The difference between monitoring and metrics analysis, the security pros and cons of cloud vs on-prem, why Jim and Allan don’t use Unraid, and cloud storage and email for a small company.

Feedback

Netdata

Nagios

ZFS and Unraid

Free consulting

We were asked about cloud storage and email for a small company.

Automox

Check out the brand new Autonomous IT podcast. Listen in as a variety of experts in the IT Operations space discuss the latest Patch Tuesday releases, mitigation tips, and custom automations to help with CVE remediations. Listen now on Spotify, Apple, or wherever you get your podcasts.

1Password

Extended Access Management: Secure every sign-in for every app on every device. Support the show and check it out at 1password.com/25a

See our contact page for ways to get in touch.

NIST has finally proposed some sensible password standards, why server CPUs with high core counts make sense in a lot of deployments, the .io TLD is probably sticking around, and the best options for a Linux-based router.

Plugs

Support us on patreon and get an ad-free RSS feed with early episodes sometimes

Klara Halloween Webinar: ZFS Horror Stories. Oct 31st 13:00 EDT, 17:00 UTC

ZBM 101: Introduction to ZFSBootMenu

News

NIST proposes barring some of the most nonsensical password rules

You’re right not to rush into running AMD, Intel’s new manycore monster CPUs

The Disappearance of an Internet Domain

Free consulting

We were asked about setting up a Linux-based router.

OpenWrt on TP-Link devices

See our contact page for ways to get in touch.

Why cold storage is never as good as keeping your data warm and regularly tested, how the American air traffic control system became so outdated, and isolating your devices from a roommate’s shenanigans.

Plug

Support us on patreon and get an ad-free RSS feed with early episodes sometimes

News/discussion

Music industry’s 1990s hard drives, like all HDDs, are dying 

FAA air traffic control modernization efforts are a mess

Free consulting

We were asked about isolating your devices from a roommate’s shenanigans.

1Password

Extended Access Management: Secure every sign-in for every app on every device. Support the show and check it out at 1password.com/25a

See our contact page for ways to get in touch.

A proposed solution to the WHOIS TLS verification problem gets a surprising amount of pushback. Plus isolating IoT devices, our thoughts on Ubiquiti gear, setting up WiFi in a new house, remote access with WireGuard, and our mini PC recommendations.

Plug

Support us on patreon and get an ad-free RSS feed with early episodes sometimes

News

Google calls for halting use of WHOIS for TLS domain verifications

Free consulting

We were asked about isolating IoT devices, our thoughts on Ubiquiti gear, setting up WiFi in a new house, remote access with WireGuard, and our mini PC recommendations.

1Password

Extended Access Management: Secure every sign-in for every app on every device. Support the show and check it out at 1password.com/25a

See our contact page for ways to get in touch.

The Malaysian government’s misguided plan to control its citizens’ DNS, the wrong way to deploy underwater servers, a philosophical question about how long a person’s photos will exist, and how we manage our SSH keys.

Plug

Support us on patreon and get an ad-free RSS feed with early episodes sometimes

News/discussion

Malaysia’s plan to block overseas DNS dies after a day 

Proposed underwater data center surprises regulators who hadn’t heard about it

Free consulting

We were asked about how we manage our SSH keys.

1Password

Extended Access Management: Secure every sign-in for every app on every device. Support the show and check it out at 1password.com/25a

Automox

Check out the brand new Autonomous IT podcast. Listen in as a variety of experts in the IT Operations space discuss the latest Patch Tuesday releases, mitigation tips, and custom automations to help with CVE remediations. Listen now on Spotify, Apple, or wherever you get your podcasts.

See our contact page for ways to get in touch.

A surprising way to exploit the WHOIS system, Microsoft will force old versions of Windows 11 to update, and the simple way to set up TP-Link Omada gear.

Plug

Support us on patreon and get an ad-free RSS feed with early episodes sometimes

News

Rogue WHOIS server gives researcher superpowers no one should ever have

Windows 11 users still living in the past face forced update, like it or not

Free consulting

We were asked about setting up TP-Link Omada gear.

See our contact page for ways to get in touch.

Another example of the downsides of abstraction, whether AI can ever be truly “open source”, and the security benefits and drawbacks of different types of VPN.

Plug

Support us on patreon and get an ad-free RSS feed with early episodes sometimes

News/discussion

Hackers infect ISPs with malware that steals customers’ credentials

Debate over “open source AI” term brings new push to formalize definition

Free consulting

We were asked about whether VPNs are a security measure.

See our contact page for ways to get in touch.

AMD will patch some old Ryzens against SinkClose now, but their benchmarking methods for newer CPUs didn’t live up to everyday reality. Plus Bcachefs devs annoy Linus Torvalds, the US government sues a college over compliance issues, and Jim disappoints a patron.

Plug

Support us on patreon and get an ad-free RSS feed with early episodes sometimes

News

AMD’s Ryzen 3000 CPUs to get SinkClose patch after all

AMD explains, promises partial fixes for Ryzen 9000 performance problems

Linus Torvalds Begins Expressing Regrets Merging Bcachefs

After cybersecurity lab wouldn’t use AV software, US accuses Georgia Tech of fraud

Free consulting

We were asked about monitoring your network for new device connections.

See our contact page for ways to get in touch.

Insecure SSH implementations and a weak key that let a researcher control 200 MW of electrical capacity reignites the debate about versioned protocols vs pluggable protocols, follow-up on sharing files from your LAN with people on the Internet, and the pros and cons of encrypted backups.

Plug

Support us on patreon and get an ad-free RSS feed with early episodes sometimes

News/discussion

Researchers find insecure SSH implementations everywhere

512-bit RSA key in home energy system gives control of “virtual power plant”

Feedback

Syncthing

Resilio

Send

OnionShare

Warp

Immich

Free consulting

We were asked about the pros and cons of encrypted backups.

1Password

Extended Access Management: Secure every sign-in for every app on every device. Support the show and check it out at 1password.com/25a

See our contact page for ways to get in touch.

Forcing Windows to undo updates and a separate IPv6 vulnerability, hardware bugs in AMD and Intel CPUs, and using Samba on Linux with Active Directory.

Plug

Support us on patreon and get an ad-free RSS feed with early episodes sometimes

News

Your victim’s Windows PC fully patched? Just force undo its updates and exploit away

CVE-2024-38063 – Security Update Guide – Microsoft – Windows TCP/IP Remote Code Execution Vulnerability

Almost unfixable “Sinkclose” bug affects hundreds of millions of AMD chips

SMM LOCK BYPASS

Intel’s crashing 13th and 14th Gen Raptor Lake CPUs: all the news and updates

Free Consulting

We were asked about using Samba on Linux with Active Directory.

map acl inherit = yes

Setting up a Share Using Windows ACLs

Automox

Check out the brand new Autonomous IT podcast. Listen in as a variety of experts in the IT Operations space discuss the latest Patch Tuesday releases, mitigation tips, and custom automations to help with CVE remediations. Listen now on Spotify, Apple, or wherever you get your podcasts.

See our contact page for ways to get in touch.