@WesleyDavid Evenin'. Wish I knew that J didn't take Visa. Gonna take like a week for the USPS to get a check to her. The only thing in my life that moves that slow is my motorcycle mechanic, and that's why I got 3 bikes.
@WesleyDavid Yeah, no kidding. Especially since I was chatting with an Amazon executive in a coffee shop Friday while I was waiting for her to call me.
@mgorven I can imagine. Might be nice a few times a year, but if you're a home body, as I am to a degree, it's nice to come back to your own carpet stains and dented drywall.
@WesleyDavid Was good chatting with them, but I'm leery as hell of Amazon. They chew people up and spit them out. Essentially, they get all the folks that don't quite make it into Google and burn them out in 18 months, rinse & repeat.
@WesleyDavid Pay's pretty good, but you're soldiering no matter what. Besos is as bad as Steve Jobs, and more than one person I know who's made a technical proposal to him said it was tougher getting interrogated by him than it was going before Congress.
@mgorven That's the thing with me. I'm a homebody to a degree, but get me out of the house for a solid week and I never want to go back there again. Especially if it's some place with year-round decent weather than I can buy/take a motorcycle. The Flatlander wanderlust kicks in and I'm just as likely to quit my job and wander for a year or two.
@WesleyDavid Meh. Helmets keep my head cooler. I get weird(er) when I get into open sky country though.
@WesleyDavid Anybody who can isn't a "normal". Intense stress, long hours, horrible diet. Gotta be "on" all the time. Kinda like running for/being a US President.
@Adrian Yeah, I think it's just silly to be on a motorcycle without a helmet.
"It's freedom man!" Fuck you when you get hit by a car, either your fault or the four-wheeler, and you die horribly and the other person has that to live with.
@WesleyDavid Yeah. I usually don't give those folks anything but the 10,000 yard stare when they hassle me about the amount of gear I wear. Oddly, they stop giving me shit at that point. It's probably because I look like I might just eat their brains after 10-12 hours and 700 miles.
@WesleyDavid It's all Goretex, actually. But I usually also look like a bug collector's wet dream after those kind of days. Simply encrusted in bug guts.
@JeffFerland Amen brother. My Hi-Vis Yellow is so old it's Lo-Vis now. Roughly 65,000 miles of commuting on it. Probably going to send it back to Duluth for zipper replacement this winter. That jacket has street cred like nobody' business.
@JeffFerland Oh! And I almost forgot! Stinking Spammer!
I installed ISPConfig and it detected Apache because I didn't uninstall it when I switched to Nginx.
I figured I could just remove apache (httpd) and re-run the update script for ISPconfig, however it still seems to find apache.
Is there a way of getting ISPconfig to detect Nginx not Apache. I...
Still my favorite TV moment I think... And the reason they don't let smart people on shows were they can win money anymore. I'm sure Ken Jennings didn't help either.
@JeffFerland Because after that point they leave and take their whining elsewhere. Oddly, all sorts of folks don't really appreciate it when I tell them to take their gripes down the hall to my boss.
I have a cPanel Server with 4GB of Ram and 4GB of /tmp space. I always get this error:
Will this cause slow performance? and can I delete everything?
Drive Critical: /tmp (/var/tmp) is 95% full
Drive Critical: /usr/tmpDSK (/tmp) is 95% full
@JeffFerland You still here? I'm curious: what prompted you to pop into bikes.SE and answer a couple lubrication questions? And if you're looking for another one:
I don't have any chain oil right now, but I have some gear oil left over from working on my car. Would it be an effective chain lubricant? It's listed as 80W90, but reading the Wikipedia article suggests that that's not equivalent to motor oil viscosity ratings.
@Ward Between the rollers and the pivot up against the side plate, I imagine. I've never disected a chain before. I have the shop put them on since it involves either removing the swingarm or breaking the chain and riveting a new link in.
Put 43,000 miles on my V-Strom's last chain. DID Gold X-ring with a Loobman.
Lady friend did a nice flip when I told her I didn't have any instrument slide grease so I put some molybdenum on a flute. Apparently flutes shouldn't be greased.
All my firmware is up to date on the server and the controllers.
Storage crashed over the weekend. I rebooted it and it detected that I put in two new disks last week (I did check that both disk completed the rebuilding process last week). After it booted into the OS I see that it gave me an inf...
Hey guys, can you please have a look at the question superuser.com/questions/481766/… I posted it on superuser, cause I thought it's a more windows specific question, but I will be happy if you could have a look at it.
Do you work with Red Hat based operating systems? When you go to a car show, and people talk about RPMs, do you get discouraged when you realize that they’re not talking about Linux? Are you inordinately fascinated by gaudy headwear? Do you want to make more money? Sure! We all do! Certifications, love them or hate them, do have a tendency to help you earn more money and get noticed for …
Are you using a wiki format? If so, which product? (MediaWiki, Confluence, Sharepoint etc.)
Have you create a knowledge base? (Problem/solution-oriented short documents.)
What challenges do you find with creating documentation that works, so you don't get the call when you're off on holiday?
...
