| 00:19.38 | *** join/#uphpu captbrogers (~brian@c-71-199-23-219.hsd1.ut.comcast.net) |
| 01:10.36 | *** join/#uphpu wps (~wps@71-213-65-189.slkc.qwest.net) |
| 01:10.36 | *** mode/#UPHPU [+o wps] by ChanServ |
| 01:35.43 | *** join/#uphpu captbrogers (~brian@c-71-199-23-219.hsd1.ut.comcast.net) |
| 01:45.32 | tierra | SunSparc: agreed... it's really less about the cost of running a certain number of EC2s with equivalent resources as hosting provider X (the hosting provider will almost always beat AWS there), and more to do with the availability and usage of the APIs to automatically spin up and discard servers based on usage ... that said, there's tons of situations where it ends up actually being cheaper in the end when used correctly |
| 01:48.25 | tierra | providers like Linode now offer the same type of API, but their billing is still stuck on the old model not really based on usage, so it's hard (and sometimes impossible) to do the calculations on how much bandwidth you're allowed to use before going over based on how many nodes you have spun up (does that only caculate based on number of running nodes at the end of the month/year?), etc... |
| 01:48.46 | SunSparc | tierra: Yes, exactly. |
| 01:48.51 | tierra | I think it's the same at Rackspace |
| 01:48.58 | tierra | but I haven't used Rackspace |
| 01:49.55 | SunSparc | I have accounts and servers on both AWS and Rackspace. I have been more impressed with AWS so far. I think I will ditch my Rackspace account and go with AWS for my current project. I think AWS will scale better with me. |
| 01:50.50 | tierra | besides, S3 + CloudFront == best CDN provider ever |
| 01:51.59 | SunSparc | Yeah, they have so many tools that make medium to large scale web sites so much more manageable. |
| 01:52.14 | SunSparc | Seems like they cater to larger solutions. |
| 01:52.28 | SunSparc | Though they do have smaller solutions too. |
| 01:54.41 | *** join/#uphpu TuxToaster (~TuxToaste@c-24-10-187-146.hsd1.ut.comcast.net) |
| 01:54.41 | *** mode/#UPHPU [+v TuxToaster] by ChanServ |
| 01:55.10 | SunSparc | ~TuxToaster TuxToaster |
| 01:55.10 | ibot | ACTION pours gas all over TuxToaster, stands back and tosses a match |
| 02:41.26 | TuxToaster | $lart SunSparc |
| 02:41.27 | raifbot | follow's SunSparc with a gauntlet and ... scratch ... HUMILIATION. |
| 02:42.14 | SunSparc | weird |
| 02:43.08 | TuxToaster | *shrugs* |
| 02:45.05 | SunSparc | ~shrug TuxToaster |
| 02:48.48 | TuxToaster | ~destroy SunSparc |
| 02:48.48 | ibot | no |
| 02:48.54 | TuxToaster | seriously? |
| 02:48.58 | SunSparc | lol |
| 02:49.04 | SunSparc | :) |
| 02:49.11 | SunSparc | I have immunity |
| 02:50.30 | TuxToaster | $8ball does SunSparc have immunity? |
| 02:50.31 | raifbot | TuxToaster - It is certain. |
| 02:50.33 | TuxToaster | ... |
| 02:50.40 | SunSparc | LOL |
| 02:50.57 | SunSparc | better quit while I am ahead |
| 02:51.02 | TuxToaster | SunSparc: do you feel lucky? |
| 02:51.13 | TuxToaster | SunSparc: well, do ya, punk? |
| 02:51.46 | SunSparc | heh, yeah, I do |
| 02:52.05 | SunSparc | ~tardis SunSparc |
| 03:09.49 | TuxToaster | lol |
| 03:16.45 | SunSparc | :) |
| 03:25.28 | *** join/#uphpu opapo (~quassel@75-169-190-236.slkc.qwest.net) |
| 03:25.29 | *** mode/#UPHPU [+v opapo] by ChanServ |
| 03:43.13 | *** join/#uphpu UtahDave (~boucha@c-71-195-213-200.hsd1.ut.comcast.net) |
| 03:43.13 | *** mode/#UPHPU [+o UtahDave] by ChanServ |
| 04:04.45 | *** join/#uphpu johnanderson (~john@208.53.57.216) |
| 04:04.45 | *** mode/#UPHPU [+v johnanderson] by ChanServ |
| 04:10.40 | *** join/#uphpu captbrogers (~brian@c-71-199-23-219.hsd1.ut.comcast.net) |
| 04:11.50 | *** part/#uphpu captbrogers (~brian@c-71-199-23-219.hsd1.ut.comcast.net) |
| 05:04.57 | *** join/#uphpu josephscott (~josephsco@208.95.152.44) |
| 05:05.19 | josephscott | $rlart |
| 05:05.19 | raifbot | hauls Heartsbane up by the scruff of the neck and spanks him until he waddles. |
| 05:26.57 | *** join/#uphpu Bikerdan_ (~Bikerdan@67.214.225.82) |
| 06:41.55 | *** join/#uphpu itimber (~itimber@cpe-72-128-63-242.kc.res.rr.com) |
| 06:41.55 | *** mode/#UPHPU [+v itimber] by ChanServ |
| 12:47.35 | *** join/#uphpu john_anderson_ (~john@208.53.57.216) |
| 12:52.09 | *** join/#uphpu TuxToaster (~TuxToaste@wfw.vivint.com) |
