The Comms Room

pauska

00:07

@MarkHenderson well congrats, you're one of two people I know that have actually used vmware FT in production

@voretaq7 I'm guessing AX4-5i. Cheap and does what promised.

we have two EMC recoverpoints at each site gathering dust right now...

voretaq7

@pauska They were quite good, except the replication did not like the shitty link we had to texas

pauska

havent been arsed to buy hours from EMC to get it set up.. I'm thinking that i'd rather take the route of just using hyperv with built in replication

basil would probably spit at the floor if he saw what I just wrote

Mark Henderson

@pauska fwiw I handed that project off about 12 months ago, so I've no idea if it's still in use, but I'm guessing it is

pauska

I had a laugh reading your SQL woes above here

Matt Bear

I need to raise some money....

im gonna set up a site for donations I think

pauska

00:14

I'm trying to learn a bit more about sizing ms sql correctly.. how do you profile your database to find out how large a query is?

Matt Bear

thetruthaboutcars.com/2010/05/the-worlds-biggest-rv

pauska

I'm using the data warehousing, but it doesnt give me any query size?

Matt Bear

gonna use it for cooking meth

pauska

(4GB RAM on 120GB dataset is beyond belief btw)

ewwhite

00:29

Oh eww... Got sick at the data center...

This is a big facility, so I had to run for 2-3 minutes to find a toilet!!

Scott Pack

@ewwhite That's what you get for throwing back a handful of roofies.

Matt Bear

@ewwhite lol

@ewwhite ive been thinking about turning the... porclein office, into my office

Jacob

00:57

@ewwhite You ok?

jscott

01:16

Just had a support call with my old man. He got a new computer [on his own! he's all grown up] so we had to do the ShowMyPC thing. It took longer to get him to launch the showmypc exe than it did to resolve the issue. Also, he's about to print a 130 page PDF on his inkjet printer, even after we talk about how wasteful and expensive [in ink cost] that will be. sigh

Hennes

01:26

Could be worse. He could have that printer and not use it.
Or, as my father did, use it about once per year.

That means that the inkt cartridges have dried out after a year, so each new print job (typical 5 pages) costs a new colour inkt cartridge.

sigh

I've heard system admins smell like cheese

5

MDMarra

That sounds about right

Hennes

Old cheese, old cheese. :)

jscott

@sigh Ha! You'd be lucky if I smelled that nicely.

I don't even want to describe what my chair smells like.

sigh

I'm scared to ask why or how you know what it smells like

jscott

01:31

I often have to mess around under the desk with cabling, so I get a free wiff in passing.

ConcernedOfTunbridgeWells

One thing I dislike about Aerons is the lack of a seat cushion. It's next to impossible to crack off a silent one while sitting in an Aeron.
On the other hand it doesn't accumulate in the cushion because the Aeron ain't got one.

2

sigh

@ConcernedOfTunbridgeWells Weren't you going to sleep?

Simon Righarts

@ConcernedOfTunbridgeWells Is farts and cheese all you talk about?

Hennes

I think the small is keeping him awake

ConcernedOfTunbridgeWells

@SimonRigharts Mostly. Occasionally I talk about computers as well.

jscott

01:34

@ConcernedOfTunbridgeWells Exactly, we've got the cheapest of cheap Office Maxpo chairs. They not comfortable, but they have a thick seat pad that really holds the smell.

Hennes

Limburger

Limburger is a cheese that originated during the 19th century in the historical Duchy of Limburg, which is now divided among modern-day Belgium, Germany, and Netherlands. The cheese is especially known for its pungent odor commonly compared to body odor. Manufacture Today, most Limburger is made in Germany, but Herve cheese is a type of Limburger cheese still produced in the Land of Herve, in the territory of the old Duchy of Limburg. Herve is located near Liège, and the borders separating Belgium from the Netherlands and Germany. The "Pays de Herve" is a hilly area between the Vesdre an...

Local cheese

jscott

Damn it, now I'm hungry again.

ConcernedOfTunbridgeWells

Nighty night

Simon Righarts

@Hennes That stuff is absolutely rancid.

Hennes

Don't you agree it is perfect for this discussion ?

Mark Storey-Smith

01:36

@Hennes It certainly captures the essence of the discourse

jscott

There's beer shop around that corner that sells local cheeses, Limburger included. It's pretty damn good.

Simon Righarts

Well, the ideal one would be one that smells like farts. I don't know of any cheese that actually smells like farts though.

jscott

And sausages...mmmm

Did @MDMarra invite his DBA friends from work here?

