What this really says that they opened a hole which got them into a questionable legal area by removing them, and they regret not just remaining neutral.
147 karma · joined July 21, 2019
For example that means if the Republican Party was hosting on Cloudflare and the Democrat Party disagreed with the Republican Party, they could force Cloudflare to remove the Republican Party's websites from transiting their network.
Another example is if the Washington Post and Fox news both went through Cloudflare, and Fox disagreed with the Washington Post they could force Cloudflare to remove the Washington Post.
The moment you set the precedence it becomes an expectation -- by Cloudflare remaining neutral they can't be forced into that position.
Neutrality is key, how would you feel if your content was suddenly pulled because someone on the internet disagreed?
We're a young, energetic company hiring for multiple roles on contract. We help companies build everything from custom-designed software to entire networks to power hundreds of gigabits a second of traffic.
We're hiring for the following positions:
- Jr Systems Administrator (EST timezone preferred) - Jr Network Engineer (EST timezone preferred) - Jr Systems Administrator (GMT to GMT+2 timezone preferred)
A brief:
- Our choice of Linux OS on managed systems and machines is Ubuntu (mixture of 20.04 LTS, 21.04 currently), with some various Alma/CentOS thrown in the mix - We work with various industries (ecommerce, networking/security, IoT, etc) and take security very seriously - Our clients span multiple countries and timezones, from LA to AU
Here's what we're looking for:
- You know Linux pretty good - You know Ansible, you've used it (we do it a lot!) - You have a good understanding of Python (we use Python to automate a lot of system monitoring alongside ansible for automating deployments/updates/tasks) - You're comfortable with some PHP (Symfony/Laravel/Wordpress) - You're comfortable with some Go (we're just trying some new things here, so more the better!) - You understand security in environments (eg, PCI compliance, SOC2, etc) - You're good at communicating and are able to self-prioritize tasks - You maintain a good work life balance
If this sounds like fun to you, drop your resume to: team[@]packetrabbitinc[.]com along with a brief cover letter and we'll be in touch!
Out of the last month, I sent out 191 abuse reports, of which 10 got replied to, 2 were resolved 6 were “no f** off” style, and 2 were told “can’t fix / won’t fix / don’t know how to fix”.
I’m not just referring to Chinese ASNs either, some US Telco’s, German, Australia even.
Uber, like all massive companies, are always doing dodgy tax avoidance things. But, even if they're doing tax avoidance, it's still legal as long as it's not blatant fraud.
Like all media companies, Business Insider has manipulated the content to cause outrage with their target markets for readers.
Though, on the topic of wording data, it's always interesting to see how media organizations & companies as a whole swing things, for example:
"Uber claimed $4.5 billion in global operating losses ... in reality, it brought in $5.8 billion in operating revenue" could've been written as:
"Uber brought in $5.8 billion in operating revenue, however, declared a loss of $4.5 billion"
or
"In a 2019 filing, Uber declared a $4.5 billion loss, despite earning $5.8 billion in operating revenue."
In Canada, our freedom of expression is limited by whatever the Government deems appropriate:
> Freedom of expression in Canada is protected as a "fundamental freedom" by Section 2 of the Canadian Charter of Rights and Freedoms. The Charter also permits the government to enforce "reasonable" limits.
Unfortunately, there is not much guidelines these days on what "reasonable" is considered. I like to hope it would not be abused...
All the free CF sites I've got were down for those 8 hours via those POPs, and, I had many customers calling to ask why their site was doing and had to explain "sorry, Cloudflare broke just these two POPs..."
Secondly, I think it's fair to say governments absolutely abuse any vulnerability they can at any point in time.
Think of it like a freshly printed 10 dollar bill - it's all unique because of the serial number, and there's no two bills with the identical serial number (in theory on bills... in practice on crypto it is truly unique)
If you need an ssh key for whatever reason from a host (for example, git pulls on a staging machine), you should generate one on that box and narrow it's scope in the machine that will receive it (eg, Gitlab Deployment Keys -- locked in read-only mode, single purpose).
> The reason rotation isn't recommended is because it leads to bad practices (people just add a '1' to their password)
To some degree. I personally rotate my keys whenever I change my personal/work device (perm. change), or, around every year or so. It's not a hard requirement, but just a personal preference.
> it's a hassle
ssh-keygen -b 4096 isn't a hassle... and if you do deployment properly it shouldn't be an issue to sync these keys (eg, an AD system holding public key, cloud directories like JumpCloud, etc can all sync the moment it's updated -- even Salt/Ansible/Chef/etc can do it easily, with modules pre-written to sync keys already).
In any event, MFA is always a good idea. But, my biggest concern is that someone would leave ssh open to the public... the time it takes to setup an ACL or VPN to connect to the machine is hardly anything these days with the amount of automated tooling to do it... so why aren't people?
Initial Price = Estimated_Cost / 1000
"Oops, we need more money" = (Estimated_Exec_Bonus + Estimated_Corp_Greed) + Worker_Cost + Extra_Corp_Greed
Everything IBM touches turns into a hot pile of garbage that needs billions to rewrite and it never gets better. We'd get a better job if we outsourced to another country -- OR -- gave contracts to companies that aren't IBM (& know what they're doing, of course).
I definitely miss the "old web"....