I try to be a good Netizen when it comes to
IPv6,
which has been the "next big thing" for the Internet since it was announced in
1998. I picked my home ISP in part because it supports native IPv6. I host
websites and email on a Hetzner dedicated …
The SMTP Smuggling vulnerabilities released just before Christmas have kept a
lot of sysadmins busy over the festive period. Over time, more servers have
been found to be vulnerable, including Exim. Upstream have released a patch to
fix the CVE, but this hasn't yet been backported to distribution release
versions …
There's been a lot of concern about Google's new .zip gTLD - it's a domain name which can be used to make confusing URLs and make it easier to download malware. A few people are recommending blocking this and .mov which is also mistakeable for a filename extension.
Like many people, I ended up in information security management because I was leading the sysadmin / infrastructure / operations team at my workplace. A business requirement for IS compliance came up, and it landed on my plate, because compliance is assumed to be about configuring servers. As I got stuck in …
NB: This is a work in progress, probably doesn't represent best
practice, but this topic is thorny and poorly-documented, so I thought
it best to actually talk through the discovery process.
I use Ansible to manage my personal infrastructure. It means I can
keep config in version control, and migrate …
I've recently become aware of ncdu, which stands for NCurses Disk Usage. It's a text-mode utility to explore disk usage; it's a bit like du, but more useful interactively. It can be pretty handy for figuring out where your disk space has gone.