anderiv

Would you mind sharing which app you use?

Assuming you’re tunneling TCP inside of TCP, then in the event of non-perfect network conditions, you have two layers of the stack that are now trying to adjust the TCP flow parameters, re-transmit packets, etc. This will frequently end up in a situation where overall performance of the link is significantly worse than it needs to be.

I do know that many plants which require power to bootstrap themselves maintain emergency generation facilities (with battery backup for the diesel/natural gas engine starters). Hopefully there's a sufficient number of these to make the "dark start" issue not much of a concern.

The alloy of high-carbon steel that is used in many high-end knives will absolutely rust if washed in the dishwasher. Stainless steel knives generally won't rust, of course.

> why is this even for debate. he wouldn't last a day as CxO or board member on any fortune-500 company.

I'm not altogether certain that the ability to fit in or operate well in either of those circumstances is a rubric worth ascribing to.

Elastic IPs are region-specific (or perhaps even zone-specific - I can’t recall offhand), so those won’t work. One could possibly wire up something with their Global Accelerator product, though.

Sure, you could purchase your own drives. But then it wouldn’t be offsite. And it probably wouldn’t be on a redundant internet connection. And most likely not have redundant power and cooling. And, and, and.

Self-hosting at home (or in the office) is a great option for some if you’re not worried about needing an offsite backup. For those that do care about this sort of thing, though, the extra you pay to have someone else manage the thing is well worth it.

Agreed. It's been buggy enough that I've been looking for an alternative to migrate things to. Perhaps I'll try Obsidian!

I'm not sure what John is using, but they have a very simple example in their documentation. Go here and then click on "twilio-cli" in the right code type selector:

https://www.twilio.com/docs/sms/send-messages

This was a pleasure to read. I've been an rsync.net customer for ~6 months now, and am using Borg to send de-duped, encrypted backups to rsync.net from a few on-premise linux systems. As compared to other similar backup systems I've used, it's been a pure pleasure to implement and maintain.

Thank you for your great product and support, John!

It is indeed part of the Linux kernel. This discussion is about FreeBSD, though.

I’ve been using Mimestream since the very early betas, and have grown to absolutely love it for its simplicity and performance. The developers are very responsive, and are iterating quite quickly to tighten up the client before stable release.

I will absolute purchase a license when it’s out of beta.

IIRC a non-identifiable portion of the hash is given to the Google, then Google returns a bunch of potential matches with associated safety score, and then it’s up to the client to either block or not.

You and the team deserve massive kudos alone for not hiding SAML/SSO functionality away in only your paid tiers.

Thank you for this - it’s an example I wish more companies would follow.

Sheesh, there’s a wee bit of difference between a baker refusing to bake a cake and people threatening to kill others (and the platform refusing to remove that content).

You can’t both-sides this one.

I just confirmed this can also work using AWS Session Manager (a "secure" and easily-auditable way to provide shell access to EC2 instances):

    $ aws ssm start-session  --target i-XXXXXX | tee base64.txt

ATC primary radar can’t resolve objects that small, and the jetpack-person was unlikely to have the requisite transponder to make it visible to secondary.

Harmful? Really? The hyperbole of that statement stands in stark contrast to the rest of your post, which indeed is quite helpful, especially for those that haven’t heard of screen and/or tmux.

Perhaps a better title would be: “Raw SSH can be frustrating - here’s one way to fix that.”

Here’s the iOS app:

https://apps.apple.com/us/app/dark-sky-weather/id517329357

Thanks for your work on this!

Wondering if it’s possible to use this with our own self-managed ASG of ECS Host instances. I trolled through the GH repo quick, but couldn’t find any definitive answer.

Cripes, that would help explain why I had to jump my ‘16 Outback three times during early shelter-in-place orders after sitting for long periods with very little use. I just blamed it on a crappy OEM battery (which I suppose is partially to blame), but I didn’t know about the alternator situation.

It's free, which is stated explicitly in the first sentence of the linked news release.

They did indeed move away several years ago, so we’re not directly affected by the fire.

FYI, the date header on your (most excellent) post says "26 Oct 2019". :)

They do support it now, as of a few months ago.

See my addition above - this still seems to be broken.

So in my case, I actually performed an explicit CNAME lookup. The fact that the error message says "We couldn't find any CNAME records for foo.com" tells me that the name parser is still not handling hyphens correctly.

Agreed with the parent, I tried to resolve a name in the format:

app.example-foo.com, and got a “no records found for foo.com” error.

Among many other duties, I help manage a fleet of ~80 Macs for number of early-stage tech companies. We're doing some things well, and some things we don't have a good answer for yet.

Good:

- Sophos Endpoint protection (cloud.sophos.com). We've found this to work great, is easily-configurable, and is inexpensive, something around $25/user/year for the "advanced" license, which also gets you DLP functionality.

- JAMF Pro for MDM. If starting now, I'd probably go with the hosted "JAMF Now" product. We use this to enforce security policy, deploy apps, monitor patch compliance, enforce patch installation, etc.

- NoMAD for Active Directory integration. I've just started R&D on deprecating our AD and moving to Okta as a primary identity provider, so once this is ready, I'll be switching over to JAMF Connect, which supports Okta.

Not good / In progress:

- Centralized log collection from the laptop fleet. This is challenging due to the on/off connectivity nature of laptops.

- Sometimes NoMAD messes things up and user passwords get out of sync between AD and the local MacOS user database. This causes no small amount of frustration as you can imagine.

Hopefully this is helpful. If anyone else has suggestions on the "not good" items, please reply!

You can, but not in any secret way, at least not without breaking FCC rules. Encrypted comms on Amateur radio bands aren’t permitted.