Well, that’s a new and interesting way
To release vulns into the wild…. Unless they’re planning to double up on the Q&A to read all that code that no one wrote….
271 publicly visible posts • joined 12 Oct 2020
Presumably with glee, on something for 6 years, in plain sight, and no one noticed.
Makes me wonder what it’s going to look like after the next version of Windows ends security patching.
If I recall this isn’t the first time (https://www.securityweek.com/critical-flaw-magento-ecommerce-platform-exposes-online-shops/amp/) a problem was caused by caused by poor upstream controls. IIRC the lead dev handled his publicity poorly too.
Just to be a pedant, there are several legal precepts that more-or-less state “if you fail to use or enforce these provisions for years, you can lose the right to suddenly enforce them to the detriment of someone else.” Domain squatting comes to mind, as well as patent troll legislation.
I moved everything I touched that was ESXi + SAN/NAS and moved to proxmox + ceph and have t looked back. Proxmox support might seem a little steep, but when you consider that the software is free (and quality) and that their support team is *utterly* top notch (with a huge, healthy community support family) it’s a huge savings. Terraform works so well with it that its heartwarming. It runs on plain Debian, which makes things like administration (or kludges) much more familiar. (For instance, using nut to manage a clean shutdown).
Are there downsides? Sure.
Pmox runs on Debian, but you can’t lump them with other Debian machines. Since we have root access to the hostboxes, we may be tempted to install monitoring software, sometimes this can cause problems. (Vector, im looking at you).
Ceph! (the distributed storage “subsystem” requires some self-education. Its an entire application suite on its own.) Ceph is *worth it* even at home, but it’s quite a thicket.
The gui and cli usually-but-not-always have analogues of the other’s commands, particularly with ceph.
Occasionally, Support can be a bit stroppy. In classic German fashion, they won’t answer a stupid question, but they will let you know. Still worth it.
So…. ~30TB of tape vs a ~30GB disc alternative. Since most of us can do basic powers, you will realize you need ~1000 discs to fill that tape.
If we assume our worst case outcome, we have one long linear “tarchive” for a back up, now if I have two full back ups, am I more likely to have two dead tapes or more than two dead discs?
If we assume our best case outcome, I stick the tape in the drive, and if there’s some damage, it uses proper parity/EC and incremental math to fix the problem, or I use the second back up. With the discs, I am stuck swapping one every few minutes, and if one of them is damaged, we may have to go hunting for the parity data.
If we stretch that parity data out, I might wind up having to split my back up across two tapes whereas you would end up having to split that back up across 1100 discs if we had 10% more parity.
Incidentally, a disc mini loader that handles far less than 1100 or 2200 CD sized media units cost the same as a pair of singles or a dual-slot tape drive that can do the entire back up in one swing, requiring one change of tapes if we do a double back up (Which is the only way to do a backup).
Then, of course, everyone does a hash/crc check of their backup the next morning, right? Slap the tape in the drive let it check a handful of files and compare everything. Now, how the fuck do I do that with 1100 discs and get anything else done in my day?
The pint is for after I swap tapes.
The fact that it’s a proprietary process owned by a company that’s already gone bankrupt once makes me question a few things. I see some of the competitors in the space have also done bankrupt. At the very least the media would need to be readable in commodity hardware, but LTO is an open standard from top to bottom, and this is both proprietary and appears to have competing standards. If they end up, settling on a standard for both chemistry and technology, yeah I suppose the larger discs would be a good contender for smaller back ups like home or small office. You still need some kind of disc flipper if you want to take more than a couple hundred gig of back up whereas nowadays you might need to swap tapes once for a 30Tib array.
I think even that that’s pushing it, I mean we’re still using tape after 70 years, when was the last time we used a CD? 20 years ago? or a DVD? 10 years ago? I have 15 year-old LTO tapes and written DVDs, and I’ll bet my ass the tapes have a higher recovery ratio.
Nevermind the whole “R+W R-W” nonsense that never birthed an actual archival format.
Nevermind twice that modern CFS/incremental/rotating tape backups. Most of that is inaccessible to any current optical storage, and the portions that do work would go through an absolutely incredible amount of media, with their attendant higher error ratio just through sheer units of media.
Nevermind-on-the-gripping-hand pretesting media, I can test and read back a tape, but there is a reason DVD and CD media (both R and RW) had a “write test area“.
When you have to “correct” something so that arguments about human rights can *include* statements like “except for immigrants” or women or other crap, that’s not fixing a bias, that’s making accommodations for republican feelings.
Remind me, what is it your party chants about feelings again?
… to allow us to cut out customer service staff.
A 15 minute delay is a “support offering”?
So they did enough “market research“ to discover that people didn’t use their online offerings, but didn’t do the same amount of market research to figure out a 15 minute delay was not the right method?
The original memo states mentioning increased call volumes, but since that’s clearly a lie, they ended up putting in messages about increased weight times, with only the implication, not explication, of call volumes.
I think that’s the same kind of implication they use when they imply they will give you support.
Never mind how they’re going to use the “reduced call volumes” internally to reduce jobs but “increased call volumes” externally to keep bleeding people off to useless solutions until they get frustrated and stop trying.
How very “used car saleman”.