Forgot your password?

typodupeerror

Comment: Re:Complication of making a distribution (Score 1) 63

by maswan (#41427803) Attached to: XBian's Koenkk Replies To the XBian/RaspBMC Flap

The turbo mode stuff together with the kernel and firmware all come from the same raspberrypi.org repository. Raspbian is really the Debian:y environment around this.

If you want to run Debian, you can do that too (at a performance penalty since you need to use the soft float version, armhf is targeted for a newer version of ARM than is in the Raspberry Pis). You still need the same non-free blobs to do anything graphical etc though.

Comment: Re:Complication of making a distribution (Score 1) 63

by maswan (#41426853) Attached to: XBian's Koenkk Replies To the XBian/RaspBMC Flap

Yes, it is called Raspbian, which is Debian with a recompile for the target and some installer tweaks and hooks for pulling in the necessary non-free stuff from raspberrypi.org which comes from the pi being a closed platform.

Xbian, RaspBMC, etc take Raspbian and then make a custom install based on a package presets and some scripts for automagic setup for those that think Debian is "too complicated". And apparently lots of drama.

Comment: Re:SSH keys? (Score 1) 101

by maswan (#37368942) Attached to: Linux Foundation, Linux.com Sites Down To Fix Security Breach

Well, you'd still need keys on your laptop to get to the server. So now you have two places where your keys can be stolen and used to login everywhere you trust your keys.

For the case where you actually do need direct communication between two servers you probably want to do agent forwarding instead of having more keys in your authorized_keys. Remember that every single entry there is a point of failure, and any one of them getting compromised means that your account is likely to get owned.

Now there are special cases where having more keys is useful, but most of the time they just open up more vectors for someone to steal them and break into other computers.

Of course, even then, they are better than passwords, at least if they have proper passphrases. Not too uncommon to see lots of passphrase-less keys in home directories on multi-user servers though.

Comment: Re:Keep perspective (Score 1) 395

by maswan (#37226288) Attached to: Hurricane Irene Prompts Unprecedented Evacuation of NYC

Back-of-a-napkin simulation, one train every other minute out of each penn and grand central, 5k per train (long trains with people standing), about 24h. So not terrible, but would require both lots of planning, lots of resources (especially enough rolling stock to get people to where is safe and then return empty in time to not have gaps in the schedule), and great execution.

You could probably augment this by using the subway to get people out a bit and then having more places to change, depending a bit on where the bottlenecks are in the rail system. Also depends on how far they need to evacuate, are [some of] the endpoints of metro north good enough?

Highways might help if few enough use them, but the problem there is that capacity goes down significantly once overloaded. But in terms of a mass evacuation, it'd probably be best if the roads were kept reasonably clear for buses and evacuations for the elderly and sick that can't stand upright for an hour or two.

Comment: Re:Just a thought (Score 3, Informative) 406

by maswan (#35881178) Attached to: IPv6 Traffic Remains Minuscule

There is no such requirement!

One of the many possibilities for choosing the local part of the network is using the MAC address of the network interface. There are several other choices available, like choosing one manually or generating a random one (you can in fact generate random ones rather frequently, see "privacy extensions").

Depending on your OS vendor, one of these will be the default behavior, but you don't have to do it that way if you don't like it.

"It's in process": So wrapped up in red tape that the situation is almost hopeless.

Working...