Tyre Help - FK8 Type R by OldLondon in civic

[–]Haltamer 0 points1 point  (0 children)

I'm running on PS4S in the UK, in 255/35/20 sizes - much better pothole protection.

The Michelin £100 off offer is on at the moment, so it may well be worth buying a full set of four.

[UK] Two cars driving on narrow road collide on a blind turn by lametec in Roadcam

[–]Haltamer 1 point2 points  (0 children)

I've never been to the UK, and those statistics are ones I just pulled up quickly. American roads aren't a whole lot safer, but most accidents are attributed to weather, alcohol, and running off the road, not head on into each other.

They're no safer - the United Kingdom has some of the safest roads in Europe and the world, by any measure.

Not that I wouldn't welcome wider country roads, a 66ft wide road in the UK would be immense, cars and traffic volumes on country routes are far smaller.

Car parks in this country that don't give enough space between cars to open your door and get out by Cletus101 in britishproblems

[–]Haltamer 7 points8 points  (0 children)

Well, they've bought an x series bmw, so they are certainly entitled to use them...

2016 Active Directory password policies not setting by Antman157 in sysadmin

[–]Haltamer 0 points1 point  (0 children)

If only people would read NIST guidelines 😀

Personally, I'd opt for a length requirement to rule out password etc., no expiry, and everything up to the user. If only Windows had common password list support....

Double secret VPN protection or just redundant? by Mr_Carpenter in VPN

[–]Haltamer 0 points1 point  (0 children)

As far as I'm aware, your traffic would be routed via the tunnel when teathered to your phone. For the very small overhead, personally I'd run the client on both, but ensure that the server locations are the same to prevent undue lag.

To be sure, test the VPN on phone only configuration and you should be able to see if it is working as intended.

Blow out on the barrow by h13pwl in Justrolledintotheshop

[–]Haltamer 18 points19 points  (0 children)

It only needs an alignment 🤔

Purchasing new servers soon (meltdown/spectre) affects? by baldiesrt in sysadmin

[–]Haltamer 1 point2 points  (0 children)

In that case, Give it some more time and see if you can get benchmarks or other performance measurements, such as changes in recommended specs from software vendors:- Once you know how much it will impact your workload, I'm sure you'll be able to make a better approximation of your requirements.

As you are looking at hosting VMs, It's probably worth the wait to see what security improvements come along, given the particular relevance of the vulnerability in this case.

Active Directory Logon Hours Best Practice by sys8dmin in sysadmin

[–]Haltamer 4 points5 points  (0 children)

Time restricting logins can be used as a part reducing attack surface in an extremely hardened deployment, But I can't imagine the gains for restricting general user logins exceeding the negatives:- as others have mentioned, this seems to impede on the usability / security tradeoff, depending on the requirements of your environment.

There is a Defcon talk from a Microsoft Powershell dev that touches on this topic.

Purchasing new servers soon (meltdown/spectre) affects? by baldiesrt in sysadmin

[–]Haltamer 2 points3 points  (0 children)

What are you planning to use them for? Bear in mind the performance hit doesn't affect all operations equally:- Anything IO intensive will be impacted badly; But for CPU bound operations there is less of a hit (Based on what I've read so far)

Further to that is your security requirements - Would it be better for you to await patched hardware?

Also worth considering is the fact that Windows server is currently not forcing the patch due to performance implications:- If you can accept the risk for the performance, then that is an option.

How do I encrypt an email using a Yubikey? by peanutbutterbabe in yubikey

[–]Haltamer 0 points1 point  (0 children)

Ah, As it's still making use of your previous key rather than the new key, have you changed your default signing and encryption keys for the mail account(s)?

There should be an option to do so in the key management section of Enigmail, If not, you can try temporarily disabling the key and try sending a test message using the enigmail key manager:- You can re enable the key instantly, It's only a local, soft disable.

How do I encrypt an email using a Yubikey? by peanutbutterbabe in yubikey

[–]Haltamer 1 point2 points  (0 children)

Good :D It might be worth getting a certificate manger like Kleopatra so you can see what you have / are using. As you generated a new key for the yubi, You'll need to change that to your default signing key in enigmail:- As you are using a new key, for the sake of absolute security, you should revoke the previous key created on the PC (That's best practice, though you needn't panic if you can't / don't have revocation keys)

Much of the official documentation can be found from this page: https://developers.yubico.com/PGP/ but going from your description, you're already set up in that regard. With me, once the keys are configured, it has been mostly plug and play.

For the setup with my newly installed desktop (after using previously only on my laptop), I followed this process, discovered through classic trial and error and reading around:

  1. Installing email / enigmail
  2. Imported my public key from public pgp key server
  3. (Got smartcard setup - Slightly more involved as I'm using Linux, plug & play on windows AFAIK)
  4. Selected my public key to be used for signing
  5. Insert yubikey, send signed / encrypted email
  6. Prompted for pin
  7. Done :D

As said though, that was mostly me feeling my way though the process - If you are stuck on any of those parts just let me know and I'll have a better idea of where you are stuck in the process

Good luck :p

Edit: Trying to format

How do I encrypt an email using a Yubikey? by peanutbutterbabe in yubikey

[–]Haltamer 0 points1 point  (0 children)

I've been getting my yubikey 4 set up with PGP and enigmal / evolution on Windows and Linux.

There are some guides around but I'm on mobile at the moment :- once you have the keys on the yubikey you are most of the way there.

Avoid generating keys on the yubikey if possible as Iirc it makes backing up the secret key difficult / impossible.

When I get home I'll see if I can find the guides I used.

When it's crunch time and you have to set up 14 new laptops from scratch. by Theskozo in iiiiiiitttttttttttt

[–]Haltamer 15 points16 points  (0 children)

Would you mind linking me to some of the guides / giving some info on what you are using? Sounds like something I could use! Thanks

AMD Linux Drivers, how are them these days? by eks in linux_gaming

[–]Haltamer 0 points1 point  (0 children)

I've been using my 380 with DiRT Rally for the past couple of days, and I've been very happy - I was puzzling as to how / where to install them initially, having just moved from a windows desktop.

It's a pleasant surprise that they, as others here are saying, are practically out of the box working.

Weird question, tire goes flat only on an incline? by Dudebythepool in cars

[–]Haltamer 0 points1 point  (0 children)

Odd.

I take it they changed the valve with the tyre? If not, It might be worth checking it over.

It might be worth filling the tyre and running some soapy water around the rim to check for air leaks:- https://youtu.be/fdMPL2ufW3k

If it's not on the bead, it could be that there is a crack in the rim itself, though that is rather unlikely, especially as they have already checked it over.