From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-qt0-x22d.google.com (mail-qt0-x22d.google.com [IPv6:2607:f8b0:400d:c0d::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by lists.bufferbloat.net (Postfix) with ESMTPS id 7340F3B2A4 for ; Thu, 4 Jan 2018 17:49:40 -0500 (EST) Received: by mail-qt0-x22d.google.com with SMTP id m59so3765871qte.11 for ; Thu, 04 Jan 2018 14:49:40 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to :content-transfer-encoding; bh=0s2TyinVm3z4QCeuAFiYSBLZAnsircPltAAQUiFqRRw=; b=BeoysVgSdTXem7iNoYdta1K1cgpL4gv4F8bFNLMrQqIcM7/ugashOkpuCgxKCnvnxv eH+BcjaSwQ8sCv9geCKZH2i4tCgMkVKwgwkdJnaDQahCuKjs4vcS3gMnapIe+AY+gNAk wTAnuhYHXvYSJznT/zsg68+gm656FNBd0dD+y43jnjnauWrn9Wlji+i+oOG+eDG+80fW 780R3j54PgExAshR2MRKH4jxWOX8ToQpFlr4hIYb58M2W4BNnGfzTZ7f76ERhah3YkGn 2NYjxvY6g4GTMJWB3ReLHItpda5fTRkMM9W2AqH+kaOUg7eLoxy6hTbNTSa0Ev+4ps5O d1fw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to :content-transfer-encoding; bh=0s2TyinVm3z4QCeuAFiYSBLZAnsircPltAAQUiFqRRw=; b=tOwJgcclAiV2rno4XeMAGEgzTMRi8OEhNueiBNo3lzEhMOUHlaLqyibROtpiGsQtbZ DoiAPzIpbSm+S0WsqheWLDhhsUUkJDOZnfwzClhL2W7nZXgEAHoLW1oeAn/EDZddMvEI nYy1jwEh8CcxvgUtDrHqpG/KRag9rk7uTb8yrFsVYVsRa4qb4xZYAMKnsC6hHBkM3ldR qtn15Q2PoQXo+mZlnWg1lly3IAF8OlTRdhiB0HQBqnH5YzfuUmjX0qQwIziTaZc/O3jH A0baKJ9HZQCZrqHysaxz0scaRtFIjOIExw+okN2MLI9havrnVwGDNKbee0I3mvAsqq0j fY8w== X-Gm-Message-State: AKwxytfLTTvmy2iK1Ss0IMeb2M5PQfWGiAHqk2kfUOcS6s4yaKogDYmP xZWdLPAVqXfHUwyoknMLyShxBxU4Xa7OrsUR9qnP1A== X-Google-Smtp-Source: ACJfBouNe+0pSOJenf+iU2Y9bqJo5+rmEBuszUbbKLzi+cK1WsfAJMoqqg/U9RDfCT3HxFe649/G76t68pcC4TnnTUw= X-Received: by 10.200.51.216 with SMTP id d24mr1617637qtb.339.1515106179732; Thu, 04 Jan 2018 14:49:39 -0800 (PST) MIME-Version: 1.0 Received: by 10.12.193.93 with HTTP; Thu, 4 Jan 2018 14:49:39 -0800 (PST) From: Dave Taht Date: Thu, 4 Jan 2018 14:49:39 -0800 Message-ID: To: cerowrt-devel@lists.bufferbloat.net Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Subject: [Cerowrt-devel] bufferbloat.net prep X-BeenThere: cerowrt-devel@lists.bufferbloat.net X-Mailman-Version: 2.1.20 Precedence: list List-Id: Development issues regarding the cerowrt test router project List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 04 Jan 2018 22:49:40 -0000 Most of the bufferbloat.net servers are on linode. They are planning a fleet-wide reboot: https://blog.linode.com/2018/01/03/cpu-vulnerabilities-meltdown-spectre/ 'Course this doesn't help as much as you'd like if one or more of your servers is already compromised, and had keys or shared passwords. So - sigh - theoretically I'm on vacation - I'm planning on revoking those keys, and rebuilding others from scratch. I might, like other big providers do, end up building my own cloudy kernels again. There's only one server I seriously care about the security of in the cloud, the vpn server. Maybe it's time to truly decentralize the vpn this time around. I think of how exposed others must be, and shudder. "If your provider does not have a fix then now is a good time to practice that recovery plan you should have for what to do when your cloud provider goes down....." - Alan Cox https://plus.google.com/+AlanCoxLinux/posts/Z6inLSq4iqH On Thu, Jan 4, 2018 at 2:35 PM, Joel Wir=C4=81mu Pauling wrote: > I was too busy skateboarding holding on to the bumper of my Limo to take > notice obviously. > > On 5 January 2018 at 11:26, Jonathan Morton wrote= : >> >> > On 5 Jan, 2018, at 12:09 am, dpreed@deepplum.com wrote: >> > >> > I should point out here that I was one of the researchers that helped >> > develop the original multi-level security systems then. Those "colored >> > books" come from us. >> >> Obligatory: https://www.youtube.com/watch?v=3D4U9MI0u2VIE >> >> - Jonathan Morton >> > > > _______________________________________________ > Cerowrt-devel mailing list > Cerowrt-devel@lists.bufferbloat.net > https://lists.bufferbloat.net/listinfo/cerowrt-devel > --=20 Dave T=C3=A4ht CEO, TekLibre, LLC http://www.teklibre.com Tel: 1-669-226-2619