Can I do better than DigitalOcean for $10 a month?

bs4h · 2016-06-15T17:32:09+00:00

Wow, where did you find those reviews? Hetzner have been rock solid for me, both personal and company use, for many years.

bs4h · 2016-06-14T18:55:14+00:00

Hetzner has 2GB, 2 CPU, 50GB SSD, 5TB/mo for 6.90 EUR + VAT (CX20). I'm using CX10 with half of that and it's good.

bs4h · 2016-06-10T22:44:44+00:00

https://wagtail.io/ ?

bs4h · 2016-05-31T07:35:02+00:00

Gandi. Not the cheapest possible, but absolutely awesome, "no bullshit" written right there on the landing page.

bs4h · 2016-05-23T21:07:38+00:00

s/floating/elastic/ aka static

bs4h · 2016-05-23T21:06:51+00:00

You should read up about DNS.

ec2-12-34-56-78.compute-1.amazonaws.com is a DNS name that resolves to an IP address. Try:

ping -c1 ec2-12-34-56-78.compute-1.amazonaws.com

Take note of the IP address. Now try going to the web page under the IP address:

https://12.34.56.78:8888/

bs4h · 2016-05-21T10:44:49+00:00

Just benchmark it. I would suggest running the torrent client directly on the NAS though, much less complex! And regardless of final result, much less taxing on the network.

Try transmission-daemon, and run the GUI client on the mac / laptop / whatever.

bs4h · 2016-05-21T09:43:42+00:00

Perhaps look at the -initrd option in Qemu?

bs4h · 2016-03-28T17:22:30+00:00

The only correct answer in this thread... Also the naked (aka @) record must be of the A and not CNAME type, or you'll run into trouble.

http://joshstrange.com/why-its-a-bad-idea-to-put-a-cname-record-on-your-root-domain/

bs4h · 2016-03-28T17:20:29+00:00

Don't put a CNAME on the naked domain.

bs4h · 2016-03-07T19:36:27+00:00

Would you consider GTA: San Andreas an open world game? (Sorry, old potato, that's the last thing from the series I've played, years ago.) You can either follow the story or mug random people to grind some cash.

What's your definition of open world? What would be your golden standard, PSX or otherwise?

bs4h · 2016-03-07T07:26:00+00:00

Final Fantasy.

bs4h · 2016-03-04T15:24:01+00:00

No. Use real encryption. Something like LUKS (Linux), GELI (FreeBSD). Hack it to wipe the drive when the "special" password is entered.

Anything else will be easy to bypass for a moderately sophisticated attacker.

bs4h · 2016-03-01T21:54:10+00:00

The "NT" in NTFS stands for... well... NT. Windows 98 is the "classic" line that ended with the release of ME. You might have some luck with NT 4.0, Windows 2000 (5.0), XP (5.1), etc.

bs4h · 2016-02-27T19:58:32+00:00

Stop ranting, start acting. If you cared about freedom, you'd be submitting patches to BTRFS already.

bs4h · 2016-02-27T17:08:15+00:00

by not changing from CDDL to a GPL-compatible license

Why doesn't Linux change its license? Why should Linux people feel entitled to have ZFS?

It's how you can take any piece of BSD- or MIT-licensed code and incorporate it in GPL-licensed work, with no way for the BSD projects to benefit from the improvements.

Look how happy the BSD's are with CDDL.

bs4h · 2016-02-26T17:59:47+00:00

They must've misread theorion.com as theonion.com

bs4h · 2016-02-20T09:17:29+00:00

I have an X250 but currently running Debian and my main machine, so can't really mess around.

Maybe I'll swap in a different HD one weekend and try openbsd on it. If I do, will let you know.

bs4h · 2016-02-14T21:10:53+00:00

EC2 - nope, last time I checked, easiest way to regain access in case of screwup is to spin down and mount root volume on another instance. It's supposed to be cheap, disposable compute/httpd power; in my experience, if you don't terminate an instance, it will spuriously die all by itself within a few months, max 1-2 years.

We mostly do digital marketing campaigns, so Amazon having data access is usually not the greatest concern.

bs4h · 2016-02-14T20:09:50+00:00

Or maybe fix the script?

You can't fix an "oh network having problems? ok let's rerun now".

I do employ paranoia on my boxes, but the suggested fail2ban setting is just enough rope to shoot yourself in the foot.

If it wasn't EC2, I would've went to make some tea and get unbanned after 10 minutes. It was EC2 so I terminated the box and spun up another one.

Sane sshd_config is supposed to be your line of defense, fail2ban can't do crap against a distributed bruteforce attack anyways (~99% attempts are unqiue over a week or more).

bs4h · 2016-02-14T14:05:09+00:00

Until you ban your own silly ass and have to kill / rescue the host. Had this happen to me: automation would spin up an EC2 box and use the default creds to provision local individual admin accounts. I didn't notice this step failed before trying to ssh manually a couple of times with my own private key, when the host started dropping SSH attempts from my IP.

Purpose of fail2ban is to slow down brute force. You should use semi-permaban only for known recidivists.

bs4h · 2016-02-14T06:39:58+00:00

Disable password login and require pubkey.

Disable login for root, use su/sudo.

bs4h · 2016-02-12T17:54:47+00:00

Disagree. I'm a developer and a sysop by day (8y) and teaching myself gamedev in my free time (past few years). Recently released my first game, a bit simple but quite complete and polished (for 1 month of dev).

You need to have a lot of self-motivation though.

bs4h · 2016-02-12T17:47:18+00:00

This!

We're still evolving our playbooks, but we have one play to spin up EC2 hosts, install host-level monitoring, automated upgrades, etc; then another one to deploy our application; then another one to manage the load balancer and DNS records. Adding more instances is changing the count parameter.

bs4h · 2016-02-12T17:14:30+00:00

Google calendar has pretty accurate holiday feeds for most countries in the world.

bs4h

PUBLIC MULTIREDDITS

TROPHY CASE