* Posts by Crazy Operations Guy

2513 publicly visible posts • joined 29 Jun 2009

Which data centre network topology's best? Depends on what you want to break

Crazy Operations Guy

Double fat tree

I've always just built things out with two big ol' core switches cross connected with a pair of switches in each rack. Each server has one nic plugged into each switch, each switch is connected to both core switches. The servers have 2x 1-gig links, the ToR switches are 24x 1-gig + 4x 10-gig, and the cores are 512x 10-gig + 12x 40-gig. Anything can catch fire without the servers ever losing connectivity or even noticing a degradation in speed (20 servers in each rack, so each can only push 2 Gb at most and with each switch pushing 40 Gb to core).

The core switches are then cross-connected with a 4x 40 Gb trunk to each other and a similar trunk to a pair of F5 Viprions with 40-Gb interfaces.

A ToR, a core switch and one of the load balancers could fail simultaneously and no one would notice a thing except for a few failed connections for a second or two, at most. It may be expensive, but downtime is even more so. It also means that we save a crap-ton of money on salaries since we don't need 24/7 coverage to maintain 5-nines of up time on the network because failures can wait until the morning to fix.

Scotland Yard pulls eyeballs off WikiLeaker-in-Chief Assange

Crazy Operations Guy

Probably fake his own death in a way that it gets blamed on the US.

Google's .bro file format changed to .br after gender bother

Crazy Operations Guy

Re: I despair.

Indeed, any modern system is capable of 256 character file names with the dot at any point within it and as many dots as you want. Hell, why do we even have file extensions anyway? OSes should just be able to figure it out from the headers and act accordingly, they already dig into the headers to grab various bits of metadata, so why not grab its file type as well? And once its determined its file type, change the text color to indicate that type to the user.

Pitchforks, torches, and awful quotes – we read what Cisco's CEO said

Crazy Operations Guy

Re: "What makes people think like this?"

Time based performance bonuses will do that. It happens fairly often in companies that manufacture products, you get people in upper management that used to work on the assembly line where faster is better, then they attempt to apply that same philosophy to the development side to disastrous results. BY the time that upper management has figured it out, that person has already been promoted and is starting the failure ascent to the top.

Crazy Operations Guy

Running Cisco is simple

A company like Cisco has the advantage of being the Gold Standard when it comes to networking and especially training. That is their strength and they should stick to it. Let smaller companies develop the next technology, and set your R&D teams onto the task of copying and improving it, or just buy the smaller company and resell their product while you work on integrating into your own. Then hit the market when the technology is mature and the marketplace is moving to adopt them. Most, if not all, CTOs of major companies will wait until version 2 of any product from an unknown company, but will buy the 1.1 version from someone like Cisco, and even version 1 if that new technology is just an addition to update for a product they have already.

What is killing Cisco now is the high barrier to entry. Perhaps implement a buy-back and resell system. Sell new routers and switches to the big guys, buy back the old stuff to make staying with you cheaper than going with a major competitor, then refurbish the stuff you bought back and sell it to smaller companies who can't afford your newest and shiniest.

What will kill Cisco is the push to be first-to-market and ending up pushing out a failed product and damaging their reputation. People buy Cisco because they know that it will run for several years before it needs servicing and that it will support new features eventually. Their routers from the early 90's are still running and a lot of them even support IPv6 despite having been built with AUI and serial ports on them...

Neuroboffins use supercomputer to partially build DIGITAL RAT BRAIN

Crazy Operations Guy

Re: Politician brain

In the US, it could just be three lines of text:

1) Do what the most senior person in your party does

2) If you are the most senior person, do the opposite of the other party

3) If the other party hasn't done anything, do what the nice man with the briefcase of money tells you

TRANSISTOR-GATE-GATE: Apple admits some iPhone 6Ses crappier than others

Crazy Operations Guy

Re: @Fitz_ I don't think the vast majority of people would even notice

"I think that he meant to write "I see an (sic) mix of Android, Apple, Blackberry, and even Windows phones in the hands of my coworkers and fellow passengers. "

"

More or less. The point I was trying to make was that there was a vastly disproportionate number of Apple devices charging vs. other brands.