I have a dev telling me that ProgramData is the best place to store logs, but we need to grant limited users write to that directory so that the app can write logs there. I know that's bullshit, but I don't have proof otherwise.
I have an old HP ProLiant dl380 G4 server whose hard disk needs to be formatted. Unfortunately, I cannot seem to do so. For one, it doesn't seem to be detecting any Hard Drives attached to the Server. The Hard Disks show up in the Ctrl+A option (SCSI Configuration Utility). Also, while inserting ...
The question where exception logs should go has been discussed here once or twice (or more), and one of the recommendation was that the application should never write to the installation folder.
However, if I put the logs somewhere in %appdata%, this means that each user has its own set of logs. ...
My company has to image large amount of machines by the end of the year. Each of the machines will be under a hardware raid 1 running centos6. Could someone recommend me a piece of software I can load on a little mini desktop, buy a switch, and connect them all together. Then have the image pulle...
@ColdT I'm not sure but I think the price reduction is per-reseller. Unless it's specially quoted for the customer.
@ewwhite I wrote software to do the whole process - apply firmware updates by MT/serial, RAID hard drives, test hardware, deploy OS, configure BIOS, etc.
Imaged a few thousand blades and bladeCenters from a laptop with a single GE connection
@MikeyB i got a price direct from a reseller and also an email coming from vmware themselves with the same price... and i'm thinking do i really want to waste my time looking for prices
might i add, this is the Basic Support Coverage Academic VMware vCenter Server 5 Foundation AND Basic Support Coverage Academic VMware 5 Enterprise for 1 processor x 6
VCS5-FND-G-SSS-A - i have £260.49 and VS5-ENT-G-SSS-A - £288.37 * 6
@voretaq7 That's a surprisingly heteronormal statement from you.
@voretaq7 Hey… since you're here… If I'm installing pfSense (based on FreeBSD, presumably same installer?) and I want to twiddle the install options to use a serial console for install, what do I have to put in the bootloader? Know offhand?
@MikeyB The original statement was heteronormal - when I challenge people's world views they often cry, and I'm in no mood to put people back together lately
I am considering getting a Hacom Mars II Dual Blade for use as a firewall in a data-center for one of my colocated solutions. As the 1U enclosure have two identical firewalls, I am intending to use one of the firewalls as the external firewall using packet-filtering and load balancer (balancing l...
sigh Grumped at by the CFO. He's been here for 27 years. Filing a work ticket for non-emergency requests has been the policy for 11 years. Still shows up at my desk with printouts of fake postmaster failures messages.
@Bruno It reflected my best knowledge at the time (which we know wasn't spot on now) - my position on that answer is basically "Yeah, there's problems with it - if it's wrong enough that you've got serious issues with it downvote it and post a better one - I'll happily upvote better answers" :-)
@voretaq7, the problem is that I think it's a good fit for an answer that's 90% wrong (and was completely wrong) and that's been accepted. There already is a better answer (following ChrisS's bounty if I remember correctly).
@voretaq7, ah OK, I just wasn't sure whether you had realised it was wrong, since in response to some comments I made, you were still talking about "TLS upgrade". I'd suggest deleting that answer is probably the right way to go, just to prevent new-comers from confusing SNI with RFC-2817.
@voretaq7 Oddly, we DO have a check writing machine. But only because the Wells Fargo app requires unrestricted ActiveX. =/
Well, maybe not totally unrestricted. But considering that I found out about the project when it showed up in my chair to be installed one morning, I don't really give an F.
@tombull89 I'll bet that hardware is pretty popular with sites that want redundant (or load balanced) pfSense routers (particularly in confined rack spaces)
@MikeyB Could be worse that's for certain, in quite a bit of pain today and decided to watch some bloody sad film that wasn't a good idea, haven't thought about work at all which is nice, went for a little walk but that made me tired, overall not bad considering
@voretaq7 Not quite. But no iptables either and no input sanitizing. Dev machines are similarly wide open, except that anyone can login on those since they're on NIS.
@Adrian "you should never run a firewall inside your network"
<- big believer in that axiom -- I disable local firewalls on all my unix systems. The network isolation and core firewalls take care of IP-level access control - it's not the end machine's job
@voretaq7, sorry to insist, I'm not quite sure how to handle this in the context of the meta question. Do you at least realise that everything in that answer was completely wrong (even in 2010) until the last edit (which only adds 3 lines of correct answer)? Your last comment on that answer was still talking about "TLS upgrading".
@LucasKauffman Skene cancer (NSFW) . Warning, don't Google that one at work! At least not in the US or countries where their sphincters are too tight...
@Bruno The HTTP->HTTPS upgrade process is one way of accomplishing the "Multiple SSL hosts on one IP" goal, SNI is an alternate (arguably better) way of going about it - I agree the answer has wrong info in it, but I maintain the correct way to deal with that is a downvote/comment. (I would go back and fix it but that's hours out of my schedule that I don't have at the moment...)
@Adrian in my case "A pair of FreeBSD machines running pf"
@ChrisS and making the bonk noise happen even when I'm not paying attention to it :P
@voretaq7, fixing it only requires deleting everything after the first 3 lines: all the stuff about RFC 2817 and the un-related curl trace. It's just never used (only for IPP). RFC 2817 has absolutely nothing to do with https:// (which the question is about, since it's about SSL on port 443).
