« first day (1317 days earlier)      last day (3950 days later) » 
00:00 - 08:0013:00 - 23:00

00:15
Good news everybody! I've launched my own blog so I won't be just guesting. I'll be at: http://secopsmonkey.com/ #infosec #sysadmins
3
How's the new gig @ScottPack
01:05
@Iain You're room owner, right? @Zoredache? Other mods: @MichaelHampton @ChrisS @voretaq7? How's about adding Scotty's blog to the roll? =)
01:21
@cole Pretty good. I feel like I've settled in pretty well so far.
@Wesley I wonder if I can get another site's mod to do it.
I can do that
well if I can figure out how to do that from my ipad
I think I managed to not cock that up too badly
3
posted on April 18, 2014 by Scott Pack

Selection and Installation Coming into a new environment is always interesting. One of the first tasks that came up coming into this one was to throw up a provisioning server. Since we're already standardized on Ubuntu I didn't want to immediately jump to Cobbler as the tool of choice. Imagine my surprise when, after reviewing the options, I realized that a tool designed for Redhat

01:35
(is what it might as well have been doing outside today for all the good flight training did)
I had to evict birds from my tailcone, which turned into "well, let's clean up this other crap in the plane too, and wash it, and.... oh lookit that it's 5:30 guess I'm not flying today!"
@FalconMomot also
@voretaq7 next thing on my list is a night rating.
after, of course, I actually manage to finish my fucking PPL
@FalconMomot That's a separate thing in Canada too? I thought you guys might be like the US
(my student pilot permit was issued 2012 july 08, and my medical 2011 July 14)
(to give an idea of how slow this has been)
@voretaq7 I thought in the US you got night for free, but here in Canada you must have a separate rating for it yeah
yeah you have to do a certain amount of night instruction as part of the private training (otherwise you receive a license with a restriction that it's not valid at night - because Alaska.)
it's up to the pilot to stay night current though (at the moment I'm not)
01:43
because alaska?
also night currency here I think is just applicable if you have passengers
at which point it's 5 takeoffs and landings at night in the preceding 6 months
@voretaq7 amazing how many bugs evaporate too :)
@FalconMomot In northern Alaska there's sometimes no "night" for months so if you do your training during that window you don't do the night part
@voretaq7 oh, I see.
parts of northern canada are like that too but I don't think there are many flying schools there
northern canada is like a third-world country
2
@FalconMomot ours is 3 in 3 (full-stop landings)
@FalconMomot La Guardian Airport is like a third world country. Joe Biden told me so!
hahaha
sure
what I mean is
chat on an iPad still sucks cow cock
just in case anyone was wondering.
01:47
food prices are like 3-10 times as much, mail is unreliable (let alone power and electronic communication), and what paved roads there are look pretty rough.
who lives there does so completely at the mercy of the environment.
@voretaq7 ZFS on Linux loses its shit if you used device names as references for the devices and they move around... all the examples for FreeBSD use the device names (da0p3, da1p3, etc). Does FreeBSD just handle it if they move?
ugh, nonsemantic device naming annoys me
@voretaq7 Somebody needs a biology lesson... ;)
no, it sucks so hard the cow grows a cock :)
@mikeyb why would devices move?
01:50
presumably because udev ;)
@voretaq7 drive dies and the machine gets rebooted
yeah.... we don' udev over in the civilized world
	NAME        STATE     READ WRITE CKSUM
	storage     UNAVAIL      0     0     0  insufficient replicas
	  raidz2-0  UNAVAIL      0     0     0  insufficient replicas
	    sdb     FAULTED      0     0     0  corrupted data
	    sdc     ONLINE       0     0     0
	    sdd     ONLINE       0     0     0
	    sde     OFFLINE      0     0     0
	    sdf     FAULTED      0     0     0  corrupted data
	    sdg     FAULTED      0     0     0  corrupted data
	    sdh     FAULTED      0     0     0  corrupted data
those responsible for udev and systemd belong in prison
@mikeyb I'm not sure about SATA (never tested it) but the device IDs for SCSI stayed sane in the presence of failures - I assume SATA behaves similarly because they get sdN IDs
@FalconMomot Gulag
01:52
@voretaq7 unless you have things like a SAS card where you don't necessarily get the same enumeration
@voretaq7 are US prisons really so different from that?
