Posts by HighTension

My '17 Leaf has a reversible heat pump (and LED lights) - but the lower trim has only resistive heat (and incandescent lights). Not sure on the current models.

If the friendly CA is under their control, what is there to stop them getting a cert for ANY domain with a new private key and impersonating another way, eg mandated DNS hijacking (for anti-piracy, or "protecting kids", MITMs forcibly installed at ISPs/peering points, etc? Even typojacking would get them something.

Re: I am surprised that IBM took this long

Have a look at Foreman, it's the upstream for Satellite. With Katello it can manage deb and rpm based products.

Follow the instructions to start installing it on Rocky/Alma and to get Puppet and Katello integration use this installer command line:

foreman-installer --scenario katello --enable-foreman-plugin-puppetdb --foreman-proxy-puppet true --foreman-proxy-puppetca true --enable-foreman-plugin-puppet --enable-foreman-proxy --enable-foreman-compute-ovirt --enable-foreman-compute-libvirt --enable-foreman-plugin-remote-execution --enable-foreman-cli-puppet --enable-puppet --puppet-server true --puppet-server-environment-class-cache-enabled true

Create products for your deb-based distros and work from there. You can use Puppet, Ansible, Salt or Chef plugins to manage your servers. With Puppet you can use Chocolately to manage Windows packages too.

What shocked me about Storage Spaces Direct is that they will not support a mirrored cluster if the two storage hosts are not in the same room (within 5m). We asked if they would support a cluster with a 15m separation (2 buildings on the same site with 2 dedicated fibres for cluster and a resilient topology for other VLANs) and they said "no".

Re: Green screens were great!

Similar memories from UCL in the mid 90's. We had VT100/220s in the halls connected to the timesharing system. You could log in with your IS account, browse the web with Lynx, get your mail with mutt or pine, and telnet to the library system to reserve books/manuscripts - I even used to dial in from home (direct modem PAD connection) just before the end of holidays and reserve books for the upcoming courses - I was altruistic and offered to tell others when I'd deposited them, or take requests for copies. You could also access library databases from many other institutions across the greater London area, eg the resource centre at Harrow/Northwick Park which had a lot of periodicals not available in the college libraries (you couldn't reserve without a library card though, but that was free to register for in person and then you were sorted).

Using the RS/6000 terminals with their 1600x1200 CRTs was also a joy - they were the first to get web browsers (Mosaic and later pre-1.0 Netscape) and you could just pop open another xterm to telnet into what you needed. Still didn't master LaTeX though, one day I will!

Re: I miss IBM keyboards

I've got a Redragon K552 now after a number of Model Ms started failing after a spill (they seem to have got more fragile as they age). For 30 quid or so it's a really nice keyboard.

Re: EM proliferation

Oh FFS, are you a troll or simply an imbecile? We *can not* by definition be 100% certain that B will always follow A, that the sun will rise tomorrow, that the LHC won't suck the solar system into its own black hole, that we won't all die within 1 year of COVID, that god does or doesn't exist, that it's safe to eat red meat, white meat, eggs, milk, carrots, alfalfa, or carburettors.

There is no, I repeat *no* way to say "this thing is 100% safe, for everyone, under every possible circumstance. We simply cannot be because to be 100% certain of that we'd have to know the entire future, and every possible future. The only thing we can do is:

a) observe the universe and form a conjecture

b) formally state that conjecture and propose one or more methods of testing it

c) test the above

d) ask others to retest the conjectures with the same methods to confirm or otherwise

e) the above with other documented methods

f) rinse and repeat until a pattern emerges

Even if we repeat b-f a trillion times and all the results point to the conjecture being correct, we can never say it's certain. Newton's laws of motion were seen as certain until Einstein came along.

It's just the same thing to try to say "This type of phone signal is 100% safe, forever" - we can never prove that conclusively, but we can say "on the basis of all experience so far, it is far more likely that 5G is safe than it is unsafe for general exposure".

If you find this difficult, please tell me how homeopathy and herbal medicine has never lead to any deaths worldwide (because it's natural!).

Re: pah....

I think that was before SMETS2 came along which was much more strict on standardisation and has as one if its goals the ability to seamlessly change supplier. Don't forget that the government has been the opposite of the energy suppliers' best mate in recent years, setting price caps that have seen even the biggest fall, and even before that they were (justly) legislated into changing their methods of "customer retention". Smaller players like Ovo and Octopus have changed the market radically since the days of the "big three".

In fact it is possible under SMETS2 to enable a full bid/place energy market, switching tariffs and even suppliers in real-time as demand ad supply change. It's also designed to enable consumers to become suppliers and offer their own energy (eg from PV, wind) back onto the market.

Someone else also mentioned having to change in-home display when you switch - hint - you don't if you buy one from the people that make it (disclaimer - I work for an IHD company).

Re: Hypocritical

zfsonlinux isn't FUSE, it's a kernel module. I don't think anyone uses the FUSE implementation any more.

Re: You learn something new everyday

Cwtch is the new hygge.

Re: That was a serious breath of fresh nerdiness

Bloody hell, another immediate vote-down with no reply to the comment. Voter - have you ever heard of the "Clipper Chip"? Read Schneier's "Practical Cryptography" or Singh's "Crypto", or Sterling's "Hacker Crackdown"? TPM actually turned out to be useful in locked-down environments, but not solely "locked OS" ones. Poettering does some good things, and some bad. I think Pulseaudio is the best compromise so far on sound in Linux. networkd and systemd not so much - solving problems that upstart and NM had already solved adequately.