| 12:52.09 | *** mode/#UPHPU [+v TuxToaster] by ChanServ |
| 13:18.40 | *** join/#uphpu captbrogers (~brian@128.187.222.219) |
| 13:36.09 | *** join/#uphpu itimber (~itimber@74.51.216.160) |
| 13:36.10 | *** mode/#UPHPU [+v itimber] by ChanServ |
| 13:50.50 | *** join/#uphpu john_anderson_ (~john@208.53.57.216) |
| 14:19.52 | *** join/#uphpu opapo (~quassel@205.118.116.101) |
| 14:19.52 | *** mode/#UPHPU [+v opapo] by ChanServ |
| 14:36.18 | *** join/#uphpu veonik (~veonik@107-1-184-178-ip-static.hfc.comcastbusiness.net) |
| 14:44.40 | *** join/#uphpu wps (~wps@wfw.vivint.com) |
| 14:44.41 | *** mode/#UPHPU [+o wps] by ChanServ |
| 14:46.14 | *** join/#uphpu mahelious (~mahelious@ip65-46-59-10.z59-46-65.customer.algx.net) |
| 14:46.14 | *** mode/#UPHPU [+v mahelious] by ChanServ |
| 14:58.59 | *** join/#uphpu kendsnyder (~kendsnyde@67-2-160-96.slkc.qwest.net) |
| 14:58.59 | *** mode/#UPHPU [+v kendsnyder] by ChanServ |
| 15:00.18 | mahelious | i had no idea the deseret alphabet had been added to unicode. |
| 15:00.28 | mahelious | thats some pretty esoteric history to commit. |
| 15:02.53 | *** join/#uphpu kendsnyder1 (~kendsnyde@67-2-160-96.slkc.qwest.net) |
| 15:13.42 | *** join/#uphpu jonkirkman (~jonkirkma@wfw.vivint.com) |
| 15:16.04 | *** join/#uphpu wps (~wps@wfw.vivint.com) |
| 15:16.05 | *** mode/#UPHPU [+o wps] by ChanServ |
| 15:16.40 | *** join/#uphpu carmony (~carmony@199.104.95.10) |
| 15:16.40 | *** mode/#UPHPU [+o carmony] by ChanServ |
| 15:17.17 | *** join/#uphpu kendsnyder (~kendsnyde@67-2-160-96.slkc.qwest.net) |
| 15:17.17 | *** mode/#UPHPU [+v kendsnyder] by ChanServ |
| 15:18.51 | *** join/#uphpu Monnok (~monnok@c-67-166-97-68.hsd1.ut.comcast.net) |
| 15:18.51 | *** mode/#UPHPU [+v Monnok] by ChanServ |
| 15:19.55 | *** join/#uphpu fungus (~olsonl@bromine.sosstaffing.com) |
| 15:19.55 | *** mode/#UPHPU [+o fungus] by ChanServ |
| 15:41.21 | *** join/#uphpu josephscott (~josephsco@104.2.233.72.static.reverse.ltdomains.com) |
| 15:43.08 | josephscott | $weather 84092 |
| 15:43.09 | raifbot | 3josephscott - 0,2current weather for 84092 - Clear 57f / 14c Humidity: 51% Wind: N at 0 mph |
| 15:48.08 | *** join/#uphpu mgeary (~mgeary@64.122.179.21) |
| 15:48.09 | *** mode/#UPHPU [+v mgeary] by ChanServ |
| 15:57.58 | captbrogers | mahelious: you know of that pioneer museum in Cedar City? |
| 15:58.35 | mahelious | i cannot say i do. sounds interesting. |
| 15:58.36 | TuxToaster | Rflzfg |
| 15:58.39 | TuxToaster | wow |
| 15:58.41 | TuxToaster | $rlart |
| 15:58.41 | raifbot | readies the nuke launcher and fires some rounds at DexterTheDragon. |
| 15:59.01 | *** join/#uphpu john_anderson (~john_ande@64.0.193.30) |
| 15:59.02 | *** mode/#UPHPU [+v john_anderson] by ChanServ |
| 15:59.53 | mahelious | "rounds" raifbot? i'm pretty sure Rule 37 doesn't apply to nukes... |
| 16:01.03 | TuxToaster | mahelious: lol |
| 16:01.53 | captbrogers | It is really good, has an outdoor area with homestead buildings, a schoolhouse with the Deseret alphabet, and a bunch of other really historic things. |
| 16:03.44 | mahelious | like the TITP Heritage Park up Emigration Canyon? |
| 16:04.13 | *** join/#uphpu Monnok (~monnok@c-67-166-97-68.hsd1.ut.comcast.net) |
| 16:04.14 | *** mode/#UPHPU [+v Monnok] by ChanServ |
| 16:05.31 | herlo | that's not really 'up' Emigration Canyon, more like 'on the way to' |
| 16:05.52 | herlo | I might have even accepted 'at the mouth of' |
| 16:06.16 | mahelious | lol. fair enough. how about across the street from the elephant pen? |
| 16:06.45 | herlo | aye! :) |
| 16:07.07 | herlo | mahelious: I love the elephant pen. Those elephants are so amazing! |
| 16:07.57 | mahelious | yeah. i haven't been to Hogle in a couple of years, i need to go check it out again. |
| 16:09.31 | *** join/#uphpu cro (~Adium@204-228-149-217.ip.xmission.com) |
| 16:10.23 | mahelious | captbrogers: funny enough i'm going to Kanarraville this week. might have to check out that museum on the way back. |
| 16:10.23 | TuxToaster | well, you know, that's what they were referring to when he said "this is the place" |
| 16:10.33 | TuxToaster | he meant this is where they needed to build a zoo for the animals |
| 16:12.33 | TuxToaster | $lart SOAP |
| 16:12.33 | raifbot | hauls SOAP up by the scruff of the neck and spanks him until he waddles. |
| 16:13.20 | Bikerdan_ | $lart SOAP |
| 16:13.20 | raifbot | declares SOAP a moron. |
| 16:13.29 | Bikerdan_ | Not sure the first was enough. |
| 16:14.03 | jsmith | Bikerdan_: OK, I'll bite -- what has you hot and bothered about SOAP today? |
| 16:14.37 | Bikerdan_ | Not just today... It's an ongoing relationship. |
| 16:15.12 | jsmith | Bikerdan: What'd SOAP do, kiss your best friend behind your back? |
| 16:15.29 | Bikerdan | Mostly it's just good at making simple tasks a pain in the rear. |
| 16:15.49 | ninnypants | captbrogers: were you referring to cove fort? |
| 16:16.03 | Bikerdan | jsmith: I take it you have a thing for SOAP? |
| 16:16.30 | Bikerdan | And I love the irony of the S in SOAP. |
| 16:16.38 | jsmith | Bikerdan: I've never had a problem doing simple tasks with it. Complicated things are more complicated obviously, but for a simple RPC mechanism with some self-discovery built in, I'm OK with it |
| 16:17.00 | jsmith | Bikerdan: I haven't done a lot with it in the past two or three years, but before that I was doing a lot with it |
| 16:17.26 | Bikerdan | Same here actually. It's been a year or two. |
| 16:17.47 | jsmith | Anything in particular you need technical assistance with, or just need to vent? |
| 16:17.49 | Bikerdan | The self discovery part can be handy. |
| 16:17.59 | Bikerdan | But debugging issues with it is quite a pain. |
| 16:18.18 | Bikerdan | Actually, TuxToaster brought it up. I was just joining in. |
| 16:18.30 | jsmith | Ah, I see... |
| 16:18.45 | Bikerdan | :) |
| 16:20.11 | TuxToaster | lol |
| 16:20.29 | Bikerdan | Wow. How do you feel about that jsmith? |
| 16:20.32 | TuxToaster | just been having SOAP errors on an AD auth service |
| 16:20.55 | TuxToaster | I've had SOAP work plenty of times, but never have enjoyed it |
| 16:21.07 | jsmith | Lovely... that doesn't sound like a SOAP issue though -- that sounds like an AD issue |
| 16:22.27 | TuxToaster | it was failing on new SoapClient() saying it couldn't parse the wsdl (Even though the wsdl is valid and can be read through curl, wget, etc. from the server, so I know it can get it) |
| 16:23.14 | TuxToaster | then after changing some options and forcing version 1.2 it finally seemed to parse it, but now says it can't import the xsd's that the server is requesting |
| 16:23.22 | TuxToaster | even though those are also reachable. |
| 16:23.28 | TuxToaster | so.. SOAP. :P |
| 16:29.16 | jsmith | Did you disable caching? |
| 16:29.34 | josephscott | $lart SOAP |
| 16:29.34 | raifbot | send killer squirrels to attack SOAP. |
| 16:29.39 | jsmith | Almost sounds like it has cached a corrupt copy and is trying to use that |
| 16:29.56 | Bikerdan | TuxToaster: What client are you using? |
| 16:30.06 | Bikerdan | PHP I assume |
| 16:30.17 | ninnypants | jsmith: sounds like you found a WP dev according to the WP Candy podcast at least |
| 16:30.40 | jsmith | ninnypants: Yeah, tierra started on Monday. I've got an offer out for a second one was well :-) |
| 16:31.15 | captbrogers | ninnypants: No, not Cove Fort, there is one is Cedar City similar to it though |
| 16:31.16 | Bikerdan | TuxToaster: Are you using PHP's built in SOAP client? Or something else like NuSoap? |
| 16:31.20 | ninnypants | nice I saw tierra in #wordpress-dev the other day didn't realise he was with bluehost though |
| 16:31.33 | jsmith | ninnypants: We're sneaky like that :-) |
| 16:31.39 | jsmith | ninnypants: I'm in there too, if you haven't noticed :-p |
| 16:31.40 | ninnypants | captbrogers: ahh I'll have to check it out some time |
| 16:32.14 | tierra | WP Candy podcast? |
| 16:32.15 | ninnypants | jsmith: I'd only notice if you talked :) |
| 16:32.29 | ninnypants | http://wpcandy.com/ |
| 16:32.39 | ninnypants | http://wpcandy.com/shows |
| 16:32.53 | TuxToaster | Bikerdan: the built in. |
| 16:32.56 | josephscott | lurking in #wordpress-dev is a long tradition, practices by many :-) |
| 16:33.23 | tierra | anyway, yeah, just started this week here |
| 16:33.37 | TuxToaster | jsmith: yup, disabling the cache is one of the options I added. Right now waiting to see if they've found anything on the server side of things, as I don't control the server that is being hit |
| 16:33.41 | TuxToaster | tierra: congrats |
