• 0 Posts
  • 13 Comments
Joined 1 year ago
cake
Cake day: July 1st, 2023

help-circle




  • The messaging around this so far doesn’t lead me to want to follow the fork on production. As a sysadmin I’m not rushing out to swap my reverse proxy.

    The problem is I’m speculating but it seems like the developer was only continuing to develop under condition that they continued control over the nginx decision making.

    So currently it looks like from a user of nginx, the cve registration is protecting me with open communication. From a security aspect, a security researcher probably needs that cve to count as a bug bounty.

    From the developers perspective, f5 broke the pact of decision control being with the developer. But for me, I would rather it be registered and I’m informed even if I know my configuration doesn’t use it.

    Again, assuming a lot here. But I agree with f5. That feature even beta could be in a dev or test environment. That’s enough reason to know.

    Edit:Long term, I don’t know where I’ll land. Personally I’d rather be with the developer, except I need to trust that the solution is open not in source, but in communication. It’s a weird situation.



  • Internode was bought by TPG a long while ago and many of the original founding team started Aussie broadband with similar ideals. They’ll end up selling that to TPG too probably, but right now they’re ok and they have partnered with optus for cellular tower coverage.

    By the way if you want to make informed decisions about cell tower coverage, there’s an app called “aus phone tower” by bit bot software which gives you exact cellular tower information. Use that to figure out coverage before you choose a mobile provider network.





  • I’m just going to give you props. I have worked in Managed IT Services for a dozen years and some of the worst clients are construction, engineering and architects who use solidworks, autodesk and archicad products.

    You’ve eaten humble pie and admitted that using computers as a tool, and systems design are different and though you might understand a lot, just like I can build a 3d model, the devil is in the detail.

    Building robust solutions that meet your business continuity plans, disaster recovery plans, secure your data for cyber risk and to meet ISO and yet are still somehow usable in a workflow for end users is not something you just pick up as a hobby and implement.

    The way I handle technology Lifecycle is in 5 steps: strategy, plan, implement, support, maintain. Each part has distinct requirements and considerations. It’s all well and good to implement something but you need to get support when it goes wrong or misbehaves. You need to monitor and report for backups, patching, system alerts. Lots of people might do the implement, but consider the Lifecycle of the solution.

    People do these things at home but they’re home labbing, they’re labs. Production requires more.

    Anyway a bunch of people closer to your part of the world will probably help you out here.

    I just want to again recognise and compliment you on realising and openly saying you want help rather than just do the usual “oh I know best” that I hear over and over usually just before someone gets ransomed on their never patched log4j using openssl heartbleed publicly exposed server infrastructure.



  • Well I mean, due to the separation of powers, the high court are separate from the parliament and the politicians. Just for the exact case of being able to decide against what a parliament had chosen. In this case you’re still disagreeing with the governnent decision to indefinitely hold illegal immigrants, who in this case are legitimate asylum seekers, even while agreeing with the judicial process applying the constitution to that parliamentry decision.

    Hope that helps reconcile your feelings since you can rest assured your still disagreeing with part of the government.

    Actually I’m not sure which part you agree or disagree with. The decision that it’s unlawful to indefinitely detain them is pretty trivial. Basically not much changed.

    Ms O’Neil said the government aimed to have legislation passed to re-detain the cohort by the last day of sitting, currently scheduled as December 7.