@FalconMomot depends on the prison
dat retributive justice model
such failure
@MikeyB Don't use desktop hardware for servers! :)
@voretaq7 Actually in this case it's server hardware in a desktop.
01:53
I've never actually tested SATA failure modes that way though. Most of the times SATA hardware fails in such a way that it wrecks the whole bus so I have to visit the box anyway
well server-class desktop :P
either it is a pedestal server, or it is a desktop.
install BSD (or boot a liveCD) and note the drive/serial mappings then unplug a middle drive and see what it does - I'd be interested too :)
I don't have any physical lab equipment anymore - it's all VMware :-/
@voretaq7 I don't like vmware anymore
am I in the wrong
I think you can label ZFS drives/partitions on BSD too - I should look into that :)
@JoelESalas depends on why
01:56
@voretaq7 glabel yeah
@MikeyB yeah. that would be the most breakage-proof method I think
@ScottPack Did you really use the hashtag #sysadmins on Twitter? Dude.
#dontknowhowtotwatter
right, off to church to stand on the roof with a camera.
@wesley Did I? I let Twitter expand it for me.
@FalconMomot Ummmmm you know it's not like Christmas, right? Jesus doesn't show up at midnight in a sled for the resurrection...
02:02
I thought Jesus showed up in March?
@voretaq7 No, but the lighting of the advent candle can be captured on CCTV much better from such a vantage point.
@ScottPack I usually see it singular - twitter's hashtag thing is... sort of.... not good.
@ScottPack He likes to move the date of the resurrection around to keep his followers on their toes
@voretaq I didn't look. I got to "#sys" and there was only the one entry so I took it.
02:27
@ScottPack Yeah Twitter's suggested hashtag auto-complete isn't hip.
hahahaha. Our neighbors are being douchebags. Not total dicks, but playing blasting loud music at this hour (10PM)... adults really should know better.
Didn't know their house number to call in a noise complaint (they're on the cross-street) so I checked it with Google Street View.
Age of the geek, baby.
@MikeyB 10PM is too late to have some music going on a Saturday night? Simmer down there Grandpa.
I usually give my neighbors until midnight.
And I'm a total prick who looks for reasons to call my neighbors in. =P
But mostly I'm just a prick.
@FalconMomot What church and where can I see the stream? =P
@Wesley blasting the bass in a close residential neighborhood. Usually I'm tolerant yeah, but if my kids wake up nobody's going to be happy.
@MikeyB Your Canadian, how angry can you really get? =P
Plus, not nearly as many guns up there as down here, so how can you truly express your freedom?
America. Express your freedom by relieving someone else of theirs through excessive force.
@Wesley Quiet rage. Scary.
02:32
MikeyB: The definition of silent but deadly.
Release the hit-loons!
@Wesley You're
hahahaha this is classic:
user image
2
@MikeyB Hahah
02:49
5
Q: Wake on LAN across VLANs in IPv6 network

Avery AbbottIn IPv4, if I want to send a magic packet to a workstation in another VLAN, I enable directed broadcasts in the remote VLAN and send it to the VLAN's broadcast address. This works great. In IPv6, I can use FF02::1 to send a WoL frame to workstations inside the same VLAN, but without broadcasts,...

Someone want to try to solve this guy's real problem? (Hint: It's not WoL)
Anonymous
03:01
hello everybody!
@StackExchange @MichaelHampton what's new?
Anonymous
sup @strugee?
Anonymous
@MichelZ what did you reply to?
@PatoSáinz good morning!
Anonymous
@MichelZ also, I see you watch elementary :)
03:04
@PatoSáinz went to a local meetup, but the person I was meeting forgot :P
Anonymous
@MichaelHampton you should download something like a 4K movie just to open it and have it run on all six screens
Anonymous
@strugee lol
Anonymous
@strugee night here
Anonymous
is it easter there?
