* Posts by Nate Amsden

2437 publicly visible posts • joined 19 Jun 2007

Samsung Note10+ torn apart to expose three 5G antennas: One has to pick up something

Nate Amsden

Note 3/4 was peak note (for me)

Note 3 was my first Android phone, was my daily driver up until about 2 weeks ago(still works fine). Kept hoping newer Notes would get better, but after the Note 4 just a slow downward trend(towards form over function). I figured the Note 3 won't last forever so should jump at some point, it was getting slow in some cases. Never factory reset it after 6 years that may of sped it up again not sure but was worried it would not work after reset since it was old.

I "upgraded" to an S8 Active which may be the last phone of it's kind ever to be made at this rate. Still a decent number of compromises compared to the Note 3, but it was (for me) the fewest compromises.

Most important to me was: wireless charging, no glass back(which means plastic back I am fine with that), flat screen, normal bezels (S8 active is basically identical to note 3 for screen/body ratio at 75%). Replaceable batteries very important but not available. I replaced batteries in my Note 3s annually(just to keep them fresh). Trying to get all of those in one device is hard these days... the S8 Active is the closest I was able to come to. I was going to get the Motorola Z4(I think) which is similar I think but after much searching I was unable to find ANYONE that was selling the wireless charging back cover for it(new or used).

Battery tip for android folks anyway - I bought a couple of new devices called Chargie, they run inline on a USB charging cable and communicate with an app on the phone to cut power to the charging at a user defined level(no root required). I set mine to 79%. It works quite well. Combined with Accubattery I hope I can significantly extend the life of the stock battery(which is rated at 95% capacity currently, given the phone is probably 2 years since it was manufactured I think that is decent). I do have several Samsung branded replacement batteries for S8 Active in case I need them.

Android keeps removing features as well so I plan to avoid Android 9 completely on this device, as I was able to avoid Android 5 on my Note 3 for a good 4 years(still runs 4.4). I like security updates but keep me at the same major rev of the OS. I haven't had a known security incident on a computing device I operate since ~1992.

I have a 2nd S8 active (both phones "never been used") as a backup.

Been actively using the S8 Active since June on wifi, but only switched my main SIM over to it about 2 weeks ago.

I hope this phone can last 6 years like the last one(never needed a repair), mostly because I really hate the direction the market has been going.

Fancy a career exposing cloud data leaks? Great news, companies are still largely clueless

Nate Amsden

Re: Consultancy Costs Money

Speaking of SPF I recently opened a support ticket with Western Digital as their online storefront was sending emails for order confirmation and shipping confirmations as "from" support@wdc.com. The problem was the SPF record for wdc.com did not include the IP addresses for their online store (hosted by someone named digital river), so in my case at least my personal mail server enforces SPF lookups and rejected the email. After doing some checks I discovered exactly what the issue was and contacted them. I temporarily disabled the SPF checks on my mail server so the shipping confirmation came through at least (mail server rejected order confirmation with a 550 error code so it was gone for good). They didn't seem to understand my message, even though I specifically asked them to forward the details to their email or web admins.

Support's response consisted of "

Thank you for contacting Western Digital Customer Service and Support. My name is Ashley.

If you have any further questions, please reply to this email and we will be happy to assist you further."

(and no communications after)

This was about a month ago, and their SPF record is still not updated. Address that tried to send the mail to me originally was 208.82.174.245 (mta0301.digitalriver.com -- probably one of many servers they have for sending email). SPF record for wdc.com does not have any entries with the text 208, or digitalriver. I suppose it's possible they changed their "From" address to fix the issue(doubt it) but no way to test that myself without ordering something else.

This problem has been there for at least a year I think as I never got order confirmation last year for an order though I didn't care enough to look into it at the time.

2019 set to be the worst year yet for smartphone market as lack of worthy upgrades dents demand

Nate Amsden

first upgrade in ~5.5 years

In the process of "upgrading" from a pair of Galaxy Note 3s (daily driver being Android 4.4, it was my first Android device, prior I was using WebOS) to a pair of Galaxy S8 Actives. Bought the S8 Actives on Ebay "new never been used" (and they certainly seem that way anyway, though I believe they were used for a few minutes to apply updates as they are running patch levels from early 2019) for about $370/ea combined it seems about the cost of a S10e that I was otherwise looking at. Also have a Note 4 which gets some use when traveling(would get more but the wirelss charging thing I have for it is more clunky as it folds over like a book around the device).

It was a struggle for me to find a newer phone that was the least bad. Seems every year they remove more features and cripple things even more.

I was on gsmarena last month after getting excited about a new Motorola phone (Z4 I think?) turns out couldn't use that as it doesn't support wireless charging(there is a custom back cover for it but at the time it seemed nobody had it new or used, probably stopped making that cover a year or two ago as it was compatible with older versions of the handset). Anyway I input my parameters into gsmarena and basically out popped the S8 active as the most viable device on the list (may of been the ONLY device on the list I don't recall).

What sold me on the S8 Active as being the "least bad" phone for me anyway was:

- Plastic shell w/wireless charging

- "Normal" bezels (ironically screen/body ratio is only 0.2% different from Note 3 according to gsmarena).

- Similar size to Note 3 (is a plus anyway)

- Flat screen (both for less false touches and tempered glass protection)

- Big battery (still having battery anxiety issues mainly about longevity, I am used to being able to easily replace my battery once a year just to keep it fresh. I do have 5 "genuine" S8 Active batteries now though the replacement procedure is still scary, vast majority of times when I take small devices apart they never operate the same again). Installed Accubattery to track battery life(currently at 96%), and try not to charge it too much. Anxiety would go away if I had confidence future smart phones would not continue the trend of locking things down and removing features more.

- SD slot

- Previous positive experience with Samsung Note 3s excellent build quality, hoping similar good build quality from S8 Active over time

apparently the market doesn't care about most/all of those things anymore so those phones aren't being made.