Re: Benchmarks and other deceptions

You don't even need to steer down Cornish/Devon lanes. You just bounce off the sides. Preferably in a beat-up defender just after last orders while wearing wellies.

Re: Then there is the "send me a copy"

Yep, auditors. **** then ten times sideways for their stupid requests. I had one ask me for "a screenshot" of the firewall rules. I tried to explain that it was a headless system but they would not listen. So I printed out all of the (text based) config files (Shorewall) and they seemed OK with that. A week later they wanted a printout of a screenshot of "all share, directory and file permissions". So, let's do the "obey to the letter even if it's stupid" thing...

We ran a Samba NT domain, so again no GUI to shoot. So I go to the root of the shares on the fileserver and do a "getfacl -R | nc <IP of my desktop:port>" and on my desktop piped the "nc -l <port>" stream via lpr straight to the little printer we'd set up on their desk. After page 1000 they begged us to stop (little desktop HP laser, 50 page paper capacity) as she couldn't print out any of her interim reports. Amazingly they stopped bothering us and accepted somewhat more concise reports the next day.

What the hell do they do going into a big bank with a mainframe?

NB total output would have been 75,000 pages in the Courier font that HP Laserjets use when printing plain text...

Yes, all those Windows supercomputers in the Top500 sure are impressive!

Re: And no mention of JBoss?

Perfectly forkable, However RH do produce the only vaguely reliable version of GlusterFS (I've tried the community version more than enough times, thanks very much!).

Re: QED

Someone seems to be randomly downvoting completely innocuous posts here. Can't fathom what they are getting out of it...

Re: Never!

@Charles9 One of the commentards was talking about a Home/SOHO router. You have to assume in this case that most devices behind it will be trying to talk to something on the outside (looking for updates, phoning home, checking for mail/tweets etc). And if nothing is connecting in or out you'd not really need any NAT awyway!

Re: obvious solution ...

The closest you could probably get is a set of separate VLANs for medical devices with NAC and a heavily locked down layer2 firewall. Given that WannaCry by all accounts only affected admin functions this may already be the case. However you still have to protect the admin network otherwise patients don't get their ops/scans etc.

It seems like it was the admin net that was the source and the major victim in this case - and that matches the experience when my SO had a serious illness - the medical side was fine, but the admin was so woeful and creaky at the hospital she was diagnosed (to the extent that had to *fax* critical docs between departments on the same site, and managed to lose her entire case history) that we demanded she was moved to another (UCH) which was vastly better.

NHS has amazing staff and medical expertise but the inconsistency of admin procedures, tools and more importantly investment across the estate seems to be the major breaking point.

Re: DrayTek routers are considered high end in the UK

They suck far, far, less than Zyxel. Or Netgear. The same features on Cisco you'd pay £600+. Only D-Link seems to come close in this price range.

I think most of the problem is a complex interface but most competent admins (who understand SIP especially) can negotiate it. Have one in my work basement that uses a VoIP account over an IPSEC VPN logged into our PBX. The only time it's not worked is when the bloody BMS management people have unplugged it.

IMHO they are really good for SIP but you need to know what you are doing to get them to work.

The Zyxels we had that preceded these would drop ADSL, VPN, or VoIP maybe 3-4 times a week. Draytek maybe once a month, and always sync/line issues.

Re: Compatibility

So what is a legacy IPv4 stack going to do when it receives one of these hypothetical "IPv8" packets? It's just going to puke on a corrupted header. So you'll still have to rip and replace the stack in every device!

I don't think this bug is as really that terrible. At least it exposes an error when it happens - there's no silent data loss or corruption thank god...

Re: The Golden Age of flying is over

Love the Saab 2000s from London City to the Isle of Man. Especially the emergency exit seats - one reason to wake up early the day before to book them...

I've twice had two breakfasts on the way out on that trip - very quiet for a turboprop.

There is a difference - at least with FTTP you have the chance of reaching full speed. With copper if you're too far away you'll have to suffer with your 500k down and 50 up (if you're lucky and it's not raining).

Re: 2TB?

Supermicro boxes are generally:

a) cheap

b) rock solid reliability. I've only had one or two server failures in about 10 years where I've had to invoke RMA or warranty.

c) free IPMI with all features included, eg KVM and remote media

d) easily available with practically any combination of drives, backplanes, PSUs, and other accessories. I've got a couple of 1U boxes that even have 3 PCIe x16 slots available. Getting even vaguely custom builds out of HP has been way harder for us as an SMB. With SM vendors, no problem.

e) lots of warranty options

f) OEM front panel/bezel service available.

I think these are the reason that HCIA vendors' products seem to be largely based on OEM's SM boxes.

I am not affiliated with Supermicro in any way, just a very happy customer.

;-)

Re: And why not...

I did a disassembler in 6502 assembly (BBC B) because the one I wrote in BASIC was too damn slow, and the curses-like hex editor I'd just done wasn't difficult enough. Fun days!

Again, citations please

You need to at least provide a temperature at which this happens. E-cigs only need to heat the liquid up to about 140-200C in a matter of milliseconds. Can you provide evidence that levels of TSNAs higher than or similar to lit tobacco products in use are present in e-cig/cigar/pipe devices?