Comment It would be nice if OpenSSH could query LDAP (Score 1) 212

by mridley on Wednesday December 26, 2012 @06:11PM (#42398621) Attached to: Lax SSH Key Management A "Big Problem"

It would be nice if OpenSSH could query an LDAP server for the sshPublicKey field directly. There's a patch that does it, but as far as I know it's not integrated into the main ssh code base that ships with general Linux distributions. Supporting that and then having people use the SSHFP record with secure DNS would be nice additions to SSH best practices.

Comment Why would Intel be an alternative to Samsung? (Score 1) 246

by mridley on Monday October 22, 2012 @06:52PM (#41734825) Attached to: Apple, ARM, and Intel

I skimmed the source articles and I'm confused as to the premise of this discussion that it makes any sense to move from Samsung to Intel for ARM fabrication. Intel may have some foundry business but I would think if Apple were looking at an alternate foundry they would be considering options like TSMC or UMC, not Intel. Although doing some Googling to check my facts on this comment since I've been out of the semiconductor world for a long time does reveal that apparently Apple did consider TSMC. But that still leaves plenty of third party foundries.

Comment Re:A week? (Score 1) 1246

by mridley on Wednesday February 18, 2009 @07:13PM (#26909323) Attached to: Student Arrested For Classroom Texting

My school also had those rules regarding carrying a pager being grounds for explusion. While I wasn't thrilled with the rules at the time, I nevertheless followed them. I did actually own a pager my senior year (couldn't afford a cell phone), but I didn't bring it to school.

I found it all kind of ridiculous, but my solution was to graduate 2 years early, not to fuck with the administration. Didn't seem worth the time or energy.

-m

Comment Re:Wines, cheeses, trees (Score 1) 1397

by mridley on Tuesday February 03, 2009 @05:35PM (#26717331) Attached to: Why Do We Name Servers the Way We Do?

A better idea would be to create a duplicate A record, not a CNAME. CNAMEs are really meant for something else.

Although in practice, lots of people do use CNAMEs for the purpose you are suggesting.

-m

Security Flaws In Aussie Net Filter Exposed 182

Posted by ScuttleMonkey on Monday December 22, 2008 @02:19PM from the let-your-government-do-your-thinking-for-you dept.

Faldo writes "There's a three-part interview with a computer security expert on BanThisURL that goes into the flaws in the Aussie net filtering scheme. In addition to SSH tunnels and proxies, more worrying problems like trojaning the boxes to set up man in the middle attacks (which the interviewee has done in his lab), cross site scripting and the Australian blacklist leaking are all discussed. Worrying and relevant, especially since Thailand's blacklist has just been leaked."

Comment PowerShell and WMI (Score 1) 215

by mridley on Tuesday November 04, 2008 @06:59PM (#25634213) Attached to: Low-Bandwidth, Truly Remote Management?

I am more of a UNIX admin so I don't claim to be an expert on remote Windows management, but I believe the tool you're looking for is Microsoft PowerShell which allows remote WMI scripting. I've seen some pretty impressive demos of infrastructure automation using WMI and PowerShell.

For power cycling and the like, I'd go with the hardware remote management tools (iLo, DRAC, and the like).

A quick Google turned up a few Microsoft articles on PowerShell and WMI. (Article 1, Article 2)