What I do/will miss:

- Replaceable battery (per above I tend to swap once a year, I hope these S8 Actives can last at least 5 years as well)

- Stylus (got a small stylus that attaches to the headphone slot though not as convenient as internal stylus)

- IR blaster (mainly for travel, compensated a bit by the fact that I will continue to take my Note 3s and Note 4 on trips which have IR blasters)

- MHL (I think the USB C devices have something similar have not looked into it but again Note 3s and 4s to the rescue mainly for travel)

- Android 4.4 UI - really really hate the "flat" UI designs, and I will be spending some time to try to extract icons from Android 4.4/5 packages to use on 8.0, after being unable to find similar icon packs for Nova launcher (the only launcher I have ever used)

- Android 4.4 samsung keyboard - I installed a "classic keyboard" which at least gave me dark colors(hated the default white) though the key spacing isn't that great(no gaps between the keys) which I think makes for more difficult typing than what I was used to.

don't care about:

- Rugged nature of S8 Active (I am very careful with my phones, my Note 3s/4 have never needed a repair)

- Waterproof/etc

- Headphone jack - it's nice to have though it's rare that I need it, only real time I do so is on airplanes, and if the S8 active didn't have a headphone jack I would use a Note3/4 to listen to music (and/or watch videos). I do not own any bluetooth headphones the only ones I have are wired. For my workouts I use a Sandisk MP3 player with my wired earphones (https://www.usa.philips.com/c-p/SHS3200_28/earhook-headphones are the only earphones I use - most comfortable and stay in place for me)

- running latest android (I would be happy to get the latest security updates but maintain the same major version of android(I'd even pay a subscription service to do that) but that doesn't appear to happen)

- currently running android 8 though there was I thought a 9 upgrade available but maybe I was looking at the wrong page before, currently AT&T's website says 8 is the current version (I don't want 9 and have blocked AT&T's and Samsung's update domains from my network so the phones cannot update, AT&T's site still says Wifi is required to download the updates.)

- bixby button - so far at least I have only accidentally hit it maybe a half dozen times, and apparently I can't disable the button without signing into Samsung's services which I'm not willing to do just yet.

would be nice:

- be able to root/unclock bootloader it (read on XDA developers I think it was that no unlocks exist, and previous Active phones were not rooted either)

(Never unlocked my Note3s/4 either but would be a nice to have ability)

Was real close to buying a Note 9 last year, but then I started reading complaints about curved glass(especially for using tempered glass protectors - I have ~20 tempered glass screens for my S8 actives now just in case they stop making them), and the glass backs being slippery (I don't use cases). Then was close to getting a S10e because it at least had a flat screen, but then of course I decided to look harder and hope to find something that wasn't encased in glass all around.

Been about a month since I got the first S8 Active, I have a new SIM card (old sim card is too big) but have yet to pull the trigger to transfer the service to the S8 active from Note 3 yet.

At this point I wouldn't have a problem dropping $2k on a phone that was in a Note 3 form factor/features with just the newer chips and stuff in it. It would mean that much to me. But that doesn't exist, so S8 active it is for now anyway.

Google's Go team decides not to give it a try

Nate Amsden

fork it?

I have no interest in Go myself not being a developer. But after seeing what seems to be quite a number of articles and complaints from the Go community about google not agreeing to do stuff, I am curious how close is the community to forking the thing? Given it is open source(haven't checked what kind of license) I assume that is possible.

Sneaky fingerprinting script in Microsoft ad slips onto StackOverflow, against site policy

Nate Amsden

Re: Noscript to the rescue

I have used this on Linux for as long as I can remember, currently with Palemoon(as my daily driver browser)

---

sudo -u firefox -H VDPAU_NVIDIA_NO_OVERLAY=1 /usr/local/palemoon/palemoon %u

---

I have a script that runs when I login (using Linux Mate) to gnome(on X11):

--

#!/bin/bash

gsettings set org.mate.peripherals-mouse middle-button-enabled true

xhost +si:localuser:firefox

---

forgot what that VDPAU_NVIDIA_NO_OVERLAY is for but it was probably important at one time for me (I do use Nvidia video cards)

Also forgot what that gsettings command and the specifics around xhost +si that I am using(other than I believe it is more secure than just opening xhost to a wider audience),it was setup so long ago now.

Only issue is sometimes I have to manually adjust permissions on files if I am uploading or downloading files, and of course it can't access my $HOME so if I need to upload something from there I normally just copy it to /tmp (single user machine so not worried about any other logged in users)

Microsoft: 2TB or not 2... OK, OK! 2TB. OneDrive dragged kicking and screaming into selling more storage

Nate Amsden

Re: google is "unlimited"

They probably won't get very far since /dev/random will run out of entropy pretty quick :) (but I get your point)

Nate Amsden

google is "unlimited"

(I don't use any cloud storage services, I have had a 1U server at a colo for the past 13 years(though technically I have 1/3rd of the cabinet I think I just get 1 network drop and 1 power outlet with 200 watts but I can/have hooked up a PDU to get more outlets), before that I hosted stuff at home on my DSL with 8 static IPs and before that I was a system admin for a tiny ISP that had a T1 and hosted my stuff there(before the year 2000)).

I keep reading in various places how Google has "unlimited" storage with their google drive. I think you have to pay a bit more (though I think it is under $20/mo) but have read people claiming they have uploaded over 100TB without an issue(I think I saw one claim of over 400TB). The catch is it seems to be unofficial and google could clamp down at any time but so far in some(many? most?) cases at least they have not. I have read there are limits for API requests, and limits on uploads per day I want to say in the 10s of GBs per day is the limit(or maybe it was 750GB too lazy to try to check). Also there are fears around google inspecting the data and flagging for piracy and other things, in many cases people encrypt the data before sending it).

I have also read claims that some educational(perhaps many) institutions give students unlimited google drive as well.

I've also seen really stupid people trying to sell access to their "free" google drive account trying to make a few pennies on the side.

For 99% of people this would seem crazy(myself included), but there are those folks out there that have hundreds of megs or gig or more of upstream bandwidth(lucky them I guess) and abuse this service like crazy.

DXC Technology warns techies that all travel MUST now be authorised

Nate Amsden

Re: Back in the distant past, before I worked for HP...

Just curious what route did you take which required 14 hours from Sacramento to LAX? Even driving from Sac to the coast and taking highway 1 shouldn't take 14 hours (maybe 11 ?).

Normal route I-5 or Highway 99 is at most I'd say 8 hours even in abnormally bad traffic. I have made the trip from Seattle to Sacramento(en route to bay area) in 14 hours(on multiple occasions). Have lived in Modesto approaching 3 years now and trips to Orange county are probably just under 7 hours(with traffic) and of course that is further than LAX. I cruise typically 5-7 MPH above the speed limit on the highways, only going above when needing to pass, so not as if I'm driving super fast.

Still batshit crazy for a company to do that to you.

RIP Dyn Dynamic DNS :'( Oracle to end Dyn-asty by axing freshly gobbled services, shoving customers into its cloud

Nate Amsden

Re: Dyn enterprise customer for a decade

Wanted to give an update. They replied to me at 3:30am my time(Pacific time). I imagine they are getting flooded with questions.