MDMarra

nope

nopenopenope

jscott

And did you guys get Oracle BI AD auth working? :)

MDMarra

01:38

we did not

I basically want to filter user enumeration by group membership but oracle doesnt like that

jscott

Well I guess in six more days it's not your problem anyhow.

MDMarra

just pointing it at DC=domain,DC=com breaks BI because it takes so long to enumerate all of the users for every single action

jscott

Haha, classic.

Simon Righarts

@jscott Nope we're invading. And trying to bring the tone of the channel down, but we need a bigger digger.

jscott

@MDMarra You and @ScottPack were just describing that the other night.

MDMarra

01:40

(&(objectClass=user)(sAMAccountName=*)
(memberof=CN=Oracle_BI,OU=Users,DC=domain,DC=com)) doesn't work

Zoredache

@SimonRigharts you are trying to bring the town of this channel down? How can it get any lower then a bi-weekly link to a 55 gallon drum of lubricant for sale?

jscott

@MDMarra Don't ldap filter on objectClass, it's not indexed

Use objectCategory=person or the like

Mark Storey-Smith

@jscott We're going to linger and try drag the (good) DBA folk over to the dark side

MDMarra

@jscott huh. good tip. Want to guess what the oracle bi default is for an AD auth provider?

Mark Storey-Smith

At the same time we're going to start tossing the MySql monkeys your way, instead of SO

jscott

01:41

@MDMarra msdn.microsoft.com/en-us/library/windows/desktop/…

Mark Storey-Smith

'bout time you suffered your fair share

Matt Bear

@jscott 55 gallon drum would last me three days....

jscott

@MDMarra Let me guess objectClass? :)

MDMarra

yep

I just built the rest of the filter around that

jscott

@MarkStorey-Smith <burns>Excellent</burns>

There's better non-MS references about class vs category, some with profiling stats, that was just the first MS-hit I saw in google.

@MattBear Of beer, cheese or sausage? :)

Matt Bear

01:44

@jscott lube

jscott

Oh, yeah that. :0

Matt Bear

internet provider changeover commencing in T-76m...

MDMarra

I can't wait to have a week off and no nothinggggg

and then start a new job where I don't dread going to work

Matt Bear

@MDMarra congrats!

jscott

So no plans then? No shows, trips, anything?

Matt Bear

01:47

@MDMarra where are you starting at?

MDMarra

I might go to brooklyn for a couple of days. I have a photographer buddy that just moved there

Matt Bear

@MDMarra TMI

MDMarra

@MattBear a consulting firm close to my apartment

@MattBear tmi?!

Matt Bear

@MDMarra too much info... dont want to hear about your photoshoots!

MDMarra

heh

He shoots bands

Matt Bear

01:49

@MDMarra but gratz on the new job

better pay?

MDMarra

the band that has him on retainer went to australia but didnt take him out this time, so he's just tooling around NYC, so I may join him

@MattBear yeah better pay, better position

i'm going to be the sr architect on the windows engineering team there

Matt Bear

nice

closer drive?

MDMarra

so i'm going to have a lead role

yeah 15 minute car instead of 1h train

well, 10 minute car to train, 30 minute train, 15 minute subway, 5 minute walk

thats my current commute

Matt Bear

@MDMarra much nicer... that commute sux

MDMarra

You can space out on the train so it's not awful

Matt Bear

01:51

same as mine though :p

MDMarra

and I spend about $45 on gas a month

so that's nice

but yeah, i'm looking forward to the change

Matt Bear

I bet

I need to look for a new position eventually lol

MDMarra

This is my 2nd job in 9 months :x

made a misstep by taking my current one

MDMarra

02:09

jscott

The eyes really make that special.

MDMarra

buzzfeed.com/h2/fbad/virginmobilelive/…

Joel E Salas

@MDMarra Sr Architect (ooh fancy) on the Windows Team (oh nevermind)

MDMarra

Windows only sucks in the hands of people that suck.

Granted, that's most Windows admins

But still

Michael Hampton

@MDMarra Windows sucks.

Joel E Salas

02:13

They're going to have to burn this chair when I leave.

MDMarra

@MichaelHampton computers suck

Michael Hampton

0

A: Is a wildcard DNS record bad practice?

