| 00:47.14 | *** part/#utah cSmith (~cSmith@unaffiliated/csmith) |
| 00:47.19 | *** join/#utah cSmith (~cSmith@unaffiliated/csmith) |
| 03:20.41 | *** join/#utah infobot (~infobot@rikers.org) |
| 03:20.41 | *** topic/#utah is Utah related discussion including user groups | logs @ http://ibot.rikers.org/%23utah/ | See also ##lds |
| 03:20.42 | *** mode/#utah [+o infobot] by ChanServ |
| 04:13.39 | *** join/#utah tiwula (~lane@174-23-85-23.slkc.qwest.net) |
| 05:29.13 | *** join/#utah manithree (~blr@170-72-57-238.vivintwireless.net) |
| 07:20.18 | *** join/#utah cSmith (~cSmith@unaffiliated/csmith) |
| 07:50.41 | klys | ~slashdot |
| 16:14.08 | *** join/#utah josephscott (~josephsco@2601:681:8001:c340:b01a:521:565c:81ea) |
| 16:54.23 | *** join/#utah keldwud (ae34be84@gateway/web/freenode/ip.174.52.190.132) |
| 17:03.46 | keldwud | is it possible to create a slave of a postgres db and let my staging box talk to it but not have any write permissions? |
| 17:03.53 | *** join/#utah rsimpkins (~rsimpkins@unaffiliated/rsimpkins) |
| 17:04.03 | rsimpkins | youtah: Hey Jeff, I'm on during the day! :) |
| 17:04.30 | keldwud | rsimpkins: he'll respond better if you mention nachos or something |
| 17:04.36 | keldwud | s/better/more quickly |
| 17:05.19 | frostyfrog | ~nacho youtah |
| 17:05.19 | infobot | ACTION sprays scalding hot nacho cheese sauce all over youtah |
| 17:05.22 | keldwud | n/m about the postgres stuff, was a dumb question |
| 17:05.25 | rsimpkins | keldwud: I thought youtah liked bacon nachos. Isn't that the magic recipe? |
| 17:08.10 | keldwud | https://media.giphy.com/media/oHsYrtMxNZMYM/giphy.gif |
| 17:08.15 | frostyfrog | ~bacon |
| 17:08.15 | infobot | rumour has it, bacon is a filling substance which will make you even fatter than you already are... Take my advice, bacon is a food for the gods or for underweight models such as that McBeal chick... |
| 17:08.47 | keldwud | you know, seeing Princess Bride in the theater last month was freakin awesome |
| 17:09.18 | keldwud | I forgot to put on a belt today :( and I don't want to un-tuck my shirt |
| 17:11.32 | rsimpkins | 'you know, seeing Princess Bride in the theater last month was freakin awesome' -- things you only hear in #utah. :) |
| 17:18.13 | *** join/#utah spangborn (~spangborn@192.230.132.113) |
| 17:27.49 | keldwud | rsimpkins: it was actually in theaters across the country |
| 17:28.17 | keldwud | and true, I wouldn't normally say the word freakin but I *am* in #utah :) |
| 17:29.45 | programmerq | keldwud⸠what you're talking about is a "read slave" |
| 17:30.01 | programmerq | and yes, it works |
| 17:30.18 | programmerq | but if you want to point staging to a read-only live slave of a prod database, you might have a bad time. |
| 17:37.57 | keldwud | programmerq: yeah, I realized that right after I asked it :) |
| 17:38.06 | keldwud | I started thinking it through |
| 17:38.59 | programmerq | usually read slaves exist to take read load away from the master. |
| 17:39.08 | programmerq | but the downside is that slaves can get "behind" |
| 17:40.39 | jima | depends on whether the replication is synchronous or asynchronous |
| 17:40.51 | jima | not sure if mysql can do synchronous though |
| 17:41.07 | jima | oh, pgsql, no idea there either |
| 17:41.19 | programmerq | yeah, most of my db experience is mysql and derivatives-- I don't know whether postgres does synchronous |
| 17:41.32 | jima | i only really know sql replication solidly on one platform |
| 17:41.39 | jima | and it's neither mysql nor pgsql |
| 17:41.39 | programmerq | which platform? |
| 17:41.52 | jima | mssql :-| |
| 17:42.53 | programmerq | what is your take on the linux version of mssql? |
