What I think OpenSSH 8.2+'s work toward deprecating 'ssh-rsa' means
Today I discovered about what was to me a confusing and alarming note inthe OpenSSH 8.3 release notes ( via ),which has actually been there since OpenSSH 8.2. Here is the text(or the start of it):
Future deprecation notice
It is now possible to perform chosen-prefix attacks against theSHA-1 algorithm for less than USD$50K. For this reason, we will bedisabling the "ssh-rsa" public key signature algorithm by default in anear-
My failure with Xpra (probably because what I want is almost impossible)
I'll start with my tweet about tryingout Xpra :
In theory xpra should be an improvement over 'ssh -X'. In practice,the Fedora 31 version doesn't like my SSH authentication setup or thenmy HiDPI environment with fvwm, so that's basically a failure. Ohwell, 'ssh -X' works well enough.
In this current time of working from home , I'vewound up wanting to run a number of X programs remotely. My homeDSL link is good
A cheatsheet for Python's pip for how I use it
To save me having to look up or try to remember the various piparguments and usage the next time I need to do something like updatethe pyls Python LSP server , here is acheatsheet for how I use pip.
First, I always use pip with a 'user' install (the --user argument),which installs things in $HOME/.local . On my machines, pip putsbinaries in .local/bin and installed Python packages in.local/lib/pythonX.Y; some
Security questions and warnings are effectively confirmation requests
Every so often, well intentioned people throw up security questionsand warning messages and so on in an attempt to help people, as inthe recent case of the new warning on many extensions onaddons.mozilla.org . These don'twork in practice, as I've written about before (for example, thatasking users questions never increases security ). However there is an important reasonfor this beyond things like users not knowing enough to make theright choice , which I want to mentionexplicitly and clearly
Working out how frequently your ICMP pings fail in Prometheus
Suppose, not hypothetically, that your Prometheus setup pings a bunch of machines (through the blackbox exporter )and some of those pings seem to fail some of the time. If they failcontinuously for long enough, you'll raise an alert, but beyondthat you may want to know how often they've flaked out over sometime period for use in a Grafana dashboard.Today, I wanted this both as a failure percentage and then as acount of how many pings had failed.
Our Blackbox setup reports
Mixed feelings about Firefox Addons' new non-Recommended extensions warning
I don't look at addons on addons.mozilla.org very often, so I didn't know untilnow that Mozilla has started showing a warning on the page for manyaddons, such as Textern (currently),to the effect, well, let me just quote what I see now (more or less):
[! icon] This is not monitored for security through Mozilla'sRecommended Extensions program. Make sure you trust it beforeinstalling.
Learn more
(Textern is among the Firefox addons
Switching to the new in-kernel WireGuard module was easy (on Fedora 31)
One of the quietly exciting bits of recent kernel news for me isthat WireGuard is now built in tothe Linux kernel from kernel 5.6 onward. I've been using a privateWireGuard tunnel on my Fedora machines forseveral years now, but it's been through the additional COPRrepository with an additional DKMS basedkernel module package, wireguard-dkms . Among other things, thiscontributed to my multi-step process fo updating Fedora kernels .
When I first updated to a Fedora 5.6 kernel,
How I work on Python 2 and Python 3 with the Python Language Server (in GNU Emacs)
Python is one of the programming languages that I usually edit inGNU Emacs. These days, that means using the Language Serverprotocol through lsp-mode and the pyls Pythonlanguage server .Back when I first set this up and wrote early notes on usingLSP-based editing of Python , I had not solvedthe problem of wanting to edit both Python 3 and Python 2 basedcode in my GNU Emacs sessions.
If you want to do this, it turns out to be important to run eitherthe Python 2 pyls
Reading the POSIX standard for Unix functions is not straightforward
I recently wrote about exploring munmap() on page zero , and in the process looked at the POSIX specificationfor munmap() .One of my discoveries about the practical behavior of Unixes hereis that OpenBSD specifically disallows using munmap() on addressspace that isn't currently mapped (see munmap(2) ). In my entry, I said that itwasn't clear whether POSIX strictly authorized this behavior,although you could put forward an interpretation where it was okay.
In a comment, Jakob Kaivo
Some views on having your system timezone set to UTC
Some people advocate for setting the system timezone on servers toUTC, for various reasons that you can read about with some Internetsearches. I don't have the kind of experience that would give me strongopinions on this in general, but what I do know for sure is that for us , it would be a bad mistaketo set the system timezone to UTC instead of our local time ofAmerica/Toronto . In fact I think we are a greatexample of a worst case for using UTC as the system