The Comms Room

Andrew

12:01 AM

@PatoSáinz h.cl is taken :/

Anonymous

lol

Anonymous

domain-hunting?

Anonymous

Microsoft took so.cl

freiheit

@Wesley And I just confirmed that he had to have done all of his testing with the 3 second timeout.

Mark Henderson

@freiheit I had a timeout on a particular service of 180,000ms. After experiencing around a 5% failure rate, they asked me to up it to 360,000ms. wtf?

What kind of web service needs 10 minutes to return a synchronous request?

Wesley

12:06 AM

@freiheit Okay, so is the main moodle page pulling in an iframe from his IIS server, or some kind of API call?

freiheit

@MarkHenderson This particular timeout is involved in rendering a web page. Like, the first page a user sees after logging in to the app. At around 2000ms users give up and hit "reload", unless they were specifically doing something that they expected to be long-running or have some sort of progress bar to watch. I consider 500ms a pretty hard upper limit and I'm at least vaguely unhappy with any page load times over 100ms.

@Wesley API call. SOAP, I think. Definitely a WSDL file involved.

Anonymous

wonder how does an average sysadmin's desktop looks like, @Wesley @MarkHenderson @Andrew @Jacob mind posting a screenshot? (if there's no NDA involved lol)

Mark Henderson

@freiheit Geezus you people are spoiled. If I even see a title in the browser bar after 300ms I consider myself lucky

Wesley

@freiheit Okay, so Moodle loads on your load-cluster-balanced servers, a module loads on the page that calls his IIS server, and it takes 3 seconds even under no load to render whatever it happens to be? Some kind of survey? Does it show some kind of survey results or is this just a simple "Click this button if you need financial aid" or whatever

freiheit

@MarkHenderson My users are mostly on-campus hitting on-campus servers or google servers. We're kicking off a project to upgrade our pipe from 1GB to 5GB (and the main on-campus stuff to 10GB)

Wesley

12:09 AM

@PatoSáinz This is literally my desktop right now, no changes or anything. I just swiped over to my first non-full-screen desktop space:

Mark Henderson

Wesley

freiheit

@Wesley Do you remember in college getting a thing near the end of the class where you told the school how much your professor sucked? That survey.

Anonymous

@Wesley eww mac

Mark Henderson

@Wesley Haha my OSX desktop is the same

Wesley

12:09 AM

@freiheit You think I had a college education? You're sweet.

Anonymous

@MarkHenderson what? default wallpaper?

Jacob

@freiheit Oh shit. That's bad.

Mark Henderson

@PatoSáinz I never even see my desktop

Wesley

@MarkHenderson Yeah I rarely bother to change my default desktop from what it ships with. That's what Mavericks changed me to.

I install an OS and when I log in I'm like "Welp, guess this is my desktop until the next version comes out."

Anonymous

@MarkHenderson oh, I guess that's reasonable. Is that dreamweave I see?

Mark Henderson

12:10 AM

@PatoSáinz Unfortunately

@Wesley Haha yep

When I was @PatoSáinz age I would customise my installation, but now it's just wasted time

freiheit

Wesley

@MarkHenderson I've used the exact same blue ocean wave background on my iPhone since my first iPhone which was a 3 in like 2009

Anonymous

@MarkHenderson bacon rainbow mouse ftw, btw I only custmoise my wallpaper... If I were on Linux I'd use a tiling WM or just KDE tho

Mark Henderson

So @PatoSáinz - it would appear that the standard sysadmins desktop is "clean" with the exception of mine where I dump meeting notes that i haven't formalised into specs yet

Wesley

@freiheit Okay so even just testing it takes 3 seconds to get his module loaded in the page?

Anonymous

12:12 AM

@MarkHenderson you mean, no icons?

Mark Henderson

@PatoSáinz yah

No shortcuts

freiheit

@Wesley I haven't timed it. It took more than 1 second. I don't think anybody tried 2 seconds for the timeout... but, yeah. Unloaded server.

