The news of the time interval is that Apple is limiting TLScertificate lifetimes to 398 days for certificates issued fromSeptember 1st onward ( also , also ).This effectively bypasses the CA/Browser Forum, where Google putforward a ballot on this in 2019 but couldn't get it passed ( also ).Specifically, it was voted down by a number of CAs; some CAs votedin favor, as did all browser vendors. Now Apple has decided todemonstrate who has actual power

One of the things that is an issue for any GUI desktop and for manygeneral programs is keeping track of what program should be usedto view or otherwise handle a particular sort of file, like JPEGs,PDFs, or .docx files. On Ubuntu and Debian systems, this is handledin part through the magic file /etc/mailcap , which contains a bunchof mappings from MIME types to what should handle them, with varioustrimmings. You can also have a personal version of this file in yourhome directory

Once upon a time when GMail was new, one of my gripes about it wasthat, unlike Hotmail and Yahoo and other webmail providers at the time,it didn't add a header to outgoing email that had the original IP thatthe user submitted the message from. My mail filter systems of the timeliked to use that origin IP address information as part of filteringdecisions, and GMail lacking it made it harder to selectively deal withspam from them (there has always been spam from GMail).

In the

Many guides to deciding what to alert on draw a strong distinctionbetween alerts and less important things (call them 'notifications').The distinction generally ultimately comes about because alertswill disturb the people who are on call outside of working hours,and that should be reserved for serious things that they can andshould take action on. This is often threaded through assumptionsand guidelines in metrics and alerting systems; for example,Prometheus implicitly follows this in their guide to alerting , and the philosophydocument they link to assumes that

Currently M.2 NVMe drives are the best drives you can get as far asperformance goes, with no superior drive interconnect really on thehorizon as far as I know. However, they have a practical drawback, whichis that they're only available in a limited range of sizes (especiallyif you want cost effective sizes) and common garden variety desktopmotherboards only have two or even one M.2 slots. My current homemachine has two M.2 NVMe slots; my officeworkstation has only one

When I first started using Cinnamon (which was back here for serioususe), I thought of it just as the closest good thing I could getto the old Gnome 2 environment (as Gnome 3 is not for me ). Over time, I've come to appreciate Cinnamonfor itself, and even propagate aspects of Cinnamon back into mydesktop fvwm setup (such as keyboardcontrol over window position and size ).One of the little Cinnamon aspects I now appreciate is its slickand convenient keyboard handling of what

Stop Using Encrypted Email is about all of the fundamental reasons that you should do that,from Latacora . See also eg PatrickMcKenzie ,and the discussion on Hacker News where there aremore comments from Latacora people (look for tptacek and lvh ).

(Latacora people include Thomas Ptacek ,who you may remember from Against DNSSEC .)

For a long time I've been in the habit of considering a high loadaverage (or an elevated one) to be a primary indicator of problems.It was one of the first numbers I looked at on a system to see howit was, I ran xload s on selected systems to watch it more or lesslive, I put it on Grafana dashboards, and we've triggered alertson it for a long time (well before our current metrics and alertsetup was set up). But these

In a recent entry , I mentionedthat we periodically capture ps and top output on our primarylogin server, and in fact we do it on pretty much all of our servers.There are three parts to this; the history of how we wound up here,how we do it, and why we've come to do it as a routine thing on ourservers.

We had another monitoring system before our current Prometheusbased one . One of its handy featureswas that when it triggered a load average alert,