/dev/chat

Stephen Kitt

07:20

@derobert granted; I was working with a 166,747-word dictionary, so ~17 bits, which is indeed still quite a bit more. So a word counts for three characters ;-). My basic point is that people tend to think words are vastly more resistant than characters, but that’s not the case — a three-word password is similar to a nine-character password (using only latin alphabetic characters), per the above, a four-word password to a twelve-character password.

cas

08:00

dictionary words alone aren't enough. words+numbers+punctuation is. and perhaps some minimal 1337-ing. the objective is to increase pw length whilst remaining memorable for a human.

Stephen Kitt

@cas yes, I’m not arguing in favour of word-based passwords, but against them. I’ve never even seen most of my passwords, they’re generated by my password manager.

Kiwy

I think most dictionnary nowadays tend to use common 1337 syntax

Stephen Kitt

@Kiwy yeah, hashcat has options to enable that

cas

@StephenKitt yeah, i got that. i was arguing that dictionary words aren't all bad - not if you combine them with numbers and punctuation. a 30+ character password made up of random words + random numbers + random punctuation (all of random length) is not going to be any easier to brute force than 30+ random characters....but will be easier for a human to remember.

and almost certainly harder to crack than the other common recommendation "use the initial letters of your favourite book or album or song". i'm sure pre-generated lists of those initialisms already exist. they can easily be generated by downloading lists of the 100 most popular books/records. or dl-ing the entire catalogues of book/record shops.

Stephen Kitt

@cas indeed, and that would make a good master password for a password manager ;-)

cas

08:14

a password manager is a good thing. but not much use if the passwords in it are trivially short :)

Faheem Mitha

08:36

Personally I use phrases, but then change some of the letters to numbers, or other special characters. Still not that easy to remember.

What does a password manager do, exactly? Does it store passwords on your hard drive in some encrypted form? And what about backup?

Stephen Kitt

@FaheemMitha yes, it stores them in an encrypted file. Backup is the same as anything sensitive.

Faheem Mitha

09:09

@StephenKitt I see. So you don't actually save passwords elsewhere, then?

Any opinions about using amazon.in/HP-Slimline-A0020IN-J4005-DDR4/dp/B07TCJD8FX as a backup machine?

I was looking at internet appliances, but they are not any cheaper.

Stephen Kitt

@FaheemMitha they’re backed up in safe places

Faheem Mitha

@StephenKitt I see.

What backup manager do you use?

Stephen Kitt

@FaheemMitha Borg Backup, but I’ve been meaning to check out Relic

Faheem Mitha

@StephenKitt Oh. Me too. But it doesn't work well with my external USB drive. That's why I was thinking of using a proper computer. Keeps getting stuck with stale locks, and then the backup doesn't happen. Is it working well for you?

With a proper computer I could use ssh. Which seems more reliable then using an external drive.

Does anyone know what "NA Graphics" might mean?

Unfortunately it seems that Linux compatibility isn't a given for the HP Slimline.

Stephen Kitt

09:48

@FaheemMitha it works very well for me; I back up over SSH though, not to a USB drive

@FaheemMitha it means the system uses the integrated GPU on the CPU

ark.intel.com/content/www/us/en/ark/products/128992/…

For Borg Backup to an external drive, I’d run Borg Backup locally, and then copy the new files to the external drive

in normal operation Borg only creates new files, it doesn’t alter files in its repo (apart from the last one), so copying a regularly-updated backup doesn’t take much time

Faheem Mitha

@StephenKitt Oh, is that possible?

Stephen Kitt

@FaheemMitha yes

Faheem Mitha

I've got lines that look like:

borg create --compression $CLEVEL --stats /media/faheem/My\ Passport/backup-INBOX::`hostname`-`date +%Y-%m-%d:%H.%M`  /var/spool/mail/faheem

I guess that counts as creating the archives directly on the external hard drive?

And copy how? Using rsync?

I still think an actual computer would be better. Sometimes the drive gives errors, or it gets physically disconnected. It just doesn't seem terribly reliable.

Connecting to a remote VPS for backup, in the Netherlands or something, is actually much more reliable.

Stephen Kitt

@FaheemMitha yes

@FaheemMitha that would work, yes

Faheem Mitha

@StephenKitt And you're suggesting doing it on the machine first, and then copying it over. Yes, I can imagine that would work better.

Stephen Kitt

09:59

@FaheemMitha yes, because you can deal with connection issues etc. separately

Faheem Mitha

@StephenKitt Yes, very true.

Stephen Kitt

I run Borg every hour, so I have a regular snapshot of stuff I’m working on (and I don’t have to wait long after archiving photos etc. before they’re backed up)

Faheem Mitha

@StephenKitt Yes, I do it every hour for some things, but not all of home, I think.

Yes, home is daily. Maybe I should make it hourly too.

The HP Slimline appears to use something called the NewarkC motherboard, about which next to no information is available - support.hp.com/ie-en/document/c05948962

This Dell comes preinstalled with Ubuntu - amazon.in/Dell-Vostro-3470-2018-SFF-Desktop/dp/B07DKVHG5P

Faheem Mitha

10:57

Is installing Debian from an external USB device straightforward these days?