Anyway they said

========

OCI DNS is powered by the same anycast name server network as Oracle Dyn Managed DNS.

You can find our SLA page linked here: https://cloud.oracle.com/en_US/regions

https://cloud.oracle.com/en_US/iaas/sla

========

However looking at the SLA there is no mention of the text DNS as far as I can tell. Dyn has an insane SLA. So am awaiting to hear if Oracle is maintaining that same SLA or will it be different.

Oracle would struggle I think to come up with worse communications vs what was sent yesterday. It screams they were super rushed to get it out the door which is just stupid to rush this kind of thing.

Nate Amsden

Dyn enterprise customer for a decade

Never tried any of their free stuff.

Certainly not happy about this myself. Sent them a scathing email this morning after I got the notice from Oracle(so far no response - I did compliment them in that they have run an awesome service over the past decade, I think really the only SaaS offering that has been pretty much flawless in operation).

Their migration FAQ is totally inadequate and incompetent(they say if you can't live with a DNS outage then wait till August when they hope to have a migration tool). I also got in contact with UltraDNS to see about moving services there instead. They also seem to assume that customers have registered their domains with Oracle cloud(who would register their domains with a cloud provider??? especially enterprise customers like Dyn has???) already. If not then of course have to go and manually update the dozens to hundreds of domains customers have to point to the new name servers.

The fact that they even show a process for migration which involves an outage to DNS services is just absurd. I mean it is not difficult to move DNS providers and not have an outage. But they literally tell you to delete the zone from Dynect before changing the domain registration to point to the new name servers. That's just beyond words incompetent.

It really seems like(based on the documentation they have produced) Oracle is throwing away the high performance super scalable DNS service Dyn had built(that put them in the top 2 DNS providers in the world the other being UltraDNS) for a very crappy generic DNS service that is available from any number of service providers out there.

Many of the biggest sites on the internet rely on Dyn, Oracle (from their info they provided today) couldn't of done a worse job at customer communication and there will be a mass exodus of customers as a result.

I really liked how Dyn's user interface really hasn't changed much at all in the past decade. It just worked, they didn't mess with it. I really get sick of these newer SaaS services constantly messing with the UI 98% of the time for no good reason. Dyn was an exception to that.

sigh.

Out of Steam? Wine draining away? Ubuntu's 64-bit-only x86 decision is causing migraines

Nate Amsden

Re: It's lazyness and fashion.

Can't say backwards compatibility in Linux has ever been good (Linux user since 1996). So I can't believe how you can say it is a big advantage. I have a bunch of Loki games which I'm sure don't have a prayer of running in any modern linux distro (probably not even one in the last 10 years). Windows has far better (though not perfect) backwards compatibility (though I have not tried anything newer than Windows 7 for old games anyway).

Last time I used Wine in linux was probably when Cedega was still around(which by the looks of it was 10+ years ago). I hardly ever play games these days, if I do need a game on windows then I reboot my laptop which is dual boot Mint/Win7), but that is maybe once or twice a year these days(I have no games on Linux that I play). The most time I've spent gaming the past ~5 years has been Fallout 4 (probably 2000+ hours) and GTA 5 (offline only, probably 600+ hours) both on regular PS4. Last game I recall playing very seriously in Linux was the original Unreal Tournament probably ~2001 (Loki version of course on 3DFX Voodoo3 I think).

A $4bn biz without a live product just broke the record for the amount paid for a domain name. WTF is going on?

Nate Amsden

$30M

couldn't you get your own top level domain for that ? (e.g. ".voice" for example assuming that is not taken).

HPE downs Nimble-ful of HCI, lobs third hyperconverged system into its portfolio

Nate Amsden

synergy

Curious why HP didn't just go the synergy route with this solution. I mean plug a module or two in for nimble controllers, plug one of those storage modules in(apparently can do 40x2.5" drives which is plenty for all flash), a couple more servers for the hypervisor stuff, and integrated networking. No need for having to ship a rack, or much cabling, and plenty of capacity to scale out inside and/or outside the enclosure.

I suppose the main reason is it would probably cost a bit more, so perhaps offer it as a option (I suppose the obvious option would be a Nimble solution that runs inside a Synergy enclosure which really should be trivial I think Nimble uses just regular servers no special hardware architecture).

Sad SACK: Linux PCs, servers, gadgets may be crashed by 'Ping of Death' network packets

Nate Amsden

Re: A few things

Perhaps can use sysctl as well

root@yehat:~# sysctl net.ipv4.tcp_sack

net.ipv4.tcp_sack = 0

root@yehat:~# cat /proc/sys/net/ipv4/tcp_sack

0

(having just set it manually via sysctl as well as in /etc/sysctl.conf I did not touch /proc directly)

System is Devuan, so no systemd.

(Debian user since 1998, don't like systemd)

Tried it on Ubuntu 16.04 LTS too same result.

Court drama: Did Oracle bully its customers into the cloud? Nine insiders to blow the whistle

Nate Amsden

Re: Do you HAVE to use Oracle?

Multi TB database for transactions.. brings back memories.. Was at a company about 15 years ago whom at the time had the largest OLTP database in the world as far as Oracle knew at least. I believe it was in the ~60TB range at the time(in a single instance of Oracle). I believe we were told Amazon at the time had one of the largest OLTP databases which was in the ~7TB range for perspective(though I know they had tons of OLTP I am referring to a single DB server not aggregate distributed environment). DB server when I left (I wasn't responsible for them I was more on the app and networking side) were running on Itanium HPUX systems with Hitachi storage. I think it was about 1 and a half racks of storage per DB server for the biggest DBs. They later wanted to migrate to Oracle on NFS on NetApp and the NetApps imploded immediately. But block storage on NetApp ended up being ok for them. They later tried to move to Red Hat with Oracle but had enough outages I guess that their biggest customer required them to move back to big iron.

More than 1TB of indexes alone. Very poorly designed app I suppose. The bulk of the problem I believe was the result of storing raw XML in blobs in the DB I suppose as a way to get around making a real schema. We had the biggest storage vendors in the world admitting to us they had no customers in the world doing what we were doing at the time. One time Oracle flew on site for a big outage we had and they too said no other customers were doing what we were doing and we were doing very bad things with the DB (the outage I believe was related to the XML blobs and high water marks in the DB, I think it was more of a "performance is so bad the system can't run" rather than "the system is crashed").