@PatoSáinz same here
@PatoSáinz maybe? I'm not organized enough to know
Anonymous
03:07
@strugee heh, clever
@PatoSáinz right?
Anonymous
also, IRC
@PatoSáinz and?
Anonymous
@strugee I like IRC a lot
@PatoSáinz so do I. in fact I'm setting up a bouncer on my server right now
Anonymous
03:11
I can safely say that it's also the only protocol whose RFC I've completely read and applied
@PatoSáinz really? huh. it always seemed really complex to me, from the Wikipedia page.
I've read part of the HTTP RFC but not all
Anonymous
@strugee hell no
Anonymous
I even implemented a client from scratch
Anonymous
with perl
@PatoSáinz ewww why?
03:14
@PatoSáinz mostly it was the fact that there were multiple servers
and messages propogate among them or something
I never really understood it
Anonymous
@Jacob to learn
@PatoSáinz gross
Anonymous
@strugee oh, the server-to-server protocol is a whole other thing
Anonymous
it's still fairly simple
@PatoSáinz oh, that's not core IRC?
Anonymous
03:15
timestamps, etc
Anonymous
@strugee I was talking about client-server shit that I implemented
Anonymous
but server-to-server (unreal's protocol, charybdis and such's TS6) it's still quite uncomplicated
@PatoSáinz right
Anonymous
@strugee i used to know hella lot about irc, now it's still there but it's fading
Anonymous
03:18
ranging from culture, origins to how fucking charybdis worked
Anonymous
hell I even wrote a module for Atheme somewhere and contributed to unreal
@PatoSáinz yeah I have a couple things like that too
I used to know a ton about Firefox/Gecko internals. now my knowledge is slowly fading into obsolescence. mostly because I've unsubscribed from mozilla.dev.platform
Anonymous
@FalconMomot those responsible for init, OpenRC, upstart and eudev deserve to be euthanised
two stars, wow. I didn't expect there to be that many systemd fans here
Anonymous
@strugee we all are reasonable, RHEL-using people
Anonymous
03:21
also, LOL AT GENTOO
Anonymous
literally, forking udev and init?!
Anonymous
that's just madness
Anonymous
@strugee oh yea, but Firefox+Gecko mutates and will be replaced by Firefox+Electrolysis+Australis+Servo
@PatoSáinz you realize that Electrolysis and Australis are both codenames for projects on Firefox, right? not projects of their own?
@PatoSáinz not all of us :P
Anonymous
@strugee yea, but they are substantial changes
03:24
@PatoSáinz true
I've been using Australis for months on the Nightly channel, I can't wait for it to hit stable
and Electrolysis is looking pretty good too
Anonymous
@strugee those who are not are just unreasonable, gentoo or shuttleworth-loving people
Anonymous
also, kek Mir
Anonymous
@strugee is it testeable?
@PatoSáinz yes
for about a month now there's been an option in nightly builds to open a new window that runs on Electrolysis
there's still a ton of crap broken - e.g., you can't print things - but it's useable
@PatoSáinz you just called me unreasonable
@PatoSáinz yeah, that's the primary reason I'm pissed at Canonical
Anonymous
@strugee >printing pages
Anonymous
03:29
so 1999
Anonymous
@strugee gentoo user?
@PatoSáinz nope. I've considered trying it but even if I did I would never, ever run it on a server. only on personal boxes.
guess again
Electrolysis in a box
actually the full image is more likely to get stars
Anonymous
@strugee people run it on servers, I think @MichaelHampton does or someone else here
Anonymous
@strugee lol programmer pun
also:
@PatoSáinz yep
@PatoSáinz really. well, I run my server on Arch
@PatoSáinz man, I forgot this is a room full of sysadmins who wouldn't necessarily get the joke.