If you ever put a computer in that domain, you will get bizarre DNS failures, where when you attempt to visit some random site on the Internet, you arrive at yours instead. Consider: You own the domain example.com. You set up your workstation and name it. ... let's say, yukon.example.com. Now yo...

Someone have any idea why this guy downvoted it?

Wait until ICANN creates the .local top level domain. A lot of people are going to be royally screwed.

Mark Henderson

@MichaelHampton It'd never get approved

Michael Hampton

And why would that be? Every single corporate place I've worked at (which is a lot) does this. It's very common practice and there is absolutely no down side to it. — Chris Lively 2 mins ago

Mark Henderson

And if it did, nobody would use it because of all the problems with it

MDMarra

02:23

@MichaelHampton already on it

@MichaelHampton I remember reading that at least three different groups have put in bids for .local.

Mark Henderson

@MDMarra They were probably all @MichaelHampton just trolling

Michael Hampton

@MarkHenderson I don't have the $180,000 it would take to troll at that level.

MDMarra

Isn't that just the application fee?

Michael Hampton

Right. I'm all for trolling people who desperately need it, but I'm not going to spend that sort of cash to do it.

MDMarra

I've been watching chopped for about 4 hours now

Michael Hampton

02:27

> Despite not being a valid top-level domain in the Internet, considerable DNS traffic that queries the local domain exists in the public Domain Name System.[1] In June 2009, the L root server received more than 400 such queries per second,[2] ranking 4th in DNS traffic of all TLDs after COM, ARPA, and NET.

MDMarra

yep

I've been averaging about 150 views per week on my .local blog post

that's like triple the next 4 most popular combined

Michael Hampton

OK, so you're left with "What is the best anti-virus for Windows Server 2012" and that's really not a question we can answer for you. — Michael Hampton 10 secs ago

MDMarra

Somehow my blog is in the top 3-5 results for ".local" on google

Joel E Salas

@MDMarra That's excellent

MDMarra

@MichaelHampton He quoted an RFC in his defense of .local

and the RFC doesn't have .local in it anywhere

Does he think he's the only one that's ever read them and people won't check his sources?

Matt Bear

02:34

@MDMarra :damn... I researched that a bit before I decided to go with .local... and the only reason I went with .local was it was microsofts recommendation

Mark Henderson

@MattBear If I had my time again I wouldn't use .local but now that we've got it and are stuck with it, it's not as much of the sky is falling as (some people in here) like to make out

MDMarra

@MattBear Link?

Mark Henderson

Yes it might have problems, yes there could be issues in the future

MDMarra

Because I can link you to MS recommendation where it says not to use .local, but to use a 3rd level subdomain :)

Mark Henderson

@MDMarra Then why the fuck do they ship SBS with that shit by default and have for over 10 years?

MDMarra

02:36

@MarkHenderson Have fun getting a UCC cert for your Exchange/Lync in a few years

@MarkHenderson Are you really going to quote SBS in a debate about best practice?

Matt Bear

@MDMarra technet.microsoft.com/en-us/library/cc626155(v=ws.10).aspx just for one example

Mark Henderson

@MDMarra Don't need any UCC certs

@MDMarra Not at all, but you can sort of see where people get the idea from

MDMarra

@MattBear "Applies to SBS 2008"

Matt Bear

everything microsoft says .local...

MDMarra

mdmarra.com/2012/11/why-you-shouldnt-use-local-in-your.html

I make the no .local argument there

And it addresses SBS

and links to a MS document all the way back in 2000 that says to use a third level delegated subdomain of a domain that you control

Matt Bear

02:38

@MDMarra I cant find the article I was reading now...

MDMarra

Really though, SBS has exchange, sql server, AD, and all kinds of other shit all on one box

It's not what should be used as a model of best practice

It's meant as an out of the box quick and easy solution for people with minimal tech knowledge

Most of that target audience probably doesn't have a website registered or doesn't know what a subdomain is

Zypher

@MDMarra there was an article out there that said using .local was best practice, it's dead and gone though. Also IIRC (I don't have them anymore) the Win2k Official MS MCP Training material had you use .local

Mark Henderson

@MDMarra "I want my users to see Company\User as the login name. I don't want something ugly like AD\User or Corp\User!" - that's the one I fell for

Not knowing you could seperate the UPN from the FQDN

jscott

Or the Netbios even

Matt Bear

@MDMarra it hasnt been an issue so far, but I'm wishing I had gone with a subdomain now

18 minutes till internet changeover...