@Bruno I've got no objection if you'd like to make that edit - there is other stuff wrong with that answer that I'd reword/clarify if I was in there. (I honestly don't remember why we did that curl trace - that was like a year ago and I'm sure I had some point to it but I've long since forgotten it. Remembering why I did what I did is the "hours" I was referring to - it's like looking at your own code a year later :P)
@Bruno if you do edit the answer, please don't just delete everything but the first three lines though, actually fix the answer and not turn it into a sentence with a link that says : go over there
@JoelESalas untrue sir - host-based firewalls are a path of misery and woe!
(mostly when people forget that there's a host-based firewall and you spend time troubleshooting a problem that turns out to be "Oh, the firewall on that box doesn't allow that port")
@Zypher, the problem is that there's a complete better answer just underneath already. Changing the entire meaning of an incorrect answer seems a bit odd, especially when it's not done by its author.
There's nothing inherently wrong with host-based firewalls in addition to a proper network firewall, if they're managed properly. That if is usually the sticking point :-)
@voretaq7, RFC 2817 could have been used for this in principle, but it never caught on. It also has a number of problems, in particular because it's up to the client to determine whether it should interpret the URI has requiring secure access or not.
but in my case the servers aren't running anything they shouldn't be (I know because radmind enforces such behavior) - so I'd just be running a local firewall to pass all the open ports - sure it's not that expensive to do, but it's not buying me much
@JeffFerland Of course if you're going to run like I do without intra-network local firewalls it's probably also best to have an IDS that squawks when it sees aberrant behavior like ssh connections within a subnet that shouldn't be there. I hope one day to get this network to that point -- Can I borrow a cup of Padawans from someone to implement my grand designs? :P
@voretaq7 You seem like the kind of totalitarian that would force host-based firewalls just because they're a) good form and b) it's fun to make devs cry
It's not usually the devs who wind up crying. (or more accurately they cry to me and create more work)
If I were in an environment where devs could put stuff on the servers without my knowledge I might be more open to host-based firewalls though (to prevent them from spinning up a web server or something that shouldn't exist)
I really don't see the benefit in most environments - if someone breaks into one of our machines they're contained within the vlan/subnet (subject to core fw rules). If they manage to break the core all is lost anyway (they can hop from the core FW to any machine they want by giving themselves an address in the management network which would be allowed through the local FW too)...
What do you guys think is the maximum % one could set "Limit CPU usage during scan to" for Microsoft Security Essentials, without someone being able to notice it slowing their work down?
Put the lead Dev on the new server to beta test per boss' direction. First request? Please install 110 KDE packages on this otherwise-clean Ubuntu 12.04 so that I can use my favorite KDE editor...
@David Usually they don't notice the CPU being sucked down as modern CPUs can context switch faster than they'll notice. The Disk is usually what kills UX, as it takes dozens of milliseconds to chug through the command queue.
@JeffFerland Indeed, but I trust the limited attack surface and the IDS components that are in place and working :)
(and like I said local firewalls wouldn't buy me anything because their rulesets would be similar-or-identical to the local firewalls - I'd only be blocking intra-vlan attacks which are a tiny risk profile -- all my security assumptions are based around "If one host in an isolation zone is compromised the whole zone is shot")
@LucasKauffman Sorry, was away - yeah, spotted it on the 10th August, just a throbbing in my chest/moob, got it checked out by doctor on the 17th Aug, mamogram 10th Sept, confirmed 17th Sept, cut out 28th Sept - so all quite quick which is good, bit tired and in some pain now (see massive scar from earlier today), about 2.5-3% of all breast cancer is in men but usually much older guys (60+) and often left very late, so all good.
Got to have chemo in the coming months but [main client] is a) paying me, b) bonusing me too :) c) holding back all my projects until I'm back and as I'd forgotten that I had critical illness cover I'm going to pocket a tidy sum out of it anyway - so positives all round, just need to ensure it's all gone now.
I installed ISPConfig and it detected Apache because I didn't uninstall it when I switched to Nginx.
I figured I could just remove apache (httpd) and re-run the update script for ISPconfig, however it still seems to find apache.
Is there a way of getting ISPconfig to detect Nginx not Apache. I...
I have a cPanel Server with 4GB of Ram and 4GB of /tmp space. I always get this error:
Will this cause slow performance? and can I delete everything?
Drive Critical: /tmp (/var/tmp) is 95% full
Drive Critical: /usr/tmpDSK (/tmp) is 95% full
I don't have any chain oil right now, but I have some gear oil left over from working on my car. Would it be an effective chain lubricant? It's listed as 80W90, but reading the Wikipedia article suggests that that's not equivalent to motor oil viscosity ratings.
Are you using a wiki format? If so, which product? (MediaWiki, Confluence, Sharepoint etc.)
Have you create a knowledge base? (Problem/solution-oriented short documents.)
What challenges do you find with creating documentation that works, so you don't get the call when you're off on holiday?
...
The solution was that Hamachi was overriding the IP range due to the IP starting with 5.