Wesley

@MarkHenderson Yeah but I have a folder "fuck this shit" that I put everything in and delete once every so often. I like the illusion of simplicity. =P

Mark Henderson

@Wesley I ahve one of those too. It's called my "Documents" folder

Wesley

@freiheit So that time out is where, on the load balancer?

@MarkHenderson Literally lol'd

freiheit

12:13 AM

@Wesley In the code for the moodle block that connects to the IIS server SOAP thingy.

Jacob

Anonymous

@Wesley lol same

Wesley

@freiheit Ohhh, okay. I get it.

Anonymous

I have a Windows Library pretty liberally called "Shit"

Wesley

@Jacob If I had that background I would kill people and it would be dismissed as temporary insanity in court.

2

Mark Henderson

12:14 AM

@Jacob Geezus how do you determine where anything is with that wallpaper :p

Jacob

Though I need to grab a build of Fedora and install that.

Anonymous

@Jacob nice resolution tho

Jacob

Because I never see the desktop?

Andrew

@MarkHenderson mine is a mess, it's full of ISOs and temporary stuff

Mark Henderson

@PatoSáinz what's far more interesting would be the most recently used app list

Anonymous

12:14 AM

Wesley

@Andrew "ISOs" - it's all your torrented porn isn't it.

Mark Henderson

Except mine betrays more of what I actually do that's not sysadmining than I care to admit

Jacob

amazon.com/Dell-293M3-IPS-LED-23-Inch-LED-lit-Monitor/dp/…

Anonymous

this is me, inside virtualbox there's just some Konsoles... once in a while I just integrate them with windows

Anonymous

@MarkHenderson where's that?

Mark Henderson

12:15 AM

@PatoSáinz Oh god you're one of those fucked up people who moves their start bar on Windows

3

Andrew

@Wesley I'm at work. and it's ubuntu isos mostly.

Mark Henderson

I used to be one of them until I had some sense bashed into me

Anonymous

@MarkHenderson lol isn't it better?

Wesley

@MarkHenderson I used to put my windows bar on the left side of my screen and have it auto hide.

Jacob

It's K @Wesley not too sure about completing mine.

Anonymous

12:16 AM

you mean, somebody without sense convinced you to rollback to stupid mode

Mark Henderson

Anonymous

top bar ftw

Mark Henderson

@Wesley I used to as well, until about 2002 when I just cbf any more

Anonymous

@MarkHenderson actually, why did you switch again?

Wesley

@MarkHenderson I used to mod my PC. Then I went through puberty.

Mark Henderson

12:17 AM

@PatoSáinz I didn't "switch". I "reverted" to "default" because I'm not "insane"

Jacob

@PatoSáinz No, he's pretty much right on that one. Moving the taskbar is for suckaz

Anonymous

@Jacob it's for rich and beautiful people

Jacob

@PatoSáinz I'm one of those two things.

Mark Henderson

@Wesley Exactly. When I was 18, my friends had cars that went DOOF DOOF and were 2" off the ground. I had a full-tower computer with dual Opterons, 16GB of RAM, CCDs, a home-made window kit and UV reactive cable ties

Anonymous

@MarkHenderson that list doesn't even show my recently used shit... nor the shit I do with windows+r

Jacob

12:18 AM

and not that much.

Wesley

@MarkHenderson I moved mine to the left because it allowed me to have open windows with readable preview text in the task bar. That was in XP days though. Then Vista / 7 and their fly-out icon thingies helped that out.

@MarkHenderson And then you got your first blowjob and suddenly PC modding became a thing of the past. =P

freiheit

screw this shit, I'm going home

Mark Henderson

@Wesley Oh god yes. Removing the program name from the tile was a good move. I wonder when I see people who go to the effort of putting it back (and disabling tile grouping)

Wesley

@freiheit Toodles.

freiheit

I think maybe for a change, I'll drink a bottle of wine instead of a beer...

Mark Henderson

12:19 AM

@Wesley Nah I managed to convince myself that she blew me because I had a fast PC

Wesley

@MarkHenderson Bah!

