← Feed

Posts

• View post

  So… we’ve been using a beeper to train Charles to stop madly barking at the neighbour. He barks, we activate the beeper, he stops. Hoping that he’ll eventually get the idea that he shouldn’t bark at the neighbour, though we may be more hopeful than we should be. The thing we didn’t consider was #corgi #spite. Ultra-powerful corgi spite. I hit the beeper, he stopped barking, and then promptly turned around to roll in a particularly pungent pile of vermin spoor. Sigh. Bath time. I should have kn...

• View post

  Engaged in a #Windows vs #MacOS vs #Linux discussion the other day that (for once) didn’t devolve into a fan-driven religious war. It got me thinking that the three things that drive our choices are value, consistency, and ecosystem. (I’m sure that there are more. Feel free to weigh in.) In the spirit of RFC 1925 7a (and Meat Loaf) two out of three are usually enough, but we’ll always want it all. Windows and MacOS are pretty good at delivering on two or more, but now I’m wondering if Linux’ lac...

• View post

  Why is it that the folks responsible for deploying physical #security tend to be completely oblivious when it comes to #InfoSec? “We’ve installed all of these cameras and want you to forward these ports from the Internet now.” #HowAboutNo

• View post

  One of these days, I'm going to actually internalize the idea that writing #documentation •as• I do something is far more efficient than going back and figuring out what I did when I'm finished.

• View post

  Just helped a customer configure out a high-density #server configuration with 30TB #drives. Suddenly the 500GB ones in my servers in the office seem sub-par.

• View post

  Maybe I’m just a dinosaur. I’m still of the opinion that products and services that help us do things with no requirement for us to understand what we’re doing are ultimately serving us poorly. Yes, #AI can be an example of this, but that’s not alone, nor is it where it all started. Vendors have been pushing products that claim to minimise the need for basic technical skills for years and we’ve bought into it because we would rather invest in technology than our people… or ourselves.

• View post

  For anyone interested in my “Scalable and Secure Self-Serve RouterOS Remote Management” presentation at the MikroTik Professionals Conference in Prague, the slide deck, #Docker, and #ContainerLab files can be found here. https://github.com/ghostinthenet/l2vpnLab #MTPC #NetEng

• View post

  I think I’ve been in this industry for too long. I searched for a synopsis this morning and accidentally typed “synoptics” instead. Last week I was teaching the NATO phonetic alphabet and taught “unicorn” instead of “uniform.” #NetEng #SiliconValley

• View post

  Cloud services, data security risk, and limitation of liability clauses are a bit of a perfect storm. Too many of us use the services because they’re accessible, but we’re often blindly trusting that they will (or can - see CLOUD/NSL considerations) keep our data secure, and don’t consider that we have little to no recourse when they don’t. As always, #security and #sovereignty hold no priority over convenience… until it’s too late. #InfoSec

• View post

  We have dozens of relatively simple methods to secure Internet traffic, but we’re often reduced to “just open access through your firewalls from this huge list of source addresses” because too many folks can’t be arsed to do any of those. Keeping it simple is •not• about moving the complexity into the customer’s realm of responsibility. #NetEng #InfoSec

• View post

  Auditor: Can you send a screenshot of the access VPN timeouts so we can demonstrate policy compliance? Me: (Sends relevant portions of the configuration.) Them: This is a text file. We need a screenshot. Me: (Sends screenshot of my terminal session showing the relevant portions of the configuration.) #InfoSec #NetEng #MaliciousCompliance

• View post

  Wow. Fifteen years since I became a founding member of the #FNS. Great experiences, great people, dubious networking. https://flatnetworksociety.com/ #NetEng

• View post

  Perhaps you’re wondering why I’ve called this meeting. #Corgi #CorgiLife #CorgisOfMastodon #DogsOfMastodon #FediCorgs

• View post

  Something to consider about all of the efforts to sustain #IPv4 so far beyond its original shelf life. #NAT and #IPv6 were thought out at roughly the same time. NAT was a tactical move to stave off IPv4 exhaustion (at the cost of limiting the peer-to-peer nature of the Internet) and IPv6 was the strategic answer for scalable growth. The obsession human beings have to find any excuse to avoid change was highly underestimated. IPv6 took 22 years to become an Internet Standard and NAT became so ent...

• View post

  Hedgehog's tie to Kubernetes potentially allows a cloud-as-abstraction approach to an organization's networks. It's a lot to wrap one's head around, but it has potential. #NFD38