When I wrote about the practical appeal of a mesh-capable VPNsystem , Walex left a comment that mentioned endto end IPsec. When I read the comment I had a reaction of 'that'snot the same thing', and then I had to think about why I felt thatway. Part of it is what you're authenticating when you use a 'VPN'like system, either mesh or otherwise, because there is actually awide spread of answers.

Traditional VPN solutions are almost always theoretically

We have an slowly growingcollection of internal web sites (for staff) that need authentication,and we also have a web single sign on (SSO) system. But despitehaving a SSO system, we barely use it and we keep using Apachebased HTTP Basic Authentication instead, despitethe annoyance and inconvenience of having to tell various websitesthe same thing. The fundamental problem that keeps us doing this isthe tradeoff between a SSO system and availability.

A SSO system is very convenient when it works, but if and

Suppose, hypothetically, that you're the kind of person who iscertain that your email is so sensitive that it should never beautomatically forwarded. If you send email to person@example.organd the person likes to forward their email to GMail, well, tough.Your email is too important; they can read it through example.orgor not at all. Given the anarchy of Internet email, it sounds likethis would be hard to achieve, but don't worry; modern email standardshave

Suppose that you have Grafana Loki set up to collect system logs from a midsized number of Linuxservers, say a hundred of them. Logs in Loki need labels so you cannarrow searches down and understand the context of the messages;at least the host name of the server, and then it's sensible towant things like the systemd unit, the syslog priority, the syslogfacility (since not all messages come from a systemd unit), andlikely the syslog identifier (especially since you probably don't

In Why Aren't Programming Language Specifications Comprehensive? ( via ),Laurence Tratt shows the following example of a difference in behaviorbetween CPython and PyPy:

$ cat diffs.pyprint(str(0) is str(0))$ python3 diffs.pyFalse$ pypy diffs.pyTrue

Tratt notes that Python's language specification doesn't specifythe behavior here, so both implementations are correct. Python doesthis to preserve the ability of implementations to make differentchoices, and Tratt goes on

Perhaps we 're peculiar, but oneof the challenges we keep running into over and over again in ourweb servers is that someone wants to expose access-restricted Unixfiles to selected local people via the web, rather than makingpeople log in and slog through the filesystem. The actual accessrestrictions are not a problem because we have a well developedsystem using HTTP Basic Authentication (andsomeday it will be extended to be a single sign on environment).However this still leaves us with the challenge of giving the

A simple model of the size of windows and how they can be resizedis that windows have a size in pixels and they can be resized pixelby pixel. Okay, you probably want to make it so that windows canhave a minimum and a maximum size, because not everything cansensibly be made arbitrarily small or large (if you set the minimumand the maximum the same, your window is implicitly not resizable).However, windows in X can be more complicated than that, as I sortof mentioned in

In days long ago, I used Twm as my window manager. Twm uses manual window placement for newwindows; when a program wants to create a new window and it doesn'texplicitly specify where the window should be on the screen, youmove your mouse around to wherever you want the window to be (well,usually the top left of the window). Then you can click the leftmouse button to place it there, or the right mouse button to invokea special twm window placement feature. To

Suppose, not entirely hypothetically , that one day youdiscover your (Linux) kernel logging messages like this:

EXT4-fs warning (device md1): ext4_dx_add_entry:2461: Directory (ino: 102236164) index full, reach max htree level :2EXT4-fs warning (device md1): ext4_dx_add_entry:2465: Large directory feature is not enabled