Anonymous
03:33
@strugee WAT
Anonymous
>arch
Anonymous
to the trash it goes
Anonymous
also, >memearrows
Anonymous
@strugee we all are devops, we get it ;)
@PatoSáinz Fuck that, I would not use Gentoo for anything important.
03:34
@PatoSáinz I run Arch on it because I find it infinitely easier to administer than other systems
Anonymous
@strugee suuuuree
Anonymous
especially when they didn't sign their fucking packages
if I was deploying, say, a datacenter, there's no way I'd use Arch. I'd suck it up and use RHEL/CentOS, so that I could get Puppet
@PatoSáinz no joke
Anonymous
and upgrading usually means LOL FUCK YER KERNEL HERE NOTHING BOOTS LOLOLOL WE ARE BLEEDING EDGE
@PatoSáinz they have for a couple years or so
@PatoSáinz pacman -S linux-lts
Anonymous
03:35
@strugee just two
Anonymous
@strugee still, their first response was basically "we don't care"
Anonymous
that makes me wonder what kind of people are in charge
@PatoSáinz shrugs I don't see a point in judging it by something that it didn't do two years ago. if it didn't have package signing, I wouldn't run it on a server. but now it does
@PatoSáinz I've found the devs to be fairly responsive
they make technical decisions. it's a technical distribution.
Anonymous
@strugee by that i meant "security-minded"
if you can't back up an idea with technical benefit, they'll ignore you because you're wasting their time.
@PatoSáinz ?
Anonymous
03:38
@strugee they didn't care about signing
@PatoSáinz shrugs. it's here now.
Anonymous
@strugee youtube.com/watch?v=mvM0eqT75wY (may be NSFW)
the reason I like Arch is because I know exactly what is running on my box. exactly.
Anonymous
@strugee oh, that sentiment is awesome actually
Anonymous
but I don't need down to kernel modules what runs tho
03:40
@PatoSáinz you are in The Comms Room
Anonymous
with systemd is enough for me
Anonymous
@strugee meh some people do get pissed off
Anonymous
I know this isn't your typical SE room or say, The Bridge
Anonymous
but still I wouldn't risk myself
@PatoSáinz I will admit that I don't know what kernel modules are loaded. but pretty much everything else...
I mean, literally no systemd units ship enabled by default.
Anonymous
03:42
@strugee crond?
Anonymous
syslog?
nothing runs unless I explicitly enable it.
@PatoSáinz systemd-journald
Anonymous
@strugee I like having my box working by default :)
Anonymous
@strugee oh right
@PatoSáinz that's handled by systemd's cron implementation
Anonymous
03:43
@strugee also right
I mean, everything in systemd is turned on.
Anonymous
@strugee isn't an advantage of Arch that you riced your kernel the way you wanted
but services like Apache don't ship enabled
ever
Anonymous
@strugee do they do in any distro?!
03:45
@PatoSáinz Apache wouldn't be. something like ntpd would be turned on really often.
or NetworkMangler.
Anonymous
oh ntpd was so fun to use back when I managed an IRC network
Arch won't do any autoconfig arcane black magic for you
Anonymous
also, timestamp desynchs were so chaotic in IRC :)
@PatoSáinz if you need to it's easy. I don't really need to
yet
I need to implement MAC
Anonymous
03:47
a real bug
@PatoSáinz ahahahaha
@PatoSáinz "Reproducible: Always"
complete with the Heartbleed banner at the top
Anonymous
@strugee lol
haha I'm looking at that quotes page
dying
Anonymous
lol
Anonymous
@strugee bugs.gentoo.org/show_bug.cgi?id=124595 "fuck upstream"
Anonymous
03:54
seriously, ubuntu and gentoo are the best ways to say fuck upstream
Anonymous
> People who think Gentoo rules because they can't use RPM properly
hahahaha yes
Anonymous
Anonymous
Anonymous
another joke probably not many people will get
04:00
2 days ago, by Pato Sáinz
breaking news! Canonical fucks shit up again by not respecting upstream
<3
Anonymous
lol
@PatoSáinz Directory Tiles are very misunderstood. because there was a PR fuckup.
