Disqus - Latest Comments for bear

Re: Nginx SSL Config for Forward Secrecy

bear — Mon, 05 Aug 2013 16:40:01 -0000

Thanks for the update - I tweaked the cipher list with your change

Re: Deploy secrets and git – why you should not combine them

bear — Sat, 06 Jul 2013 22:50:52 -0000

I didn't go into detail because it varies based on how you deploy. With something like Fabric or Capistrano, I would build a local file from a template with the secret values loaded into memory from the secure store.

Puppet and Chef have similiar methods of retrieving named items or structures from an encrypted store.

Deploying a server is, well at least for how I do it ;), always a provision step followed by a configuration step.

Re: Deploy secrets and git – why you should not combine them

bear — Sat, 06 Jul 2013 19:13:33 -0000

Most shops have two groups of people who need to know the configuration and/or deploy secrets: Ops and QA/Devs and each need a different set of secrets and they should not have any knowledge about each other. For instance devs need something to use when working locally but that dev server should not be the same as what Ops deploys - hence their secrets are not shared.

In all of the environments i've worked or created, the secrets are always pushed from the deploy servers to the production servers as part of the configuration management step and are stored in their own environment.

I guess some could store the secrets in a private git server that is behind the firewall and all of that, but I would still consider that sub-par because of the social aspect as I mentioned.

Re: Nginx SSL Config for Forward Secrecy

bear — Sat, 06 Jul 2013 16:19:21 -0000

I should be find for IE10 for everything *except* the forward secrecy as IE10 doesn't support the ciphers required IIRC

Re: Nginx SSL Config for Forward Secrecy

bear — Mon, 01 Jul 2013 17:33:39 -0000

thanks - I updated the post again, can you double check that I put it in the proper spot?

what is your twitter handle - I want to give you credit for enhancing the config to make it even better!

Re: Nginx SSL Config for Forward Secrecy

bear — Mon, 01 Jul 2013 17:06:20 -0000

ugh! great catch (the $ comes from the terminal I was cutting and pasting from)

I updated the post with the full cipher string.

Re: I welcome Google as the new Borg

bear — Mon, 20 May 2013 05:12:10 -0000

Your GMail account is still using the GTalk interface - sign into only Google+ or on your Android after updating and you will see that while you receive presence updates you will not be able to send or receive any chat messages.

Re: XMPP features now missing from GTalk (aka Hangout Chat)

bear — Mon, 20 May 2013 05:10:16 -0000

Thanks for the response and helping me see more of the details from someone else's view.

Now I guess we get to explore what type of "bridge" they are building (and what materials it's made of - to extend their metaphor.)

Re: logstash and kibana – chewy log goodness

bear — Sat, 10 Nov 2012 15:26:32 -0000

Let me know how you like it! I'm sure they would love to list Superfeedr as a "site using" entry.

Re: It’s the little things

bear — Mon, 05 Nov 2012 11:56:22 -0000

thank you sir!

Re: Context and the Future Ultimate Gadget | &yet | the blog

bear — Mon, 09 Jul 2012 11:47:57 -0000

A lot of what your talking about has been chewing at the back of my brain for the last decade or so and I got the ideas from reading about the early work by Alan Kay at Xerox Parc - http://en.wikipedia.org/wik... is one example but the one I really remember I cannot find any links for (sad that the web has gotten away from the original concept but that's another post.)

The idea was that you would carry around small tablets that are nothing but remote displays that change context based on the room your in or the desk your at and that could be "pinned" to certain views.

Not to distract from your excellent post tho - nice job!

Re: websockets – the bell-bottoms of the web?

bear — Mon, 03 Oct 2011 00:28:00 -0000

More and more I'm finding that I need to dive into Node.js to see how it can be used from an XMPP point of view.

Thanks for the info on node-xmpp-bosh

Re: websockets – the bell-bottoms of the web?

bear — Mon, 03 Oct 2011 00:27:19 -0000

I get what your saying, I think i'm saying my point badly... My worry is that after solving the various point-to-point issues and scaling issues *inside* of node.js they may find that the solutions have already been solved by other application stacks or tools.

Node.js seems to be a lot of NIH libraries - but even as I'm typing that I'm also thinking of Java, Ruby, Python, Perl ... the list is quite long for sure :)

Re: IETF Publishes Updated XMPP RFCs

bear — Sun, 10 Apr 2011 15:21:41 -0000

done!

Re: MOAR GREEN

bear — Wed, 30 Mar 2011 19:27:48 -0000

ok, updated with a picture from Aki of the tegra rack

Re: MOAR GREEN

bear — Wed, 30 Mar 2011 19:12:55 -0000

That is the problem with being remote - I have no idea what the Tegra "farm" looks like ;)

Re: yard 2.0

bear — Wed, 30 Mar 2011 10:31:24 -0000

Thanks!

I hadn't considered that at all - good point! The project started as a fence repair job because the back fence was basically falling down and we had new neighbors move in over the winter so I did not want them to have to put up with such a mess (the prior neighbors were never home and never complained.)

It has definitely improved the mood in subtle ways, now when I walk out to the truck I am not seeing all the little things that I have always had in my mind to fix or just plain looked messy.

Re: pushing the reset button

bear — Fri, 18 Mar 2011 15:57:42 -0000

Jerry,

thanks for letting me know that this isn't an isolated thing and i'm rooting for you also. It helps knowing that if i'm out-and-loud (to borrow a phrase from the gay community) others are listening.

Re: pushing the reset button

bear — Fri, 18 Mar 2011 14:06:26 -0000

it's working I think as this morning when I was about ready to slide into one of my indecision ruts, I reached up to twiddle my beard (as I tend to do a *lot*) and found stubble - which promptly reminded me of what i'm trying to do.

So I may have to keep the clean look until I've had a couple months of success

Re: pushing the reset button

bear — Fri, 18 Mar 2011 06:58:00 -0000

thanks!

Re: pushing the reset button

bear — Fri, 18 Mar 2011 06:57:56 -0000

I always wanted a TomSellek mustache!

No worries tho - the beard is coming back so the Mario Brothers look (as my wife is now calling me) is short-lived

Re: pushing the reset button

bear — Thu, 17 Mar 2011 20:59:08 -0000

thanks!

I have to say I'm not liking the clean look (or feel!) so the beard will probably be back

Re: pushing the reset button

bear — Thu, 17 Mar 2011 14:56:28 -0000

yea, it's a shame that I look so much younger without a beard since I very rarely like going without one

Re: Best of Breed

bear — Wed, 02 Feb 2011 05:58:55 -0000

I really liked the list of items you have gathered but would suggest an addition and a removal if I could...

The removal is for Tinderbox3 as I don't think it (or really any of the Mozilla Tinderbox clones) is active right now.

The main addition would be for Jenkins (aka Hudson) as it is a wonderful CI server but I would also give http://sifterapp.com/ an entry in your bugtracker list if you don't mind hosted apps.

I would also give Gitorious another look - a friend of mine installed it on the server we use for xmppnews.com and he didn't report any major grief.

Re: why move to mailroute.net now?

bear — Mon, 24 Jan 2011 14:46:25 -0000

Agree that it wasn't trouble for anything except the amount of time spent doing the actions and that's the driving item for the change :)

My site was also using GreyListing, so for me it's a non-issue - but I can see why you would want to avoid that for newly registered sites.

Losing the control is the one thing that I'm going to see over time if I can handle - the first time I have a problem and I am not able to see/fix it fast, that may change my mind :)