feld

Which professional routers? Cisco doesn't use QNX and Juniper uses FreeBSD. I'm not sure there are any other router manufacturers that matter.

Ssh agent forwarding is insecure. Don't use it.

https://heipei.github.io/2015/02/26/SSH-Agent-Forwarding-con...

Giant Schnauzers are hypo-allergenic and are increasingly being trained as guard dogs

Probably SpiderOak?

Has there been something more recent than this case?

http://www.thenewspaper.com/rlc/docs/2011/ca-macias.pdf

"Here, Officer Berg did not qualify as the appropriate witness and did not have the necessary knowledge of the underlying workings, maintenance, or recordkeeping of the Redflex Traffic System. The foundation for the introduction of photographical evidence and the underlying workings of the Redflex Traffic System was outside the personal knowledge of Officer Berg.

In absence of a proper foundation, the photographic evidence was held inadmissable."

The officer cannot be the accuser and introduce the evidence if he has no expertise in how the evidence was obtained.

I'm not entirely sure what this is about. Are you saying the list of backends is dynamic and retrieved from DNS? Why would you do this? Why are the backends changing so frequently? This seems like a major design issue. Why not have one backend that's anycasted with equal priority and you can pop backends in and out as you please?

Also, why wouldn't you just solve this with SRV records? Just patch Varnish to support SRV properly and magic you get everything you ever wanted including failover and priorities. That's probably a more sane request.

You could say the exact same thing about Varnish. In fact I say your money would be better spent on premium Varnish than on premium Nginx.

You have a constitutional right to face your accuser. Traffic cameras have got to go.

Yes, the test to see if "x" matches is the old school trick I was taught

I have great news for you: https://html5zombo.com/

At MeetBSD 2016 they announced a roadmap of a Raspberry Pi type device by end of 2017

This is good. The closest I've been able to get to anonymous ownership is buying a domain on Gandi and then delegating all roles except Owner to another Gandi account under a fake name. This way I never show up in WHOIS at all but I guess Gandi still knows who bought it (I didn't use bitcoin)

I really want to see more of these kinds of services. Anonymity is important.

The finger pointing in this thread is astonishing

It's broken.

I spent a day fighting to get systemd to properly handle bind mounts on boot. It doesn't reliably mount them and there are tons of blog and forum posts complaining about it. It also surprised us that it doesn't obey the "bg" flag for NFS. You have to use "nofail" instead.

I have been informed today that a new MySQL cluster built at work on CentOS 7.3 doesn't reliably start MySQL on boot.

We have none of these problems with our FreeBSD servers. systemd eats away at my time every week and I loathe it. It might not be a nuisance for endusers but it's a nightmare for sysadmins.

Probably easier to just look at BGP

http://bgp.he.net/AS3#_prefixes

They also have a very clever greylisting approach -- it compares against senders in your address book as one point of data which I've never seen done before because usually the spam filters I've run don't have access to that data and no open source greylist daemons do it to my knowledge

Everyone I've moved to Fastmail has found its spam filtering to be superior. It was the first thing my wife noticed.

But it's not the best spam filter

Audiophile products are always a scam. People who talk about owning them are not to be trusted.

Gmail's UI is terrible. Where do people get the opinion that it's good? It's slow, nonintuitive, requires I click a button to see updates new emails on a thread, the filtering/labels are terribly limited... I could go on

No, missed that. Interesting.

Nikola truck design uses a natural gas turbine to charge the batteries. Lower weight, longer distance, 6 wheel drive, better performance... I expect Tesla to beat this.

https://nikolamotor.com/one

Search HN for the recent article on starting an ISP. It's expensive and not worth your time.

Too much email. Too many people I know don't want to share their phone numbers. Forums are generally terrible.

Try using Mastodon and you'll find it's twitter with meaningful conversations. 500 characters is a game changer.

$3k??! How is that possible? I get personal and business taxes done for $200

No that's what makes it suck. The limitation was for SMS compatibility, but the reality is that it makes it impossible to have meaningful discourse.

Mastodon is not GNU Social.

We do both. Ssh keys are the backup if there's ever a kerberos outage.

Also make sure to deploy the ssh keys somewhere the users can't write for extra security. Don't allow them to control their own authorized_keys files! :-)

Kerberos + ssh is amazing. I don't know why more people aren't aware of this holy grail setup.