| 17:43.09 | jima | did a brief PoC, just enough to confirm it ran |
| 17:43.21 | jima | need to revisit to see if it can do always-on/replication |
| 17:43.45 | jima | (couldn't at the time, but it's been a while) |
| 17:43.52 | jima | i'd personally love to run mssql on linux. |
| 17:49.53 | keldwud | I shouldn't need more than 256 addresses for a network that runs three docker swarm instances with about 2 dozen microservices running in containers should I? hmm.. I should do some math real quick to see what my limitations of scaling would be before I run out of addresses if I decide to scale my services up from 1 each to 2 or 3 |
| 17:50.18 | keldwud | even if I scaled everything to three, it looks like I would still have some breathing room, yeah? |
| 17:50.37 | keldwud | 24 * 3 < 100 |
| 17:51.01 | youtah | rsimpkins, woo hoo! |
| 17:52.03 | rsimpkins | youtah: What's up? |
| 17:52.18 | programmerq | keldwud⸠just count the number of VMs you'll be attaching to the subnet. |
| 17:52.20 | youtah | I installed the Jpole at the top of my house |
| 17:52.25 | rsimpkins | The trickery we have to do to get an SSH shell here... I'll tell ya... |
| 17:52.33 | youtah | LOL |
| 17:52.37 | keldwud | programmerq: I was counting those too. I have less than half a dozen |
| 17:52.54 | rsimpkins | youtah: Did the rulers of all things Traverse Mountain bless such an installation? |
| 17:53.00 | rsimpkins | Or, just throwing caution to the wind? |
| 17:53.05 | youtah | Heh |
| 17:53.09 | youtah | like I do things with permission |
| 17:53.22 | jima | does your ham status give you any extra leeway there? |
| 17:53.30 | youtah | of course jima |
| 17:53.36 | youtah | not really |
| 17:53.41 | youtah | I just have never asked |
| 17:53.46 | youtah | and no one has ever said anything |
| 17:53.50 | keldwud | so it definitely seems like I'll have 50% breathing room even if I scale my services up to 3 per service |
| 17:53.54 | rsimpkins | Having a jpole up higher should really help with simplex. |
| 17:54.05 | youtah | At one of my former employers, the engineers paid for for a 4G hotspot, and all the engineers would chip in $5 to have a hot spot at work |
| 17:54.06 | keldwud | that's enough breathing room for me to be happy for the next few years |
| 17:54.40 | jima | youtah: that sounds like a great network security violation to me |
| 17:54.59 | jima | keldwud: you got yourself a /24 off the back of a truck? |
| 17:55.15 | youtah | I took a blurry photo of my hill during daytime, calculated the color value, and matched it to the closest spray paint I could find, and then painted the antenna with it. From the street, it is virutally impossible to see. |
| 17:55.33 | jima | youtah: haha, jackass |
| 17:55.43 | rsimpkins | youtah: Stealthy. |
| 17:55.46 | youtah | lol |
| 17:55.55 | spangborn | calls youtah's HOA |
| 17:55.59 | jima | sends a letter to youtah's HOA advising them of the antenna |
| 17:56.02 | keldwud | jima: I feel like I'm so close to getting it but I think it went over my head. Are you making a joke about stealing apple cider off the delivery truck? |
| 17:56.03 | jima | hahahaha |
| 17:56.07 | jima | ^5s spangborn |
| 17:56.11 | youtah | lol |
| 17:56.14 | keldwud | or am I over thinking the joke? |
| 17:56.16 | rsimpkins | If they give you grief, just put a US flag on top. Then no one would DARE question your purpose. |
| 17:56.23 | spangborn | *BYU flag |
| 17:56.26 | youtah | actually, I am supposed to be installing an antenna on the HOA building in the next couple of months |
| 17:56.26 | spangborn | he's in Utah county |
| 17:56.27 | rsimpkins | ^^ |
