<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments for Sysconfig&#039;s Blog</title>
	<atom:link href="http://sysconfig.ossafe.org/comments/feed/" rel="self" type="application/rss+xml" />
	<link>http://sysconfig.ossafe.org</link>
	<description>Linux, BSD, Mac OS, the Internet, Programming, and other things</description>
	<lastBuildDate>Thu, 16 Jul 2009 00:09:59 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>Comment on Yet again: Your wife&#8217;s name doesn&#8217;t qualify as a password! by admin</title>
		<link>http://sysconfig.ossafe.org/2009/07/yet-again-your-wifes-name-doesnt-qualify-as-a-password/comment-page-1/#comment-168</link>
		<dc:creator>admin</dc:creator>
		<pubDate>Thu, 16 Jul 2009 00:09:59 +0000</pubDate>
		<guid isPermaLink="false">http://sysconfig.ossafe.org/?p=113#comment-168</guid>
		<description>And again, Twitter utterly fails when it comes to security basics: 
http://www.techcrunch.com/2009/07/15/another-security-tip-for-twitter-dont-use-password-as-your-password/</description>
		<content:encoded><![CDATA[<p>And again, Twitter utterly fails when it comes to security basics:<br />
<a href="http://www.techcrunch.com/2009/07/15/another-security-tip-for-twitter-dont-use-password-as-your-password/" rel="nofollow">http://www.techcrunch.com/2009/07/15/another-security-tip-for-twitter-dont-use-password-as-your-password/</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Yet again: Your wife&#8217;s name doesn&#8217;t qualify as a password! by admin</title>
		<link>http://sysconfig.ossafe.org/2009/07/yet-again-your-wifes-name-doesnt-qualify-as-a-password/comment-page-1/#comment-167</link>
		<dc:creator>admin</dc:creator>
		<pubDate>Wed, 15 Jul 2009 23:58:17 +0000</pubDate>
		<guid isPermaLink="false">http://sysconfig.ossafe.org/?p=113#comment-167</guid>
		<description>Sounds familiar :-)</description>
		<content:encoded><![CDATA[<p>Sounds familiar <img src='http://sysconfig.ossafe.org/wp-includes/images/smilies/icon_smile.gif' alt=':-)' class='wp-smiley' /> </p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Yet again: Your wife&#8217;s name doesn&#8217;t qualify as a password! by Tomas Kramar</title>
		<link>http://sysconfig.ossafe.org/2009/07/yet-again-your-wifes-name-doesnt-qualify-as-a-password/comment-page-1/#comment-166</link>
		<dc:creator>Tomas Kramar</dc:creator>
		<pubDate>Wed, 15 Jul 2009 21:57:00 +0000</pubDate>
		<guid isPermaLink="false">http://sysconfig.ossafe.org/?p=113#comment-166</guid>
		<description>Yeah, I love those sites.. Especially my hosting provider who in addition disallows some &quot;special&quot; characters in passwords.

And I agree that brain is the best place, although I could tell you a story. I created a new account at the new bank, because they had a super high interest rate. I was assigned a temporary customer id and password, which I had to (both) change immediately after logging in to my internet banking account. So I picked a crazy paranoid password and id and saved it to my brain. Week after, my debit card arrived via snail mail with instructions to activate it in IB.