MDMarra

02:44

@MarkHenderson yep

Matt Bear

firewall objects are created, so we will see how it goes

MDMarra

@Zypher I hear that a lot but I've never found one

Not saying you're not right

But if they did exist, Microsoft did a good job of wiping them off the face of the earth

@MarkHenderson That's actually the netbios name though

upn is [email protected]

Zypher

@MDMarra oh yea ... i think i read it around 03/04 and it was old then ... i'd do the same thing if I was them, since looking back it was never a good idea

Matt Bear

@MDMarra I think they have been trying to change anything they ever said about using .local...

even in networking classes, .local was the standard

well, now I know

haha

MDMarra

I don't get why people defend their non-standard stance without a good cause like that Chris guy in the comments

Zypher

02:50

yea, I mean I've used it in the past, but I KNOW I WAS WRONG NOW

MDMarra

A compelling argument is "The RFC is wrong because _______ and these are the reasons it works" not "Well nothing bad will happen"

You need to have a reason if you want to take a dissenting view of a published standard

Not put the burden of proof on the people that abide by it

oh well.

jscott

Cue "someone on the Internet is wrong" xkcd... :)

ewwhite

Arrrgh!!!

I broke systems!

Jacob

MDMarra

Did you puke on them?

ewwhite

02:52

Somehow I crashed my storage!

jscott

@Jacob Thank you.I was even wrong in my quote. apropos.

MDMarra

@jscott BUT ITS ABOUT .LOCAL

YOU GUYS KNOW HOW I GET ABOUT THAT

ewwhite

But I snagged a quick photo after running to the bathroom....

MDMarra

@ewwhite #nofilter #puking

ewwhite

and my cabling is getting better...

Mark Henderson

02:54

@ewwhite You and your damn server porn

MDMarra

I like that green cable

Mark Henderson

Makin me jelous

MDMarra

it's trolling you

Mark Henderson

@ewwhite Those racks in the background look lonely

"Why can't I have friends like racks in other DC's? Why do I have to stand here, alone? Did I wrong you somehow? Please let me have friends..."

MDMarra

Is that external SAS to a DAS for storage?

Mark Henderson

02:55

Ah they're EDB's

Didn't see that first time around

ewwhite

@MarkHenderson those are just 208V 3ø power distribution units for each row.

Jacob

@ewwhite What's all that? Your stuff or clients?

ewwhite

@MDMarra Multipath SAS for the JBOD shelves

pauska

are those apc power cords?

ewwhite

and CX4 10GbE connectors... two per server

pauska

02:56

(doesn't look like it)

ewwhite

I'm using a pile of 1-foot cables-to-go power cables

@Jacob These are my servers. In the new colo.

Once I'm done down below... need to fix the top of rack..

Jacob

@ewwhite What do they do?

ewwhite

@Jacob backup, storage, vSphere replication, data mirroring, websites, email, spam filtering...

monitoring...

Jacob

@ewwhite You have a top 100 site you run in your spare time?

ewwhite

maybe 60 or so virtual machines.

Jacob

03:00

@ewwhite back to my point :) what are you running 60VMs personally for?

ewwhite

1 min ago, by ewwhite

@Jacob backup, storage, vSphere replication, data mirroring, websites, email, spam filtering...

for customers.

Jacob

@ewwhite Oh, ok you you basically run a "cloud" on your own time as well.

Mark Henderson

@ewwhite Most people start at the top and then move down below, but I guess if she likes it in that order, why not

Evan Anderson

@mdmarra: BUT I WANT TO NAME MY AD DOMAIN MYCOMPANY.LOCAL!

Or mycompany.com, as a second choice...

>snicker<

ewwhite

@Jacob Sure... a cloud... with lots of .local domain names.

Jacob

03:03

@ewwhite Everybody likes .local :)

MDMarra

@EvanAnderson NO EVAN

BTW, have you seen this? blog.schertz.name/2013/01/lync-server-certificate-cliff

Ryan Ries

I want to name my domain local.localdomain.local

Not to be confused with remote.localdomain.local

Zypher

@MDMarra I actually think it was this doc technet.microsoft.com/en-us/library/Bb727030.aspx (seems very familiar) but it seems they redid their link structure around 2007 and can't find any older revs

MDMarra

@ewwhite wanted to name the last AD that we built ad.company.local.biz.cc

Jacob

One does not simply tell @EvanAnderson or @ewwhite No. This would imply that they are fallible, which clearly isn't true.