| 17:56.31 | jima | keldwud: not sure the focus on staying within a /24 if not GUA |
| 17:56.31 | rsimpkins | Yeah, good point. |
| 17:56.50 | keldwud | jima: what's GUA? |
| 17:56.56 | jima | spangborn: a BYU flag AND an american flag, with the BYU flag on top of course |
| 17:56.59 | youtah | they've got a killer view of both counties and it's part of our emergency plan. So the President of the HOA is buying the gear |
| 17:57.01 | jima | keldwud: global unicast address |
| 17:57.20 | spangborn | just NAT |
| 17:57.29 | spangborn | And avoid IPv6, it's terrible |
| 17:57.34 | spangborn | ducks |
| 17:57.38 | youtah | I am at the North End of Utah County, so we have about a 90% Ute fan count |
| 17:57.43 | jima | spangborn: you need to up your troll game, dude. |
| 17:57.53 | rsimpkins | youtah: Corporate America is going to buy all our homes, then rent them back to us. There will be an "antenna installation" fee, of course. |
| 17:57.59 | spangborn | Well I'm currently multitasking |
| 17:58.00 | jima | youtah: that's remarkable for utah county ;-) |
| 17:58.03 | spangborn | I'm trying to get IT to fix my VM |
| 17:58.09 | keldwud | jima: I think I just arbitarily chose /24 |
| 17:58.14 | keldwud | *arbitrarily |
| 17:58.17 | youtah | yeah, I suspect that everyone that lives here "floats" to the top |
| 17:58.19 | jima | keldwud: is it rfc1918 or public? |
| 17:58.35 | keldwud | it won't be public, it's all within my AWS cloud |
| 17:58.48 | jima | oh, well then don't worry about ipv6 ;-) |
| 17:59.46 | beelzebob | keldwud: if you're looking at pg replication, be sure to check out repmgr (https://www.2ndquadrant.com/en/resources/repmgr/) if you haven't already |
| 17:59.51 | keldwud | yeah, I haven't entered the ipv6 world yet. I *should* but every new job I get, people are still using ipv4... so I just kinda stick with architecting around that |
| 18:00.05 | beelzebob | their other tools (notably pgbarman) are also nice |
| 18:00.07 | keldwud | beelzebob: ty |
| 18:00.10 | jima | i deployed ipv6 at my last job |
| 18:00.18 | keldwud | jima: lucky |
| 18:00.22 | jima | and i got my current job from #ipv6, so... |
| 18:00.31 | jima | i have lots of ipv6 there |
| 18:00.33 | keldwud | I'd really like an opportunity to do that so that I can make the ipv6 knowledge stick |
| 18:00.42 | spangborn | youtah would know all about floating |
| 18:00.48 | spangborn | Being in Utah county |
| 18:00.52 | keldwud | otherwise every time I learn it and study it and practice it, it just kinda wastes away |
| 18:00.59 | keldwud | spangborn: that's called docking I thought |
| 18:01.09 | keldwud | or do they call it floating? I dunno |
| 18:01.09 | jima | keldwud: "soaking" |
| 18:01.19 | jima | docking is...something else. |
| 18:01.20 | youtah | spangborn that's soaking |
| 18:01.21 | spangborn | Soaking and floating are the same |
| 18:01.25 | spangborn | Check UD |
| 18:01.26 | keldwud | as long as they don't move it back and forth it doesn't count apparently |
| 18:01.35 | jima | i didn't know about floating |
| 18:01.44 | youtah | no no, that's not the big thing anymore |
| 18:01.48 | youtah | it's Levi Lovin' |
| 18:01.50 | jima | i'm reasonably certain the church does not approve of docking |
| 18:01.57 | keldwud | jima: you mean you're not going to tell us here in this channel that docking is... |
| 18:01.57 | youtah | rofl |
| 18:02.03 | keldwud | when a boat pulls into a pier |
| 18:02.09 | keldwud | and ties ropes to it |
| 18:02.24 | youtah | yeah, that's what I thought too keldwud.... |
| 18:02.35 | jima | oh, my sweet summer child |
| 18:02.39 | spangborn | The church doesnât really approve of youtah |
| 18:02.43 | spangborn | For good reason |