@MarkHenderson Oh you had a fast something alright...

Anonymous

everybody's mad jelous at my task bar placement and wallpapers, admit it

ewwhite

Sigh.

Anonymous

sup @ewwhite?

Anonymous

having a rough day?

Wesley

12:19 AM

Speaking of BJs, what's wrong @ewwhite? Oh you're married. Nevermind.

=P

ewwhite

Super productive day.

Mark Henderson

@Wesley shutupshutupshutupshutup

ewwhite

Then big bike ride.

Now I'm waiting for gyros.

Wesley

@MarkHenderson =D

Mark Henderson

I might not have been laid in 9 months but I bet it was sooner than yours @Wesley

Wesley

12:20 AM

@MarkHenderson Bet... not taken <_<

@MarkHenderson Define "laid"

=P

@ewwhite Glad somebody had a productive day. My mind has been jelly for 48 hours. Sleep schedule is all messed up.

Jacob

Odd

ewwhite

Client just emailed. They have a vendor who sent this...

MikeyB

So what's everybody generating for they new RSA keys for SSL/TLS? 2048? 3072? 4096?

ewwhite

We need router information from your current ISP (internet service Provider). We need this information to set up and deploy the label printing Application.

To successfully set this up, we need User Name and Password from your Main Router . this information can be acquired by calling your ISP (Comcast, AT&T, etc.) and/or is already written on the router it self.

we need to change the Network Schema at each location. if you have any questions please feel free to contact me ASAP.

Wesley

@MikeyB Elebenty-48

@ewwhite Oh wow, glad that expanded the acronym "ISP", I was confused there for a second. What life savers.

MikeyB

12:22 AM

@ewwhite The network schema, eh?

ewwhite

Followed by:

Thank you for getting in contact with Jessica our rep in LA. We will be installing a device at that current location. this device will be connected to the internet the information need.

can we get admin access to the gateway router, to change the IP schema?
we need 10 static IPs in the Local Network
what is the current DHCP range.
what range of static IP we can use.

...

Jacob

MikeyB

Ten? Ten freaking static IPs?

ewwhite

That sounds like a ServerFault question.

Anonymous

@ewwhite raging intensifies

Jacob

12:23 AM

@PatoSáinz @MarkHenderson That's how I usually operate.

Wesley

@MikeyB Well of course you need ten IPs. Do you want to get DDoS'd? Because that's you keep from getting DDoS'd.

Jacob

Oh and DDoS me whatever.

Anonymous

@Jacob @heartbleedstatus? btw, you are always very wary about your IPs and now they are just showed there lol

ewwhite

I enjoy the daily challenges.

Jacob

@PatoSáinz It's in photo form, and the full hostnames aren't there.

MikeyB

12:24 AM

Here's your freakin IPs:
2001:470:b0e2:42::1001
2001:470:b0e2:42::1003
2001:470:b0e2:42::1005
2001:470:b0e2:42::1007
2001:470:b0e2:42::1009
2001:470:b0e2:42::100b
2001:470:b0e2:42::100d
2001:470:b0e2:42::100f
2001:470:b0e2:42::1011
2001:470:b0e2:42::1013

Jacob

@PatoSáinz heartbleedstatus.com

Anonymous

@Jacob what is that music player? Did I see depeche mode there?

Wesley

@ewwhite Bet you enjoy the monthly checks more. =P

Anonymous

@MikeyB lol!

Jacob

@PatoSáinz Yes, but not what was currently playing. Google Music.

MikeyB

12:25 AM

@Jacob hahahaha you use nano

Jacob

@MikeyB Why do you care?

Wesley

@MikeyB gedit or die.

Anonymous

@MikeyB don't mess with nano

Anonymous

nano > vi > emacs

MikeyB

@Jacob I care about… tiny things.

Wesley

12:26 AM

@PatoSáinz You don't need to mess with nano, it's messed up enough on its own.

@MikeyB Is that why you call me up so much on Skype?

Jacob

Where's @strugee to gloat about hoe awesome Emacs is?