I had actually posted that from the airport were I was sitting in a row of 19 other people at my gate, the flight was just announced as delayed, so everyone had their phones out for one reason or another. In my row there were 8 iPhones, 8 Androids, 2 Windows phones (bright yellow Lumias), and 2 Blackberries; yet, plugged in were all 8 of the iPhones, an Android, a BlackBerry, and a pair of outlets used to charge a MacBook.

Crazy Operations Guy

I don't think the vast majority of people would even notice

Given that whenever I see an iPhone its either in use or plugged into the wall, I don't think anyone would really notice the reduced battery life, especially since that 2% is dwarfed by the battery life reduction that charging it so much causes.

When at the office or at the airport, I have to spend quite a bit of time to find a power outlet that isn't filled with those white power adapters. But what I find odd is that I see an even mix of Android, Apple, Blackberry, and Windows phones in the hands of my coworkers and fellow passengers. So why the discrepancy in the brands of phones being charged?

Whoever hacked Uber's driver database wasn't our CTO, says rival Lyft

Crazy Operations Guy

Re: "Lyft denies any wrongdoing by its employees."

" I could see myself doing what the CTO did"

I would too, but that is also why I'm not a CTO. A C-level employee is essentially the physical embodiment of the company, their actions must reflect the ideals of the company they are part of. The difference between an executive and an employee is similar to that of a head-of-state versus a private citizen. A citizen could walk into a strip club because they are curious about it, but if the president were to do such a thing, he'd be facing months of bad press, numerous calls for impeachment, and endless inquiries into their actions.

Crazy Operations Guy

"Lyft denies any wrongdoing by its employees."

I'd consider even looking at sensitive data of a rival firm falls quite firmly into the definition of 'wrongdoing'... Obviously Uber fucked up pretty badly, but their failure doesn't excuse a stupid act like looking at their authentication keys. At the very least, it shows that Lyft's CTO shouldn't have his job given how irresponsible he is in that he put his curiosity over protecting the company from a potential lawsuit.

What he really should have done is when someone informed him about the key being public, he should have just called his legal counsel and never clicked on the link. And if he was the one that discovered that it was public, well, he should never have been poking around there in the first place.

Australian Prime Minister runs private email server

Crazy Operations Guy

Just need an email from that server

The SMTP headers will tell you exactly where that server is, since CloudFlare doesn't strip such things out of the headers (from the messages I've received from clients behind thier service, they use an SMTP relay that adds onto the header). While its unlikely that you could actually get to that IP address, it'll still tell you where its located (unless he went the route of getting an AS number, an IP block, and hosts it in location different than the address he registered with, but I doubt he'd spend $2500 a year just for a basic level of obfuscation).

I'm starting to think that governments should start blocking emails form being sent to and received from non-government owned domains... Or at least require any emails on a private server to automatically BCC an address at a government domain.

Alleged Anonymous-aiding journo's brief tells jury nowt's been proven

Crazy Operations Guy

"A few words to the people in HR sealed his fate."

I would've given him a shining recommendation, then spent the next several years making his life a living hell but staying just on the right side of the line so as not to get in trouble with HR....

Swedish govt appeals court decision guarding thepiratebay.se domain

Crazy Operations Guy

.la really isn't Laos anymore

Its supposed to be, but it got sold to CentralNIC and is used primarily to make stupid looking domain names and advertise crap in Los Angeles. The Laotian government has very little, if any, control over the TLD since around 2006. Same thing has happened to .fm and .tv, when was the last time you saw a domain that ended in fm that had anything to do with Micronesia?

Silicon Valley now 'illegal' in Europe: Why Schrems vs Facebook is such a biggie

Crazy Operations Guy

Selling public information

" He didn't reveal anything that wasn't already well-known to anyone with an interest and an ounce of common sense.

There's no real doubt that Snowden got the job solely to acquire data to sell to Russia and China"

You do realize that you just contradicted yourself in a single breath? What kind of nation would buy information that 'anyone with an interest and an ounce of common sense' would be able to figure out?

So is the data worthless or valuable? And if he intended to sell the data, why would he hand it over to a journalist? The data he copied was on a offline SharePoint server that didn't have proper monitoring running on it, it would have been trivial to just copy the data to a server that the Russians also had access to, he would have gotten paid, and the NSA would still wouldn't even have a clue that anything happened.

