Articles by Daniel Kahn Gillmor (dkg)

  1. resetting passphrases for mapped LUKS volumes

    Let's say you set up a machine using an encrypted disk with LUKS (debian-installer's partman makes this wonderfully easy!). You choose an initial passphrase, get the machine working, and it's working great. Then, you need to restart it, and realize that (for whatever reason) you've forgotten or lost the passphrase …

  2. forwarding unix domain sockets with ssh and socat

    i suspect a lot of people are used to forwarding TCP sockets with SSH -- for example, to connect locally to a mysql daemon that runs only on the loopback interface of a remote machine (this is debian's default mysql-server configuration):

    ssh -N -T -oExitOnForwardFailure=yes -L 3306:localhost:3306 remoteuser …
  3. registrars and AAAA glue records

    i've been on an IPv6 kick recently, getting dual-stack systems up and working for a bunch of folks.

    I'd like to make some of these services reachable by IPv6-only clients. this suggests that i need a range of details sorted out, but i think the one piece left for me …

  4. You should be using ssh-agent

    If you're not using ssh-agent to authenticate yourself to SSH servers, you should be. (i'm assuming you're already using PubkeyAuthentication; if you're still using PasswordAuthentication, ChallengeResponseAuthentication or KbdInteractiveAuthentication, fix that please).

    You should use ssh-agent for a number of reasons, actually, but the simplest is this: when you authenticate to …

  5. hotmail thinks powerpc means mobile

    Apparently, live.com thinks that any browser coming from a ppc architecture is a mobile device. This sucks for the users of the hundreds of thousands of powerpc desktops still in service.

    I don't use hotmail myself, but i do support people who use it. I set one of my …

« Page 6 / 13 »