HUH

Anonymous

emacs is a pretty fine OS, but I find its text editor a bit lacking

ewwhite

@wesley my biggest client is short-paying my invoices.

Jacob

@ewwhite Lawyer up.

now

Wesley

Something something C-x M-c M-butterfly

Jacob

12:27 AM

Or cut off the work.

Wesley

@ewwhite wuuut. Define that for me. What's short paying to you?

Anonymous

@ewwhite bettercallsaul.com

Wesley

Meaning you invoice $10,000 and they pay $7,000 with a big ol' "suck it nerd" written in lipstick on the paperwork?

ewwhite

I am charging $4500 monthly and they are paying $3400

Wesley

@ewwhite You called them on the carpet?

ewwhite

12:28 AM

And not returning my phone calls or email.

Wesley

@ewwhite Snap. How long has this been going on?

ewwhite

3 months now.

Wesley

@ewwhite Frick. Are you cutting back on service and availability?

Don't be a little jellyfish like me.

ewwhite

I even showed up on the doorstep last week, and the decision maker avoided me.

Wesley

@ewwhite Do you have a lawyer that can write a nasty-gram form letter to them?

MikeyB

12:30 AM

@Jacob want to add a few domains for "certificate updated" test cases? :) Redoing mine now.

ewwhite

They want to keep paying the old rate.

Jacob

@MikeyB Sure.

Wesley

@ewwhite Did they ever pay the new rate?

ewwhite

No

Andrew

@ewwhite they can find someone else then?

MikeyB

12:32 AM

@ewwhite For reference, $4500/month - what does that cover (roughly)?

Wesley

@ewwhite Yikes.

@ewwhite The dangers of working without a contract broski. =P

Andrew

so they're paying 75% or you've increased the rate by 33%

Jacob

@PatoSáinz Can you get Netflix?

ewwhite

I dunno.... I run their ERP servers, backups, network, security, load and link balancers, public website, ecommerce, handle all vendors, warehouse management systems, wireless infra, production printers, barracuda filters and public and private DNS

Oh, and their email and VMware.

And DR offsite data.

Wesley

@ewwhite Frick. How many hours a month does that take?

MikeyB

12:34 AM

@ewwhite Do they buy servers & VMware licenses, OS licenses etc on top of that?

Anonymous

@Jacob yes, why?

Jacob

Just curious.

ewwhite

No, the VP of the firm is an asshole. He did this to the produce software firm I used to work with. We'd give him an $80k bill! and he'd pay $30k

Anonymous

@Jacob is it because popcorn time in my desktop?

Jacob

no

ewwhite

12:36 AM

@mikeyb, they need new servers. I put Nehalem systems in at the end of 2009

I have a $100k server and networking and licensing upgrade quote out to them.

Wesley

@ewwhite Wow, so just like that? Don't pay the full invoice with no explanation? I guess it works enough times for him that he keeps doing it though. =/

MikeyB

@ewwhite One of our sales guys sold a new customer $1800/mo flat managed services contract. When he thought they had two servers and ~50 Windows/Linux desktops. Actually, they have a messed up infrastructure and more like 20 servers.

@ewwhite I mean, do they buy or you buy?

ewwhite

I've sold them everything since 2004.

MikeyB

@Jacob emailed

Wesley

@MikeyB Sooo... what's the plan in a case like that? 1) Why did he not know more about the infrastructure, and 2) Do you now just never touch anything that wasn't in the contract, or just totally refactor the paperwork?

ewwhite

12:38 AM

The growth is not organic. They just doubled warehouse facility sizes in two locations.

Wesley

@ewwhite What's the plan, Stan?

Lawyer time?

ewwhite

So I have 300+ people running around with handheld RF scanners.

200 concurrent Linux users on the ERP server.

Andrew

@ewwhite report them to a credit agency?

I hear that scares people.

ewwhite

@wesley, it's not as big a portion of my income as the client thinks it is. So they need me more than I need them.