Anonymous
@strugee indeed
@PatoSáinz fun fact: Gecko has the least amount of rendering bugs as measured by the JQuery project
Anonymous
that and the ex-CEO were two big hits for such a lovable org
Anonymous
04:01
@strugee nice fact
<3 Gecko
@PatoSáinz yeah. but Brendan did the right thing
Anonymous
Anonymous
"long-term spidermonkey planning"
are you just reading Mozilla Memes?
Anonymous
@strugee what?
04:03
@PatoSáinz by stepping down. the community didn't trust him and he recognized that so he did the right thing and stepped down
Anonymous
@strugee i'm not sure the whole community wanted him out
@PatoSáinz no, of course not. but a large portion did
Anonymous
if it had been my choice I would have made Brendan stay
Anonymous
@strugee not sure about that
Anonymous
also, Brendan was since netscape
04:04
@PatoSáinz a large enough portion that it was divisive to the community. and you know what divisiveness leads to (usually).
@PatoSáinz that reminds me of something
Anonymous
@strugee about what?
did you know that the authenticity portion of SSL was just an afterthought? the guy who invented the protocol at Netscape said that he just kind of tacked it on after the fact with no thought
hence, CAs
screw CAs
Anonymous
@strugee how long do you think will it take for the whole internet to move onto a CA replacement?
ages
I tried out Convergence the other day
Anonymous
@strugee how did it go?
04:10
everything broke. nothing loaded because I had no notaries configured. and I couldn't add any notaries because none of the buttons in the addon worked, because it hasn't been maintained for 2 years. and in any case, a large portion of the infrastructure is gone
there's an active fork but it makes non-backwards-compatible changes to the client and server protocols so old notaries aren't compatible with it. and there are no public new-style notaries.
Anonymous
@strugee i'm sure nobody used it either
Anonymous
well, got to sleep, see you @strugee
@PatoSáinz yeah, night! been really nice talking with you
@PatoSáinz it has around 40 stars on GitHub IIRC
Anonymous
@strugee well I'm sure that isn't enough to cover the internet
Anonymous
@strugee lol thanks, same with you
04:14
@PatoSáinz really? I thought 40 people was like at least twice the size of the internet. damn.
Anonymous
@strugee may be a third of ARPAnet
and with that, I'll go back to configuring ZNC and say good night :P
Anonymous
@strugee gonna watch the latest episode of Person of Interest and have a good sleep
Anonymous
@strugee i don't like bouncers :/
Anonymous
it's just too much configuration
Anonymous
04:15
i'd rather have my riced-up irssi with screen
@PatoSáinz yeah, at first. I like them after though
@PatoSáinz I tried that for a while but I needed a real solution
Anonymous
not only configuation but custom commands with asterisks
Anonymous
@strugee it is a real solution
Anonymous
you can even make it notify highlights to your phone
@PatoSáinz eh. it just didn't suit my style.
Anonymous
04:16
My irssi.conf file is huuuuuge and I have like two custom modules and 20+ scripts
Anonymous
@strugee what client do you use?
@PatoSáinz really
@PatoSáinz Pidgin for everything but I'm considering switching
Anonymous
@strugee yea?
Anonymous
@strugee pidgin for IRC?!!!!?
Anonymous
that's got to be awful
04:17
@PatoSáinz stfu it's fine
Anonymous
@strugee if you change, and want a GUI: Xchat or Hexchat if you are in Windows
it's not the greatest but it's fine
Anonymous
if you want CLI: based irssi or BitchX at most
Anonymous
but irssi always
haha ok
Anonymous
04:18
@strugee you'd think using keybinds and shit would be as tedious as learning Vim
Anonymous
but it isn't :)
heh
my only requirement is that keybindings either work or can be made to work without arrow keys
Anonymous
the only problem i have with irssi is that its development is kinda slow since the last 4 years
Anonymous
like most IRC things
Anonymous
and I know there are a couple really unknown bugs that allow remote code execution
Anonymous
04:19
I've only seen it exploited in the wild twice in a 4-year-span
Anonymous
but god it freaked me out, somebody else sending commands to the IRC server and seeing the stderr from my shell going crazy
Anonymous
since that I ran irssi in a chroot under a completely unrelated user to the one I use
I bet
that's terrifying
that's a bit how I feel about Skype poking around in ~/.mozilla
Anonymous
lol what?!
