namidark

Gandi is free for a year and then expensive after - Namecheap may not be free but renewals and initial costs are much lower. StartSSL is free but revoke-ing costs money.

The only other 'white-glove' provider I've used was Voxrox (Which became Voxel, and then got bought out by Internap iirc) - They had amazing support up until they got bought out by Internap. It really boils down to getting extremely competent support on the first try every time and having 911's answered within seconds. It's a pretty amazing thing to be woken up at 2AM by your own monitoring, put in a 911 ticket, and literally get a actionable response in seconds.

The place I am at now has servers at Rackspace and we can't even get ticketing and other alerts to go through systems like PagerDuty from your own internal systems.

Thats a pretty bold claim that Rackspace is the only solid choice. There are many other providers out there that provide better white glove service.

Airbnb: Watching you sleep!

All the data is currently public (via the API) - you just have to know how to query the API to get it. Not sure if a publicly accessible endpoint to dump all data is a good idea (since that could get resource intensive).

If you have a suggestion for some api endpoints or better querying, let me know.

If you drop me a line I can get you a DB dump - josh [ at ] bluescripts.net or open an issue on github

That is also another goal I would like to add - is the ability to cross-check passwords against the API so you can prevent users from using them.

The purpose of this is to collect login and passwords as a honey pot - it is by no means a replacement for openssh or a functioning ssh server.

It is open source so it can be run on your own networks or you can just run the daemon and report stats back to sshpot.com

Not yet - I'd like to implement that but this was just a first draft and to learn some go. It just collects usernames/passwords as of submission.

Source is on github over at https://github.com/joshrendek/scala-ifcfg-api

If you have play 2.2.1 in your path its as simple as running `play dist` and moving the zip over to your server, and running the shell script play creates :)

Thanks for the positive feed back :) I'm open to ideas -- its been a fun little project to learn Scala with.

I've had the response time vary wildly -- also try opening that up in a browser and you'll see what I mean.

I think with regards to dependencies he is referring to building fat / shaded jars (aka one jar to deploy).

I would hardly say the performance of the default VM is a myth... just look at performance characteristics under multi-threading and GC pressure.

You left root login enabled and kept passwords on. And you're upset you got compromised? You can also enable keys in the control panel and you won't have to deal with passwords being emailed.

Those are the first few things you should be checking when setting up a new server (disable password logins and only allow keys).

Chef/Puppet/Stackscripts/Salt/etc, and develop your own load balancing? Why on earth would you do that instead of just using HAProxy?

Seconded, DO's support is as quick to respond to technical issues as linode (and they're helpful on IRC as well).

Watching paint dry, the animated version.

This was posted on reddit a few days ago and was called a giant hoax / RC controlled. Any deeper insight on this? The pilot seat looks way to small, and there are no landing or take off videos either.

Does anyone know which JVM they're using? I've heard lots recommend Oracle over OpenJDK for performance reasons.

I can't think of any games that deal with PVP on this scale either.

I've added some comments to the ssh config to be more clear and provided some examples and a citation to the shared memory line.

I mention it at the end of the article, unfortunately the latest linux kernel and latest patches from GRSecurity don't compile.

Both are used, and password logins are disabled. As I linked to in the article, those sysctl tweaks are recommended by the NSA handbook.

It is a common hiding place once the box has been broken into, not necessarily something that would be attacked right away. If you look on google you can see plenty of evidence of people's boxes being compromised through insecure shared memory and you can find plenty of examples of shared memory being exploited for privilege escalation and hiding malicious files.

What did he get wrong?

Amazon.com!

Where do you guys see this? IRC and StackOverflow have always been extremely helpful and nice when I needed help.

Your website is barely usable, half the links don't work or do anything, and there are 3 articles. And you've spammed this article multiple times.

You're hardly rebuilding the news business.

- An information distributor that is neutral on the content message.

Like Google News or any other hundred of news aggregators?

- A platform that empowers the journalist to decide what to write, when to publish and makes the journalist subject only to the market forces of his or her subscribers.

Like a blog?

- A subscriber experience that offers everything in a familiar format, in one place and leaves the choices of who and what to read up to you.

An aggregator again? You haven't solved anything that is a real problem (such as how to pay for quality journalism).

Sadly, I think a consumer of cat pictures with the way our education (people not focusing on math and science) is going