@DustinB3403 said in Using Google Authenticator to Set Up Two Factor Authentication for Linux:

This at all doesn't seem like a bad thing, especially if you're doing this on your own personal systems. Doing this in an organization seems like a crazy step to implement.

Also what happens if you're phone dies, how do you update the authentication device?

There is a hidden file in the root account with the one time use codes and the key for the app. Local console access doesn't require 2FA, only SSH.

If you set it up in PAM correctly that is, I didn't read through this guide. I did one a while ago on here with steps for everything, and doing it that way only requires 2FA codes with SSH, not local console access.

@aaron said in Backblaze latest publicly released numbers.:

@travisdh1 said in Backblaze latest publicly released numbers.:

@Dashrender Yep, exactly.

I kinda wish they'd just use pure erasure coding instead of layering it on top of RAID6 arrays. I mean, if you're doing erasure coding correctly, wouldn't an additional RAID array be additional complexity that's not needed?

Quoted from the linked article:

Note: Our stand-alone Storage Pods use RAID-6, our Backblaze Vaults use our own open-sourced implementation of Reed-Solomon erasure coding instead.

Disclaimer: I'm a Backblaze sysadmin, blah, blah, etc, etc 🙂

I missed that bit. Much better than what I thought.

@Dashrender said in Why You Need to Fear the Oracle vs Google Case:

@DustinB3403 said in Why You Need to Fear the Oracle vs Google Case:

@Dashrender But the lawyers who are bringing this case, will do everything in their power to not allow programmers into the jury. They'll say "Thank you, you're free to go"

They wouldn't allow an educated in the subject matter person be on the jury as it ruins their chances of winning the suit.

I understand that's how it works today - but I can't imagine, and Scott's already comment that it (I think) wasn't intended that way, that it was intended that way by our forefathers.

Right, the terminology of "peers" has been misused. It's not juries of our peers in nearly any cases.

@MattSpeller said in Tiny One Dollar Brazilian Hacker Board Project Announced:

@scottalanmiller said in Tiny One Dollar Brazilian Hacker Board Project Announced:

@MattSpeller said in Tiny One Dollar Brazilian Hacker Board Project Announced:

@scottalanmiller @tonyshowoff

I'd have to run the numbers to be absolutely sure but I suspect the "true cost" of that board is $0.75USD (max) as you see it in the pic above.

You mean including the $.74 proc?

I'm sceptical they'd cost that much in quantity but if you have a source that says otherwise I'll believe ya

I just saw that the proc was quoted at that price and the board could only be a few cents beyond that, tops. The board without any chips on it is SO cheap.

I'm currently finding myself in a bad situation. A customer has Outlook 2013 and is connecting via IMAP to RackSpace email (non Exchange). After their recent upgrade to Windows 10, they discovered that IMAP wasn't syncing things correctly back to RackSpace. They lost all of their sent mail and several people lost random stuff from within folders. It's a very bizarre situation.

They are looking to leave RackSpace now and move to Hosted Exchange/O365.

Remember, the issue is NOT a violation of the ZFS licensing, it is a violation (supposedly) of the Linux licensing. It is Linux being violated, not ZFS according to the FSF.

@Dashrender said in Windows 10 Build 14342:

@BBigford said in Windows 10 Build 14342:

I use a variety of boot tools to check hardware (mostly all found on HBCD). Definitely not going to sign them on every incoming PC. I usually just disable SB. 🙂

This is a personal choice - how secure do you want your environment to be? Hiren could definitely sign his CDs and make them compliant with Secure Boot, I'm guessing he just doesn't have people requesting it, and doesn't see the value to cost as worthwhile.

Just start here.

Then read about how pointless it really is.

I mean, it can't be that bad, right? You can't need a different signing key for every kernel and kernel module! Try again.

Yeah, with the latest Asus no-more-boot thanks to a windows update bug, not even Microsoft can stay compliant with their own system.

I could go on and on with reference pages.

@jospoortvliet said in ownCloud 9.0.2 Released:

On 9.x, things should be good.

Just checked, no change. When was a fix pushed out?

On a different note, we now have Ubuntu 16.04 packages in testing for the client and stable for the server 😉

Who knows, everyone is pretty confused by this one.

Oh, nice. I had heard that it was horribly hot. @Katie got there last night and said that it felt like she was still home in Florida. That explains why the traffic was really high last night but dropped off this morning instead of dropping off when the event started 🙂

We are the opposite here, we've been in a rain storm for five days now.

@scottalanmiller said in PBS Digital: Should Everything be Open Source?:

@Dashrender said in PBS Digital: Should Everything be Open Source?:

@coliver said in PBS Digital: Should Everything be Open Source?:

Wait... wasn't the tractor thing a metaphor?

To me the tractor is about anything huge in a business.

A great example would be an EHR - it's massive and hugely painful to move from one system to another. Assuming you don't go with cloud solution, instead go with a hosted or self hosted solution, you could find yourselves in a position to have have programmers make changes for you. The same goes for anything really though.

This is true. Tractors aren't a metaphor though, they are a key example.

Such a good word to use though, ha ha.

One other thing @Minion-Queen, I push this so hard because @scottalanmiller continually is making all of these excuses about performance or platform, or whatever. Yet even the NodeBB developers themselves run everything with SSL, and have for quite some time.

Your users ask for it. The developers of the NodeBB run SSL for the main community. Clouflare supports websockets via SSL. Prior to CoudFlare supporting websockets, there was the choice to use a subdomain on its own SSL for websockets while the rest of the site was behind CloudFlare Start SSL is free and has been even when this community was started. Let's Encrypt now exists and is also free. Google has given search boost to SSL sites for 2 years Claims of performance issues are not substantiated to more than milliseconds based on research. Your users ask for it.

You know the one thing I have never actually seen posted even one time?

A user specifically asking that SSL be not enabled.

Sure many people have posted that they do not care. Or that they do not see the point in SSL on a public forum. But none of that is objection.

the OpenWRT project has been around for a long time, I even used it for a bit on an older router of mine.

I was very upset with the poor / old documentation around there and quickly dropped it. Maybe this will help to fix those issues. Hopefully the project won't up and vanish.

With renewed vigor they might pull this back around.

I hope for the best.