French hacks go after new surveillance law … with the help of the ECHR

Crazy Operations Guy

I was wondering what happened to the Stasi

Seems that they just crossed the border over to France and carried on...

Rights groups: Darn you Facebook with your 'government names'

Crazy Operations Guy

Real name to register, whatever name for display

Why couldn't they just require your legal name for sign-up but then allow you to display whatever name you want? If someone is harassing another user, they'd report it to Facebook's staff who would then contact the proper law enforcement agency, or hand that data over to the harassed person so they may take appropriate action themselves.

I imagine that requiring real names to be displayed actually causes more harassment, since it'd be trivial to look that person up and find them in real-life or on other online services to continue the harassment. But of course Facebook doesn't care, its no longer happening on their service...

Alleged $32m Gemcoin crypto-bucks scam busted by Feds

Crazy Operations Guy

Re: Where is Cali?

I assume that the author is from California... No rational person calls it that, just people that live there (for some reason that I have to figure out)

Microsoft pitches Azure at HPC, visualisation loads

Crazy Operations Guy

VDI

I wonder how well a VDI system would work on Azure...

Might be a worth-while service to get into as well, offer a thin client for the price of a single Windows license and include a full Office install in with it and some cloud storage / backup system. Throw in some proper malware protection, and I will pay so much money for two or three of them just to avoid having to take the two-state long car trip to fix their machine or to recover data after they forgot to back the thing up.

Something like this would work perfectly for such users:

http://configure.us.dell.com/dellstore/config.aspx?oc=xcto5040aiobtous&model_id=wyse-5000-aio-PCoIP&c=us&l=en&s=bsd&cs=04

Dodgy amphetamines drive drug-crazed man on to pub roof

Crazy Operations Guy

Would to help to defund ISIL / Al-Qaeda / cartels

A lot of terrorist organizations get a very large percentage of their money off of the drug trade, with the rest being provided by the sex-slave trade. Allow for fully regulated companies to sell drugs, and now billions of dollars are staying in the country rather than funding terrorists / cartels. Require that a certain percentage of profits must go to rehab and community outreach type programs.

I was GOOGLE for a MINUTE, claims quick-witted dude

Crazy Operations Guy

The LOIC has nothing on BGP misconfigurations

I've found that installing a BGP daemon in a datacenter that has unrestricted internet access, then having it advertise all routes with a cost of 1 brings down a data center fairly easy...

Accidentally did it as part of test lab while testing a carrier-grade NAT with BGP routers behind it (The BGP routers would advertise self-assigned AS numbers for private ranges (The theory being that those routers would see my router with a cost of 1 for everything and push their traffic through it where it would get translated and re-routed onto the actual internet using 'real' IP addresses). The project was to test doing carrier-grade NAT without needing DHCP and to allow using either IPv4 or IPv6 internally and still allow for IPv4 or 6 on the outside.

Microsoft puts a bullet in blundering D-Link's leaked key that made malware VIPs on PCs

Crazy Operations Guy

I don't trust D-Link anyway

Not code signed by them, and especially not any of their hardware. I have never had a positive experience with any of their gear, whether it was a home wireless router, a NIC, or even an "enterprise-grade" switch; all of them either failed within a year or two, or they just worked in some weird and hair-pulling way that didn't always work correctly.

Revealed: Why Amazon, Netflix, Tinder, Airbnb and co plunged offline

Crazy Operations Guy

Re: No exponential backoff?

I was just about to post something like that.... That technique has been around pretty much forever, hell DECNet had a setting to do just that.

Malvertisers slam Forbes, Realtor with world's worst exploit kits

Crazy Operations Guy

Re: When El Reg says "the ad bounce visitiors" or "redirect"...

Indeed, I figure that since the NSA already has taps on all the lines going in and out of the US, they could easily slip a firewall or two in there to block malware...

Hackers upload bot code to Imgur in 8Chan attack

Crazy Operations Guy

"nixed the ability to serve JavaScript."

Why would you allow users to upload JavaScript in the first place? Its an image sharing site, so why would you allow anything that isn't a simply jpg, png, gif, bmp, etc...

XCodeGhost iOS infection toll rises from 39 to a WHOPPING 4,000 apps

Crazy Operations Guy

Wasn't HTML5 supposed to fix all this?

I thought that one of the goals of HTML5 was so that complex apps could be coded in a platform-agnostic way. What ever happened to that?

Crazy Operations Guy
Joke

Couldn't happen to Windows Phone

Someone would notice that there are 4000 apps in the store...

Child abuse, drug sales, terrorism fears: Why cops halted a library's Tor relay ... for a month

Crazy Operations Guy

Why shut down the exit node?

All the child pornography, terrorism, and drug dealing websites are inside of TOR, so no exit node is needed... So really, the only thing coming out of the exit node is going to be the nice clean, harmless traffic from people accessing legal websites but don't want to be spied upon while doing so.

Ex-HP boss and US prez wannabe Carly sings about her dog on TV

Crazy Operations Guy

Re: We're doomed....

Yeah, she'll probably merge the US with Canada and end up with the GDP of Sudan...

Symantec fires staff caught up in rogue Google SSL cert snafu

Crazy Operations Guy

I think that the point of the testing was to ensure that the certificates worked properly with a fresh-out-of-the-box browser.

Crazy Operations Guy

Indeed, I would think that it would have been required for testing certificates to be issued for non-existent domains or at least use an invalid TLD. Something like "google.symantec" or "test103.local" so the testing lab's DNS servers would still recognize it, and the certificates would show as proper EV, but if the certificates leaked, then they'd be absolutely useless unless you added those fake domains to the victim's DNS (Which if you could, then you wouldn't need the certificates in the first place)

Crazy Operations Guy

Certificates in DNS?

I figure that a new DNS record for a website could be created with the certificate's public key and a URL for the issuer. That way the owner of the domain has at least some control over what certificates are considered valid for them.

Dislike: Facebook scammers latch onto anti-Like button calls

Crazy Operations Guy

Showing empathy

I find it easier just to comment on the post to show my empathy to the poster. Using just a simple button to try to express that seems wrong to me... Is it really empathy if you don't put any actual effort into it?

For just $400 you can have this Raspberry Pi – and mine bitcoin

Crazy Operations Guy

Steady Stream of bitcoins

It might be a stream in the way that the pitch-drop experimenter is a torrential rain-shower...

Indianapolis man paints his ball every day – for FORTY YEARS

Crazy Operations Guy

Re: I have a question . . .

I would think he probably used a drill and some expanding fasteners once it got big enough. Probably drilled a 7/8" hole most of the way through and threaded a 1" bolt into it.

Crazy Operations Guy

Re: Well, a hobby is a hobby

Given that paint goes bad after 10 years, the last time he;d be able to use lead-based paint would be around 1987 (lead paint was banned in 1977), so that gives use 28 years worth of paint, or 10,227 layers. I think its safe to say that you'd be safe even if you took a bite or two out of it... Well, safe from lead poisoning, at least.

Michigan sues HP after 'botched' $49m upgrade leaves US state in 1960s mainframe hell

Crazy Operations Guy

Re: Gratuitous: Maybe Carly could ride in on her white horse and get this company better,

AH, Carly, she only managed to double profits by buying Compaq. And even then, profits should have theoretically tripled... How the hell do you merge two companies and manage to pull in $10 Billion less than the sum of what both companies made the previous year?

Crazy Operations Guy

SIMH

If I was on that project, I would've just spun up a couple copies of SIMH on a modern machine and then worked from there...

Shock: Smartphone app to protect kids online does quite the opposite

Crazy Operations Guy

Dirty minds

I've always thought that the "Won't someone think of the children" brigade has the dirtiest minds around, since what kind of person makes the leap from "pornography" to "children" so quickly?

It's 2015 and a text file can hack your Apple Watch. IS THIS THE FUTURE YOU WANTED?

Crazy Operations Guy

The closest thing to a smart watch I'll ever have

Last year I bought a TI MSP430-based watch to play around with it, it will probably be the closest thing to a "smart watch" that I'll ever touch. I've been using it to display the public keys to my bastion boxes when you put it in the right mode. This way I can be assured that my connection hasn't been tampered with by any of the spy agencies and I can ensure it never leaves my body since it doesn't set off metal detectors and the customs folk don't even bother with it and thus compromise the keys.

Ouch! Microsoft sues recycling firm over 70K stolen Office licenses

Crazy Operations Guy

Re: good ole Arizona

" California slides into the ocean"

Actually the Pacific plate is pushing into the North American plate. If California where to move in any way, you'd end up with San Diego crushing Phoenix...

AWS outage knocks Amazon, Netflix, Tinder and IMDb in MEGA data collapse

Crazy Operations Guy

Re: Perhaps Amazon

Go stick your head in a pig!

Crazy Operations Guy

Re: Aha

I couldn't finish it either, but that probably has more to do wit the fact that the movie is just so bloody long... 3 hours and 45 minutes, that borders on torture right there.

Crash Google Chrome with one tiny URL: We cram a probe in this bug

Crazy Operations Guy

Programming 101: never assume data passed is valid

Seriously, never, ever assume that any data passed is going to be valid. In security sensitive code like this, the data should always be treated with some suspicion and be validated at the beginning and end of every function that handles it.

I would assume that the URL parsing function would strip the protocol from the beginning, which would leave you with [null] after URL decoding and thus an empty string. The calling function should have noticed that it received an empty string and ignore, and continued o its merry way with the next URL it detects.

Hate noisy jets above you? What if they were charging your phone?

Crazy Operations Guy

Re: A much better power saving...

"piezoelectric tiles yields free energy ..." Oh god that reminds me of that whole "solar roadways" bollocks from a little bit ago...

I love how projects like this tend to leave out the part about "This would require more tantalum than currently exists on Earth, assuming we mined every bit of it". Or the insane length of time it would take for the benefits to offset the production cost...

What would really reduce air traffic noise would be to install proper high-speed trains rather than the crap diesel-electric behemoths we currently depend on that cost more, and take longer, than flying...

Volkswagen used software to CHEAT on AIR POLLUTION tests, alleges US gov

Crazy Operations Guy

"So, just like software benchmarks of computers, then?"

I knew a developer that would get their code running much faster by exploiting the benchmark tuning on the processor. The code was difficult to read, but it sure ran pretty fast...

Huh? Cat-wees-like-a-racehorse study pees on fellow physicists to take Ig Nobel prize

Crazy Operations Guy

Re: "Hint: 1ml of water weighs approximately 1gm."

Ah, the metric system; where 1 ml of water at 20 degrees Celsius weighs 1 gram and takes up 1 cc of volume. It also takes exactly 1 calorie of energy to increase its temperature by 1 degree C. So much easier than the "standard" system in how its based off of some long-dead king and other archaic measurements...

D-Link spilled its private key onto the web – letting malware dress up as Windows apps

Crazy Operations Guy

Proper signing procedures

I always figured that a shop like their would have more security than mine. In my company's shop, code signing certificates are kept on an air-gapped machine sitting on the QA director's desk. Once the QA department's tests have been completed and the product is ready to ship, the code gets burnt to disc, scanned and then copied to the code-signing machine. Once compiled, it is written to another disc and scanned again, this disc the gets duplicated so that we have a known-good golden copy of the code and the executable.

SONY HACK WAS WAR says FBI, and 'we're still struggling to hire talent'

Crazy Operations Guy

Re: Dear FBI

I had applied to them before, but was rejected because I didn't have a Bachelor's degree at the time. Then after I got my degree, I ended up rejecting for a couple reasons: They wanted me to move to Washington DC to work in the main HQ rather than the regional HQ two blocks from my apartment and on top of that, the pay was shit, especially compared to the cost of living of DC.

I had also gotten an offer from another company in the city where I was living and with 50% more pay. After all was said and done, after bills were paid, I was getting twice as much per month.

Sharp's new TV has over 7,000 lines of pixels – but there's NOTHING TO WATCH

Crazy Operations Guy

Yep, the human eye cannot perceive pixels of this density. But people will buy these claiming to see a difference, just like the folk that claim that they can tell the difference between 24 and 32-bit encoded FLAC files. (I'll take a 4 MB MP3 over a 30 MB FLAC file any day of the week, can't tell the difference anyway...)