Had a lot of interesting experiences at that company.

HPE's Spaceborne supercomputer returns to terra firma after 615 days on the ISS

Nate Amsden

maybe ironic that HPE owns SGI now

Microsoft Bing is 10: That thing you accidentally use to search for Chrome? Still alive and kicking

Nate Amsden

been using bing for about 18 months

For web search at least, wanted to see what it was like. Haven't missed google at all. I have never, not even once gone back to google if I couldn't find something on bing. I tried duck duck go for a short while, but as I am not a fan of amazon cloud once I found out they were all amazon based (their shopping results were a big hint I suppose) I immediately stopped using it(and have since read that duck duck go uses bing for search anyway?). Would rather give my data to google. Though bing is fine. I do still use google maps, bing maps is completely unsable for me on Linux on pale moon browser anyway (can click on a business name and something appears in the side bar then goes away, just doesn't render at all, tried more than a half dozen times).

I'm sure there were probably a bunch of times when I could of found something faster on google than on bing I don't know. Or maybe my search terms are basic enough that it doesn't matter.

I use firefox on mobile and switched that to bing probably about a year ago, was too lazy to change it for a while.

I remember I switched to google from altavista I believe it was back when altavista first started showing banner ads. I remember emailing altavista or providing feedback or something saying I switched due to the banner ads, they replied and apologized or something.

Office 365 user security practices are woeful, yet it's still 'Microsoft's fault' when an org is breached

Nate Amsden

diligent admins

Seems MS did their best to do away with those admins when they started pushing office 365/hosted exchange to begin with. Hard for anyone to complain now.

If you're using Oracle's WebLogic Server, check for security fixes: Bug exploited in the wild to install ransomware

Nate Amsden

memories

The support contract required to get the patch reminded me of this..

Was at a company more than 10 years ago now that used Weblogic (back when it was BEA Weblogic). We used JMS for tons of stuff and had tons of bugs with it. At one point our performance/stability team tried to be proactive and asked BEA if there was any fixes for the JMS subsystem that we didn't have that we could get in advance given our troubled history with JMS on Weblogic.

BEA said there was no fixes we didn't already have.

Fast forward a month or two and we had a big outage with JMS, systems were down for at least a day or two. The customer that ran on this cluster was and still is a multi billion $ telecom(and a weblogic customer themselves). They were upset.

I'll never forget being in my manager's office after the first day or so of downtime, every high level software person in the room with the senior ops people(me). Manager asks a simple question along the lines of "does anyone have any ideas on how we can fix this". There was no answer, they had no idea.

We worked around the problem by basically dropping all of the data in the affected queues and things returned to normal but it took a long time for people to approve losing all of that data (in the end I don't recall it being too bad).

Fast forward a month or so(for the folks to find the root cause) after that and BEA admits to us that not only was that ~2 day outage caused by a known bug in Weblogic, but they had a fix for it at the time we asked them for fixes. But it was a policy to not tell customers about these one off fixes unless they were specifically affected by the issue. The multi billion dollar telecom stepped in and.. BEA changed their policy(at least for us anyway).

I suppose the upshot of Weblogic at that company(in reference to the article again) is it was never exposed to the internet, multi tier architecture apache terminated the http/ssl connections, then sent them to a tomcat tier over AJP, then tomcat did some things and for weblogic related things it sent requests to weblogic which was behind a firewall layer("app tier"). Learned a lot at that company, fun times..though could never repeat that experience (70-80hr+ per week for a couple of years, literally took me ~3 years to recover from that).

Apple hits back at devs of axed kiddie screen-time apps

Nate Amsden

why now?

Their reason for yanking the apps seems valid but the timing is terrible. Why were the apps not flagged before, why were they ever approved in the first place?

I don't use IOS but looking at Wikipedia (https://en.wikipedia.org/wiki/IOS_version_history) the most recent version of IOS was released 35 days ago(el reg article doesn't seem to indicate the version or the release date), and it says that is the version that had the screen time change. So Apple chooses to release the new feature, then immediately following(given the apps were just yanked and apple claims they gave the devs 30 days?) tells these app folks they are in violation and yanks their apps?

I'd think screening an app for whether or not it uses MDM would be a simple matter, especially given apple's apparent more robust screening process(vs google anyway)

Buying a second-hand hard drive on eBay? You've got a 'one in two' chance of finding personal info still on it

Nate Amsden

for hdds

I like to harvest the magnets. hard disk magnets are so strong. I probably have 30 or 40 of them just from my own drives over the past 15 years or so. Most recently took apart 3 x 750GB drives that I hadn't used since about 2010 to get their magnets. Had to invest in a good torx set though(from PB Swiss tools in my case, I am far from a handy man and had only come across them trying to find good quality torx), as the cheap ones get stripped really easily. Before I had the good tools sometimes I would have to resort to brute force to remove the magnets and sometimes could not get to them at all. And before the recent tool acquisition I was never able to remove any of the hard disk platters.

I suspect my drives aren't very usable after I am done harvesting their magnets.

When you play the game of HCI thrones, you win or you slowly shrivel up

Nate Amsden

still seems flakey

Disclaimer I've never personally used any of the hyperconverged stuff.

I've been a vmware customer for 20 years (back when vmware was a linux product that ran on the desktop), Vmware GSX/Server and later ESX for 15 years or so now.

But I'm quite shocked to read complaints about simple stuff causing problems on VSAN, the one that sticks out to me the most is multiple comments from users running VSAN on Dell hardware where they have a hard disk or SSD fail and NEITHER Dell NOR VMware can figure out which physical drive it is! I mean that has got to be the most basic of basic things. Even doubly so for a company like Dell who basically own VMware. I mean the word shocking doesn't even justify how bad that is to me. I'm sure it doesn't happen all the time, and doesn't happen that way for all customers but still that is just so basic.

I've read a bunch of other stuff from VSAN users over the past couple of years but that one stood out the most. I even brought it up with my Vmware rep recently when he asked me about VSAN and he didn't even try to defend it, just said it is likely just because Dell and VMware are different groups so they still have issues figuring it out.

In my mind at least especially for a Dell platform with VSAN, that should have full integration with DRAC and/or whatever else is storage related to immediately identify the bad storage resource, should not have to hunt it down.

I haven't read much about Nutanix by contrast but that is mainly because I don't follow anything Nutanix related, I do follow some Vmware stuff and VSAN often pops up as a result of course.

