice set of loud ass pipes (they're even called "Street Cannons")! on my bike.

I've also lost a non-zero number of friends due to folks who swore they didn't see them.

It's now been eight years since I've gotten hit... so I really am sorry if my headlight or pipes bother you as I pass by but, well, I have loved ones I'd like to see again so I hope you'll forgive me.

Comment · 4 years ago
Too little info to provide any real advice besides the obvious (see below). Out of curiosity, though, do you recognize the name of the merchant?

--

Anyways, there's a toll-free number on your card. Call it and explain the situation to them. They'll likely re-issue your card and call it a day, unless the specific transactions trigger some sort of "red flag" (although, if that were the case, the fraud department would likely have noticed before you did and already took action).

There are certain types of questions that aren't really appropriate for an "Ask HN". This is one of them.

Comment · 4 years ago
GitHub is only slightly better (in this regard). You can't perform an "advanced search" without logging in.

Still, I'd rather use GitLab ober GitHub.

Comment · 4 years ago
If they're just now patching it, I kinda feel like they deserve to spend their weekend patching Windows boxes.

> This bug was patched by Microsoft in June 2022 ...

Comment · 4 years ago
Comment · 4 years ago
Comment · 4 years ago
I was just a teenager around this time, in middle school or perhaps high school, and still in the early stages of programming (after moving on from the Commodore 64 and 6502 assembly), but -- even three decades later -- it's nice to finally have an answer to that one particular question that was asked so often and by so many all throughout those years:

> Just WTF were those Microsoft guys smoking when they designed this shit?

<g>

Comment · 4 years ago
I almost want to ask if this is a real question.

Obviously, things have changed since then, but there was a time that not everyone had 24/7 always-on access to the Internet. Really, that's only a recent thing. How do you think programming took place -- across a generation or two -- before then?

In my case, it was 1999 before I was able to get an Internet connection that wasn't dial-up Internet -- but I lived in a small, rural town in the midwest, not in a major city. I was the first person in our area (perhaps a 30 mile radius) to have an "oh-my-$deity-this is-so-amazingly-fast" 768k/128k DSL line (besides the two guys who ran my ISP) as I knew them and they asked if I would, effectively, be a "beta tester" to make sure things were working as they 2were supposed to be before they started offering the service to customers.

So, yeah, before then it was possible to program without a Internet connection. That was the "default", normal situation, in fact. We had (dead-tree) books, for example, and could telephone other people, there was FIDOnet ("before Internet"), Usenet ("after Internet"), e-mail and mailing lists and, eventually, even the web (from 1991 on, of course). Plenty of programming happened without Internet access before then (in fact, all of it did, basically).

Of course, some programming is more complicated nowadays, when you need a library for every little thing you do, so I suppose programming without an Internet connection might not be possible if you need to download a library for for .. loops or something.

(By the way, when I was in high school, I'd write code on paper (whatever program I was working on at the time) while sitting in class. When I'd get home after school, then I could type it in on the computer.)

Of course, if you are one of those "programmers" who have to stop and Google something afte every five lines of code, well, it's probably not possible.

Comment · 4 years ago
For the FBI.
Comment · 4 years ago
> The exact number of U.S. residents who potentially had their information reviewed isn’t known because there’s no precise way to measure the data, according to the report.

How convenient.

Comment · 4 years ago
I'm (not) looking forward to the future data breach notifications / post-mortems that include something like "... our developers used a tool to copy the production database to a dev database on their laptop ..."

Honestly, I'm kinda surprised by the lack of comments advocating against doing this.

Comment · 4 years ago
> That's probably too limited actually. Because you can have a whole bunch of stuff in PAM: LDAP, OTP, Yubikeys, and all kinds of other fancy modules. Doesn't seem that unix_chkpwd handles any of that.

Yes, you're right. unix_chkpwd doesn't handle any of that and, in fact, was never intended to handle any of that -- and that's the entire point!

The entire design of PAM is, well, to have separate "modules" that are "pluggable" depending on how you need to handle "authentication" -- LDAP, OTP, Yubikeys, etc.

That is, the pam_unix module (which uses unix_chkpwd) is used when you enter in your (local user account's) password. If you're using something else -- LDAP or NIS or whatever -- for user accounts (i.e., your "passwd" database) there are separate (PAM) modules for that!

> Also, I still think it has to be a network service, ...

No, it really doesn't and, besides, there are other alternatives that would be much better to use instead of a network socket (such as a local UNIX socket, for one).

I really try not to make such remarks here on HN, but in this case it does seem that you have a fundamental misunderstanding of just how this stuff works (which is almost certainly why you're comment has been so downvoted).

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton