[Discuss] Dan Geer's Blackhat talk, iGuardian enterprise-grade home router

2014-09-12 Thread Tom Metro
Dan Geer, an occasional poster here, apparently gave a talk at Blackhat recently, which was covered on This Week in Enterprise Tech episode #105: http://www.youtube.com/watch?feature=player_detailpagev=YkIFOzAcJI4#t=1530 (His segment begins at offset 25:30.) A point of his talk is that small

Re: [Discuss] Dan Geer's Blackhat talk, iGuardian enterprise-grade home router

2014-09-12 Thread John Abreau
Did the talk mention whether the iGuardian supports IPv6? On Fri, Sep 12, 2014 at 2:01 AM, Tom Metro tmetro+...@gmail.com wrote: Dan Geer, an occasional poster here, apparently gave a talk at Blackhat recently, which was covered on This Week in Enterprise Tech episode #105:

Re: [Discuss] SysVinit vs. systemd

2014-09-12 Thread Edward Ned Harvey (blu)
From: discuss-bounces+blu=nedharvey@blu.org [mailto:discuss- bounces+blu=nedharvey@blu.org] On Behalf Of Rich Braun But upon reflection, I'm not quite sure which one is the terrorist, which one is the defender of liberty, and which one is the neutral bystander: sysV init, upstart,

Re: [Discuss] Dan Geer's Blackhat talk, iGuardian enterprise-grade home router

2014-09-12 Thread Richard Pieri
There are some points made that I don't agree with. Comparing his $150 box to a Juniper IPS that costs ten times as much (or more) is disingenuous. At the very least, his iGuardian isn't an HA solution like the SRX series. His box doesn't include a role-based firewall or central management. I

Re: [Discuss] SysVinit vs. systemd

2014-09-12 Thread Mike Small
Bill Ricker bill.n1...@gmail.com writes: I found one blog that seems to have a history of level-headed advocacy for systemd without insulting people or SysV Init (says it isn't badly broken). It's not by a SystemD DEV but by a working sysadmin.

Re: [Discuss] SysVinit vs. systemd

2014-09-12 Thread Robert Krawitz
On Fri, 12 Sep 2014 12:07:29 -0400, Mike Small wrote: Some of the points in the latter seem only to apply when comparing with upstart. Comparing to rc or sysvinit scripts, the points that seem relevant are these: systemd handles a lot of annoying infrastructure for you; for example, you do

Re: [Discuss] SysVinit vs. systemd

2014-09-12 Thread Richard Pieri
On 9/12/2014 12:07 PM, Mike Small wrote: I don't understand this at all. Aren't daemons written as daemons (giving up controlling terminal and whatever else within their own code). Daemonizing in this context is the support around starting, stopping, and querying the status of daemon programs.

Re: [Discuss] SysVinit vs. systemd

2014-09-12 Thread Michael Tiernan
On 9/11/14 11:46 AM, Bill Ricker wrote: I wonder which makers of grep added -r ? While my opinion isn't worth the electrons it uses, all through out my time behind the keyboard, I've learned that the KISS principle is the best way to survive. I had a set of scripts that were written for use on

Re: [Discuss] SysVinit vs. systemd

2014-09-12 Thread Michael Tiernan
On 9/11/14 11:57 AM, Mike Small wrote: I guess it can't lazy load dbus since it's intertwined with that (so much it so that it wants it in the kernel -- as my son says... what the?) I've always been irked by the overly complex interdependencies that have been getting more and more introduced

Re: [Discuss] iGuardian enterprise-grade home router

2014-09-12 Thread Tom Metro
Richard Pieri wrote: Comparing his $150 box to a Juniper IPS that costs ten times as much (or more) is disingenuous. I just want to clarify (for other BLU readers) that the his above doesn't refer to Dan Geer. His interview and the iGuardian product are unconnected, and only were mentioned in

Re: [Discuss] iGuardian enterprise-grade home router

2014-09-12 Thread Richard Pieri
On 9/12/2014 6:44 PM, Tom Metro wrote: You'll have to clarify what embedded means to you, and how that would differ from pfSense running on appliance hardware. How do you go about updating the OS? With an embedded OS you back up your settings, restart the device in a special run mode, write

Re: [Discuss] SysVinit vs. systemd

2014-09-12 Thread Derek Martin
On Fri, Sep 12, 2014 at 12:07:29PM -0400, Mike Small wrote: systemd handles a lot of annoying infrastructure for you; for example, you do not have to arrange to daemonize programs you run. I don't understand this at all. Aren't daemons written as daemons (giving up controlling terminal and

Re: [Discuss] Dan Geer's Blackhat talk, iGuardian enterprise-grade home router

2014-09-12 Thread dan
Dan Geer, an occasional poster here, apparently gave a talk at Blackhat see Cybersecurity as Realpolitik, 6 August 2014 http://geer.tinho.net/geer.blackhat.6viii14.txt --dan ___ Discuss mailing list Discuss@blu.org