| bio | website | entropystream.net |
|---|---|---|
| location | Seattle, WA | |
| age | 33 | |
| visits | member for | 2 years, 4 months |
| seen | Apr 23 at 21:06 | |
| stats | profile views | 130 |
Professional System Administrator, Security Wank, Dude
http://www.twitter.com/blueben
https://plus.google.com/u/0/107083804035611165835/posts
All opinions expressed and advice given are mine and do not represent the opinions or advice of my employer.
|
Sep 3 |
comment |
Store system passwords with easy and secure access The UI itself is a bit clumsy, and I found I always had to have it open which clutters my desktop. When you have hundreds of credentials, it can be a bit difficult to search. The alternative is to group things aggressively, but you still have the search problem to deal with and grouping adds more clicks. Moreso, now that I have used browser-based systems (where most of my password use occurs), flipping to another app to cut and paste a password just to log in to a website turns out to be a big pain. |
|
Sep 3 |
comment |
Store system passwords with easy and secure access I used keepass for a long time. It's a bit awkward to use, but it did the trick. Once I had a need to share passwords with others I switched to LastPass. |
|
Sep 3 |
comment |
DNS server redirect users on first visit I believe the OP is implying that this is an internal service, which would mean he controls DNS. That, combined with a policy to disable local DNS cache, would enable him to have full control over DNS resolution and would cause multiple requests. |
|
Sep 2 |
comment |
Why is ping to Google servers and Google DNS so low? This is your answer. Google doesn't have any magic to break the laws of physics. |
|
Sep 2 |
comment |
bonjour mdns publish service on linux Have you already evaluated and rejected avahi? Avahi is the mDNS implementation for Linux. |
|
Sep 2 |
comment |
Is there a lightweight MTA for Ubuntu 9.10 Desktop? The OP was pretty clear that he needs this to be simple, and he's right. It's for accepting mail on localhost; a "full blown" system is too complex for these requirements. |
|
Mar 28 |
comment |
MySQL Error “Can't read dir” What operating system are you using? What are the permissions for /opt/data ? |
|
Mar 28 |
comment |
Limiting ssh connections with a daily amount If you look above, you will find that I did in fact suggest that the OP not be so vague. |
|
Mar 27 |
comment |
Limiting ssh connections with a daily amount Answering this question is rather difficult because the question is vague. As others pointed out, more information would help. |
|
Mar 27 |
comment |
Limiting ssh connections with a daily amount This is a completely unhelpful answer, and obviously untrue given numerous other answers spell out how PAM can help with this. |
|
Feb 10 |
comment |
Gmail uses both DKIM and DomainKeys, while Hotmail uses none? I too am interested in hearing about DKIM's problems. I've run it without issue for years now. SPF is complementary to, rather than a replacement for, DKIM. You should be using both. |
|
Feb 10 |
comment |
proxy software to relay email What software needs mail relayed? Why can't it connect to the mail server directly? |
|
Jan 15 |
comment |
Help - since adding an elastic load balancer to my EC2 web application I cannot connect with the MySQL database (not in AWS) You can pay for an elastic IP, which won't change. Investigate that. |
|
Jan 13 |
comment |
Re-Route Mail to a port other than 25 MX records only dictate what host to connect to, not what port to connect on. |
|
Jan 12 |
comment |
How to stop Cron from sending messages about errors You didn't help him fix lynx or answer his question. |
|
Jan 12 |
comment |
How to stop Cron from sending messages about errors You're giving me -1 for answering his actual question? Vicious, man. |
|
Jan 12 |
comment |
system administrator account I can't in good faith answer this question because it is such a very mistaken, very bad idea. |
|
Jan 12 |
comment |
Redirect non-www ssl traffic to www ssl (apache) This isn't for the SSL site. This is for your HTTP site. It tells client browsers to remember that they should use HTTPS rather than HTTP for the next 86400 seconds. This will ensure that clients don't hammer on the redirect over and over, improving your site performance and the clients' security. |
|
Jan 12 |
comment |
Blocking Clients while Forwarding All Traffic You will only be able to do this if you have administrative rights to every client, and users do not. Even then, it's a pretty poor NAC and easy to bypass. |
|
Jan 12 |
comment |
MySQL writing to net It could. Are the queries in the writing to net state queries that get sent to remote machines? |