thresh's comments

On: Native ACME support comes to Nginx

[thresh]

Just use the official packages from https://nginx.org/en/linux_packages.html#Ubuntu

nginx-module-acme is available there, too, so you don't need to compile it manually.

On: Nginx introduces native support for ACME protocol

[thresh]

I'm currently working on getting the Trixie packages uploaded. It'll be there this week.

As you've said Debian 13 was released 4 days ago - it takes some time to spin up the infrastructure for a new OS (and we've been busy with other tasks, like getting nginx-acme and 1.29.1 out).

(I work for F5)

On: Why does the U.S. always run a trade deficit?

[thresh]

Is that correct? My understanding is that the SWIFT transfer will go through a US correspondent bank in this case.

[sgjohnson → thresh]

Not necessarily. A correspondent bank is simply a bank where the recipient bank has an account in the specified currency. For domestic currencies used only in certain countries, that bank will almost always be in that country. For currencies used globally - not necessarily.

On: The extraordinary lives of coast redwoods

[thresh]

Uh, Siberia and Russian European North.

On: Nginx Security Advisory

[thresh]

Hi!

The official nginx docker images ship with HTTP3 module enabled - and we have released the updated ones earlier today - so please update to stay secure.

You can also launch something like: $ docker run -ti --rm nginx:latest nginx -V

to check which modules are compiled in to the binary you're running.

Thanks!

[occams_chainsaw → thresh]

Why are they enabled by default while this page says otherwise?: https://my.f5.com/manage/s/article/K000138444

  Note: The HTTP/3 QUIC module is not enabled by default and is considered experimental.

[silverwind → occams_chainsaw]

Because they are not so "official" maybe?

On: Chrome Removing Theora Support

[thresh]

VLC has a port to WebAssembly: https://code.videolan.org/jbk/vlc.js#vlcjs-vlc-for-wasmasmjs

(it's actually usable to some extent)

On: HTTP/2 zero-day vulnerability results in record-breaking DDoS attacks

[thresh]

nginx: https://mailman.nginx.org/pipermail/nginx-devel/2023-October...

On: HTTP/2 Rapid Reset: deconstructing the record-breaking attack

[thresh]

Read this: https://mailman.nginx.org/pipermail/nginx-devel/2023-October...

On: The future of AlmaLinux

[thresh]

> We will also start asking anyone who reports bugs in AlmaLinux OS to attempt to test and replicate the problem in CentOS Stream as well

So what's the point of running Alma then?

[keeperofdakeys → thresh]

- Provide a maintenance period beyond what CentOS Stream provides.

- Potentially hold back CentOS Stream updates to stay more in sync with RHEL. If RHEL is on X.Y, CentOS Stream is technically on X.(Y+1) - Alma wants to be X.Y compatible.

- Provide ABI compatibility with RHEL which CentOS Stream may not provide.

[mroche → keeperofdakeys]

* Provide ABI compatibility with RHEL which CentOS Stream may not provide.*

CentOS Stream by definition is ABI compatible with RHEL, and is required to be as such.

[NewJazz → thresh]

Buffer the stream.

[justinclift → thresh]

Don't cross the streams? ;)

On: Bitcoin miners in Abkhazia are causing blackouts in remote villages [video]

[thresh]

The electricity there isnt just cheap, it's virtually free. They just dont shut you off it you don't pay.