| 18:02.47 | keldwud | jima: oooh because it involves to sailing boats and not one sail boat and one canoe |
| 18:02.47 | spangborn | Heâs a Ute fan |
| 18:02.59 | youtah | btw, I need a helmet, kneepads, some latex body suits, some plastic stairs... and a 500 gallon drum of KY Jelly |
| 18:03.20 | spangborn | I put that drum on your Christmas list |
| 18:03.22 | spangborn | Donât worry |
| 18:03.24 | keldwud | youtah: Area 51 |
| 18:03.25 | youtah | for this... https://www.youtube.com/watch?v=aKPz583WRpQ |
| 18:03.32 | keldwud | during the fetish ball |
| 18:03.39 | beelzebob | Utah County says, "we all float down here" amirite? |
| 18:03.49 | keldwud | or am I thinking of the dark arts festival? that has the vendors? |
| 18:03.58 | youtah | keldwud, the owner of Area 51, married one of my really good friends growing up |
| 18:04.13 | youtah | Ever been in the basement? |
| 18:04.14 | keldwud | which event was I thinking of that's not the monthly fetish night but the yearly event |
| 18:04.23 | keldwud | that has the really awesome stuff, not just the boring stuff |
| 18:04.42 | youtah | If you do into the basement of Area 51 |
| 18:04.48 | keldwud | youtah: I haven't. have you? I've been in my friend's basement |
| 18:04.49 | youtah | there is a large storage area where they store that stuff |
| 18:04.55 | keldwud | he had some cool stuff |
| 18:05.04 | youtah | but if you keep walking past it all, it turns into a long hallway, underground |
| 18:05.09 | youtah | and goes into a room, with a single door |
| 18:05.21 | youtah | and there is foam on the walls for a sound barrier |
| 18:05.27 | keldwud | I'm pretty vanilla myself but enjoy the atmosphere of it |
| 18:05.58 | keldwud | so what was the event I was thinking of, youtah ? |
| 18:06.01 | youtah | it was built for sound testing |
| 18:06.12 | keldwud | the one that is once a year and has the vendors |
| 18:06.18 | youtah | It's not an event... just a freaky room in the basement of Area 51 |
| 18:06.52 | keldwud | noo, I'm trying to remember an event that takes place once a year |
| 18:07.00 | keldwud | it's either the dark arts festival or something else |
| 18:07.10 | youtah | it's not the V2 Events stuff is it? |
| 18:07.26 | keldwud | it's like fetish night (that's only once a month) except it's once per year and has more options than just the latex table and the rope tying |
| 18:07.37 | youtah | I have no idea |
| 18:07.41 | keldwud | I doubt it's V2. I thought it was the same group that does fetish night |
| 18:07.43 | keldwud | oh well |
| 18:08.04 | keldwud | if I could remember the name of the event, that is the event I would recommend to buy everything on your list |
| 18:08.16 | keldwud | I think everyone else ran away during our discussion, youtah |
| 18:08.38 | jima | nah |
| 18:08.46 | youtah | Did you watch the youtube link yet keldwud? |
| 18:08.52 | youtah | it will all become clear |
| 18:08.52 | keldwud | my love is like, a STORY BOOK STORY |
| 18:09.03 | keldwud | youtah: no, I'm busy listening to Mark Knopfler! |
| 18:09.09 | keldwud | and the princess bride soundtrack |
| 18:09.09 | youtah | You need to watch it |
| 18:09.12 | keldwud | k, I'll go watch it |
| 18:09.14 | youtah | even if it is for 30 seconds |
| 18:09.15 | keldwud | scrolls back |
| 18:09.32 | beelzebob | probably a lot of people here have basements and find this discussion relevant to their interests |
| 18:09.32 | youtah | this chat this morning... still a better love story than Twilight |
| 18:09.57 | keldwud | youtah: ooooohhhh! This is nothing like what I pictured originally |
| 18:09.58 | keldwud | lol |
| 18:10.03 | jima | youtah: i hate you <-- still a better love story than twilight |
| 18:10.03 | youtah | lol, yes |
| 18:10.11 | youtah | jima, still better |
| 18:10.21 | keldwud | I thought twilight *was* a hate story..? |
| 18:10.29 | keldwud | I mean, why else were the relationships so abusive? |
| 18:10.41 | jima | keldwud: that's not what twilight is *about*, just how people feel about it. |
| 18:10.57 | keldwud | youtah: now I want to do what they are doing in that game show! that looks like a lot of fun |
| 18:11.08 | keldwud | get the contestants good and buzzed first |
| 18:11.17 | youtah | a 300 year old dude hanging out with a bunch of high school chicks... that is pretty creepy. Or is he 200 years old? Can't remember. |
| 18:11.20 | keldwud | jima: people feel that it's a love story? |
| 18:11.24 | keldwud | that's super scary |
| 18:12.25 | youtah | anyway |
| 18:12.28 | youtah | goes back to work |
| 18:14.10 | jima | keldwud: i know, right? |
| 18:17.58 | spangborn | Big gulps huh |
| 18:38.12 | youtah | https://i.imgur.com/s4VilbI.gifv |
| 18:40.00 | youtah | I am very very very anxiously awaiting a call from Synology |
| 18:40.07 | youtah | apparently my device has a known defect |
| 18:40.14 | youtah | still under warranty |
| 18:40.20 | youtah | and it just... wont... power on |
| 18:40.39 | jima | i feel like that driver doesn't understand the physics of steering |
| 18:41.04 | youtah | lol jima |
| 18:44.48 | *** join/#utah aarobc (uid151482@gateway/web/irccloud.com/x-qwutsropftdhmegn) |
| 18:48.11 | keldwud | hmmm |
| 18:48.26 | keldwud | I thought I sliced this right |
| 18:48.56 | keldwud | I'm trying to slice 10.0.0.0/16. It already has been sliced all the way up to 10.0.160.0/20 |
| 18:49.27 | jima | cidr is hard |
| 18:49.31 | keldwud | so I thought that the next available block would start at 10.0.176.0, is that right? wolfram alpha tells me it is |
| 18:49.34 | jima | (ok, not for me, but...) |
| 18:50.02 | jima | yes, 10.0.176.0/20 would be after 10.0.160.0/20 |
| 18:50.24 | keldwud | can't I do a 10.0.176.0/24 after 10.0.160.0/20? |
| 18:50.34 | keldwud | and then a 10.0.177.0/24? |
| 18:50.36 | keldwud | and so on? |
| 18:50.37 | jima | yes |
| 18:50.49 | keldwud | ok cool, then AWS must be complaining about something els |
| 18:50.51 | keldwud | *else |
| 18:51.00 | jima | i tend to assume people don't hate themselves enough to mix allocation sizes within a prefix. |
| 18:51.29 | keldwud | jima: well.. this wasn't mine when I first got here :-p |
| 18:51.35 | jima | i hate that. |
| 18:51.41 | keldwud | and deleting the original subnetting would kinda be a lot of work |
| 18:51.46 | keldwud | since my prod runs on it |
| 18:51.53 | jima | ugh. |
| 18:52.16 | jima | but yes, you're understanding cidr right, 10.0.176.0/24 would be the first /24 after 10.0.160.0/20 |
| 18:52.22 | keldwud | so I just started making thinner slices at the end. I needed way more than the 3 or 4 subnets that were left over from a /19 or /20 from the /16 |
| 18:52.54 | keldwud | AWS either thinks I still have overlapping CIDRs or something else is going on |
| 18:54.58 | keldwud | I'm trying to take one VPC that has the 176, 177, 178, 179 subnets and peer it with a VPC that has all the blocks out to 10.0.160.0/20 |
| 18:56.51 | keldwud | ok maybe they both can't be using the 10.0.0.0/16 block? |
| 18:57.54 | keldwud | I thought maybe I needed to keep it all in the same block so they could work together but maybe I overthunk it and don't even need to slice off subnets from the previous 10.0.0.0/16 block and the peering will handle all the routing for me |
| 18:59.53 | jima | i haven't done AWS networking in long enough that i have NFC :-( |
| 19:00.01 | jima | azure, yes |
| 19:00.17 | jima | (i work for a microsoft shop, can you tell?) |
| 19:00.46 | keldwud | I have to share my recent struggle with Azure since you mentioned Azure |
| 19:01.27 | keldwud | I wanted to spin up a web app that would use AAD authentication, and I got it all up in just a few hours, and I'm thinking I was knowing what I was doing |
| 19:01.36 | keldwud | but the authentication just. wouldn't. work |
| 19:03.10 | keldwud | even though I had it set up in the webapp and had the users added and everything |
| 19:03.19 | keldwud | and the users could even log in to their microsoft account |
| 19:03.23 | *** join/#utah tiwula (~lane@70.89.246.241-Busname-UT.hfc.comcastbusiness.net) |
| 19:04.00 | keldwud | turns out that AAD authentication that requires a separate paid subscription / service from microsoft |
| 19:04.08 | keldwud | and that I couldn't experiment with it on the free tier |
| 19:04.09 | jima | where the email addresses the same between their microsoft "personal accounts" and AAD accounts? |
| 19:04.15 | keldwud | but it took me almost three weeks to figure it out! |
| 19:04.20 | jima | were* |
| 19:04.29 | keldwud | once I figured out that it had to have a paid account available, that solved my problem |
| 19:04.48 | jima | oh, weird. |
| 19:05.00 | jima | we have an EA, so that kind of thing would never hit us |
| 19:05.03 | keldwud | yeah, it was because I was using free tiers and trial accounts |
| 19:05.16 | jima | adorable |
| 19:05.50 | keldwud | but it all boiled down to the fact that AAD authentication is paid and billed separately from Azure stuff |
| 19:06.12 | keldwud | I had other experts sit down with me and go through my configuration to confirm I had everything right |
| 19:06.55 | keldwud | we didn't find out what was going wrong until we found a place that would let us explicitly try to "grant permissions" and clicking *that* finally got us an error message that said something about the account type does not support this feature |
| 19:07.39 | jima | that's kind of remarkable |
| 19:07.42 | keldwud | sucks that I wasted three weeks on it, though. I thought maybe I was missing some knowledge or something and I tried dozens of different configurations |
| 19:08.02 | jima | i ran into similar issues deploying templates from my msdn (i'm sorry, visual studio) benefits |
| 19:08.53 | jima | At least one resource deployment operation failed. Please list deployment operations for details. |
| 19:09.08 | *** part/#utah rsimpkins (~rsimpkins@unaffiliated/rsimpkins) |
| 19:10.00 | jima | The requested size for resource '<guid and stuff>' is currently not available in location '<region>' zones '' for subscription '<another guid>'. Please try another size or deploy to a different location or zones. See https://aka.ms/azureskunotavailable for details. |
| 19:10.09 | jima | the url didn't provide any meaningful clarity |
| 19:10.16 | keldwud | exactly |
| 19:10.34 | keldwud | mine was very similar to that and I had to decode that it was referring to account and billing stuff |
| 19:10.38 | jima | turns out you can only deploy to 6 specific regions with visual studio benefits. |
| 19:11.02 | jima | "the requested size" was...misleading, to say the least. |
| 19:13.45 | jima | i should redeploy to West US 2 again to give microsoft some info |
| 19:25.30 | spangborn | How to fix Azure: switch to AWS |
| 19:37.32 | jima | *shrug* not my level of decision |
| 19:37.43 | jima | ok, i guess i'm on vacation now? cheers. |
| 19:38.17 | keldwud | azure can do a lot of things that aws can't |
| 19:38.33 | keldwud | like windows stuff and windows integration and whatnot |
| 19:38.43 | keldwud | especially the visual studio integrations, those are nice |
| 19:43.04 | spangborn | Windows integration? |
| 19:43.07 | spangborn | Sounds like masochism |
| 19:43.19 | keldwud | plus, if you already have some sort of licensing agreement with them, it makes Azure cheaper than AWS |
| 19:43.24 | keldwud | but that's if you use windows for stuff |
| 19:43.26 | keldwud | I don't |
| 19:43.33 | keldwud | except for steam |
| 20:23.13 | keldwud | ok, best way to copy my currently running EC2 instances into a new env? The rough idea I have so far is that however I get them over, I'm going to be updating configuration files anywhere there's a mention of $old-env and change those references to $new-env. outside of that I can't decide if creating a new volume based on a snapshot then spin up a new EC2 instance and attach it to that volume would be better or if maybe I want to crea |
| 20:23.36 | keldwud | from an existing instance and use that AMI to spin up the machines in $new-env |
| 20:23.38 | keldwud | thoughts? |
| 20:24.00 | keldwud | I'm thinking volume might be better but then I'm screwed with anything that was hard-coded |
| 20:24.38 | programmerq | keldwud⸠you run your config management suite again and populate your desired state in the new instance. |
| 20:24.50 | keldwud | programmerq: lol yeah, that's what I *want* to do |
| 20:25.07 | keldwud | I'd rather just spin up a fresh instance and then use my config mgmt to make it what it needs to be |
| 20:25.10 | keldwud | buuuuttt.... |
| 20:25.29 | keldwud | I'm not confident everything is in config mgmt yet |
| 20:26.11 | programmerq | then stop your old one and use the new one until you find what's missing. |
| 20:26.24 | programmerq | terminate the old one after a couple weeks. |
| 20:26.49 | programmerq | loop in your QA team that you're making a change |
| 20:26.50 | keldwud | $new-env is completely new. so I'm copying machines from prod to staging |
| 20:28.05 | keldwud | doing it right using config mgmt puts me at risk of "shaving the yak" |
| 20:28.05 | keldwud | http://sethgodin.typepad.com/seths_blog/2005/03/dont_shave_that.html |
| 20:29.57 | frostyfrog | youtah: Awesome to hear the HOA building antenna installation x3 |
| 20:34.53 | youtah | HF, VHF and UHF |
| 20:37.34 | spangborn | high fat, very high fat, ultra high fat |
| 20:41.31 | youtah | s/fat/fart/ |
| 20:42.36 | frostyfrog | Sweet! |
| 20:42.44 | spangborn | ~nachos |
| 20:42.45 | infobot | schweet. |
| 20:42.45 | frostyfrog | Sounds like fun! |
| 20:45.02 | keldwud | schwiggity schweet |
| 21:00.18 | programmerq | keldwud⸠my suggestion to use your hypothetical config management scripts is more to highlight a real business case for dedicating resources to that sort of thing. |
| 21:00.58 | programmerq | you've got these resources, but there are enough unknowns that duplicating them is relatively difficult, or at least not clear how best to proceed. |
| 21:01.12 | programmerq | that is limiting how effective you are at getting your current project done |
| 21:01.29 | programmerq | and it may indeed be a bit yak-shave-ey, but shouldn't be something indefinitely put off either. |
| 22:17.14 | Migs | https://www.pastemagazine.com/articles/2017/11/beyond-the-meme-we-now-know-the-entire-life-story.html |
| 22:53.16 | *** join/#utah aeryndunham (~aeryndunh@170.250.131.39) |
| 23:01.22 | youtah | Well, eightyeight has me convinced to never use Telegram.org, ever. |
| 23:02.50 | eightyeight | \o/ |
| 23:03.26 | eightyeight | everyone's needs are different, and you're going to go where your friends and family are, of course |
