Re: Puppet Best Practice

2011-04-28 Thread Ryan Simpkins
On Wed, April 27, 2011 11:31, Jacob Albretsen wrote: > I am learning puppet and setting up modules for some servers. Although I know > this works from my testing, my spidey sense is tingling, and I want to know if > what I am doing is "right." Please note following doc: http://projects.puppetlabs

Re: [OT] Why the password "this is fun" is 10x more secure than "J4fS<2"

2011-04-28 Thread Steven Morrey
Not sure how secure it is, but the best (as in most interesting) password system I've ever seen is not really a password at all. Instead a series of pictures say 10 or 20 is shown to the user, for instance square, circle, triangle, etc. The user then selects as many pictures as they want to build

Re: A working group subtopic - We need a name

2011-04-28 Thread Steven Morrey
I like brainshell. Makethebadmanstop is too adverserial imho Eric Wald wrote: >Alan Young wrote: >> On Wed, Apr 27, 2011 at 22:34, Steven Morrey wrote: >>> Does anyone have a spare domain name laying around that they would >>> care to donate to the cause?  Preferably with a .org TLD? >>> >>> I'

Re: [OT] Why the password "this is fun" is 10x more secure than "J4fS<2"

2011-04-28 Thread Stuart Jansen
On Thu, 2011-04-28 at 11:08 -0600, Eric Wald wrote: > I see no reason for password length restriction to be less than 127 > characters. However, allowing a full megabyte would probably be > excessive. Is there a best-practices limit? 1K, perhaps? Best practice has generally been salted hashes,

Re: OT: "reality" based paranormal shows. Was: Re: **URGENT NEED - Windows/Linux/Apache Server Admin

2011-04-28 Thread Levi Pearson
On Thu, Apr 28, 2011 at 12:49 PM, Eric Wald wrote: > Daniel C. wrote: >> On Thu, Apr 28, 2011 at 8:31 PM, Eric Wald wrote: >>> No, "racking" is correct in this case.  I'd have thought the opposite >>> before researching the issue, though: >>> >>> http://www.grammarist.com/usage-errors/homophone-c

Re: [OT] Why the password "this is fun" is 10x more secure than "J4fS<2"

2011-04-28 Thread Lonnie Olson
On Thu, Apr 28, 2011 at 10:58 AM, Eric Wald wrote: > On Tue, Apr 26, Aaron Toponce wrote: >> On Tue, Apr 26, 2011 at 10:49:36AM -0600, Eric Wald wrote: >>> Over 25,000 reasonable straight-line passwords; double that to include >>> spirals.  Certainly with range for a dictionary attack, but it woul

Re: OT: "reality" based paranormal shows. Was: Re: **URGENT NEED - Windows/Linux/Apache Server Admin

2011-04-28 Thread Daniel C.
On Thu, Apr 28, 2011 at 9:49 PM, Eric Wald wrote: > Lest I misrepresent myself, I am not affiliated with the Grammarist. > My "research" was limited to several minutes on a search engine; the > linked article was simply the clearest summary of information that was > also available in dictionaries

Re: OT: "reality" based paranormal shows. Was: Re: **URGENT NEED - Windows/Linux/Apache Server Admin

2011-04-28 Thread Eric Wald
Daniel C. wrote: > On Thu, Apr 28, 2011 at 8:31 PM, Eric Wald wrote: >> No, "racking" is correct in this case.  I'd have thought the opposite >> before researching the issue, though: >> >> http://www.grammarist.com/usage-errors/homophone-confusion/rack-vs-wrack/ >> >> Turns out that I would have s

Re: OT: "reality" based paranormal shows. Was: Re: **URGENT NEED - Windows/Linux/Apache Server Admin

2011-04-28 Thread Eric Wald
On Sat, Apr 23, Levi Pearson wrote: > On Fri, Apr 22, 2011 at 2:35 PM, Nicholas Leippe wrote: > >> And despite all the effort gone into the theory and things coming out >> of it, it is still just a theory, and with demonstrable flaws at >> that--yet most physicists refuse to even question it--they

Re: OT: "reality" based paranormal shows. Was: Re: **URGENT NEED - Windows/Linux/Apache Server Admin

2011-04-28 Thread Daniel C.
On Thu, Apr 28, 2011 at 8:31 PM, Eric Wald wrote: > On Fri, Apr 22, Daniel C. wrote: >> No time whatsoever spent in front of a blackboard, >> racking (or do I want "wracking"?) his brain (which was certainly not >> filled with hard-earned knowledge) for a solution. > > No, "racking" is correct in

Re: [OT] Why the password "this is fun" is 10x more secure than "J4fS<2"

2011-04-28 Thread Nicholas Leippe
On Thu, Apr 28, 2011 at 11:32 AM, Matthew Walker wrote: > On Thu, April 28, 2011 11:24 am, Nicholas Leippe wrote: >> One of my accounts a while back changed their password method--they >> emailed me saying that to "increase security" they had stripped all >> non-alphanumerics out of my password! T

