feld

My day job includes working on FreeBSD systems and also doing open source FreeBSD work (push upstream, pull down to us). There are sometimes embargoed security notices in my email. There is no chance I will permit my employer to MITM my SSL and risk some clowns in corporate IT from obtaining these mails. (highest security ones are GPG encrypted, but others are not)

I need my personal email to do my work. It needs to stay secure from even my own employer. Period.

Why doesnt google have a lab of MITM proxy equipment instead of testing conformance in the wild?

Fastmail is Australian. If you have a support issue and need to have an email examined they refuse to help unless you create a top level folder called "forwebmaster" and put the email there.

The first time I had to do this it solidified my trust in their services.

cough Mint

Why not release sooner and document the code smells? Maybe you'll get patches

Cool, thanks for sharing. I would hate to have to muck around in /proc manually to set this.

Full disk encryption on their servers and they ignore non-Australian court orders

zero downtime noticed in several years. They are public about their issues but I cannot remember ever being unable to access my mail

https://www.fastmailstatus.com/

that looks painful to use. Do Linux distros let you automatically protect services? E.g. On FreeBSD:

mysql_enable="YES" mysql_oomprotect="YES"

Now every time you start the MySQL service it's automatically protected

Can you not protect processes from the oomkiller? This is trivial and very useful on FreeBSD

https://www.freebsd.org/cgi/man.cgi?query=protect&sektion=1

They are cheap labor everywhere, the backbone of this country. When Latinos went on strike (illegal and legal) in Wisconsin to send a message to Walker every restaurant in Madison was shutdown and the farmers were panicking because nobody was there to milk the cows, and that's very bad for the cows.

The ideal result here would probably be to streamline the path to citizenship, make it significantly cheaper, and get these people paying taxes as soon as possible.

This seems awfully familiar to me as well, but I can't be sure.

But still no way to enforce or enable as default.

What's wrong with the actual Notes app on your phone which can probably do checklists, bullet points, etc?

This is why you get an agreement with the city to share their conduit and help each other out where possible. Not sure of the political climate there, but getting on their good side will save you money and time.

Find out as much as you can about your city's regulations. In Madison, WI if your conduit is 3" or larger the city can take ownership of it if they want with zero compensation for the cost you spent to build it out. They will reuse it for utilities, traffic lights, etc. You can still use it, but they own it.

... were the racks not properly grounded?

I'll bite. Which large VPS / dedicated server providers don't implement BCP38?

An opportunity for FreeBSD to shine then

Or is it another case of Linux taking shortcuts and sacrificing safety for speed?

Explain?

There are over 500,000 pfSense installations in the wild. The creation of a company around pfSense has allowed them to offer real support and hire developers to improve everything from the UI to massive improvements to network stack/firewall and even IPSEC performance. These changes get pushed upstream to FreeBSD, everyone wins.

Germans extensively used Giant Schnauzers as well. In WWI as medic dogs, WWII as guard dogs. The breed was annihilated by the Russians as they extinguished almost every kennel and took home prime specimens to breed for size. This is why Giants have two types: German soft coats and Russian hard coats which are also physically larger.

I have it on good authority from a couple Giant breeders in the USA that the Russians went on this kennel extermination campaign because the German soldiers were feeding dead Russians to the dogs. I have not seen this specifically documented anywhere though. It would be nice to know the true motivations behind the ruthless killing of these dogs by the Russians.

There are acknowledged problems with pure breeds of all kinds, but not all pure breeds suffer from such extreme problems. It's possible to find a breeder with a strong bloodline free of many defects but it is not going to be cheap.

I paid for WhatsApp and didn't get an SLA

Who are you emailing? Gmail/yahoo/other technically competent organizations?

Try working with small businesses, lawyers, etc who self-host. It will fail and clients will scream bloody murder unless you turn off validation so their emails can get delivered.

Would be great if they offered free faxes for FOIA requests :)

The dirty secret nobody wants to talk about is that MTA's don't do certificate validation. You can't or you'd never deliver email successfully because of the number of self signed certs out there.

MITM on SSL/TLS SMTP is child's play

"Malfunciton voids all pays and plays"

The house can claim malfunction on anything and refuse to pay you. You have little to no recourse. I've witnessed people having their jackpots declared invalid for ridiculous reasons such as a faulty door sensor on the machine (having nothing to do with the game itself.)

You're essentially gambling that you can win the game and the house won't deny your win.

I was actually working on the casino floor for a year and configured, repaired, diagnosed, and twiddled with these machines all day. It was a terrible job, but gave me something to do while hunting for my next IT adventure.

Other interesting observations: the machines based on Windows XP Embedded crashed all the time, the Linux ones were fine.

The Linux ones from several mfrs used APNG for the slot machine graphics. This was my first exposure to animated PNGs in the wild. (~2007)

The Linux machines loaded a kernel module at boot that was supposed to prevent/detect tampering with memory. Some also loaded their own audio driver stack which surprised me: wasn't ALSA or OSS. Very odd, specialized little machines. (Many were Pentium 3 with totally custom motherboards due to strange peripherals)

Progressives cannot legally be removed from operation until someone hits the jackpot. (at least in my state)