amuck-landowner

Search results

  1. kaniini

    Wanted: Iceland VPS, sold by non US/UK company

    "The beast" is slang for the UKUSA intelligence network, as you just mentioned.  It's been slang for the UKUSA intelligence network since the days of the cold war...
  2. kaniini

    Your motd screens

    My MOTD is just the default one for whatever distribution is on the server...
  3. kaniini

    Wanted: Iceland VPS, sold by non US/UK company

    You do realize they call the beast, the "five eyes" right?  You only mentioned two of them.
  4. kaniini

    why manually approving reverse dns is a good idea

    We care about IRC usage that may be problematic (children picking fights with other children).  The attitude portrayed in, "that.stupid.bitch.got.0wned.us" for example, does not reflect the attitude of our target audience.  You see: people with that attitude, tend to attract DDoS attacks by...
  5. kaniini

    Why Mac is the best OS

    Yeah!  Alpine totally ships GNU software along with the Linux kern... oh wait, no it doesn't (at least, not by default).  :rolleyes:
  6. kaniini

    Securing DNS Lookups via Encrypted DNS - DNSCrypt

    Curve25519 + Salsa20/16 (as used by DNSCurve and DNSCrypt) is a pretty tough cryptographic stack to break, and it's not hardware accelerated, so would be reasonably difficult for the NSA to crack in realtime.  I'm pretty sure the NarusInsight boxes don't support it. That said, ECC cryptography...
  7. kaniini

    Goodbye Lavabit

    The challenge is to find a way to resist a FISA court order while acting in the confines of the law. If you believe FISA court gag orders to be unconstitutional, and you're willing to fight for that viewpoint, then ignore them.  I certainly do and have lawyers which will back that view.  This...
  8. kaniini

    Goodbye Lavabit

    The only way to stop this is to actively resist FISA orders.  That is a dangerous proposition, with the possibility that you will die, as you are challenging the world's largest intelligence apparatus.  For many people, that is too risky of a position to take. But, it is what is necessary. ...
  9. kaniini

    XFPs for Juniper MX routers

    Out of curiosity, out of the providers operating their own routers with XFPs, where are you getting your XFPs from?
  10. kaniini

    [US, UK] TortoiseLabs vServer - 512MB RAM / 30GB DISK / 1000MBPS - $6.75/month

    We have significantly expanded our capacity in LA and London recently.
  11. kaniini

    [US, UK] TortoiseLabs vServer - 512MB RAM / 30GB DISK / 1000MBPS - $6.75/month

    Greetings! TortoiseLabs is pleased to offer our vServer services to vpsBoard's readers.  Our services, are of course, managed using a homegrown, mostly open-source platform we call Cloudware. Service at a Glance Locations: Los Angeles, Miami, Dallas, Chicago, and London! Services allowed: any...
  12. kaniini

    why manually approving reverse dns is a good idea

    On the contrary, rDNS requests are a good indicator of whether or not I want to do business with someone.  If you don't like that rDNS requests are processed by a human, then you're not required to do business with us.  And, frankly, someone requesting rDNS on multiple IPv4's just for IRC vanity...
  13. kaniini

    BREACH Compression Attack Steals HTTPS Secrets in Under 30 Seconds

    Actually, this is not a huge deal.  It certainly isn't SSL "gone in 30 seconds", it is only a real-world attack against some specific types of headers and data sequences that are already somewhat predictable.
  14. kaniini

    why manually approving reverse dns is a good idea

    We have basic techs that basically sit around doing this sort of thing all day, and escalating anything suspicious to me.  It works fine.  The overhead is worth it.
  15. kaniini

    Android Folks

    I presently run CM 10.1 on my S3.  It works pretty well. The default Samsung firmware is awful.
  16. kaniini

    Two-Factor Authentication

    I think the fact that WHMCS charges $1.50/month for a security feature that ultimately took them, at most, 15 minutes to integrate is deplorable. I can see charging extra for using, for example, Yubikeys.  It makes one question the priorities at WHMCS.
  17. kaniini

    why manually approving reverse dns is a good idea

    We have other things in place to stop them as well, obviously, such as using sFlow to monitor current network traffic.  Too many hits to port 25 outbound triggers an alarm for us to investigate.
  18. kaniini

    why manually approving reverse dns is a good idea

    Earlier today, we got a ticket from a customer requesting a reverse DNS being set. We checked the domain name associated with the RDNS and saw that it was registered with fake information. We then checked the forward record, and noticed an MX record pointing back to the same forward record...
  19. kaniini

    Home security systems?

    Well, I do not have a security system, and this would be my approach living in, say, Norway, for example, as well.  While European countries do a better job at intervening prior to people choosing to participate in criminal behaviour, there is still a risk that you will have some crazy person...
  20. kaniini

    KVM - lower Disk IO in VM than on Host itself. Why?

    Actually, if you are using a typical hardware RAID card, you should use 'noop', not deadline.  The RAID card does it's own request reordering.  VMs should always use noop.
Top
amuck-landowner