Rarely am I using ntpd to serve ntp information. It is more useful for clock-correction than a strict ntp/sntp client. Thus I don’t want the service listening on a wildcard address, even when there is certainly a firewall in place. I prefer the service to not be listening at all, or listening only to the loopback interface. Here is how to configure that in ntpd and chrony.
interface ignore wildcard
bindaddress 127.0.0.1
port 0
bindcmdaddress 127.0.0.1
cmdport 0
There are many NTP server implementations now. Here are some:
Resources:
I plan to give chrony a try.
I’m quite happy with my initial use of Firefox Monitor. I’ve recommended it to family, friend, co-workers. I recommend signing up for continuous monitoring. Anyone who has had a password compromise should consider that password and permutations there-of to be public knowledge.
For me the near constant data breaches we’ve seen in recent months is more evidence that strict regulation of retained personal information is necessary in the US and that it would be wise for more websites to consider whether storing passwords is even wise. I have argued that most websites should not be storing user passwords.
This is not exactly the best strategy given that malicious actors probably have access to IP addresses from other countries. I was asked to research this and this is what I found.
Not only cannot I not buy that but I cannot buy:
I’ve read speculation that they are going to OEMs. That’s fine I guess. I would like to build a new desktop sometime soon. The Ryzen 5 2400G is an option but it would be preferable to get what I actually want.
In general I’m in favor of people running with ideas of how to make a better software library or app. The more ideas that are manifest the more data people have to identify what works best. However, especially in the open source world, I sometimes feel like there is too much effort being spread around when it could be focused to greater effect. I’ve been feeling this way about crypto libraries for some time. Here are a few.
I understand that people feel this problem has not been solved well and that API’s and implementation goals and needs shift over time. Still, a common goal in software security is reducing the attack surface. It would be nice to see some coalescing in this space.
Update: Further Reading:
I’m once again looking for a new keyboard. I really liked the BTC 6100C and I haven’t found anything as good a fit for me since. I tried the Genius LuxeMate i200 and was not impressed by it. Here is what I’m looking at, mostly the most-popular mini-keyboard on various sites:
I think I’ll try the SIIG JK-US0312-S1 and see how that goes.
I’ve been researching inexpensive mobile phones and the field is not broad. Here are the 2 phones which seem to stand out in the sub-$200 (US) price point:
Facebook’s degenerate corporate culture and, specifically, its uses of data which may be technically legal (or were) but can’t withstand public scrutiny are at the heart of its business model…
Facebook’s predatory corporate culture and dubious uses of data are too deeply embedded in its business model to be easily extracted. And it may not be possible at all, not while sustaining the fantastical profit levels the company and its stock prices are based on.