Daily Shaarli
October 5, 2021
To create a printable key, either paste the contents of your keyfile or a key export in the text field below, or select a key export file.
To create a key export use
borg key export /path/to/repository exportfile.txt
If you are using keyfile mode, keyfiles are usually stored in $HOME/.config/borg/keys/
You can edit the parts with light blue border in the print preview below by click into them.
Key security: This print template will never send anything to remote servers. But keep in mind, that printing might involve computers that can store the printed image, for example with cloud printing services, or networked printers.
Megohmmeter Model 6529 (Digital, 50V, 100V, 250V, 500V, 1kV,420k-Ohm, V, Continuity, Alarm and Timer, PI/DAR)
- Selectable test voltages 50, 100, 250, 500 and 1000V
- Basic DMM functions; Volts, Continuity, and Resistance
- DAR and PI ratio test functions
- Dual line display to view the insulation value and real-time test voltage simultaneously in an easy-to-read format
- DMR mode - relative resistance comparison to a reference value
- 2-color backlighting easily shows alarm conditions
Dwindling investment in oil, gas and coal means high prices are here to stay //
FOR MUCH of the past half-decade, the operative word in the energy sector was “abundance”. An industry that had long sought to ration the production of fossil fuels to keep prices high suddenly found itself swamped with oversupply, as America’s shale boom lowered the price of oil around the world and clean-energy sources, such as wind and solar, competed with other fuels used for power generation, such as coal and natural gas.
In recent weeks, however, it is a shortage of energy, rather than an abundance of it, that has caught the world’s attention. On the surface, its manifestations are mostly unconnected.
ANY LIST OF THE MOST FAMOUS FINNS in the world today would be incomplete without the inclusion of Linus Torvalds, the software developer who created Linux, the world’s largest open-source operating system. //
Although Torvalds resides in the heart of Silicon Valley today and has a net worth of around $150 million, his origins are somewhat humbler, although by no means working class. He was born on 28 December 1969 to Finnish Swedish parents, one of whom is the journalist and MP Nils Torvalds. His grandfathers were Leo Törnqvist, another famous Finland Swede who was Finland’s first-ever statistician, and Ole Torvalds, the celebrated poet, and journalist. It was Törnqvist, his maternal grandfather, who first sparked Torvalds’ interest in computing, after asking him to help program his brand-new Commodore VIC-20 computer in 1981. //
In 1997, Torvalds left Helsinki and decamped in California, where he continues to work with the Open-Source Development Lab, a consortium of big tech players such as Intel, Siemens, and IBM that advocate for Linux development. His wife of almost 30 years is the six-time Finnish national karate champion Tove Torvalds, and both have been US citizens since 2010. However, Torvalds still returns to his homeland to give talks, especially at his old alma mater, the University of Helsinki.
A security auditor for our servers has demanded the following within two weeks:
- A list of current usernames and plain-text passwords for all user accounts on all servers
- A list of all password changes for the past six months, again in plain-text
- A list of "every file added to the server from remote devices" in the past six months
- The public and private keys of any SSH keys
- An email sent to him every time a user changes their password, containing the plain text password
We're running Red Hat Linux 5/6 and CentOS 5 boxes with LDAP authentication.
As far as I'm aware, everything on that list is either impossible or incredibly difficult to get, but if I don't provide this information we face losing access to our payments platform and losing income during a transition period as we move to a new service. Any suggestions for how I can solve or fake this information? //
ask him directly how to execute his requirements -- admit you don't know how, and would like to leverage his experience. Once you're out and gone, a response to his "I have over 10 years experience in security auditing" would be "no, you have 5 minutes of experience repeated hundreds of times".
The price associated with Wasabi’s pay-as-you-go pricing model is summarized in the table below. This price does not include applicable taxes or additional optional services such as Wasabi’s Premium Support plan, Wasabi Direct Connect, and Wasabi Ball Transfer Appliance.
$5.99 TB/mo (minimum)
($.0059 GB/mo)
Ingress & Egress Data: Free (as long as total ingress/egress data ~storage volume)
Megohmmeter Model 6528 (Digital, 250V, 500V, 1kV, 420K-Ohm, V, Continuity, Alarm and Timer)
- Selectable test voltages 250, 500 and 1000V
- Basic DMM functions; Volts, Continuity, and Resistance
- Dual line display to view the insulation value and real-time test voltage simultaneously in an easy-to-read format
- DMR mode - relative resistance comparison to a reference value
- 2-color backlighting easily shows alarm conditions
Do you know how to spot a scam?
Every year, thousands of people like you lose money to phishing. If a hacker were pretending to be your bank, would you be able to tell?
Imagine a future without access to knowledge..."
The root cause of the worldwide outage appears to be a flubbed BGP route update.
Dane Knecht
@dok2001
. @Facebook DNS and other services are down. It appears their BGP routes have been withdrawn from the internet. @Cloudflare 1.1.1.1 started seeing high failure in last 20mins.
12:01 PM · Oct 4, 2021
Win says:
October 4, 2021 at 8:56 am
Mr. Woolman, founder of Delta Air Lines, said it best, “Consideration is an extension of safety. It begins with the first contact with our passengers, no matter where this is—reservations, porter, ticket agent or wherever. Make the customer feel special. There’s more to flying than just buying a ticket.” Do we sometimes fail, of course. But we try to learn from our mistakes and correct them. Delta’s management stresses that our success is based on Mr. Woolman’s philosophy of hiring the best people to do the job, paying them a good wage, appreciating their work and treating us with respect. In my years with Delta, I’ve had some issues…every family has issues. But, in the end, the fair treatment of our passengers is a direct result of management’s philosophy of… “stay within the box” but if you must go outside of the box, do what is right and we’ll back you up. The key is “back you up” SouthWest and Alaska both run great airlines because they empower their people to do well. They don’t belittle their employees. Ask any AA employee if they remember when “Dougie” got a DUI or when he told them that they have nothing to do with the company’s profitability. Jerry Grinstein said it best when he told Delta employees that we have everything to do with profitability.