Hyper converged storage has always sounded nice on paper, the concepts and cost savings and stuff sound really nice. But my personal experience with storage over the past 15+ years tells me storage is really difficult to get right. And while HCI tries hard to simplify the management aspects of storage by abstracting it more the underlying complexity goes up quite a bit, which just invites bugs. Whether it is in software, or firmware, or interoperability etc. It just scares me (for anything beyond single digit numbers of servers).

SoftIron's strategy to bring Ceph storage to the masses: 'A really, really sh*tty computer'...

Nate Amsden

cooling the drives first

"This means cool air from the fans blows over the drives first, and then the CPUs – which wouldn't make any sense in a compute server."

I don't think I've ever seen a server that didn't have the drive bays get cooling before the CPUs. I have seen some server designs that have drives on the rear as well as the front(only in situations where they are getting the most drive bays they can in a single system), but don't recall seeing any where they are only on the rear.

Dell EMC refreshes Unity arrays with splash of Skylake and NVMe

Nate Amsden

"other suppliers"

Like Dell+VMware w/vSAN.

I'd be a little curious to be in a room with teams from both groups and see how the conversation goes.

Overhyped 5G is being 'rushed', Britain's top comms boffin reckons

Nate Amsden

Re: SNAFU again

4G isn't even sorted out yet, so myself I am not holding my breath for 5G. I can count on one hand the number of times I was doing something on 4G and the speed was really good (above 10-15Mbit) over the past 6 years. I think that count is 2 or 3(one of those times was in a Vegas conference hall where they obviously had repeaters of some kind inside).

Meanwhile I can go to many busy places on 4G and not have enough bandwidth to even get DNS resolution to work.

It's not my phone, since I have tried a couple of other phones(new and old) which behave about the same.

Carrier is one of the top two in the U.S.

The California city I'm in has a population of 200,000+. (That and I've traveled a bunch of places and LTE generally sucks everywhere, though usually I can get 2-6Mbit).

If there was an easy way to switch my phone to 3G on the fly I would but it requires 2 reboots and removing the sim card in order to get around the locks that the OS/carrier/whatever have on it. I do flip the mode whenever I travel outside of the U.S. though.

5G sounds promising for fixed wireless communications at least on paper. It seems to make absolutely no sense for mobile phones. It's just a gimmick and will be for years to come.

That marketing email database that exposed 809 million contact records? Maybe make that two-BILLION-plus?

Nate Amsden

the ultimate form of compliance?

Q: What information do you have on me and how do you share it?

A: Here is the IP of the database, no authentication needed take a look for yourself

Iranian-backed hackers ransacked Citrix, swiped 6TB+ of emails, docs, secrets, claims cyber-biz

Nate Amsden

Re: WTF

The article says the 3rd party was the FBI. So not surprising they didn't know if the FBI told them. I saw a stat a few years ago and it said something along the lines of intruders have network level access for on average about 190 days before being detected(stat was quoted by the then-CTO of Trend Micro). I think the number of days has been going up slightly as well in recent years.

The one thing that the article doesn't specifically cover is how much/if any of the source code was taken. They say corporate network, I have no idea if that includes development stuff or not.

Security is a hot topic these days but for the foreseeable future it will continue to be a losing battle for just about everyone(especially with state actors, APTs etc), not a game I'd like to play.

Adi Shamir visa snub: US govt slammed after the S in RSA blocked from his own RSA conf

Nate Amsden

couldn't get one or couldn't get one in time?

There's a huge distinction between being rejected and not getting a visa in time because of a backlog of requests. I don't know if there are restrictions as to how far in advance you are able to request a visa. I poked around and it seems the main form is the DS-160(which I helped someone with a couple of years ago) though I don't see at first glance anyway whether or not you have to file within X number of days of travel.

The article implies the person was not (yet at least) rejected they just hadn't gotten the visa processed in time for the event.

Fancy a .dev domain? They were $12,500 a pop from Google. Now, $1,000. Soon, $17.50. And you may want one

Nate Amsden

so confusing

so many top level domains.. I got on a support call recently and they said go to <vendorname>.support. I asked them to confirm as I expected something longer like <vendorname>.support.somethingelse.[some well known TLD]. But nope the actual TLD domain was .support.

I guess I must admit I have yet to encounter many of these TLDs in real world usage.

Per the .dev stuff I assume if people use .dev and host their own internal DNS they could override the behavior ? Provided of course the browser isn't sending DNS requests directly to the interwebs. I don't use Chrome nor do I use .dev so not sure, but am curious.

Pure Storage's would-be Data Domain killer out in March – but it's still shy about the internals

Nate Amsden

DD goes to cloud too

I don't use DD, I use HPE StoreOnce. But DD has a cloud tier option, looking at their specs it ranges from a usable capacity of 96TB on low end to 3PB on the high end.

HP on the low end starts from 94TB usable cloud capacity to 5.2PB on the high end. On the HP end there are some restrictions on how this can be used. e.g. all of my usage of StoreOnce is over NFS, which means no cloud tier available even if I wanted to use it.

I've got no idea what if any restrictions there may be on the DD stuff.

(I haven't used the HP or anyone else's cloud backup stuff)

'This collaboration is absolutely critical going forward'... One positive thing about Meltdown CPU hole? At least it put aside tech rivalries...

Nate Amsden

Re: What an absurdity!

Per your X86 cruft comment, Intel did try to push exactly that concept. Get rid of X86 replace it with Itanium. Didn't work so well. I'm sure Itanium wasn't the best but they probably still spent billions of dollars developing it hoping to kill X86. I think it also wasn't the first time Intel wanted to kill X86, didn't they try something much earlier I want to say the i860 or i960 processors or something -- I want to say I remember reading something along the lines of those processors were the first ones that MS built NT on and only ported it to X86 later (and alpha and mips and ppc..)

As for peer review. I find it funny to see comments like this. This obviously isn't a new issue, this stuff has been in the chips for more than a decade. No real stink was made (outside I recall reading OpenBSD folks harping on hyperthreading and other stuff about 10 years ago). Lots of people knew the architecture,it wasn't top secret.

For me personally I am not patching my systems(at least at the firmware level). The risk outweighs the benefit. My laptop(Lenovo P50), and my personal servers(both run recent Intel Xeons) are not getting fixed for this stuff.

I haven't had a known security incident on any of my personal systems hardware or software since literally I think it was something like 1992, when my 486 computer at the time got the [STONED] virus. Though I don't recall it doing any damage. I don't remember if anti virus took care of it or what.