| 16:33.56 | tierra | thanks |
| 16:39.14 | *** join/#uphpu carmony (~carmony@199.104.95.10) |
| 16:39.14 | *** mode/#UPHPU [+o carmony] by ChanServ |
| 16:39.49 | tierra | josephscott: it shall be plentiful |
| 16:39.57 | *** join/#uphpu xtrementl (~xtrementl@c-67-164-200-115.hsd1.ut.comcast.net) |
| 16:39.57 | *** mode/#UPHPU [+v xtrementl] by ChanServ |
| 16:42.32 | josephscott | specifically this podcast, see the notes links http://wpcandy.com/broadcasts/wp-late-night/013-we-are-so-spoiled |
| 16:43.59 | TuxToaster | crazy... 5760x3600 |
| 16:45.51 | *** part/#uphpu josephscott (~josephsco@104.2.233.72.static.reverse.ltdomains.com) |
| 16:45.54 | *** join/#uphpu josephscott (~josephsco@104.2.233.72.static.reverse.ltdomains.com) |
| 16:46.32 | *** join/#uphpu john_anderson (~john_ande@64.0.193.30) |
| 16:46.33 | *** mode/#UPHPU [+v john_anderson] by ChanServ |
| 16:49.28 | *** part/#uphpu captbrogers (~brian@128.187.222.219) |
| 16:55.56 | john_anderson | verbose yields no fruit |
| 16:56.04 | john_anderson | requests still take like 3 minutes to respond |
| 16:57.10 | josephscott | and it isn't something silly like a 100 continue timeout? |
| 16:57.15 | josephscott | sounds like something on the server side |
| 17:05.11 | *** mode/#UPHPU [+o mindjuju] by ChanServ |
| 17:07.26 | mindjuju | ~apb macnewbold |
| 17:07.26 | ibot | ACTION calls baby Lyssa to find macnewbold |
| 17:11.37 | TuxToaster | mindjuju: he's off today |
| 17:12.18 | TuxToaster | well... moreso than normal anyways. |
| 17:13.49 | mindjuju | oh good to know |
| 17:14.00 | mindjuju | i found a possible presenter for thursday |
| 17:14.04 | mindjuju | but need info from mac |
| 17:14.14 | mindjuju | he's not responding to email, i wonder if he's offline/ |
| 17:14.16 | mindjuju | ? |
| 17:14.24 | josephscott | ~summon macnewbold |
| 17:14.24 | ibot | apt takes out 20 clean, identical-looking phones, some extra hands, and pretends to be a telemarketer for a large corporation, so he gets delivered a phonelist containing macnewbold's coordinates |
| 17:14.36 | *** part/#uphpu josephscott (~josephsco@104.2.233.72.static.reverse.ltdomains.com) |
| 17:14.41 | *** join/#uphpu josephscott (~josephsco@104.2.233.72.static.reverse.ltdomains.com) |
| 17:14.45 | TuxToaster | lol |
| 17:16.13 | mindjuju | ~apb fungus |
| 17:16.13 | ibot | ACTION calls Beth to find fungus |
| 17:17.42 | *** join/#uphpu beandog (~sdibb@gentoo/developer/beandog) |
| 17:17.42 | *** mode/#UPHPU [+v beandog] by ChanServ |
| 17:17.50 | TuxToaster | heh, it worked :P |
| 17:17.55 | mindjuju | ~banish beandog |
| 17:17.55 | ibot | ACTION erases beandog into ineffable bit aether |
| 17:18.22 | mindjuju | ~find TuxToaster |
| 17:18.30 | mindjuju | ~apb TuxToaster |
| 17:18.30 | ibot | ACTION hires Beth to find TuxToaster |
| 17:18.51 | Monnok | $rlart |
| 17:18.51 | raifbot | beats Monnok senseless with a 50lb Unix manual. |
| 17:19.02 | Monnok | ... |
| 17:19.31 | TuxToaster | lol |
| 17:23.46 | beandog | whut |
| 17:23.58 | beandog | ~menudo mindjuju |
| 17:23.58 | ibot | ACTION recruits mindjuju into an never-ending puerto rican boy band to work for tween fanfare and burritos |
| 17:24.08 | mindjuju | sup beandog |
| 17:24.11 | mindjuju | how was camp? |
| 17:24.12 | beandog | mindjuju: nada |
| 17:24.14 | beandog | it was epic |
| 17:24.20 | beandog | very awesome |
| 17:24.26 | mindjuju | :) |
| 17:24.30 | mindjuju | any smores? |
| 17:24.50 | beandog | twice! |
| 17:26.18 | beandog | whut |
| 17:26.28 | beandog | hows things over there mindjuju |
| 17:26.38 | mindjuju | i'm in park city until sunday |
| 17:26.45 | herlo | y? |
| 17:26.56 | mindjuju | just chillin' |
| 17:26.58 | mindjuju | y |
| 17:27.24 | mindjuju | yeah, /me on vacay |
| 17:27.35 | herlo | take advantage man! |
| 17:27.40 | herlo | go do something away from the 'puter! |
| 17:27.55 | mindjuju | have been :) |
| 17:28.02 | mgeary | is anyone here using truecrypt with MySQL? |
| 17:28.17 | mindjuju | right now Tiff sleeping in and Corban is playing in the activity center |
| 17:28.24 | herlo | lol |
| 17:28.26 | mindjuju | i'm just sitting by the pool |
| 17:28.28 | beandog | man, I love Linux |
| 17:28.30 | beandog | good times |
| 17:28.40 | beandog | mindjuju: seriously man, drop the puter. |