Jacob

@MikeyB 1 and 4 not on the list. 2 I can change. I am interested about # 3 though and why you have anything to do with it.

Wesley

12:40 AM

@ewwhite Okay, so you can just put the brakes on and wait until they pay up?

MikeyB

Still working that out. Technically he sold it as our partner company, a Windows shop and they have no Windows servers.
We're now taking them over from our partner company.
Part of the problem is he sells these all the time to Windows shops - the deal is $1800/month flat rate PLUS ONSITE TIME.
Guess what? Anything the Windows guys do, they come onsite to do.
Whereas we do EVERYTHING remotely.

ewwhite

@wesley I think I will wait to see what the next payment is.

MikeyB

@Jacob We host #3.

@ewwhite No, you already know what it's going to be.

Wesley

@MikeyB Yeesh, also weird that the Windows guys don't work remotely...

Jacob

@MikeyB Really? that's interesting.

Wesley

12:42 AM

@ewwhite If he can steal from you three times in a row, he's going to do it a fourth time.

Andrew

@MikeyB teamviewer / vnc / whatever?

MikeyB

@Jacob discourse.org/buy

ewwhite

I mean, the pricing and billing is my discretion. I charge a fair rate based on my time and opportunity costs.

MikeyB

@Wesley They could probably do so in many cases, yeah but don't for the bulk of their work. Since onsite time == $$$.

ewwhite

They have no it person.

MikeyB

12:43 AM

@Andrew BOMGAR WOOOOOOOO! (and yeah, SSH/VNC/RDP/etc)

ewwhite

And the problems with his client are communication... Like getting a call from a cabling contractor who's on site and wiring up new offices...

So I'm like, "wait...we need switching, patch panels, fuck..."

kce

Oh man. Back on help desk... I forgot everything...

Jacob

@MikeyB Not on that list,

MikeyB

@Jacob Nono, I mean that's the mechanism through which it's being hosted :)

Jacob

@MikeyB Oh ok then

MikeyB

12:46 AM

@Jacob Yeah #2 on the list is just cloudflare, boring.

Wesley

@kce Help desk checklist: 1) It's the users fault, 2) In case of some other fault, see rule 1.

Andrew

Can someone give me a quick rundown on Windows logon scripts, stuff is happening that I can't explain :/

Wesley

@Andrew VTC: Too broad.

=P

ewwhite

How do you tell someone that they make your work more difficult by not planning? "If you told me about the new phone system in advance, we wouldn't need to scramble to redesign the network!"

Jacob

@ewwhite Like that?

kce

12:50 AM

@Wesley - I got a Optiplex 990 that is taking five minutes to boot. I'm trying to remember how to troubleshoot desktops...

ewwhite

So my billing is punitive... But only because firefighting means I can't get ahead.

Andrew

@Wesley ok, I'm running an NT4 domain under Samba 3.4, retargeting Documents to a /home/%u share mapped as Z: but at no point can I find where that drive mapping takes place

Wesley

@ewwhite Penalize stupidity, usually. The few times I've had paying clients (weeps) the conversations usually centered around "Okay, if you do this, I'm going to have to charge this many hours, but if you do that..."

@kce eventvwr is my first look on a Windows machine

Basil

evening

kce

NETLOGON 5719 - no logon servers available. I suspect AD issuesssssss

Shane Madden

12:53 AM

@kce Or basic network connectivity, or DNS, heh

ewwhite

In my opinion, having a managed service means that the bumps get smoothed-out. I take a loss some months in terms of time, and get away with robbery on other months.

Wesley

@ewwhite I always got robbed.

Because I suck.

I guess.

kce

Day 3: Active Directory is borked!

Basil

@kce They still have no idea

strugee

@Jacob HEYOOOOOOO

EMACS RULES VI DROOLS

better?

Jacob

12:56 AM

Nah, you're late.

kce

@Basil - Maybe. I'm not sure. I'm just exploring. New job is a start up. Lost of work.
(different place from my NetApp question, I had most of that written out from job[-1])

strugee

I know. I tried.

