jerry ,
@jerry@infosec.exchange avatar

Looks like I’ll be upgrading Infosec.exchange and Infosec.space at 1500UTC on Thursday to fix a security vulnerability. It may not involve any downtime but we’ll see

computerywar ,
@computerywar@infosec.exchange avatar

@jerry And here you were getting some blissful time away from the on-call shenanigans of your previous gig :/

gary_alderson ,
@gary_alderson@infosec.exchange avatar

@jerry a load balanced cluster would avoid this issue - for small biz it is very attainable and desirable, the issue for your situation comes down to bandwidth. If you had physical access to your machines you would have more reliability and security ostensibly - power outages may be the exception even with a few ups. Power for dc is more reliable and they probably have multi homing/peering agreements so the bandwidth is more reliable and you probably do save quite a bit on elec costs too. Overall serving up from a business or home is getting there and can afford some advantages like no downtime in theory - five nines is tough to achieve anywhere. what are your thoughts on this for smb sector - they may want to have both, maybe you could you talk about some of these issues and total costs at some point in the future to pwn#pivot tables

compuguy ,
@compuguy@istoleyour.pw avatar

@jerry The sshd vulnerability? Fun times.....

jerry OP ,
@jerry@infosec.exchange avatar

@compuguy it’s a critical mastodon vulnerability that will have a patch released at 1500 UTC on Thursday

compuguy ,
@compuguy@istoleyour.pw avatar

@jerry Yep, just saw @MastodonEngineering's post. Guess I'll have to update on Thursday as well...

idmcissp ,
@idmcissp@infosec.exchange avatar

@jerry Loved hearing your thoughts on the Crying Out Cloud podcast about the different approaches to patching (immediate disclosure vs scheduled patching veiled in secrecy). The host mentioned that another guest came armed with data on which approach is better. Did she share with you more details? I'd love to know more what the data says which approach is better.

jerry OP ,
@jerry@infosec.exchange avatar

@idmcissp thanks. I don’t think I ever saw additional data from them. I think all the approaches have issues. I like this one because it’s a bunch of volunteers, rather than employees, who need to schedule their time around the release.

screaminggoat ,
@screaminggoat@infosec.exchange avatar

@jerry nooo my timely and actionable goat information!

jerry OP ,
@jerry@infosec.exchange avatar

@screaminggoat

may not involve any downtime

Imma try for no downtime just for you

cR0w ,
@cR0w@infosec.exchange avatar

@jerry @screaminggoat The goats must flow.

screaminggoat ,
@screaminggoat@infosec.exchange avatar

@jerry infosec.exchange can have a little downtime, as a treat. 😊

zero day intensifies

fbarton ,
@fbarton@infosec.exchange avatar

@jerry @screaminggoat I see how this goes...
the goats get no downtime... but for little old me sitting here, goatless, I get all the downtime?

😄

jerry OP ,
@jerry@infosec.exchange avatar

@fbarton @screaminggoat I mean, you can buy a goat…

fbarton ,
@fbarton@infosec.exchange avatar

@jerry @screaminggoat as much fun as that sounds... I think I'd rather keep my wife around (or better phrased: have her keep me around)

it would however mean less mowing of the lawn, right?

jerry OP ,
@jerry@infosec.exchange avatar

@fbarton @screaminggoat one of the adjacent county governments hires flocks of goats to mow overgrown lots. It apparently works

fbarton ,
@fbarton@infosec.exchange avatar

@jerry @screaminggoat Would renting a goat get me the same benefits?

screaminggoat ,
@screaminggoat@infosec.exchange avatar

@fbarton @jerry https://www.hiregoats.com/

HireGoats.com is a worldwide directory of companies using goats for vegetation management, often known as “targeted grazing,” “goat rental,” or “goatscaping.”

jerry OP ,
@jerry@infosec.exchange avatar

@screaminggoat @fbarton

goatscaping

😂😂😂😂 🐐

cR0w ,
@cR0w@infosec.exchange avatar

@jerry @screaminggoat @fbarton When I worked for a water district, we used goats to effectively clear easements in areas with heavy blackberry overgrowth. Cheaper, quieter, and less emissions than hiring a person with equipment. And the neighbors liked watching them.

kb6nzv ,
@kb6nzv@infosec.exchange avatar

@jerry @fbarton @screaminggoat
GaaS - Goats as a Service.
Includes SLA for maximum goating.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • random
  • test
  • worldmews
  • mews
  • All magazines