| 17:28.41 | herlo | mindjuju: very nice! Get a mai tai for me :) |
| 17:28.45 | beandog | it'll make your vacay go much better |
| 17:29.07 | mindjuju | :) |
| 17:32.59 | mindjuju | beandog - only remoted into work comp to find macnewbold on possible presenter for UPHPU on thursday |
| 17:33.08 | mindjuju | saw his distress signal email yesterday |
| 17:34.01 | beandog | ~stress mindjuju |
| 17:34.40 | mindjuju | herlo, you still around? |
| 17:35.49 | beandog | he left for PC |
| 17:40.39 | TuxToaster | mindjuju: wow... ibot was slow on that ~find |
| 17:44.05 | fungus | mgeary, truecrypt and MySQL? that's a strange combo. Could be interesting. What's your reasoning? |
| 17:54.04 | mgeary | fungus: to protect health data "at rest" |
| 17:54.24 | mgeary | have the database files on an encrypted partition |
| 17:55.11 | fungus | But truecrypt only protects the data when the partition is unmounted. |
| 17:55.31 | mgeary | well, the scenario i'm looking at is physical theft of a server from the data center |
| 17:55.41 | mgeary | which would mean ripping it out, i'd think |
| 17:55.51 | mgeary | which would unmount it |
| 17:55.54 | mgeary | :) |
| 17:55.57 | TuxToaster | which is kind of funny to picture, though I Know it does happen |
| 17:55.57 | mgeary | but i welcome your insights |
| 17:56.38 | fungus | Ahh, truecrypt would really help with that attack scenario |
| 17:56.41 | mgeary | TuxToaster: apparently it happened to one company that had health data, and they declared bankruptcy because of the fines they were subject to for letting the data escape |
| 17:57.03 | TuxToaster | crazy |
| 17:57.06 | mgeary | very |
| 17:57.10 | TuxToaster | was it in a data center ? |
| 17:57.12 | mgeary | yes |
| 17:57.13 | TuxToaster | or self-hosted server? |
| 17:57.26 | mgeary | but if the data is encrypted, you don't have to declare the breech, because it is considered useless data |
| 17:57.30 | fungus | That is crazy, but I think other attack vectors are more likely. |
| 17:57.40 | TuxToaster | seems like the datacenter should be at least partially liable for much of that, since it's their responsibility to prevent exactly that |
| 17:58.43 | DexterTheDragon | why truecrypt instead of full disk with cryptfs/luks |
| 17:59.19 | TuxToaster | I mean, most datacenters I've dealt with, you had at least a few layers of multi-factor identification just to get into the server room, not to mention physical locks on the cabinet and servers. |
| 17:59.24 | mgeary | indeed |
| 17:59.25 | fungus | DtD is right, either solution would solve the physical theft attack scenario |
| 17:59.46 | mgeary | i tell myself truecrypt would be easier to implement since the server is already set up |
| 18:00.30 | fungus | You could just use cryptfs/luks on the filesystem that the database is residing on. |
| 18:00.47 | fungus | Makes it easier to recover in case of a reboot. |
| 18:01.04 | fungus | Fukk disk encryption would require a drive to the datacenter for each reboot. |
| 18:01.19 | fungus | which would suck |
| 18:01.39 | mgeary | right. that's what i was wondering about |
| 18:01.52 | fungus | If you only needed to login to the machine remotely to mount the encrypted filesystem and start MySQL it would be simpler. |
| 18:02.13 | DexterTheDragon | mgeary: do you know if it's using LVM? |
| 18:02.41 | fungus | Even if it's not already using LVM, you can use LVM for just this one FS |
| 18:02.51 | fungus | LVM is amazing |
| 18:03.02 | mgeary | DexterTheDragon: no. the current machine is a Mac Xserve |
| 18:03.46 | fungus | hmm, truecrypt it is. :) |
| 18:04.38 | mgeary | so, how does that work? You have to authenticate in order to mount a TrueCrypt partition? |
| 18:04.44 | fungus | yup |
| 18:04.54 | mgeary | ok |
| 18:05.07 | beandog | TuxToaster: yah, but internal employees could do whatever |
| 18:05.12 | fungus | So every reboot you need to intervene |
| 18:05.25 | mgeary | right |
| 18:05.31 | mgeary | that seems unavoidable |
| 18:05.34 | beandog | mgeary: are you talking about hipaa? |
| 18:05.37 | mgeary | beandog: yes |
| 18:05.38 | TuxToaster | beandog: true, but again that means the datacenter should be liable for the majority of the fines in the theft |
| 18:05.49 | fungus | But if you only encrypt the MySQL FS then you can do it remotely |
