Uh - I think you mean - use MFA where you can - the password manager is not directly accessible without (typically) a MFA login itself, and then it protects individual credentials so there are no credentials shared with any online account.

The problem that password managers help / solve is password portability between platforms, so that for instances - you have access to the same vault on windows, mac, linux, android, ios.

Not to argue the point of MFA - that's 100% accurate, but rotating your password, having unique passwords, and having mfa protection of the vault are the big benefits of 1Password / Bitwarden ; Can't really consider LastPass in this category because of how awful their breach responses have been.

Your low uid comments made me laugh ;) It's both a blessing and curse - get off your ass and lay down that low uid knowledge.

Proxmox is based on debian; as long as you don't mind relatively stable featureset - you will be pleased. Promox is not an enterprise replacement for vmware, as it doesn't have all of the concepts of scaled capacity pooling and antiaffinity (yet); but for a home lab setup - you can easily run up to a hundred smallish vms on a 4-5 node cluster and be pleased. It's a great dev / test environment, and can do prod to some defintion of scale. The more you can build from bare metal up, the better you can scale (within storage limits)

It's an excellent support community; and will benefit from Broadcom shutting out folks.

This is clearly a case of real-world recovery not matching test scenarios or results.

Things stand out:

How to recover if the phones are down due to volume?
What channels are the most important (out-of-band, crew, customer), how are they protected and isolated from impacting each other?
What should the crew / customer do in the event the website or call center is non-operational?

They have the classic, call customer service line, when there is no way their customer service is scaled to this level of volume and impact. They never tested and agreed that this was an acceptable level - this is in the "1000 year storm" category - and this is in no way that tough.

Some ideas

1) Baggage tracking / tracing via online form entry (so 2000s)
2) MORE interfaces / tools for rebooking, call-center, web + open api + social media interfaces
3) automated workflow via web / app for out-of-band, crew, and customer tools

Southwest isn't the little kid anymore - they have customers depending on them, so thin as to potentially breach your customers trust in your operational integrity is a huge disservice to your company and staff.

The dude that runs this project is a douche. Don't support it. I attempted to build his stuff from scratch to see if it's even possible . Build scripts were poorly documented, and I knew after I had downloaded like 8GB of source that something was fishy.

It may work for you - but this guy does very little to help openwrt.

Please use openwrt - or x-wrt.

--Adrian

Use xbmc - it's an excellent HTPC with a 10 foot user interface and a TON of content available. Plays pictures, movies and music, and has the best plug-in in the world (IMO)

NaviX - Internet content automagic / site scraper

http://www.xbmc.org

Get yourself a teeny atom/nvidia ion box (acer revo/zotac )

take a look at S3 or jungledisk and see if you can somehow have that make sense. Mozy might not be a bad idea either. The big tradeoff is

1) limited SLAs (privacy / latency / bandwidth) for getting to your data; once you host with a provider and accept their physical / logical storage footprint - you are constrained to living in their hosting model
vs
2) providing quick access to your dataset b/c you have special sauce

The timing / requirements to get back to the data are the things that should drive your behavior. It might make sense to turn the data over to the customer - so when they need you to work on it- they provide it back.

I think you might be looking at this all wrong - why not redo the analysis and charge for the whole thing again? (According to the RIAA/MPAA isn't that what should happen when we scratch our movies or music?)

--Adrian

http://www.clownix.net

I did a write-up on this product in the beginning of this month - can run quagga routers in the UML image of your choice - wrote / ran a 12 router lab that ran on a p4 with 512MB / RAM. (http://www.vlcg.net/content/cloonix-clownix-rocks)

If this product was used - you would only be able to functionally test the protocols in a particular topology - wouldn't be cisco, and it wouldn't be the same as production (different protocols, different topologies).

I discovered this trying to figure out a way to run quagga in a gns3-like setup. GNS3 is great for testing a specific cisco thing that you need to learn about - but it didn't do well for me beyond 3 routers - (too much hand-holding getting the environment tweaked).

My ultimate vision for quagga would be to run it on the hypervisor and let it scale (in numbers of routing instances) wrt to the number of hypervisors - it's a pipe dream for now, but I think that routing that can scale with hypervisors is going to be a big challenge for cisco (esp if they try to do it in silicon) -

--Adrian