Zypher

03:04

and yes, i just spent about 30 mins trying to prove the internet never forgets

Evan Anderson

I can't speak for @ewwhite, but I'm fallible as hell.

ewwhite

@Jacob no, I think I crashed my storage unit...

may have pulled the wrong power cable

Evan Anderson

I have W2K "Microsoft Official Curriculum" books that describe the preferred AD naming as using a delegated subdomain of a domain you own.

ewwhite

my "cloud" disappeared for 20 minutes

MDMarra

@ewwhite you mean ZFS can't handle being unplugged by accident?

ewwhite

03:06

it can!

MDMarra

What good is that?

ewwhite

and VMware just waits...

but this storage unit takes ~12 minutes to boot.

my thumper takes 15-20 minutes to boot...

MDMarra

Is it a freaking Sunfire 4500?

ewwhite

4540...

that's what I'm installing right now

MDMarra

HAHA no it's not

Jacob

03:07

@ewwhite HAHAHAHAHA

Evan Anderson

@MDMarra - That Lync certificate-related blog entry is great. >sigh<

Jacob

Wait, you're not kidding are you?

MDMarra

@EvanAnderson Yeah, there's a few similar ones for exchange floating around as well

ewwhite

@Jacob Hmm?

Evan Anderson

I never did get to see a Thumper. They sounded fun.

ewwhite

03:08

here's the compute-module

I bought it when I was young and stupid...

maybe $18k cash.

Jacob

@ewwhite if you don't mind what do you pay for the colo?

Evan Anderson

I can't say I've had occasion to buy anything like that myself. I look for other people to buy that stuff... >smile<

ewwhite

@Jacob $1149/mo.

Mark Henderson

@MDMarra We issue our own certificates for our exchange servers, and if you don't have our root installed, well fuck you you shouldn't be on our mail servers anyway

@ewwhite WTF, we pay that for 1/4 of a rack

And we got a "good deal"

Jacob

@ewwhite What do you get? 42U, 1gbps?

ewwhite

03:10

@Jacob I was paying $999/mo. for 10Mb and not-enough-power at my previous place.

MDMarra

@MarkHenderson Lots of places are like that too. However, try working for a university that provides OWA to 20k students

no way are you getting your root cert on even a fraction of their machines

no matter how hard you try and how nice it would make your email situation, not to mention it would make your NAP/PEAP/MSCHAPv2 Cisco wireless auth much easier to deal with

but that part of my career is behind me

ewwhite

@Jacob here, I have two Gigabit fiber drops, HSRP, A+B power... and it's a pristine new datacenter facility.

Mark Henderson

@MDMarra Well OK that's a different situation to what most of us work with ;)

ewwhite

@MarkHenderson how much power?

Jacob

@ewwhite That's quite nice.

MDMarra

03:12

Plenty of places provide public OWA access though or limited outlook access to certain people (read: execs) from their home computers

Mark Henderson

@ewwhite 20A@240v

Ryan Ries

I'm logged on to work email via OWA in my browser pretty much 24/7 when I'm not at work

Mark Henderson

@MDMarra Then you jsut train them to ignore the certificate errors; they were going to ignore it anyway ;)

ewwhite

@MarkHenderson this is 2 x 20A 120V, though

they said that going to 208V in this case wouldn't be necessary...

Mark Henderson

@ewwhite Which is roughly the same

ewwhite

03:14

@MarkHenderson I can't load both feeds up, though

firewall reboot time!!

(single PSU)

Mark Henderson

@ewwhite Can't get 120v here. The give you 240 by default, or 408v 3phase if you ask nicely

Evan Anderson

3 phase 408V in a data center? What are you running, machine tools?

Matt Simmons

Lathe as a Service

3

Jacob

@MattSimmons OMG it's Matt Simmons!!!

MDMarra

They have to run a complete mirror of the Internet in Australia to get acceptable page load times.

That takes some juice

Matt Simmons

03:16

hahaha

Zypher

@MDMarra but ... but where do they store it!

Matt Simmons

@Jacob Hi Jacob!

Evan Anderson

Lots of WD green drives...

Ryan Ries

IBM Z mainframes stacked on top of one another, with optional vending machine attachment.

Mark Henderson

@EvanAnderson If you wanted to put 8 fully loaded blade chassis into a 42U, you'll need the PDU to match it...

MDMarra

03:17

@Zypher On @ewwhite's ZFS VMs with passthrough JBODs presented back to the VMs on the same host that it's running on

Evan Anderson

@MarkHenderson - You got a point there. That'd be a hell of a space heater, too.