| 23:03.27 | eightyeight | i get it |
| 23:03.54 | eightyeight | but if you can, steer clear. it's really just multi-user SMS, and offers about the same level of security |
| 23:04.58 | eightyeight | i would recommend Signal is the primary messaging app, with WhatsApp as strong second choice contender, or SilenceIM |
| 23:05.33 | eightyeight | of course, evaluate your thread models and adversaries, but in the general sense, using those products is better off for your security and privacy than Telegram or SMS |
| 23:05.45 | eightyeight | s/thread/threat/ |
| 23:08.16 | youtah | well |
| 23:08.20 | youtah | that is when you get your family to all move |
| 23:08.45 | youtah | isn't easy, but just tell that <insert their favorite politician here> doesn't like them |
| 23:08.56 | youtah | so then they'll move away |
| 23:09.51 | keldwud | derp |
| 23:10.09 | keldwud | adding all the subnets to a route that is peered between my two VPCs was *not* the answer apparently |
| 23:13.32 | keldwud | everything is back up now... |
| 23:13.37 | keldwud | wipes seat from brow |
| 23:14.13 | keldwud | I guess AWS Route Tables only allow one subnet per table, a subnet cannot exist in multiple route tables looks like |
| 23:16.59 | keldwud | do I even need to add subnets to my peering RTs? Or it should just pass along the traffic just fine as long as I have the "parent" CIDR destination targeting the peer connection... |
| 23:17.02 | keldwud | guess I'll see now |
| 23:18.01 | romanovic | eightyeight: I thought I had heard whatsapp was based on Telegram (or created by some of the same folks?) but not quite as secure, since there is an association with phone number? |
| 23:18.19 | eightyeight | it's not based on telegram |
| 23:18.30 | keldwud | are mumble and or discord valid alternatives? |
| 23:18.33 | eightyeight | it's owned by facebook, and messages are stored on their servers |
| 23:18.57 | eightyeight | however, whatsapp uses the signal protocol for end-to-end encrypted messages, which is the only way messages are delivered |
| 23:19.02 | keldwud | s/their/the database at the point of the mountain |
| 23:19.18 | eightyeight | there are a couple legitimate concerns with whatsapp though |
| 23:19.40 | eightyeight | the first, is after setting up your account, they give you 30 days to opt-out reporting anonymized data to whatsapp |
| 23:20.05 | eightyeight | the app doesn't tell you about it, so if you didn't know about it in advance, or find out about it in that window, you're out of luck |
| 23:20.35 | romanovic | I must have been thinking of signal rather than telegram, that whatsapp is based upon |
| 23:20.43 | eightyeight | the other issue is rekeying. by default, the app does not notify you if one of your contacts gets a new public/private key pair (such as getting a new phone) |
| 23:21.18 | eightyeight | this opens up a window, where facebook/whatsapp could rekey both your device and your recipients, without your knowledge, and inject an active MITM |
| 23:21.20 | romanovic | but, signal does? |
| 23:21.24 | eightyeight | correct |
| 23:21.27 | romanovic | interesting |
| 23:21.28 | eightyeight | signal will notify you by default |
| 23:21.44 | eightyeight | and signal doesn't report any data to whisper systems, or anywhere else |
| 23:23.09 | eightyeight | keldwud: i'm not familiar with mumble, and i don't know enough about discord to comment |
| 23:23.26 | eightyeight | but my gut feeling would be "no, discord is not a valid alternate to signal, whatsapp, or silenceim" |
| 23:23.33 | eightyeight | i'd have to investigate it though |
| 23:23.48 | keldwud | eightyeight: you're probably righ |
| 23:23.52 | keldwud | *right |