Stefan Lasiewski

Running whois bluehost.com looks a bit... worrysome. Something about a record like 'BLUEHOST.COM.TROPICSEASSPAS.COM' just looks wrong.

Anonymous

@StefanLasiewski what?!

Anonymous

@Jacob this is my usual window layout:

Anonymous

1:01 AM

Anonymous

yes!, patosainz.cl's DNS finally propagated

Jacob

@StefanLasiewski Why do you care about bluehost?

strugee

@PatoSáinz Sublime?

Anonymous

@strugee sublime for everyday, nano for "i'll just edit these two characters out" type of things

Anonymous

why?

Andrew

1:04 AM

hmmm, how to track down when a default changed...

strugee

@PatoSáinz shrugs

I'm surprised you're not using Vi like every other person in this room

2

Anonymous

@strugee @Jacob uses nano

Jacob

@PatoSáinz Get over it.

strugee

@PatoSáinz true. I don't know how he does it

Sublime > nano

no offense, @Jacob

Jacob

So does @MarkHenderson

Michael Hampton

1:07 AM

@PatoSáinz WTF did you do to that poor computer?

2

Anonymous

@MichaelHampton eh why?

Anonymous

@MichaelHampton oh you mean the VM where Konsole runs?

Michael Hampton

@PatoSáinz Yeah, you killed the rpmdb

Anonymous

yum hung, or was too slow for me so I just killed -9 it off after it didn't even reply to ^C nor ^\, and then I just rebuilt the rpmdb

Michael Hampton

Oh, and that looks like...Windows

MikeyB

1:08 AM

@MichaelHampton Fedora.

Anonymous

@MichaelHampton because I use Windows

Michael Hampton

@PatoSáinz Sorry to hear that. hope your computer gets better soon...

4

:)

Anonymous

@MichaelHampton I don't like it either, but I'm too lazy to go back to Linux

Anonymous

my Konsole in a VM is enough for me

Anonymous

@MichaelHampton have you never killed a rpmdb because you interrupted fucking yum?

strugee

1:10 AM

mutters something about the misuse of kill -9 award

Michael Hampton

@PatoSáinz No, but I've had it killed by the system crashing during a yum run

Anonymous

@strugee can you mutter it louder please?

strugee

tl;dr: don't use kill -9

Jacob

@PatoSáinz YOU USE KILL -9 LIKE AN IDIOT

Andrew

@PatoSáinz of course apt doesn't have those issues cough

Anonymous

1:12 AM

kill -9 ALL THE THINGS

strugee

partmaps.org/era/unix/award.html#uuk9letter

Anonymous

@Andrew enjoy your inferior distro

strugee

@Andrew right, APT is just impossible to use because it has like 15 different binaries to work with it, plus aptitude which just sits off in its own corner and does its own thing with half the db

Anonymous

@strugee when do you use -9 then?

strugee

@PatoSáinz me personally?

Andrew

1:13 AM

@strugee on a server I'll use apt and dpkg. Never touch aptitude, and on a desktop I'll use synaptic

Anonymous

@strugee ya

strugee

@Andrew I'll buy that. I like pacman myself because the 15-different-binaries thing really annoys me

@PatoSáinz I only use it after I've tried others

I wasn't really serious, I just relish the opportunity to be a sarcastic asshole on the internet

2

Anonymous

@strugee typical IT professional

strugee

@PatoSáinz professional?

Anonymous

@strugee amateur?

strugee

1:17 AM

@PatoSáinz yep. hobbyist.

but even if I was working from some company I still would not call myself a professional.

me, act professional? please

strugee

1:32 AM

I feel so conspicuous because I'm dominating the starwall... and scared, because it's the starwall on The Comms Room...

Andrew

Everyone rekeyed OpenVPN?

2

Shane Madden

@Andrew Ouch.

Magellan

@MichaelHampton longer than 6-8 weeks, yes. But not the 6^8 weeks (6**8 in Python notation) I told them that I expected them to finish it in.

Anonymous

Can someone test an email address for me?