Professionally I haven't had a known security incident hardware or software on any of my equipment since 1997. I was running a small ISP, someone who had a legit shell account on one of my Linux servers decided to hack it. I was involved in software piracy back then so not everyone I knew was super trustworthy. Though they were detected within seconds (as I was logged in at the time, I detected it by them being stupid and firewalling my IPs from contacting that server, system was disconnected from the network within an hour or so and rebuilt).

I have assisted in a few security incidents of things that I had access to (but was not responsible for) though. Presently I manage more than 1,000 virtual servers and server hardware and networking and storage that run under them. So I have a decent amount of experience.

So yeah, my ~22 years of online experience, many of which running internet connected services in both personal and professional capacity makes me believe that the risk of this is far overblown for MOST people (exception is shared environments where you have untrusted workloads,e.g. public cloud providers, or high value targets).

The knee jerk reactions to most of these security things are just crazy. It would be different if there was an active exploit available, something that is networkable and can infect/spread/worm itself etc.

There's far more critical security related things to patch or secure from than this.

I believe the most vocal people talking about this stuff are more so the hard core AMD fans who want Intel to fail so AMD can rise up again. I can certainly understand that angle, though it's not going to happen.

One thing to keep in mind, if someone (say a state actor) really wants in, they will get in. Doesn't matter if you have all the patches, they will find a way in.

Samsung Galaxy's flagship leaks ... don't matter much. Here's why

Nate Amsden

Re: No jack, Jack.

Curious can you quantify "forever" ? I have a Note 4 though I don't use it too much it is more of a backup of a backup. My daily drivers are Note 3s (my first Android phone). One has Android 4.4(my main) and the other has 5.0 (I prefer 4.4). Anyway performance wise it seems fine. Literally on day one of having the Note 3 I installed Nova launcher and it has been my launcher of choice on all android devices since(am not sure how much if at all that may influence the performance of the device).

I don't use many apps, no social media, no banking, mainly built in email, SMS, firefox(with ad blockers - mobile is the only place where I use actual ad blockers), the built in gallery app, google maps(I use an older version the newer ones have too much crap in them). I do have about 60 apps installed though overall usage of them is much less frequent/consistent.

Apps I am less sure of privacy/security wise (that I otherwise want to try or use) go on the 2nd Note 3 or sometimes the Note 4 neither of which have any personal info on them. The wifi in my home is strictly DMZ I guess you could say, I have some ports open on the firewall for my IP cameras to be reached by the phones but otherwise the phones have no need to access internal network so they don't have access.

I have been interested in a new phone just because well this one probably won't last forever. Though it's hard to decide what compromises to make since all new phones would be some form of serious compromise for me (over Note 3), the only exceptions I think would be camera, CPU performance, and memory (the only areas I care about upgrade wise).

Everything else - having a removable battery(I change mine once a year to keep it fresh), IR blaster, MHL, flat screen, headphone jack, reasonable bezels, wireless charging and having something reliable (at 6 years this Note 3 is by far the longest I have had a single phone as my daily driver - and I've never needed to repair it. Though the gyroscope has been failing for the past year or two, doesn't matter much).

At this point I don't care if it's $1200 bucks if it can last 6 years.

Scaling up Azure Service Fabric Linux Clusters using Ubuntu Xenial? Not so fast, friend

Nate Amsden

Re: Just azure?

This seems to have nothing to do with azure itself just bad or missing testing on the Ubuntu update.

All of the big cloud providers are "built to fail" (as in you should expect failures to happen quite frequently that are not easy to recover from short of rebuilding or restoring from backup or if you have an app that has better redundancy to handle that kind of stuff). So most of that stuff is so common it doesn't make the news. For the org I am with for example we haven't lost a VM in the ~7 years since we moved out of public cloud.

Azure I think gets more headlines to some extent as they have more SaaS offerings that are critical like Office 365/email etc. SaaS should be more resilient to those types of faults but it seems in many cases it is not quite there yet.

Larger scale cloud issues certainly hit the news though, El reg has had quite a few on Google and Amazon too.

Wells Fargo? Well fscked at the moment: Data center up in smoke, bank website, app down

Nate Amsden

working fine for me?

I have been a wells fargo customer since the 90s.

I don't use the online stuff often maybe once a week or something. But I just logged in, no issue(8:40 PM pacific time). Someone mentioned they couldn't move funds between accounts(2 checking accounts though the transfer doesn't use wells fargo it uses Zelle or something?? but it's fully integrated into the UI). I just did no issue. I don't really use the online banking for much more than viewing the balance and seeing the transactions.

From those aspects everything seems perfectly normal. I even clicked on a check I wrote and the image for the check came up immediately.

No errors anywhere.

I do not, and have never used their mobile app maybe that is more impacted I don't know.

Forget snowmageddon, it's dropageddon in Azure SQL world: Microsoft accidentally deletes customer DBs

Nate Amsden

don't understand

How is a DNS issue related to Century link (a telecom provider, and I guess colo too) ? Probably will never find out

(not a customer of either, just confused what kind of DNS setup MS would have that would have their internal services reliant upon an external DNS provider).

If my external DNS went down(Dynect) completely or got corrupted or whatever,the worst thing that happens is users can't resolve the names or resolve to the wrong place and end up not being able to use the services. Internal DNS has dedicated zones(even duplicates of a dozen or more external zones to override external IPs in some cases with internal), so nothing would be affected internally. Certainly wouldn't cascade database failures or data loss or anything remotely like that.

Underfunded HCI startup Maxta hits the buffers as VC cash runs out

Nate Amsden

$35 million in funding

So, just about $465 million short of what might of been needed..(seeing the crazy unicorn investments flying around recently..)

You're an admin! You're an admin! You're all admins, thanks to this Microsoft Exchange zero-day and exploit

Nate Amsden

Re: Possible quick fix

I've used cyrus for the past 19 years now.. for email it works great(though the migration from v1 to v2 was quite painful - though I haven't run email for a corporate type environment since 2002 and at the time it was Cyrus). Since then the only email hosting I have done is just my personal and family stuff.

I don't have opinions strong enough to try to talk someone else into what email solution to use, but I wanted to (sadly) mention this that I noticed last year:

https://www.cmu.edu/computing/services/comm-collab/email-calendar/cyrus/decommission.html

made me kinda feel sick inside (the main reason of course being they built Cyrus, am not sure how much involvement they have in it today).