| 18:06.17 | mgeary | right |
| 18:06.40 | mgeary | so, does TrueCrypt create the partition? Or do you first create the partition and then apply TC to it? |
| 18:06.58 | fungus | Since you are caring about this, at this level, you should also consider other attack vectors as well. |
| 18:07.17 | mgeary | fungus: indeed. and they are on my radar, but i'd like to hear your thoughts on that |
| 18:07.54 | fungus | Not sure, I only read the theory and security aspects of Truecrypt. Not the usage stuff. |
| 18:08.29 | fungus | Other attack vectors, remote MySQL login |
| 18:08.38 | fungus | System compromise |
| 18:08.46 | fungus | priv escalation |
| 18:08.48 | fungus | etc. |
| 18:10.01 | beandog | When I was researching it, I found HIPAA-compliant data centers |
| 18:10.31 | fungus | Other mitigating ideas: strict firewall rules, MySQL SSL connections (unless local only), vulnerability scanning, Limit users that can login, etc. |
| 18:11.38 | beandog | MySQL + SSL = pita |
| 18:11.39 | beandog | use stunnel |
| 18:11.46 | fungus | No |
| 18:11.52 | beandog | Your DB and webserver are supposed to be on different servers |
| 18:11.54 | fungus | that's not enough |
| 18:12.11 | beandog | no? |
| 18:12.13 | fungus | You should use MySQL SSL, with client certs too, if possible. |
| 18:12.53 | TuxToaster | heh, HIPAA is worse than PCI |
| 18:13.02 | fungus | For hipaa and other very sensitive data, you need to be extreme |
| 18:13.16 | beandog | yah |
| 18:13.30 | josephscott | individual client certs would allow you revoke just one client, while still allowing others, which could be useful |
| 18:13.38 | TuxToaster | yup |
| 18:14.17 | fungus | stunnel would be fine for normal use, but built-in MySQL SSL is better. |
| 18:18.56 | beandog | Hmm |
| 18:18.57 | beandog | Okay |
| 18:19.04 | beandog | How hard is it to setup |
| 18:19.05 | beandog | That's my problem |
| 18:19.09 | beandog | It was SERIOUSLY painful |
| 18:20.06 | jsmith | beandog: Probably like SSL always is -- generate a CSR, get that turned into a cert, make sure the cert is in the chain of authority, etc. |
| 18:21.09 | beandog | No, not the SSL part |
| 18:21.11 | beandog | the MySQL configuration |
| 18:21.23 | *** join/#uphpu SkinnerDroid (~SkinnerDr@c-71-199-13-2.hsd1.ut.comcast.net) |
| 18:21.27 | mgeary | but you wouldn't need mysql+ssl if the machines are all on the same local network, would you? |
| 18:21.28 | beandog | MySQL is EXTREMELY unhelpful in providing feedback why stuff doesn't work |
| 18:21.39 | beandog | mgeary: oh yah, it still sends everything over plaintext |
| 18:21.52 | beandog | mgeary: and if you're hosting somewhere remotely, you wanna do that |
| 18:22.15 | mgeary | hmm. currently it's all on a single machine, so that's not an issue, but that's good to know |
| 18:22.43 | mgeary | i haven't seen any requirement that the web server and DB be on separate machines |
| 18:23.00 | *** join/#uphpu SkinnerDroid (~SkinnerDr@c-71-199-13-2.hsd1.ut.comcast.net) |
| 18:23.43 | beandog | mm I thought I saw that somewhere |
| 18:23.48 | beandog | don't you need some form of HA too? |
| 18:24.44 | mgeary | i wouldn't think that would need to be mandated by hipaa. If you're not HA, and your clients have a problem, they'll just leave you, but that's not a hipaa/privacy problem |
| 18:26.14 | beandog | hmm |
| 18:26.18 | beandog | I thought I found some list of reqs somewhere |
| 18:26.19 | beandog | meh |
| 18:26.23 | beandog | I remember they were high. |
| 18:31.48 | fungus | most of the reqs for HIPAA relates to taking and disclosing information. So strict user authentication is very important, so is user training in what they are allowed to do with the data they can access. |
| 18:37.20 | mgeary | yeah, though the rules are somewhat different for Business Associates versus Covered Entities |
| 18:37.32 | mgeary | but what you're referencing is probably the same |
| 18:45.54 | beandog | crazy stuff |
| 18:46.03 | beandog | I think you'd need a lawyer to tell you what to do |
| 18:56.46 | josephscott | for animated gif fans: http://www.dailydot.com/culture/25-year-anniversary-gifs-collection/ |
| 18:58.15 | beandog | oh wow |
| 18:58.16 | mgeary | beandog: you'd be surprised at how little use a lawyer is in this equation |
