956 reputation
514
bio website
location San Francisco Bay Area
age
visits member for 5 years, 4 months
seen Jul 25 '13 at 0:08

I do security for the Python and Django projects.


Jun
25
comment How do I protect my company from my IT guy?
@TomWij if you haven't hired a complete idiot, your IT guy will notice very quickly what's going on.
Jun
25
comment How do I protect my company from my IT guy?
A competent admin will balk at being required to provide non-technical users with admin passwords except in emergencies. People who don't know what they're doing WILL be tempted to mess around with stuff they shouldn't. Seal them and lock them in a safe.
Jun
25
comment How do I protect my company from my IT guy?
@TomWij if I were your IT guy and I knew you were doing IT work behind my back (backups or otherwise) on the system you charged me with managing, I would throw a fit. It costs you more, destroys any rapport you have with your employee, and will damage your company in the long run. Don't do that.
Jan
24
comment Unclear pricing of Windows Azure
Thanks for a really useful response. It is indeed very unclear about what precisely "stopped" means. This clears it up nicely.
Dec
21
comment Which wiki satisfies ACL ADI and API?
Please use complete sentences and correct spelling when asking your question.
Dec
13
comment Help finding a hosting service (offshore?) that doesn't automatically cave to DMCA demands
My typical recommendation for better registrar is Resell.biz. They have better prices, better customer service, and don't play daft games with their customer domains and livelihoods. They're not particularly "bulletproof" though. If you're looking for stronger registration protection, again, consider the former soviet bloc. The language barrier helps, and many companies there ignore takedown requests. Do your research - look at where major torrent sites and spammers are registered.
Nov
18
comment Why do Facebook users sometimes end up on my site when they enter www.facebook.com in their browser?
I'd be very interested in the resolution of this too. Post back when you figure out what's going on.
Nov
18
comment Why do Facebook users sometimes end up on my site when they enter www.facebook.com in their browser?
Not a bad theory, but not necessarily true either. Some subnet (say, a university, or a smaller ISP) might be mucking with the DNS records in a similar way.
Nov
16
comment Cost effective, long term archival of video and image data? ~50 TB
Honestly, the difficulty with any kind of CMS system is that it is likely to be the first and most outdated portion of a system. You'd almost be better off requiring everyone to write an ASCII text file with some basic descriptions and store it with your raw data. Any CMS or automated system is going to get old on a scale of a few years.
Nov
16
comment Cost effective, long term archival of video and image data? ~50 TB
yeah, we've come a ways. Still, I have no problem playing 17 year old AVI files from windows 3.1 days. The trick lies in choosing formats that are already in wide use.
Nov
16
comment Cost effective, long term archival of video and image data? ~50 TB
Lossless video is not currently practical to store. It's simply too expensive to archive gigs per minute of footage. Pick a lossy codec you're happy with now that is in wide use, and leave your media in it.
Nov
16
comment Cost effective, long term archival of video and image data? ~50 TB
PDF for images seems like a pretty horrible way to do it. Yes absolutely PDF for documents, but keep the images as tiffs or JPEGS depending on your output format. The capability to read those is unlikely to go away.
Nov
16
comment Cost effective, long term archival of video and image data? ~50 TB
+1 for good points on copying, but -1 for asserting that formats will become unreadable. Once the data is available on a copyable medium, those files aren't likely to become unplayable unless they're in a VERY odd format. Archiving to something very mainstream like MPEG2 is extremely likely to be a durable format. Transcoding lossy video is a lossy process. It should not be done. It doesn't cost us much of anything to keep a mainstream video codec around...
Nov
6
comment Should my server have PHP safe mode On?
Are you sure your configuration is correct for Joomla? I believe there are a number of ways that it can be compromised if you don't take great care with the security. Are you certain users can only write to the correct locations on the disk? Do you know that your webserver will not execute code at those locations? Joomla will prevent some of this, but definitely not all of it.
Oct
31
comment ZFS on top of Hardware Mirroring, or just mirror in ZFS?
Mirrored raid generally doesn't have raid hardware compatibility problems, since each drive is a perfect copy. There aren't availability problems for replacing the raid controller, it's an IBM server. That said, I did end up going with pure ZFS.
Oct
27
comment Is private domain registration worth the extra cost?
Also, whatever you do, get a better registrar. Paying any money at all for private registration is too much, and if you insist on doing so, it shouldn't be more than $2 or so. I recommend moniker for small-scale registrations.
Oct
27
comment Is private domain registration worth the extra cost?
@Justin Interesting. I've definitely gotten domain slamming mail while my domains were 6 or 8 months from expiry. I wonder if the prevalence of that sort of thing is geographically biased.
Oct
26
comment raid 5 rebuilding epic fail
For fancier systems like ZFS, you actually do gain a substantial benefit from having bigger arrays rather than multiple smaller ones. Look at the end of this article for the reasoning. dtrace.org/blogs/ahl/2006/06/18/double-parity-raid-z
Oct
26
comment 2 drives failed in raid 5
3TB? You're going for triple redundancy? I would expect that in most cases, that third level might better be served by a separate appliance with lower cost lower performance backup hardware... You must have some serious availability and performance requirements.
Oct
26
comment SSL certificate for a public IP address?
Yes, that would have been a more useful thing to say. SSL certs are needlessly expensive, but on the scale of doing business, the cost is almost nothing.