Optionsbleed: Don’t get your panties in a wad

You’re a paranoid schizophrenic if you think optionsbleed affects you in any meaningful way beyond what you should have already been aware of, unless you run systems with multiple tenants that upload their own crap to document roots and you’ll happily serve as-is, yet pretend to provide your customers with security; this is a use-after-free…

Kolab Now Really Beta (DevOps Edition)

This week, I accidentally made Kolab Now Beta really beta — though pre-alpha more than beta, strictly speaking — completely intentionally; Oops, I #devops'ed https://t.co/zp9ncO0w1k — Kolab Operations (@kolabops) September 5, 2017 I can now proudly announce it runs off of otherwise public GIT source repositories directly, and the developers working on the projects involved…

Performance Testing w/ Fedora Help(*2)

In the next couple of weeks or so, we’ll be executing performance testing of Kolab on OpenPower in one of the world’s largest testing facilities. How do we do this? With help of Fedora(^2). Part I: The Data Set A good performance test requires a good data set. In the particular set of tests, we…

Kolab for Open Power

Among a variety of deliberations concerning the security and transparency of a little Kolab thing running anywhere — at home, rented space or hybrid cloud — this post is about the transparency of the hardware layer, and our ongoing efforts to make that so. We have said what, why and how on LWN, at events…

Kolab Now: Grey Listing Applied

Aside from other anti-spam measures, we have applied a concept known as grey listing. Here’s a summary of how grey listing works: When an email delivery attempt is made, we know the sending server’s IP address, the sender address, and the recipient address. If this is a previously unseen combination of facts, the delivery attempt…

Kolab Now: Another Round of Updates

This weekend has seen a variety of systems being issued either of, or combination of, the following commands; yum -y update yum –enablerepo=kolab-16-updates-testing -y update puppet agent -t –no-noop reboot rm -f /dev/null; mknod -m 666 /dev/null c 1 3 I don’t expect everyone to know and understand what these pieces mean, so I’ll divide…

Purposefully Not the Center of Attention

While it’s been argued before, over and over again, that the concepts behind a crypto-currency like BitCoin or Ethereum or Ripple or LiteCoin might mean the upheaval of the traditional economy, it’s also been argued that it is actually the underlying blockchain technology that implies the change of pace. I disagree. One can arguably not…

Dear Lazyweb: No video for VLC on Fedora 26?

Dear Lazyweb, even though Fedora 26 is not yet released, I’ve upgraded — now, VideoLAN isn’t displaying video any longer. If I start it with —no–embedded–video I do get video, but it doesn’t seem to be able to run or switch to/from fullscreen. Resetting my preferences has not helped so far. I would appreciate to…

Phabricator Packages for EPEL, Fedora

Using Pagure and COPR, Tim Flink and I have settled on using common infrastructure to further the inclusion of Phabricator in to the Fedora repositories (and EPEL). I’m hoping this will bear fruit and get more people on board. Our Pagure repository is at Phab Phour Phedora — a mix of Fabuluous Four, Phabricator for…

Heads-up on NSS 3.27, Guam

Many distributions, among which Fedora in 23 & 24, and Arch Linux, have recently shipped NSS 3.27, sometimes packaged as 3.27.0, or even 3.27.1. This release may just have triggered some confusion about disabling, enabling, and defaulting to or not, the NSS implementation of TLS version 1.3 (currently in draft). Fun! We’ve received reports from…