| 18:59.19 | beandog | ~surprise mgeary |
| 18:59.32 | beandog | mgeary: hows that |
| 18:59.53 | mgeary | it's a long story. We should have a geek lunch and i'll tell you a tale |
| 18:59.58 | beandog | yah? |
| 18:59.59 | mgeary | but i don't' want to pound it all out here |
| 19:00.05 | beandog | what city you in |
| 19:00.09 | beandog | I'd love to hear it |
| 19:00.10 | mgeary | provo |
| 19:00.13 | beandog | bleh |
| 19:00.17 | mgeary | heh |
| 19:00.19 | beandog | how about a geek dinner |
| 19:00.21 | mgeary | well, orem, for work |
| 19:00.32 | beandog | Salt Lake for work, home |
| 19:01.08 | beandog | our love will survive |
| 19:01.15 | beandog | ~reach mindjuju |
| 19:01.16 | beandog | er |
| 19:01.18 | beandog | freep. |
| 19:03.06 | TuxToaster | lol |
| 19:13.31 | *** join/#uphpu jonkirkman (~jonkirkma@wfw.vivint.com) |
| 19:28.31 | *** join/#uphpu cro (~Adium@204-228-149-217.ip.xmission.com) |
| 19:32.31 | TuxToaster | $rlart |
| 19:32.31 | raifbot | puts on some milking gloves. "All right, now, kendsnyder, this won't hurt a bit....". |
| 19:56.01 | *** join/#uphpu itimber (~itimber@74.51.216.160) |
| 19:56.01 | *** mode/#UPHPU [+v itimber] by ChanServ |
| 19:57.06 | *** join/#uphpu itimber (~itimber@74.51.216.160) |
| 19:57.06 | *** mode/#UPHPU [+v itimber] by ChanServ |
| 19:59.15 | *** join/#uphpu itimber (~itimber@74.51.216.160) |
| 19:59.16 | *** mode/#UPHPU [+v itimber] by ChanServ |
| 20:00.51 | *** join/#uphpu itimber (~itimber@74.51.216.160) |
| 20:00.51 | *** mode/#UPHPU [+v itimber] by ChanServ |
| 20:24.33 | *** join/#uphpu beandog (~sdibb@gentoo/developer/beandog) |
| 20:24.33 | *** mode/#UPHPU [+v beandog] by ChanServ |
| 21:25.01 | *** join/#uphpu wps (~wps@wfw.vivint.com) |
| 21:25.01 | *** mode/#UPHPU [+o wps] by ChanServ |
| 21:44.01 | TuxToaster | man, sure is quiet in here for a Friday. Must be due to mindjuju on vacation. |
| 21:44.02 | TuxToaster | lol |
| 21:45.45 | jsmith | $lart TuxToaster |
| 21:45.46 | raifbot | raises middle finger to TuxToaster . |
| 21:45.46 | jsmith | ~lart TuxToaster |
| 21:45.47 | ibot | whips out his power stapler and staples TuxToaster's foot to the floor |
| 21:46.12 | TuxToaster | *gasp* |
| 21:46.17 | TuxToaster | $lart jsmith |
| 21:46.19 | raifbot | hits jsmith with an anvil and laughs with a contralto voice ... Haha Ha HA Ha. |
| 21:46.20 | TuxToaster | ~lart jsmith |
| 21:46.20 | ibot | smacks jsmith up side the head with a clue-by-4 |
| 21:46.33 | TuxToaster | and to top it off |
| 23:09.55 | beandog | okay |
| 23:09.59 | beandog | I have the weirdest problem |
| 23:13.44 | mgeary | what's her name? |
| 23:14.09 | mindjuju | touche |
| 23:15.35 | mindjuju | fungus, you still around? |
| 23:15.55 | mindjuju | $8ball is fungus out for the weekend? |
| 23:15.55 | raifbot | mindjuju - As I see it, yes. |
| 23:16.01 | beandog | apache is accepting connections for the IP address |
| 23:16.03 | beandog | which isn't so strange |
| 23:16.08 | beandog | but it is doing it for the only vhost |
| 23:16.09 | beandog | which is strange |
| 23:16.16 | fungus | I'm here for a few min |
| 23:16.19 | mindjuju | $8ball does fungus favor Gaga over Madonna? |
| 23:16.19 | raifbot | mindjuju - Don't count on it. |
| 23:16.47 | mindjuju | hi fungus, i get when error when i try to start apache |
| 23:17.02 | mindjuju | and when i netstat -a, i'm not able to really pin down what app is on that port |
| 23:17.27 | fungus | what error? |
| 23:17.48 | mindjuju | (98)Address already in use: make_sock: could not bind to address [::]:80 (98)Address already in use: make_sock: could not bind to address 0.0.0.0:80 no listening sockets available, shutting down Unable to open logs Action 'start' failed. The Apache error log may have more information. |
| 23:17.58 | beandog | mindjuju stole my thunder |
| 23:18.25 | fungus | netstat -pntl |
| 23:18.55 | mindjuju | oh that's better |
| 23:19.08 | *** part/#uphpu jonkirkman (~jonkirkma@wfw.vivint.com) |
| 23:19.09 | mindjuju | it says apache2 on pid 2396 is using it |
| 23:19.23 | mindjuju | weird since the sit eisn't coming up |
| 23:19.32 | mindjuju | unsteal beandog thunder |
| 23:19.47 | mindjuju | well fungus, this new view on netstat gets me a step closer |
| 23:19.50 | mindjuju | i think i have it from here |