Jacob

1:48 AM

@PatoSáinz sure

Michael Hampton

@PatoSáinz Zoho? You probably did it right.

Anonymous

@MichaelHampton you stalker

Anonymous

@Jacob say hi to pato@patosainz.cl please

Jacob

@Andrew Last week, but it will only allow server impersonation. It's not like they can decrypt the sessions.

Michael Hampton

@PatoSáinz Naaaa

$ host -t mx patosainz.cl
patosainz.cl mail is handled by 20 mx2.zohomail.com.
patosainz.cl mail is handled by 10 mx.zohomail.com.

Anonymous

1:49 AM

@MichaelHampton I'm redirecting everything from Zoho to gmail tho

Anonymous

and setting gmail up to smtp to zoho on those

Michael Hampton

@PatoSáinz Oh, well in that case you're on your own!

Joel E Salas

@PatoSáinz nasty

Jacob

@PatoSáinz out

Anonymous

@JoelESalas i don't want to use nasty zoho

Anonymous

1:50 AM

I already have all my mails unified into my gmail inbahx

Joel E Salas

using gmail is an act of negligence

Anonymous

@JoelESalas what? PRISM?

Anonymous

will my frankenmail work?

Anonymous

thanks @Jacob @jscott

Anonymous

so, it forwards messages, what about my SMTP gmail hack?

Anonymous

2:05 AM

@Jacob @jscott did you get the reply?

Jacob

@PatoSáinz I sent you the headers

Anonymous

@Jacob wow, it takes a while for zoho to redirect then

Anonymous

it took a while before too

Jacob

@PatoSáinz Why use all this redirect junk?

Anonymous

@Jacob because I want to just check one inbox via my gmail acct only

Anonymous

2:07 AM

@Jacob your mail just arrived

Anonymous

@Jacob replaced Redirect with Gmail POP, it went from 7 minutes delay to 20 seconds

Anonymous

I think I'm done

Anonymous

thanks for your help

EEAA

@Andrew Not yet. I use TLS Auth, though, so I'm mostly OK. I'm trusting my employees to not try and exploit things I guess.

Anonymous

@EEAA what's that thing I hear about TLS on VPNs requiring trust? why is that?

Jacob

2:14 AM

@PatoSáinz To prevent MITMs

EEAA

@PatoSáinz With TLS auth, if the auth key were leaked, they could theoretically get past the handshake layer and exploit heartbleed. Without that key, though, TLS negotiation can't succeed.

...which is why I'm mostly OK.

Andrew

Heartbleed arrest (warning: haven't read yet)

EEAA

Still need to upgrade and rekey, though, and soon.

MikeyB

@Andrew Yeah, we have dipshits in .ca as well.

Andrew

> All Canadians audit themselves anyway to make sure they sent enough money and included a tip.

MikeyB

2:19 AM

@Andrew Affects UDP-only openvpn as well?

Anonymous

@EEAA wtf is TLS designed to work like that?

Anonymous

"you need the auth key BUT you can MITM everyone with it too"

Anonymous

broken PoS

EEAA

@PatoSáinz That's not correct. TLS Auth, as used in OpenVPN, is a packet level authentication mechanism, completely separate from the authentication mechanisms that occur higher up the stack.

After TLS Auth succeeds (authenticating the packet), data still gets sent up the stack for typical certificate auth.

Anonymous

bbl movietime

Mark Henderson

2:26 AM

> A 19-year-old student has been arrested for allegedly exploiting the Heartbleed vulnerability to steal taxpayer data from as many as 900 Canadians, authorities said Wednesday.

That's all it basically says

MikeyB

@EEAA oh good to know

So wife started watching this - hilariously awful: netflix.com/WiMovie/Secret_Princes/70296274?trkid=13462100

Joel E Salas

@MikeyB best movie on netflix right now is Dredd

MikeyB

@JoelESalas It's on! Sweeeeet. We saw it in theatres.

Andrew

@MarkHenderson it's a follow up to this

►

Transcript for