2,028 reputation
1413
bio website entropystream.net
location Seattle, WA
age 33
visits member for 2 years, 4 months
seen Apr 23 at 21:06
stats profile views 130

Professional System Administrator, Security Wank, Dude

https://entropystream.net/

http://www.twitter.com/blueben

https://plus.google.com/u/0/107083804035611165835/posts

All opinions expressed and advice given are mine and do not represent the opinions or advice of my employer.


Sep
3
comment Store system passwords with easy and secure access
The UI itself is a bit clumsy, and I found I always had to have it open which clutters my desktop. When you have hundreds of credentials, it can be a bit difficult to search. The alternative is to group things aggressively, but you still have the search problem to deal with and grouping adds more clicks. Moreso, now that I have used browser-based systems (where most of my password use occurs), flipping to another app to cut and paste a password just to log in to a website turns out to be a big pain.
Sep
3
comment Store system passwords with easy and secure access
I used keepass for a long time. It's a bit awkward to use, but it did the trick. Once I had a need to share passwords with others I switched to LastPass.
Sep
3
comment DNS server redirect users on first visit
I believe the OP is implying that this is an internal service, which would mean he controls DNS. That, combined with a policy to disable local DNS cache, would enable him to have full control over DNS resolution and would cause multiple requests.
Sep
2
comment Why is ping to Google servers and Google DNS so low?
This is your answer. Google doesn't have any magic to break the laws of physics.
Sep
2
comment bonjour mdns publish service on linux
Have you already evaluated and rejected avahi? Avahi is the mDNS implementation for Linux.
Sep
2
comment Is there a lightweight MTA for Ubuntu 9.10 Desktop?
The OP was pretty clear that he needs this to be simple, and he's right. It's for accepting mail on localhost; a "full blown" system is too complex for these requirements.
Mar
28
comment MySQL Error “Can't read dir”
What operating system are you using? What are the permissions for /opt/data ?
Mar
28
comment Limiting ssh connections with a daily amount
If you look above, you will find that I did in fact suggest that the OP not be so vague.
Mar
27
comment Limiting ssh connections with a daily amount
Answering this question is rather difficult because the question is vague. As others pointed out, more information would help.
Mar
27
comment Limiting ssh connections with a daily amount
This is a completely unhelpful answer, and obviously untrue given numerous other answers spell out how PAM can help with this.
Feb
10
comment Gmail uses both DKIM and DomainKeys, while Hotmail uses none?
I too am interested in hearing about DKIM's problems. I've run it without issue for years now. SPF is complementary to, rather than a replacement for, DKIM. You should be using both.
Feb
10
comment proxy software to relay email
What software needs mail relayed? Why can't it connect to the mail server directly?
Jan
15
comment Help - since adding an elastic load balancer to my EC2 web application I cannot connect with the MySQL database (not in AWS)
You can pay for an elastic IP, which won't change. Investigate that.
Jan
13
comment Re-Route Mail to a port other than 25
MX records only dictate what host to connect to, not what port to connect on.
Jan
12
comment How to stop Cron from sending messages about errors
You didn't help him fix lynx or answer his question.
Jan
12
comment How to stop Cron from sending messages about errors
You're giving me -1 for answering his actual question? Vicious, man.
Jan
12
comment system administrator account
I can't in good faith answer this question because it is such a very mistaken, very bad idea.
Jan
12
comment Redirect non-www ssl traffic to www ssl (apache)
This isn't for the SSL site. This is for your HTTP site. It tells client browsers to remember that they should use HTTPS rather than HTTP for the next 86400 seconds. This will ensure that clients don't hammer on the redirect over and over, improving your site performance and the clients' security.
Jan
12
comment Blocking Clients while Forwarding All Traffic
You will only be able to do this if you have administrative rights to every client, and users do not. Even then, it's a pretty poor NAC and easy to bypass.
Jan
12
comment MySQL writing to net
It could. Are the queries in the writing to net state queries that get sent to remote machines?