But I forgot the password. So I called the hotline, where they asked for my customer id, which I forgot too :)</description>
		<content:encoded><![CDATA[<p>Yeah, I love those sites.. Especially my hosting provider who in addition disallows some &#8220;special&#8221; characters in passwords.</p>
<p>And I agree that brain is the best place, although I could tell you a story. I created a new account at the new bank, because they had a super high interest rate. I was assigned a temporary customer id and password, which I had to (both) change immediately after logging in to my internet banking account. So I picked a crazy paranoid password and id and saved it to my brain. Week after, my debit card arrived via snail mail with instructions to activate it in IB.</p>
<p>But I forgot the password. So I called the hotline, where they asked for my customer id, which I forgot too <img src='http://sysconfig.ossafe.org/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Yet again: Your wife&#8217;s name doesn&#8217;t qualify as a password! by admin</title>
		<link>http://sysconfig.ossafe.org/2009/07/yet-again-your-wifes-name-doesnt-qualify-as-a-password/comment-page-1/#comment-165</link>
		<dc:creator>admin</dc:creator>
		<pubDate>Wed, 15 Jul 2009 15:08:23 +0000</pubDate>
		<guid isPermaLink="false">http://sysconfig.ossafe.org/?p=113#comment-165</guid>
		<description>Yes, to a certain extent that is true. However, many sites limit your password lengths (aka &quot;choose a password between 6 and 12 characters&quot;), which obsoletes your approach.

It&#039;s certainly arguable, but I think it&#039;s still better to write down a password on an offline media (which would require physical theft) than to choose a simple password, as simple passwords could be hacked by literally anyone out there, whereas your offline notes can only be accessed by a rather tiny group of people (if at all).

But we do agree on the fact that the brain is the best place to store a password :-)</description>
		<content:encoded><![CDATA[<p>Yes, to a certain extent that is true. However, many sites limit your password lengths (aka &#8220;choose a password between 6 and 12 characters&#8221;), which obsoletes your approach.</p>
<p>It&#8217;s certainly arguable, but I think it&#8217;s still better to write down a password on an offline media (which would require physical theft) than to choose a simple password, as simple passwords could be hacked by literally anyone out there, whereas your offline notes can only be accessed by a rather tiny group of people (if at all).</p>
<p>But we do agree on the fact that the brain is the best place to store a password <img src='http://sysconfig.ossafe.org/wp-includes/images/smilies/icon_smile.gif' alt=':-)' class='wp-smiley' /> </p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Yet again: Your wife&#8217;s name doesn&#8217;t qualify as a password! by Tomas Kramar</title>
		<link>http://sysconfig.ossafe.org/2009/07/yet-again-your-wifes-name-doesnt-qualify-as-a-password/comment-page-1/#comment-164</link>
		<dc:creator>Tomas Kramar</dc:creator>
		<pubDate>Wed, 15 Jul 2009 14:50:42 +0000</pubDate>
		<guid isPermaLink="false">http://sysconfig.ossafe.org/?p=113#comment-164</guid>
		<description>I think that obscure passwords are not good, because even if users pick such password, then usually one of these things happens:

1. They forget it, restore it and change it to something simple
2. They write it down somewhere

So I think that a better approach is to use whole sentences as passwords. Even simple sentences like &quot;My wife&#039;s name is ..&quot; are immune to dictionary attacks, bruteforce attacks and rainbow tables.</description>
		<content:encoded><![CDATA[<p>I think that obscure passwords are not good, because even if users pick such password, then usually one of these things happens:</p>
<p>1. They forget it, restore it and change it to something simple<br />
2. They write it down somewhere</p>
<p>So I think that a better approach is to use whole sentences as passwords. Even simple sentences like &#8220;My wife&#8217;s name is ..&#8221; are immune to dictionary attacks, bruteforce attacks and rainbow tables.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Why should you bother to use virtualisation? by admin</title>
		<link>http://sysconfig.ossafe.org/2008/08/why-should-you-bother-to-use-virtualisation/comment-page-1/#comment-163</link>
		<dc:creator>admin</dc:creator>
		<pubDate>Sat, 06 Jun 2009 18:27:14 +0000</pubDate>
		<guid isPermaLink="false">http://blog.admin-at-once.co.uk/?p=14#comment-163</guid>
		<description>HI dg,

I&#039;m not quite sure if I understand what you&#039;re planning to do. Why would you install anything on the hypervisor itself? That&#039;s actually (officially) not possible with ESXi (the free version), and probably not what you want, anyway. Consider the hypervisor as a kind of &quot;big&quot; BIOS. It allows you to connect your VI Client (the Windows application) to it to create and maintain your VMs, monitor their performance etc.
But it&#039;s not really supposed to do anything more than that.