Re: OT: "reality" based paranormal shows. Was: Re: **URGENT NEED - Windows/Linux/Apache Server Admin

2011-04-28 Thread Eric Wald
On Fri, Apr 22, Daniel C. wrote: > No time whatsoever spent in front of a blackboard, > racking (or do I want "wracking"?) his brain (which was certainly not > filled with hard-earned knowledge) for a solution. No, "racking" is correct in this case. I'd have thought the opposite before researchin

Re: [OT] Why the password "this is fun" is 10x more secure than "J4fS<2"

2011-04-28 Thread Matthew Walker
On Thu, April 28, 2011 11:24 am, Nicholas Leippe wrote: > One of my accounts a while back changed their password method--they > emailed me saying that to "increase security" they had stripped all > non-alphanumerics out of my password! That is disturbing on many > levels. Ouch. The most disturbing

Re: [OT] Why the password "this is fun" is 10x more secure than "J4fS<2"

2011-04-28 Thread Nicholas Leippe
On Thu, Apr 28, 2011 at 11:08 AM, Eric Wald wrote: > On Tue, Apr 26, Nicholas Leippe wrote: >> Passwords are not infinite in length. I have never once found a system >> that allows me to choose a password of arbitrary length. Every one I >> have encountered has a hard upper limit on the length, us

Re: A working group subtopic - We need a name

2011-04-28 Thread Eric Wald
Alan Young wrote: > On Wed, Apr 27, 2011 at 22:34, Steven Morrey wrote: >> Does anyone have a spare domain name laying around that they would >> care to donate to the cause?  Preferably with a .org TLD? >> >> I'm sure we have enough grey matter here to figure out a way to build >> an identity arou

Re: [OT] Why the password "this is fun" is 10x more secure than "J4fS<2"

2011-04-28 Thread Eric Wald
On Tue, Apr 26, Nicholas Leippe wrote: > Passwords are not infinite in length. I have never once found a system > that allows me to choose a password of arbitrary length. Every one I > have encountered has a hard upper limit on the length, usually 16-20, > some (including some banks--shudder!) as s

Re: [OT] Why the password "this is fun" is 10x more secure than "J4fS<2"

2011-04-28 Thread Eric Wald
On Tue, Apr 26, Aaron Toponce wrote: > On Tue, Apr 26, 2011 at 10:49:36AM -0600, Eric Wald wrote: >> Over 25,000 reasonable straight-line passwords; double that to include >> spirals.  Certainly with range for a dictionary attack, but it would >> take long enough that I could re-print the card, pri

Re: Speaking of security

2011-04-28 Thread Nicholas Leippe
On Thu, Apr 28, 2011 at 10:13 AM, Alan Young wrote: > [snip some good discussion and description of basically my beliefs on > this topic by other people ending with] > "I would hope this would make each LEO think really hard before > choosing to cross the line." > > There is a fatal flaw with this

Re: Speaking of security

2011-04-28 Thread Alan Young
[snip some good discussion and description of basically my beliefs on this topic by other people ending with] "I would hope this would make each LEO think really hard before choosing to cross the line." There is a fatal flaw with this idea(l). This presupposes a relatively high level of rationali

Re: A working group subtopic - We need a name

2011-04-28 Thread Eric Olsen
> > I have makethebadmanstop.org ... > rofl, I love it! -Eric /* PLUG: http://plug.org, #utah on irc.freenode.net Unsubscribe: http://plug.org/mailman/options/plug Don't fear the penguin. */

Re: A working group subtopic - We need a name

2011-04-28 Thread Jonathan Duncan
On 28 Apr 2011, at 08:05, Alan Young wrote: > On Wed, Apr 27, 2011 at 22:34, Steven Morrey wrote: >> Does anyone have a spare domain name laying around that they would >> care to donate to the cause? Preferably with a .org TLD? >> >> I'm sure we have enough grey matter here to figure out a way

Re: Speaking of security

2011-04-28 Thread Scott Edwards
> well let that one go. But, if they determine that some ordinary Joe > wound up being harassed and was innocent, they will probably let the > LEO take some punishment. I would hope this would make each LEO think > really hard before choosing to cross the line. > > Sounds like a worthy option so fa

Re: Speaking of security

2011-04-28 Thread Nicholas Leippe
On Wed, Apr 27, 2011 at 10:30 PM, Charles Curley wrote: > On Wed, 27 Apr 2011 21:41:11 -0600 > Steven Morrey wrote: > >> I think adding personal liability at the executive level, makes it a >> bit more threatening. >> Decision makers tend to tread lightly, where the veil is thin. > > It would ten

Re: A working group subtopic - We need a name

2011-04-28 Thread Alan Young
On Wed, Apr 27, 2011 at 22:34, Steven Morrey wrote: > Does anyone have a spare domain name laying around that they would > care to donate to the cause?  Preferably with a .org TLD? > > I'm sure we have enough grey matter here to figure out a way to build > an identity around it. I have makethebad