The purpose of this page is to answer commonly asked questions about Pine and give advanced information related to these answers. The main point of this page is that much of the help that exists today about Pine is not completely satisfactory in my opinion, in the sense that it lacks a more general view. In order to explain this, much of the help is written on the form of "how do I do this?", or as an explanation of a feature that already exists in Pine.
This page takes a different approach to helping you improve your experience with Pine. Instead of answering questions or explaining features, this page gives an in-depth description behind each screen and configuration option. I describe each screen, what configuration options relate to it, what are the advantages and disadvantages of setting them. I do also answer questions like "How do I?", but my main intention is to give you a full picture of what you can (and can't) do.
Earlier this year Chrome developers decided that the browser should no longer support JavaScript dialogs and alert windows when they're called by third-party iframes. //
When the web developer community finds out Google is going to break a ton of websites through a tweet, you know communication has failed. But there was a follow-up tweet that's actually far more disturbing than the news of alert() disappearing.
The tweet comes from Chrome software engineer and manager Emily Stark, who is of course speaking for herself, not Chrome, but it seems safe to assume that this thinking is prevalent at Google. She writes: "Breaking changes happen often on the web, and as a developer it's good practice to test against early release channels of major browsers to learn about any compatibility issues upfront." //
First, she is flat out wrong – breaking changes happen very rarely on the web and, as noted, there is a process for making sure they go smoothly and are worth the "cost" of breaking things. But second, and far more disturbing, is the notion that web developers should be continually testing their websites against early releases of major browsers. //
Web developer and advocate Jeremy Keith points out something else that's wrong with this idea. "There was an unspoken assumption that the web is built by professional web developers," he writes. "That gave me a cold chill."
What's chilling about the assumption is just that, it's assumed. The idea that there might be someone sitting right now writing their first tentative lines of HTML so that they can launch a webpage dedicated to ostriches is not even considered.
What we are forced to assume in turn is that Chrome is built by the professional developers working for an ad agency with the primary goal of building a web browser that serves the needs of other professional developers working for the ad agency's prospective clients. //
As Keith points out, this assumption that everyone is a professional fits the currently popular narrative of web development, which is that "web development has become more complex; so complex, in fact, that only an elite priesthood are capable of making websites today."
That is, as Keith puts it, "absolute bollocks."
Christopher F. Rufo ⚔️
@realchrisrufo
WINNING: Fox Business' @CGasparino is reporting that major Wall Street firms are ditching critical race theory training programs, partially in response to my reporting that embarrassed American Express and other companies.
Public exposure works.
Big Biz has found that Critical Race Theory is bad for business
nypost.com //
And sure, it’d be easy to read these newer shifts away from CRT off as too marginal of a victory. Those companies will still have “diversity training” of some sort. Yet, how long has it been since the right has gained any real ground culturally, especially in the arena of how we view race as an aspect of society? Any battles won against CRT are noteworthy, even if the war continues.
The zpool configuration at rsync.net is simple and straightforward: we create 12 disk raidz-3 vdevs (which can sustain 3 disk failures without data loss) and concatenate them into zpools.
This allows for a nice, even, five vdevs per 60 drive JBOD. 12x16TB disks in one vdev is still a number we (and our retained consultants at Klara Systems[1]) are comfortable with.
We also employ three SSD cache drives per zpool - one single drive for L2ARC and a mirrored pair of drives for the SLOG. This is a very standard configuration and anyone working professionally with ZFS will recognize it. //
We maintain a full complement of checksum commands that you can run, over ssh, to verify files:
ssh user@rsync.net rmd160 some/file
The full list of checksum commands is:
md5 sha1 sha224 sha256 sha384 sha512 sha512t256 rmd160 skein256 skein512 skein1024 cksum
... and note the last one in the list, 'cksum' ...
cksum is interesting because if your use-case is not security or collision detection but, rather, simple verification of file transfer and/or integrity, cksum is much, much faster than the "serious" checksum tools. You should consider cksum if you have simple integrity checks to do on millions of files, etc.
https://www.rsync.net/resources/regulatory/pci.html
The rsync.net platform is so simple that our first PCI scan vendor, in 2006, could not actually verify that we were up and running.
We offered so little attack surface for their scans that they (incorrectly) assumed we were offline.
Our platform only answers on port 22 with OpenSSH.
That's it.
I do security and I title this "Most secured platform in the world."
stavros 6 months ago [–]
Oh yeah? Well I run one where no ports are open. In fact, I haven't even connected it to the network.
xarope 6 months ago [–]
Wasn't that the joke about how the original windows NT server got it's C2/ITSEC rating?
stavros 6 months ago [–]
I haven't heard that joke!
batch12 6 months ago [–]
I'll raise you-- I have one that I keep powered off...
stavros 6 months ago [–]
I can top that: I don't have one.
krylon 6 months ago [–]
That's nothing. I don't have thousands.
rubiquity 6 months ago [–]
What are you two even talking about?
paulmd 6 months ago [–]
The three golden rules of computer security: do not own a computer, do not power it on, and do not use it.