I have been a user of office 365 for the past 6 years or so(I don't work in corporate IT so have never managed exchange). I don't have major complaints. I'm certainly not the office power user who leverages their stuff more so can understand those who need that groupware functionality. I could get by with just IMAP without an issue though I know many others need much more than that. Office 2010 on windows 7 and OWA on Linux and email on android all seem to work ok.

Heads up: Debian's package manager is APT for root-level malware injection... Fix out now to thwart MITM hijacks

Nate Amsden

Re: Lousy advice guys

Shouldn't be anyone who is not experienced or at least not willing/eager to dive deeper into linux using something like Debian. For those folks anyway this specific thing mentioned in the article is a non issue to begin with.

I started with Slackware 3.something back in 1996(instead of Red Hat which was the only other option I was aware of at the time) specifically because I wanted to get more into Linux. Went off building(eventually) my own kernels, libcs, X11s, gome, KDE, whatever. Red hat of course you could/can do the same though the lack of a similar formal testing/package repo to me at the time at least meant I didn't want to use it.

Tried Debian in 1998(Debian 2.0) by recommendation of someone I knew online at the time. Still remember spending 2-4+ hours i dselect(oh the pain) choosing packages those first few times I installed. apt-get came later(debian 2.2 ?). Ironically enough I still find dselect vital these days for just 1 reason (dpkg --get-selections and dpkg --set-selections makes things very easy when building new similar systems (that don't otherwise have/need massive automation, such as my personal servers, laptops, desktops - the latter run Mint which is still Debian based).

Nate Amsden

Re: "Supporting HTTP is fine,"

because hosting it on https makes it totally secure right? HTTPS protects against some things, but introduces extra complexity(good luck troubleshooting when you don't have the SSL key) and performance hit(can be huge depending on your settings for a site shoveling as much data as debian's mirrors likely are - that and they are mirrors after all). I'm all for making https an option though for those that are super paranoid.

There seems to be approx 418 mirrors on debian's site https://www.debian.org/mirror/list if my quick checks map out. Of those I see about 177 valid HTTP responses on https ports. I did not attempt to do anything other than view the debian directory(with wget, and I told it to not to validate the certificate since wget doesn't know all CAs. There were ~80 SSL cert errors reported ranging from unknown CA to expired cert to "no certificate subject alternative name matches").

Personally I'd be more concerned about people hacking into debian's systems (or even the mirror you're connecting to) and uploading bad packages than I would ever be of someone doing a MITM on one of my systems. I think overall the chance of a real problem is VERY low for most people. No reason to freak out, but freaking out generates the headlines I guess.

(Debian user since 1998 - though switching to Devuan)

Core blimey... When is an AMD CPU core not a CPU core? It's now up to a jury of 12 to decide

Nate Amsden

what kind of apps were impacted?

From the previous article https://www.theregister.co.uk/2015/11/06/amd_sued_cores/

"it claims it is impossible for an eight-core Bulldozer-powered processor to truly execute eight instructions simultaneously – it cannot run eight complex math calculations at any one moment due to the shared FPU design"

This article seems to be referring to desktop processors though I assume the Opterons at the time were affected as well ? (I have several Opteron 6176 and 6276s in service still as vmware hosts - though checking now at least Wikipedia says only the 4200/6200 Opterons were bulldozer).

So if desktop processors were affected I am curious what sorts of apps would be impacted seriously by this? I mean I expect in most games and 3D rendering type apps that GPUs are far more important than FPU for math calculations. Perhaps media encoding ? I think that is often accelerated by the MMX/SSE type instructions.

I would assume that CPU(FPU) based math would be more common in the HPC space (even with GPUs), and I can certainly see a case for an issue there - however at the same time I would expect any HPC customer to do basic testing of the hardware to determine if the performance is up to their expectations regardless of what the claims might be. Testing math calculation performance should be pretty simple.

I want to say I was aware of this FPU issue years ago when I was buying the Opterons, and then, and even now I don't care about the fewer FPUs, I wanted more integer cores(for running 50-70+ VMs on a server). I really have had no workloads that(as far as I am aware at least) are FPU intensive. Though it certainly would be nice if it was possible to measure specifically FPU utilization on a processor, much like I wish it was easy to measure PCI bus bandwidth utilization( not that I have anything that seriously taxes the PCI bus(again that I am aware of) but having that data would be nice.

I think back to when Intel launched their first quad core processor, or one of the first, I think it was around 2006-2007. They basically took two dual core procesors and "glued" them together to make a quad core. I remember because AMD talked shit about Intel's approach as AMD had a "true" quad core processor.. fast forward a decade and it seems everyone is gluing modules together.

The Palm Palm: The Derringer of smartphones

Nate Amsden

Re: Oh look, they re invented the HTC Touch Diamond.

quite surprised but perhaps I shouldn't be for the lack of comparison to the HP (Palm) Veer. Almost an identical form factor and target market. It was the last WebOS phone to fully launch (I don't count the Pre3 as it was canceled quite suddenly).

https://www.gsmarena.com/hp_veer-3771.php

The veer was quite cute, and no built in headphone jack though it did have a magnetic attachment to get a headphone jack(and micro USB). It did have a slide out keyboard which this new Palm lacks. It also had wireless charging. No WebOS devices had expandable storage unfortunately.

I don't know what the Veer's sales were like but I remember the comments at the time when the market was going to bigger and bigger screens it seemed crazy to go the exact opposite direction though I appreciate the risk they took trying something different. I bought a Veer myself I think it was basically free when I renewed my ATT contract at the time(was using a Pre3). Never really had a use for the Veer outside of a toy. Ended up giving it to a webos developer a couple of years later.

Still have my ATT Pre3 sitting in a box along with a French language version of the Pre3. My nearly 6 year old galaxy note 3 remains my daily driver and my first Android device.

Here are another 45,000 reasons to patch Windows systems against old NSA exploits

Nate Amsden

how about

turning off UPnP

https://www.theregister.co.uk/2018/11/08/upnp_spam_botnet_broadcom/

Never have had a router that supported UPnP myself, well my home broadband connections have always had bridged modems with either Linux or OpenBSD(past 12 years or so) as my gateway.

Is Google's Pixel getting better, or just more expensive?

Nate Amsden

Re: RE: Topperfalkon

Curious how many reboots is a lot these days? My primary phone is a note 3 for 5+ years and it last was rebooted 112 days ago. I think that reboot was me pulling the battery out to get to the SD card to copy about 45gb of files over to it directly before a 2 week trip (instead of through the phone which is a lot slower).