You would probably want to create and setup the Gateway VM first, and connect it to vSwitch0 (connected to the physical public NIC) and vSwitch1 (virtual connection to all other VMs). And then you can put any number of VMs on that box, and only connect them to vSwitch1, hence making them accessible only via your Gateway VM.
You can connect vSwitch1 to a second physical NIC, which faces your local offices network, as well, if you want to. In that case, the Gateway VM would be the only connection for the other VMs _and_ your office network to &quot;world&quot;. Is that what you are planning to do?

Cheers
Carsten</description>
		<content:encoded><![CDATA[<p>HI dg,</p>
<p>I&#8217;m not quite sure if I understand what you&#8217;re planning to do. Why would you install anything on the hypervisor itself? That&#8217;s actually (officially) not possible with ESXi (the free version), and probably not what you want, anyway. Consider the hypervisor as a kind of &#8220;big&#8221; BIOS. It allows you to connect your VI Client (the Windows application) to it to create and maintain your VMs, monitor their performance etc.<br />
But it&#8217;s not really supposed to do anything more than that.</p>
<p>You would probably want to create and setup the Gateway VM first, and connect it to vSwitch0 (connected to the physical public NIC) and vSwitch1 (virtual connection to all other VMs). And then you can put any number of VMs on that box, and only connect them to vSwitch1, hence making them accessible only via your Gateway VM.<br />
You can connect vSwitch1 to a second physical NIC, which faces your local offices network, as well, if you want to. In that case, the Gateway VM would be the only connection for the other VMs _and_ your office network to &#8220;world&#8221;. Is that what you are planning to do?</p>
<p>Cheers<br />
Carsten</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Why should you bother to use virtualisation? by dg</title>
		<link>http://sysconfig.ossafe.org/2008/08/why-should-you-bother-to-use-virtualisation/comment-page-1/#comment-162</link>
		<dc:creator>dg</dc:creator>
		<pubDate>Thu, 04 Jun 2009 08:49:14 +0000</pubDate>
		<guid isPermaLink="false">http://blog.admin-at-once.co.uk/?p=14#comment-162</guid>
		<description>Hey Carsten nice article.

I&#039;m using ESXi 3.5 u4 on HP Proliant ML110 G5.And I need to setup a small experimental VM setup in the way similar to yours with the Gateway VM ( ie your VM1 ) acting as a reverse proxy.

In my test setup I want the Gateway VM to be accessible from hypervisor via dbclient ( dropbear&#039;s lightweight ssh client ). To be more clear the Gateway VM has two NICs ( one public facing &amp; one internal facing ). Now the I want the internal facing IP range to be visilble from hypervisor. Is that possible. If you think it can be done can you suggest me way to do it?

