scottlinux

- launching AMIs (they are stored on s3)

- cloudfront

- ses

- ebs

- rds (snapshots/backups on s3)

- lambda functions (appear to be stored in s3)

perhaps others

Debian 8 supports http/2 with the updated nginx provided in jessie-backports.

https://news.ycombinator.com/item?id=9704952

https://about.gitlab.com/

On Linux, there is a false positive that occurs (http://code.google.com/p/chromium/issues/detail?id=437733).

Debian has a fix in experimental. However the bug is seeing no action. Please Debian push this update out:

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774195

Ubuntu fixed this in Feb 2015:

https://bugs.launchpad.net/ubuntu/+source/nss/+bug/1423031/c...

I believe this seccomp-tsync feature was introduced in 3.17. I can't find the exact commit but I'm looking.

Edit: https://lkml.org/lkml/2014/7/18/718

Google has backported this to ChromiumOS

https://code.google.com/p/chromium/issues/detail?id=430588

http://front.dnstrails.com/tools/lookup.htm?domain=clintonem...

https://owncloud.org/eight/

Sounds right. I also found this:

http://stackoverflow.com/questions/15830333/arduino-due-http...

I too have this IP in my account login history. As well as others since July from other places globally.

This appears it was not brute force attempts, as the log would show failed login attempts. They just logged right in, first try. Sounds like a web site vulnerability.

Not only EC2 instances, but also RDS instances.

I received various maintenance email notifications for RDS reboots.

See hashcat. :) It is easy to crack those types of hashes these days. Or even just search for the hash in google.

Those are accurate numbers.

https://forum.linode.com/viewtopic.php?f=22&t=10960#p63254

You can lease fiber. For instance Google leases fiber for their internal google-to-google network.

You can use Linux as a router. Any Linux distro would work (Debian, Ubuntu, RHEL, SuSE, etc).

I do this at home and work with a Debian router.

There is also pfsense as well.

Eek - not naive. This is taking credit card information over HTTP (form submit is over HTTP) all on a Wordpress site via a Wordpress cart plugin.

Or lazy man's ssh tunnel. :)

Is there an option to opt your account info OUT of the api?

It appears WorkSpaces requires a client which is not available for Linux desktop users nor ChromeOS. :/

http://docs.aws.amazon.com/workspaces/latest/adminguide/clie...

Might also be of related interest: https://twitter.com/dumpmon

http://bits.blogs.nytimes.com/2014/01/10/stop-asking-me-for-...

There are only four ram slots. The largest ECC stick available now are single 16GB sticks. Just not enough room for slots on the board, is my guess.

TIL people still use a USB cable to sync their calendar and contacts. The last time I did that was with a palm pilot. :)

django here.

coinbase.com is good if you are in the US.

Vulnerability in how Windows does ICMPv6....

https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-31...

Another one: type Alt-F4 during a video.

http://www.akamai.com/html/technology/dataviz1.html

Attacks

I suspect this kind of thing happens with other companies, but can only speculate.

Somewhat related: chicagovps gave me a 'fresh' gentoo vps, and the default provided root password was identical to the original one from several months ago. I assume it is one gentoo image with the same password (for all customers)?