[–] 5 points 1 week ago (1 child)

It was a bit of a day at work, I must say.

It started well, we were only minimally affected by the PHP apocalypse. Only two services to update, neither of them mission critical AND even better, both were already on fairly recent patches, so updating them was pretty much a five-minute job once the patch was released.

Then we had a bit of a TLS issue, not related to eMudhra tho. Our public TLS certificates auto-renewed yesterday, routine stuff. But today two different clients complained that their browsers were giving them SSL errors. After a bit of back and forth, it turned out that our cert provider had switched to a new CA, and the IT departments at those two clients had, for some reason, pinned our domain to a specific CA and that had now to be updated. I can fully understand this kind of setup for internal CAs and such, but our service is on the public internet and uses a well-known SSL provider. This is the first time we've encountered something like this. I'm wondering whether it's common for IT departments to do this. If so, why? Anyway, one customer had no problem with this, but the other tried to blame the “downtime” on us. Apparently, they expect us to warn them at least two weeks before rotating TLS certs. Trying to explain how ACME works didn’t help.

Final headache of the day, one of our developers forwarded me an email they'd received from Atlassian. At first, it looked like a scam attempt (it started with something like "You need to make changes immediately!"), but it turned out to be real. Apparently, Bitbucket is changing their SSH endpoint. While that doesn't seem like a too big deal, their messaging about it is just absolutely horrible. The deadline is in less than a month(!), but almost all their documentation still refers to the old endpoint. Even https://bitbucket.org/site/ssh still only returns the old hostname! I was really confused where to find the new host keys, but apparently they've decided to use the same host keys for the new hostname. That seems a bit odd to me, but it’s whatever... Then as a final F from Atlassian, when I tested connecting to the new hostname, the whole of Bitbucket went down. You can't make this stuff up! Okay, I don't think my connection attempt was what actually crashed it, but still, I wouldn’t be too surprised even if it was.

  • source
  • [–] 2 points 2 weeks ago (1 child)

    I think the OP is asking why Debian doesn't do it automatically. It can't just remove the old kernel immediately, because what if the new one fails to boot or otherwise doesn't work? It's good to keep an older kernel around so you can go back to it if necessary. In theory, they could implement some logic that automatically removes older kernels while keeping the latest one or two untouched.

    But generally I agree it's the user's responsibility to make sure they have enough disk space available and to clean up when necessary.

  • source
  • parent
  • context
  • [–] 3 points 2 weeks ago (3 children)

    This is one of the reasons why I don't use a separate partition for /boot anymore. As I understand it, a separate /boot partition is mostly a legacy thing unless you have an encrypted root partition or some other special setup. For simple cases I recommend having /boot on the root partition to avoid issues like this.

    I think that's also the default setup used by the Debian installer if you select Guided partitioning – use entire disk. I'm not 100% sure tho.

  • source
  • [–] 6 points 3 weeks ago (1 child)

    I'm in the 2027 gang, damn. Oh well, on the bright side I basically have an extra 1k disposable now.

    What I don't understand is why Valve didn't share this information from the beginning. Their communication led to believe that everyone who landed into the reservation queue would receive theirs within weeks, or within 1-2 months at most. Making us first wait almost a month only to be like, 'btw, you're not getting yours until next year' is a really shitty way to treat your customers.

  • source
  • [–] 4 points 3 weeks ago (4 children)

    Röökaamisen täyskielto ellei muuta ole erikseen vuokrasopparissa sovittu on kyllä erinomainen parannus. Mutta luulen, että kiellon rikkojan häätäminen on edelleen pitkä ja hidas prosessi.

  • source
  • [–] 8 points 3 weeks ago*

    Basically yes, but it won't happen immediately or quickly. It's very unlikely any domain would be revoked just like that, but they might eventually stop registering new ones and accepting renewals. ICANN has a retirement policy that they will follow.

    Interestingly, this is relevant to the popular (among tech bros) .io domain, which belongs to the British Indian Ocean Territory, a small cluster of islands in the Indian Ocean that is currently in the process of being transferred to Mauritius. That might mean .io domains will eventually be phased out.

  • source
  • [–] [S] 4 points 3 weeks ago

    As others have mentioned, adblockers seem to break it somehow. It's probably not intentional. The page doesn't serve any (actual) ads, so it's safe to try disabling your ad blocker. For me, refreshing the page a couple of times also fixed the issue even with uBO enabled.

  • source
  • parent
  • context
  •  

    cross-posted from: https://crazypeople.online/post/24875632

    Twice as far as my longest hike wearing shoes, he also has a unicycle distance record. Kudos to Eamonn.

    I like walking, knowing you're indefinitely putting one foot in front of the other and new, interesting experiences will present themselves every moment for the foreseeable future.

     

    The gist of it seems to be that for some reason number 4 engine started to produce full thrust with the thrust lever at maximum power after landing and no one noticed. Interestingly, the thrust reverser on that engine was inoperative that day (MEL allows dispatching with that fault).

    Pilot error? They had to use a non-normal procedure because of the broken thrust reverser and messed it up and the number 4 thrust lever was never brought to idle? That would make sense but doesn't explain how the thrust lever ends up at maximum power after that.

     

    cross-posted from: https://pawb.social/post/26578639

    [...] the video started off being called "Adam's Favorite Mask" and he changed it to the current title. I love it.

    ~ commenter on the above video


    Further notes about Adam + Furry over the years:

    • when asked The "What animal would you be?" Question: "Without a doubt my fursona is a lion."
    • knew the word "fursuit" while repairing a Totoro costume
    • Maker and a technologist for 30+ years in the San Francisco Bay Area, worked at ILM, has been to dozens of cosplay conventions, and his dad was a cartoonist. Ain't no way he didn't know :P
     

    From today until March 15, 2026, the maximum lifetime for a TLS certificate is 398 days.

    As of March 15, 2026, the maximum lifetime for a TLS certificate will be 200 days.

    As of March 15, 2027, the maximum lifetime for a TLS certificate will be 100 days.

    As of March 15, 2029, the maximum lifetime for a TLS certificate will be 47 days.

    What's everyone's opinion on this? I think from a security standpoint their reasoning is valid and in many cases it's very easy to automate the renewal with ACME or something else. But there's likely gonna be legacy stuff still around in 2029 that won't be easy to automate.

     

    Finland headed to the polls on Sunday to elect thousands of councillors in a range of local and regional bodies.

    The Social Democrats took a big win in the municipal elections, taking nearly one in four votes nationwide to push the National Coalition Party of Prime Minister Petteri Orpo into second place.

    In the county council elections, for 21 regional bodies that arrange social and healthcare outside Helsinki, the SDP also topped the poll. The Centre Party recorded a good result in its rural heartlands to secure third spot.

    Government parties did poorly, with all but the NCP losing support compared to the previous municipal elections in 2021. Turnout in the municipal election was 54.2 percent, while the county elections saw 51.7 percent of eligible voters cast their ballots.

    The dual vote for municipal and county councils caused logistical issues for election officials, with counting slower than usual for Finland, where large numbers vote in advance and results are usually clear within a couple of hours of polls closing.

    The Finns Party saw support collapse compared to the last municipal election, with the party nearly halving its vote from four years ago. They lost support in several towns that are seeing hospital services cut back as part of the central government's savings drive.

    view more: next ›