Mark Henderson

They break them down into single-phase circuits

Evan Anderson

Makes sense, but so odd to think about 3 phase in a context other that big machine tools, welders, or industrial refrigeration equipment.

pauska

what are these pdu's you are referring to

am I not supposed to use these?

Jacob

@MattSimmons I see you'll be speaking at LOPSA-EAST this year

pauska

03:19

Matt Simmons

@Jacob Yeah, SSD intro class. I see you'll be speaking, too! Very cool!

Mark Henderson

@pauska Geezus, that's high brow. We just chain tonnes of these

Ryan Ries

Actually Lathe as a Service makes me think I might not actually mind 3D Printing as a Service... I upload my plans to your printer in the clouds then you mail me the weird plastic 3D shit I just printed.

pauska

@MarkHenderson even better, less wires to strip up!

Mark Henderson

@RyanRies There are too many patents surrounding 3D printing, you'd get sued by the major manfucaturers

Ryan Ries

03:20

@MarkHenderson Maybe I just was

Evan Anderson

@RyanRies - There are rapid prototyping facilities out there that'll do that.

Mark Henderson

You can get away with it for home projects because nobody is going ti sue Joe Bloggs who only has $10 to his name, but if you make a business out of it you'll get done for patent infrigement before you make your first sale

Ryan Ries

That sucks... the first introduction I had to what the hell 3D printing is was from watching Lisa Harouni do a TED talk... she's purty

the sound of a dozen nerds googling

pauska

how did you know :O

Evan Anderson

Jeri Ellsworth is hotter. She makes transistors at home.

Michael Hampton

03:24

@MDMarra Ha, yeah, abusing the RFC to make a point not actually in it...

One time, at band camp...

MDMarra

"I saw someone propose a change once that would make all of this crap I'm saying true"

Oh, well should I apologize now or later?

Evan Anderson

Doesn't the "many worlds" hypothesis make everything I say true in some universe?

Stack Exchange

myotherpcisacloud.com: Building a Windows Server That Boots With No Errors (Pt. 1 of NaN)

posted on February 28, 2013 by ryan

One of my favorite pastimes (hey don't judge me) is properly configuring my Windows Servers so that they complete a cold boot and log on of a user without a single error in the Application or System event logs. Even if the errors that are logged don't seem to have any impact on the system, I still don't want to see them. Maybe some people don't care that errors are being generated b…

Michael Hampton

I wonder what would happen if I typed in fuck.you.livelyconsulting.com into my browser...?

MDMarra

he's a web dev according to his profile

Michael Hampton

03:27

His profile on SO is completely different.

I wonder what would happen if I typed in fuck.you.schoolofficepro.com into my browser...?

MDMarra

link for the lazy?

Michael Hampton

Scrolling down is too much work for you?

Chris Lively, United States

49.8k 9 64 139

c# asp.net .net sql-server sql security html

MDMarra

heh ya totally different

Michael Hampton

Anyway, the website in that profile does indeed have wildcard DNS.

ewwhite

done!

well, firewall reboot...

pauska

03:30

open.spotify.com/track/7Jt9vENls2TLtSU5taFQgT

that was not supposed to be pasted here, but bleh

Jacob

03:54

A fresh install of Mac OS will take 6 days to encrypt? Wat?

MDMarra

using what

pauska

nice 19 encrypt

Jacob

@MDMarra FileVault.

MDMarra

Took about 2 hours to encrypt on my 512GB SSD

pauska

don't new ssd's have compression/encryption offloading?

MDMarra

03:56

Also, make sure you disable the EFI caching of your key unless you never ever ever sleep your laptop!

@pauska Not sure. I crammed a Crucial M4 into my 2012 MBP

Jacob

@MDMarra Where is that option?

I need more RAM, I still have the factory 4GB

MDMarra

@Jacob mdmarra.com/2012/12/filevault-2-on-os-x.html

sudo pmset destroyfvkeyonstandby 1

It'll prompt you for your password twice when resuming from sleep

once to unlock the drive, once to actually log back in

it's annoying, but it's better than being useless

Jacob

@MDMarra Bah better than worthless encrpt

MDMarra

yep

same caveats apply to bitlocker on windows in case anyone's curious

except on windows you just disable sleep and make the default lid close behavior be "hibernate"

Jacob

@MDMarra I wish I could use DuoSecurity with it :(

Transcript for