7,557 reputation
12251
bio website tltech.com
location United States
age 35
visits member for 5 years, 4 months
seen yesterday

{{Hacker}}

I own a small, successful security consulting business. But by day I work for a really big company, doing really big things.

Nothing I write here represents the views of my employer, nor does it reflect any proprietary or confidental knowledge. In fact, practically all of it was written before I even started working there, so don't get too excited.


May
2
comment Setting up a DNS service like OpenDNS
The cash outlay is a few hundred dollars per month if you do it right. Don't do colo unless you have a really good reason for buying custom hardware.
Apr
25
comment What language for starting on Linux?
Agree with all, but I'd recommend Python over the others as a high-level language specifically because it has become the most common higher-level language for server-management tools. You'll run into it far more often than ruby or java. Perl is also common because its so old, so i'd pick that one next.
Apr
25
comment Is rsync a good candidate for failover implementation (very large dataset)?
See my answer for how this might not be correct (large files can be less efficient)
Apr
25
comment Is rsync a good candidate for failover implementation (very large dataset)?
GFS is just a filesystem -- it doesn't actually replicate anything. However, it is capable of working in a "shared medium" environment where multiple server can write to the same device, and handles all the necessary coordination. DRBD uses replication to create a virtual "shared" block device between two servers. Your best bet is to read up on DRBD [drbd.org] as a starting point.
Apr
7
comment VPN personal tunnel/bridge
@Cine: "redirect traffic to the other network under people's own account on the other network" -- this doesn't make sense. Presumably there's something specific that you're trying to accomplish, but the technology must not work the way you think it does.
Mar
27
comment Firewalling all incoming traffic with custom rules
Unfortunately that doesn't actually work in my experience -- I tried. What I've seen during most DDoS attacks is that hosts are often being constantly added and removed to the attack pool. You can't just block a specific IP set because within an hour there's thousands of new IPs.
Mar
21
comment Apache, suexec, PHP, suPHP
@benjamin: Everything is more efficient than CGI. If you're looking for an alternative with similar attributes, fastcgi is probably the way to go. It's a favorite for large sites, particularly when coupled with an efficient webserver like nginx.
Feb
13
comment Newline-separated xargs
I have alias xxargs="xargs -d '\n'" in my bashrc. So I can just do things like this: grep -IRl foo | xxargs sed -i s/foo/bar/g
Dec
17
comment is ksplice production ready?
Much better answer this time around. Thanks.
Dec
9
comment how to calculcate MTU in L2 VPNs?
The is the only reliable way to calculate MTUs, and the way network stacks have always done it. Set "don't fragment" and increase the payload size until the packet gets bounced.
Dec
9
comment Mono on Linux: Apache or Nginx
I've looked heavily into building web applications in ASP.NET and running them on Mono, and I've found that you run into frequent difficulties with features present in .NET but missing or slightly different in Mono. It's a big enough problem to tarpit an entire undertaking and keep you from ever launching. Running Windows servers has always been out of the question for maintenance reasons for me. My advice is if you want an enterprise-y framework, use Java (Grails is a good choice) and if you want easy distribution, use PHP (Kohana is a good framework).
Dec
9
comment Mono on Linux: Apache or Nginx
The webserver is hardly ever the bottleneck unless the server is apache.
Dec
3
comment Best online backup solution
I've (recently) attempted to restore 2GB over MozyPro, and it downloads a few hundred MB and slows down to a couple of kb/s (on a 100Mbit uplink).
Nov
29
comment How to safely backup MySQL using VSS-based backup solutions
It appears that you've listed a number of workable solutions right there in your question.
Nov
26
comment Best online backup solution
Mozy throttles connections pretty severely when you attempt to restore (as does Carbonite), so a 4GB restore will take several weeks (not even joking).
Nov
25
comment google result redirect virus
Ah. The irony of running Windows on your server. It's such a silly idea when you stop to think about it.
Nov
25
comment How can one distinguish the host and the port in an IPv6 URL?
It's worth pointing out that the brackets are not optional. It's the only unambiguous mechanism by which the browser can identify a numeric IPv6 address.
Nov
21
comment Skype in a business - what's your view?
Skype does not pose any direct security risk in the traditional sense, but it may pose a risk to your security policy. That is, Skype allows for communication with the outside world that cannot be directly monitored by the IT department. Some companies require all communication to be monitored and/or recorded, which Skype prevents.
Nov
21
comment Skype in a business - what's your view?
You can explictly disable supernode status: cs.uwaterloo.ca/twiki/view/CF/SkypeConfiguration
Oct
19
comment mdadm & raid6: does “re-create(with different chunk size) + resync” destroy orig. data?
Edit w/ more info