Groundhog Day comes early as Intel Display Drivers give Windows 10 the silent treatment

Nate Amsden

Re: Office 2010

not sure what version of exchange like functionality Office 365 has but I have outlook 2010 on windows 7 connected to office 365 no issues., have been since at least 2013 I think, prior to that the company I am at was using hosted Exchange at Rackspace and it worked fine there too.

official support looks to conclude in Oct 2020 (updates etc). Haven't heard/seen anything saying when or if outlook 2010 will stop working with office 365 exchange.

Most of my email is done via Outlook web access from Linux but I do keep outlook running 24/7 in my windows VM sometimes it is useful.

Woke Linus Torvalds rolls his first 4.20, mulls Linux 5.0 effort for 2019

Nate Amsden

Re: just mewling quims.

I'm curious what most people might find more "offensive" if they were given a choice

1) swear words or 2) USING ALL CAPS

I remember at my first job back in the 90s they used an old IBM system over serial ports and it only accepted input in all caps. One day the CEO of the company (about ~120 people) sent me an email saying "NATE PLEASE COME SEE ME IN MY OFFICE". I was shook up at the time but quickly learned he wasn't upset he just forgot to turn off caps lock after switching out of that app.

I think if I had to choose it would be CAPS would be more strongly felt than swear words. Hell in many cases people use swear words as comedy stuff.

Oracle 'net-watcher agrees, China Telecom is a repeat offender for misdirecting traffic

Nate Amsden

low priority traffic?

Routing something that far away will of course kill latency and perhaps short of something like residential broadband or mobile connections would result in the customers seeing that drop in performance/throughput and reporting it.

I was involved with one such incident that I kept the traceroute for in 2004, the story I was told was there was a fiber cut in the midwest of the U.S. that caused some previously unused BGP broadcasts to route traffic for the company I was with(AT&T customer at an AT&T facility near Seattle) to go through Russia. Packet loss got as high as 98%, and being we were an online application had to take our site down since it was wrecking havoc with transactions. Took AT&T and friends 6-7 hours to put the filters in place etc to resolve the issue.

Traceroute from the time (source and destination addresses both in Seattle area)

http://elreg.nateamsden.com/funkyroute.txt

32 hops, 98% packet loss and 280ms later arriving at the destination.

It's been a week since engineers approved a new DNS encryption standard and everyone is still yelling

Nate Amsden

Re: where are the implimentations ?

.local I think is mainly used in windows and mac environments ? I've never used it in linux anyway. At the org I work for we have 47 domains hosted internally, some are both internal and external. All are .com or maybe .co.uk .de .fr etc.

Used to have over 100 but cut it down by a bit last year.

So saying .local isn't affected does nothing for what may be my situation at some point.

Nate Amsden

where are the implimentations ?

I'll admit I haven't followed this closely. Just looking now at DNS over HTTPS for example, other than some web browsers, and Cloudflare (maybe some other public recursive systems) where are the other implementations of this? (specifically looking for server implementations, not stuff that is locked away by a service provider black box like Cloudflare). Speaking as someone who has run recursive and authoritative name servers for 22 years now(and still does today).

Wikipedia's info on it is pretty void of info https://en.wikipedia.org/wiki/DNS_over_HTTPS

Recently I looked into DNS over TLS(was just curious), specifically for BIND anyway and came across this page https://kb.isc.org/docs/aa-01386 , which talks about using stunnel in front of bind for DNS over TLS. Which to me is just a hack. I'd expect to see native TLS support in something like BIND, at least so you have full visibility into the IPs that are sending requests(with a proxy like stunnel that information would get lost).

Myself I am fine with DNS as is I have no need for TLS or HTTPS. Though I can certainly understand there are people in situations where they have a much higher need for privacy and for whatever reason a vpn may not work for them.

SSL/TLS connections are difficult enough now to debug with encryption protocols and ciphers and versions and generally crappy logging on behalf of the applications.

DNS in browsers is already a pain with the browser often caching DNS responses. Probably been 100s of times over the past decade I've had to tell users to restart their browsers to use another browser to clear their browser dns cache.

My general bigger concern with the likes of firefox and probably other browsers wanting to use DNS over HTTPS how that might affect my services. e.g. users connect to a VPN, and that has DNS resources that resolve stuff for internal names. I would kind of expect/fear that if firefox and others are defaulting to a public DNS over HTTPS provider than it would break DNS queries for basically everything internal the user is trying to connect to. Time will tell I guess.

Also of course more broadly along the same lines having inconsistent DNS behavior depending on whether or not the app is using DNS over HTTPS to a public resolver or the operating system's resolver.

(and yeah not a fan of IPv6 either)

IBM sits draped over the bar at The Cloud or Bust saloon. In walks Red Hat

Nate Amsden

sad

sad to see such big companies splash such massive amounts of cash while simultaneously practically strangling themselves for profits.

I mean IBM could invest $1 billion more in their cloud stuff every quarter for the next 8 years with that kind of cash, and I'd hope they'd be able to get 10X out of it relative to what they may get from Red Hat in that time frame. Maybe they just aren't capable of doing that kind of thing(if not then that is sad too).

If I was an IBM customer especially looking to use their cloud stuff I'd certainly be more impressed with an 8 year big investment push for their cloud stuff than a one off purchase of a services company whose software is all pretty much open source anyway. Everything I have seen claims IBM's cloud abilities are distant from the big guys. I can't imagine how Red hat can change that, with their software readily available to IBM this whole time.

I haven't been a Red Hat customer in 13 years (though used CentOS more recently than that, last time I used it was about 2010). I could see Red hat being bought for $5B or something, but $30+ ? Just insane, such a wasted opportunity. I haven't been a customer of IBM stuff since about 16 years.

Not that HP(who I have used a lot) is a whole lot different. If they had taken that $10B they dumped on fraud Autonomy and put it into mobile/WebOS that could of been something great.

The D in Systemd stands for 'Dammmmit!' A nasty DHCPv6 packet can pwn a vulnerable Linux box

Nate Amsden

Re: Meh

Count me in the camp of who hates systemd(hates it being "forced" on just about every distro, otherwise wouldn't care about it - and yes I am moving my personal servers to Devuan, thought I could go Debian 7->Devuan but turns out that may not work, so I upgraded to Debian 8 a few weeks ago, and will go to Devuan from there in a few weeks, upgraded one Debian 8 to Devuan already 3 more to go -- Debian user since 1998), when reading this article it reminded me of

https://www.theregister.co.uk/2017/06/29/systemd_pwned_by_dns_query/