| 23:19.56 | mindjuju | have good weekend |
| 23:20.05 | mindjuju | do you really favor madonna over gaga? |
| 23:20.22 | fungus | I'm conflicted on that |
| 23:20.29 | mindjuju | heh |
| 23:20.40 | mindjuju | i hear they are having quite the war of words lately |
| 23:20.44 | mgeary | wow. really? |
| 23:20.49 | mgeary | i mean, i'm not a huge fan of either |
| 23:20.58 | mgeary | but madonna's been on the scene for 30 years |
| 23:20.59 | mindjuju | yah, madonna says gaga stole music and fasion |
| 23:21.08 | fungus | Madonna is the reigning Queen, but Gaga is really awesome |
| 23:21.09 | mindjuju | gaga says madonna is old |
| 23:21.10 | mgeary | gaga is what, 3 years? |
| 23:21.53 | mindjuju | if that (on the 3yrs) |
| 23:22.24 | mindjuju | beandog, what's your weird prob? |
| 23:22.50 | beandog | IP address is serving up first vhost |
| 23:22.55 | beandog | on apache |
| 23:22.57 | beandog | WHY |
| 23:23.01 | beandog | do not want |
| 23:23.04 | beandog | Or, more accurately |
| 23:23.05 | fungus | They are both awesome, but Madonna is the Queen, and Gaga is the next in line (Princess?) |
| 23:23.07 | mindjuju | i think that's default |
| 23:23.13 | beandog | 1.2.3.4/server-info is redirecting to site.com/server-info |
| 23:23.17 | beandog | WHY |
| 23:23.20 | beandog | :( |
| 23:23.40 | fungus | first vhost is the default, unless another one has a better match |
| 23:23.40 | mindjuju | so beandog, why not change the sequence in the sites file |
| 23:23.50 | fungus | ServerName, or direct IP match |
| 23:23.58 | mindjuju | make the vhost you want to be default first in the file with the host descriptions |
| 23:24.17 | *** join/#uphpu cro (~Adium@204-228-149-217.ip.xmission.com) |
| 23:25.13 | beandog | that's what I thought |
| 23:25.56 | beandog | except I have the exact same config on two servers |
| 23:26.00 | beandog | one does it, th e other doesn't |
| 23:27.52 | mindjuju | weird |
| 23:29.31 | beandog | RAWR |
| 23:29.34 | beandog | Hulk smash! |
| 23:29.44 | mindjuju | did you break it? |
| 23:31.42 | beandog | Oh my derp. |
| 23:31.45 | beandog | FAIL |
| 23:33.17 | mindjuju | fail derp is derp |
| 23:36.09 | beandog | ~fail derp |
| 23:36.09 | ibot | derp: FAIL! |
| 23:39.28 | beandog | ~derp FAIL |
| 23:39.32 | beandog | meh |
| 23:39.37 | beandog | ~friday |
| 23:39.42 | *** join/#uphpu Lone_Wanderer (~Dan@209-6-50-94.c3-0.smr-ubr1.sbo-smr.ma.cable.rcn.com) |
| 23:39.43 | *** mode/#UPHPU [+v Lone_Wanderer] by ChanServ |
| 23:39.50 | beandog | Lone_Wanderer: I know you! |
| 23:40.32 | Lone_Wanderer | hey! |
| 23:40.36 | Lone_Wanderer | how've you been? |
| 23:40.56 | beandog | Good man |
| 23:40.57 | beandog | how's things |
| 23:41.13 | beandog | you're the best! |
| 23:41.15 | Lone_Wanderer | pretty good |
| 23:41.22 | beandog | Lone_Wanderer: are you still deployed? |
| 23:41.24 | Lone_Wanderer | nope |
| 23:41.28 | beandog | back home? |
| 23:41.29 | Lone_Wanderer | living in Boston nowadays |
| 23:41.31 | beandog | wow |
| 23:41.38 | beandog | East coast |
| 23:41.41 | Lone_Wanderer | yeah, I moved out here as soon as we got back |
| 23:41.48 | Lone_Wanderer | like, two or three days after |
| 23:41.49 | beandog | right on |
| 23:41.51 | beandog | how do you like it |
| 23:43.18 | Lone_Wanderer | quite a bit, actually |
| 23:43.26 | beandog | https://twitter.com/spy_hop/status/213768618440273921 |
| 23:43.28 | beandog | that's cool |
| 23:43.29 | Lone_Wanderer | I like the metropolitan, big city thing |
| 23:43.33 | beandog | you gonna be there a while? |
| 23:43.55 | Lone_Wanderer | probably yeah |
| 23:43.58 | Lone_Wanderer | at least until I graduate |
| 23:44.17 | beandog | right on |
| 23:44.18 | beandog | :) |
| 23:44.27 | Lone_Wanderer | :) |
| 23:44.31 | Lone_Wanderer | I wish it were that easy. |
| 23:44.32 | beandog | good at participating Wendy's restaurants |
| 23:53.31 | beandog | I'm going to create an HTTP error code |
| 23:53.41 | beandog | 408 - NOT MY FAULT |
| 23:53.49 | beandog | 208 - WORKS FOR ME |
| 23:53.51 | beandog | :) |
| 23:56.01 | mindjuju | i like 208 |
| 23:56.19 | fungus | not my fault should be 508 |
| 23:56.47 | fungus | wait, nvm |
| 23:56.50 | fungus | 408 is good |
| 23:57.24 | fungus | ~weekend++ |
| 23:58.13 | beandog | heh |
| 23:58.48 | beandog | that's great |