And it will be really kind of you if you can enumerate the steps for the experimental setup you mentioned, so that I can follow how to do it?</description>
		<content:encoded><![CDATA[<p>Hey Carsten nice article.</p>
<p>I&#8217;m using ESXi 3.5 u4 on HP Proliant ML110 G5.And I need to setup a small experimental VM setup in the way similar to yours with the Gateway VM ( ie your VM1 ) acting as a reverse proxy.</p>
<p>In my test setup I want the Gateway VM to be accessible from hypervisor via dbclient ( dropbear&#8217;s lightweight ssh client ). To be more clear the Gateway VM has two NICs ( one public facing &amp; one internal facing ). Now the I want the internal facing IP range to be visilble from hypervisor. Is that possible. If you think it can be done can you suggest me way to do it?</p>
<p>And it will be really kind of you if you can enumerate the steps for the experimental setup you mentioned, so that I can follow how to do it?</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Two neat storage machines by admin</title>
		<link>http://sysconfig.ossafe.org/2008/05/two-neat-storage-machines/comment-page-1/#comment-83</link>
		<dc:creator>admin</dc:creator>
		<pubDate>Sun, 28 Dec 2008 17:06:49 +0000</pubDate>
		<guid isPermaLink="false">http://blog.admin-at-once.co.uk/?p=10#comment-83</guid>
		<description>I&#039;m afraid I cannot really help you there. Currently I don&#039;t have access to any Perc/5i equipped Dell machines with FreeBSD on them. I believe that there are some hotswapping issues with FreeBSD and Perc controllers (regardless whether or not ZFS is being used). 
As those days hot-swap was not crucial, I haven&#039;t even tested that.</description>
		<content:encoded><![CDATA[<p>I&#8217;m afraid I cannot really help you there. Currently I don&#8217;t have access to any Perc/5i equipped Dell machines with FreeBSD on them. I believe that there are some hotswapping issues with FreeBSD and Perc controllers (regardless whether or not ZFS is being used).<br />
As those days hot-swap was not crucial, I haven&#8217;t even tested that.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Two neat storage machines by Jimmy</title>
		<link>http://sysconfig.ossafe.org/2008/05/two-neat-storage-machines/comment-page-1/#comment-76</link>
		<dc:creator>Jimmy</dc:creator>
		<pubDate>Sat, 27 Dec 2008 03:22:15 +0000</pubDate>
		<guid isPermaLink="false">http://blog.admin-at-once.co.uk/?p=10#comment-76</guid>
		<description>I&#039;ve been trying ZFS on a Dell 2950  with a PERC/5i controller.

I tried creating 6 RAID-0 arrays.

The problem i&#039;ve been having is if I eject a hot-swap drive, the RAID0 virtual disk disappears; it doesn&#039;t come back if I plug it
in..

Or plug in a replacement to test &quot;swapping in a replacement drive&quot;.


The only way i&#039;ve found to get the drive back requires a reboot, which is troublesome...

Do you know of a way to make hot swap work like it should?  (No rebooting the server)</description>
		<content:encoded><![CDATA[<p>I&#8217;ve been trying ZFS on a Dell 2950  with a PERC/5i controller.</p>
<p>I tried creating 6 RAID-0 arrays.</p>
<p>The problem i&#8217;ve been having is if I eject a hot-swap drive, the RAID0 virtual disk disappears; it doesn&#8217;t come back if I plug it<br />
in..</p>
<p>Or plug in a replacement to test &#8220;swapping in a replacement drive&#8221;.</p>
<p>The only way i&#8217;ve found to get the drive back requires a reboot, which is troublesome&#8230;</p>
<p>Do you know of a way to make hot swap work like it should?  (No rebooting the server)</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Distributed Data Centre in-a-box by admin</title>
		<link>http://sysconfig.ossafe.org/2008/08/distributed-data-centre-in-a-box/comment-page-1/#comment-22</link>
		<dc:creator>admin</dc:creator>
		<pubDate>Fri, 31 Oct 2008 09:00:40 +0000</pubDate>
		<guid isPermaLink="false">http://blog.admin-at-once.co.uk/?p=15#comment-22</guid>
		<description>Thanks, Michel.

I did quite a lot of configuration and testing here, but the idea of using MySQL NDB Cluster and GlusterFS over that long distance (one server in the UK, one in the US) failed. It&#039;s too slow, unfortunately. So I would recommend not to try this approach for a Mini-CDN like thing. Actually I am considering to get a second server in the UK -- in the same data centre. Then it should work just fine. Stay tuned. ;-)</description>
		<content:encoded><![CDATA[<p>Thanks, Michel.</p>
<p>I did quite a lot of configuration and testing here, but the idea of using MySQL NDB Cluster and GlusterFS over that long distance (one server in the UK, one in the US) failed. It&#8217;s too slow, unfortunately. So I would recommend not to try this approach for a Mini-CDN like thing. Actually I am considering to get a second server in the UK &#8212; in the same data centre. Then it should work just fine. Stay tuned. <img src='http://sysconfig.ossafe.org/wp-includes/images/smilies/icon_wink.gif' alt=';-)' class='wp-smiley' /> </p>
]]></content:encoded>
	</item>
</channel>
</rss>