04:21
I run that shit in a dedicated user
Anonymous
@strugee how do you know and why?
Anonymous
The two people who exploited that bug on me where, the first, just a dumb script kiddo that probably just ran a PoC script on me
Anonymous
but the second was a known troll who liked to break havoc
Anonymous
hell he even coded C snippets to exploit Cisco Routers en masse for ddos
04:23
@PatoSáinz you trace system calls
I haven't done it myself but it's well-known
Anonymous
and implemented a backdoor in ircds
Anonymous
@strugee i love the archlinux wiki
apparently it also reads DMI information. not sure what that is
@PatoSáinz so do I. it's incredible
Anonymous
04:24
still sorta maintained
Anonymous
@strugee dmi?
@PatoSáinz yeah
Anonymous
@strugee well see you!
@PatoSáinz night!
for the third time :)
Anonymous
:)
06:17
G'day
06:32
Gooood morning vietnam
G'day
G'day
The answer is: As soon as it costs the business a shitload of money if the service is down... – MichelZ
:D
@PatoSáinz I have no clue what I replied to yesterday. And yes, watching elementary :D
07:00
$TIMEOFDAY
Tonight I dreamt I was writing slashfic. And I remember the story. And it was reasonably original and coherent, and probably at least as good as anything I've thought of while awake. My subconscious is weird.
@JennyD Maybe you should get a "Dream Job" then :)
@MichelZ I kind of like my day job, though... But it's weird how I came up with a complete and coherent story for a show I've not watched in years.
@JennyD Today I'm going to watch some eventing - should be good fun
@Iain I'm not sure what eventing translates as - is it like a dressage or jumping competition or something else?
My horse managed to get a kind of boil inside his hoof so he's not been allowed out after it got lanced, because it's mud season. He is Not Amused.
@JennyD dressage/show jumping/cross country
07:12
@Iain Cool! Sounds fun!
With any luck we'll see some international riders competing at lower levels with their younger horses too
I was planning to go in the just-for-fun junior maskerade jumping event at the club, but his hoof blew that out of the water. Pity, because I'd thought of a really good dress...
@Iain That's always fun
I usually volunteer at our local events which are very low level, and occasionally go see the international events. I rarely see the ones in beteween.
@JennyD We're reasonably lucky to have 3 places quite close to go watch eventing so we can watch from BE90 to 2* throughout the summer as well as lots of local unaffiliated shows
What's better is that spectators don't get charged much of an entry fee it's usually something like £5/car
There's nowhere local that does dressage above Novice though
@Iain That sounds great! I do live near-ish a lot of places that have mid-range events, but I rarely take the time to go - I need to spend time with my own horse, and since neither husband nor girlfriend are interested in watching, what time I have left to spend with them tends to be something that they too enjoy.
Although I've now got a friend who lives close to me and who likes horses, so we might go some time just for fun.
@JennyD Today will be a bit chilly but the others we go to will be quite warm so it's a nice day out in the country
07:23
@Iain Today I'm going to give Prime some exercise in the paddock and then go home and have some friends over to see the new house
good morning
hey dawud
Just heard a bump and then a scrabblerunscrabblepouncescrabblerun. Apparently one of the cats found the box of cat toys.
07:38
All I'm hearing from our cats atm is zzzZZZzzz
We let them out for the first time in the new place yesterday. They have been trying to tell us the whole morning that the door is currently broken and we should fix it again so they can continue their claiming of the domain.
@Iain: zzzZZZzzz here as well :)
00:00 - 08:0013:00 - 23:00

« first day (1317 days earlier)      last day (3950 days later) »