Stephen Kitt

11:12

@FaheemMitha very, that’s what I use

Faheem Mitha

@StephenKitt Ok, thanks.

It seems they are selling computers without disk drives these days.

Meaning DVD/CD drives.

derobert

15:13

@FaheemMitha that's the list of VCSs they consider git clearly superior to. I think they consider Mercurial to be the same order of goodness as git.

@StephenKitt And yet three words is much easier to remember than 9 random characters (or 4 vs. 14, or whatever calculation you get from any reasonable dictionary size). That's the advantage of words. The disadvantage, of course, is obvious: they are so much longer. And I agree with (and use) a password manager too; then of course 16-character random alphanum+symbols is easy, because you never have to remember it.

Jeff Schaller

I do like that about password managers -- the ones with custom-rule generators in them -- I can find out the site's password limits & rules and max them out

derobert

@cas and if you have enough randomly chosen words, you're probably not getting much (other than passing broken password complexity requirement meters) by changing a few is to *1*s, etc. Certainly far fewer bits than you'd get by adding one more word.

And of course (if anyone hasn't seen it): pages.nist.gov/800-63-3/sp800-63b.html#appA

... current recommendations are to require 8+ characters, check against already exposed password lists, and that's it. No requirements on composition, and no length limit (within reason).

Jesse_b

15:29

How to Choose a Password - Computerphile

►

derobert

whoa, does installing GPUs in glowing polygons really work? Don't they just fall out? :-P

(and with that many GPUs, shouldn't you have better graphics?)

Jeff Schaller

15:59

Ugh, I really shouldn't have written that perl script

derobert

16:33

@JeffSchaller We could go back to talking about Brexit instead?

Jesse_b

@derobert: Can perl be used to automate exiting the EU?

derobert

@Jesse_b kill(q{KILL}, $$); ought to do it, at least if run by the exiting party.

Jesse_b

=)

derobert

Though I think the UK's current algorithm can only be contemplated in other languages.

Jesse_b

Well the only logical next step is to see how we can involve ed(1)

Kind of hard to learn ed when google naturally does s/ed/sed/g

derobert

16:40

At least ed is easy to exit. Just hit control-D. Maybe they accidentally started /(n|neo)?vim?/ or emacs, and now they really can't get out.

Jesse_b

I got stuck in some sort of nano or nano-like editor the other day and had to restart my terminal

derobert

Probably emacs. I don't think anyone argues you should always stay in vi-like editors.

Jesse_b

it looked like nano but none of the usual methods worked to close it

derobert

@Jesse_b Annoying too when they don't respect control-Z so you can't even use kill to close it... and have to switch to another terminal.

Jesse_b

To be fair I'm not exactly a power user and I think I've literally never intentionally opened nano so I don't know anything about it other than how annoying it is to me

Faheem Mitha

18:29

@derobert Perhaps so. Or perhaps they don't want to remind people about the competition.

overexchange

Why multiple managers in docker swarm mode? why not one manager?

Faheem Mitha

@Jesse_b Nano is a Pico clone. So it would be fairer to say that Pico is annoying. If you find it annoying.

Jeff Schaller

@overexchange docs.docker.com/engine/swarm/how-swarm-mode-works/nodes

> For testing purposes it is OK to run a swarm with a single manager. If the manager in a single-manager swarm fails, your services continue to run, but you need to create a new cluster to recover.

To take advantage of swarm mode’s fault-tolerance features, Docker recommends you implement an odd number of nodes according to your organization’s high-availability requirements. When you have multiple managers you can recover from the failure of a manager node without downtime.

overexchange

-1

Q: Purpose of multiple managers in swarm mode cluster

A swarm manager nodes handles cluster management tasks such as: 1) Maintaining cluster state 2) Scheduling services 3) Serving swarm mode HTTP API endpoints You may execute any of the - docker swarm - docker node - docker service commands from any of the manager nodes but, What is th...

@JeffSchaller So.... more than one manager is for fault-tolerance?

Jeff Schaller

18:45

@overexchange that's what I gather! Unless you enjoy creating new clusters to recover, I guess?

overexchange

yes the documentation says the same

can we say docker swarm cluster design as a prototype design for any distributed system design?

Because I worked on some distributed system design that had multiple distributed servers managed by a cluster-aware domain server

this is somme commercial product doing it busines

I see the same here

mgr nodes are fault tolerant

worker nodes aren't

this means applications running in worker nodes should be stateless applications... which is not easy

isn't it?

manager launching another worker node is a different aspect

Jeff Schaller

You might find a bigger audience at a SO chat room -- perhaps chat.stackoverflow.com/rooms/76919/docker ?

Faheem Mitha

19:10

There's a Docker chat room? O-la-la.

Jeff Schaller

@FaheemMitha 37 pages of chat rooms on SO!

Faheem Mitha

@JeffSchaller Well, not that many active ones. Like IRC channels.

Transcript for