jumby

Do you realize you can connect w/ any IRC client?

<groupname>.irc.slack.com

Google the internets for username & password setup.

You claim not a MySQL guru, but are shooting down the majority opinion here that something major is wrong with the schema design. That's fine - use your in-memory table and then claim you need a NoSQL solution when your "big data" hits 10GB.

How's the disk io on that linode VPS?

oooohkay. you can run with that then.

I am saying there is NO WAY MySQL sucks at 7M records. That's just jacked design. Talk to me at 7B when you need to reach for something bigger.

> Unfortunately, since there are 30 different columns that can be searched on

That's your first problem. I bet the schema isn't normalized and these are all varchar columns.

~~ Normalize your schema ~~ such that the main table is a set of integers. JOIN on PK and index whatever is required. Trust me, MySQL is fast when you do it right. I have tables with 650M records and lookups are just as fast as day 1. Keep table size AS SMALL AS POSSIBLE (less columns, use ints, etc).

Use date_ids & time_ids (from standard DWH techniques) if you are storing datetimes, not datetime fields (default indexing them is 1 second resolution which is stupid).

8 million records (at 7GB!) and it's slow means there is something seriously wrong with your schema. That table would entirely fit in InnoDB Buffer Pool on any modern hardware.

I want to see your slow query log.

So then Microsoft should embrace full-time telecommuting for it's workers, right?

Would your opinion change if a nuclear bomb was detonated in Houston, TX?

Every one of those reasons (and likely many more we don't know about) is why the NSA is doing what they do.

You must live in a utopia where there are no evil-doers.

screw it, i'll repost my comment here too. I know i'll get the down-vote brigade but meh:

Here's what bugs me about all the people chiming in about how messed up this all is. It's like you all think we live in some sort of utopia whereby we are the only ones doing this sort of surveillance.

Every single sophisticated foreign intelligence is doing this back at us, their citizens and their enemies - probably with more resources and state sponsorship. China, Russia, Israel, Iran, etc. Why wouldn't we continue to push the boundaries and try and have a leg up on this? Should we bury our heads in the sand and hope that China doesn't pwn our entire national electric grid? (google it)

Additionally, these actors are directly targeting and stealing intellectual property, reverse engineering and compromising state secrets in order to gain military & intelligence advantages directly from US based companies (see Boeing - google it).

State actors are embedding backdoor trojans into US destined products (example: look at the wikipedia page on Huawei)

Fundamental extremists do exist and want to destroy Americans at any cost (including their lives). Why wouldn't we surveil their cell phones, email and IM accounts?

Before every gets up in arms about this, consider the world in which we live first.

"They're already working for Google, etc, and X Y Z security company."

And the NSA, apparently.

I reject the tradeoff that your internal customer support 'impersonate user' web app would be available via simple password on the open internet.

Yes: from the internal rather than the external threat (bad guy employee).

As tptacek mentions, breaching perimeter security from external is "game-over" in most cases.

"security" is always left for after-the-fact ---- exactly as evidenced by this disclosure and their poor in-house practices.

Roger that. I keep thinking of my customer support people as non-technical and for whom ssh keys, port forwarding & bastion hosts are way over their heads but your point is taken. There are other (cheaper!) ways to secure an internal network.

Right, I think having a non-split tunneling VPN forces employees remote computers onto the "corporate" network where they are governed by the rules of that network and establishing rules for access to internal resources is done centrally.

I just wouldn't trust having something critical like "impersonate user" on the open internet - even if secured by https + 2fa.

That's nice. Their application security setup, processes & procedures are apparently severely lacking. So, you might want to think about recommending them to your other clients.

Nope. Having it on the external internet is what's wrong here.

Granted, but an airgap would make working with some internal support tool a bit cumbersome :)

Bastion servers if properly firewalled might be OK for a short term solution. The concern there is if you allow unfettered ssh (for example) is someone watching for the inevitable brute-forcing that will ensue?

Better yet, how about making sure your employees can only connect to your internal tools when on a properly secured VPN and not "externally" from home/coffee shop/airport?

And this is why you use 2FA and put this behind a corporate VPN in RFC 1918 space. Why they are just planning for that now is amusing.

"Our support tool includes an 'impersonate' feature that enables MongoHQ employees to access our primary web UI as if they were a logged in customer"

It's sad everyone on here is amazed the good guys have good tools. Sure it probably cost them $1M USD to have some server record an incoming ip from an http request, but still.

"Oh noes, we aren't 3 steps ahead of them, they are 3 steps ahead of us." Fuckin-a they are and I'm glad.

Getting rid of scumbag terrorists, child porn shitbirds and spying on foreign adversaries is fine by me.

And yes, I already know the comments will be "what if they designate you a terrorist some day". I suppose I will cross that bridge when that happens.

Is fizz buzz broken? A random number is nice, but what if not divisible by 3 or 5 - what do I enter? Example: I got 559.

You mean, like the stove, refrigerator and assorted kitchen shit?

You have no right to privacy on a public street. Nor is your tag non-public information.

personally productive, yes. not necessarily producing anything in the traditional sense.

Two words: pivot tables

Really, such as? The article doesn't present many of those and I doubt there are. All I am saying is it sounds boring as hell, stoned or not.