Unknown USB drives can potentially contain explosive materials, causing harm to individuals who plug them into their computers.
Regularly testing backup and restore procedures is crucial to ensure readiness and prevent outages, especially when upgrading major components like Kubernetes.
Deep dives
The danger of plugging unknown USB drives
The dangers of plugging in unknown USB drives were discussed in this podcast episode. The hosts emphasized that unknown USB drives can potentially contain explosive materials, posing a risk to the person who plugs them into their computer. They explained that even small amounts of explosive material, such as the RDX explosive used in the example, can cause burns and injuries. While it is important not to make light of these incidents, the hosts also clarified that USB drives cannot easily cause massive explosions like in movies or TV shows. Additionally, they highlighted the importance of being cautious with lithium batteries, which can also be explosive.
Lessons learned from Reddit's recent outage
The podcast episode delved into the recent outage experienced by Reddit and the lessons learned from the incident. The hosts discussed the importance of regularly testing backup and restore procedures, emphasizing that this should not be a one-time check but a routine practice to ensure readiness. They highlighted that upgrading major components, like Kubernetes, can be risky and should be thoroughly tested in a separate development environment before performing the upgrade in a production environment. The hosts also praised Reddit for providing a detailed technical write-up about the incident but stressed the need for better documentation and procedures for handling such situations.
Securing credentials with an encrypted text file
The podcast episode addressed a listener's question about the security of storing credentials in an encrypted plain text file. The hosts acknowledged that while it can be a viable option, there are risks involved. They highlighted the need to ensure the decrypted file is not accidentally stored or saved temporarily, as that could compromise the security. They also suggested using tools like ZFS encryption or creating separate text files for each set of credentials to minimize potential risks. However, they noted that the biggest risk lies in human error, such as mishandling the decrypted file or leaving it exposed.
Considerations for managing passwords and credentials
The hosts engaged in a discussion about managing passwords and credentials effectively. While the listener's approach of using an encrypted text file was deemed feasible, the hosts emphasized the importance of usability and minimizing potential risks. They suggested further exploring solutions like creating small shell scripts to securely input and manage passwords or developing a minimalist password manager tailored to individual needs. However, they also acknowledged the convenience of existing password managers while highlighting the need to remain vigilant about vulnerabilities and regularly updating software.
Yet another reason not to plug random USB drives into your laptop, how Reddit learned about the importance of testing your backups, and we brainstorm a sysadmin’s version of a minimal password manager.
We were asked about rolling your own password manager.
HelloFresh
With HelloFresh, you get farm-fresh, pre-portioned ingredients and seasonal recipes delivered right to your doorstep. Get 50% off at hellofresh.com/25admins50 using the promo code 25admins50
Linode
Simplify your cloud infrastructure with Linode’s Linux virtual machines and develop, deploy, and scale your modern applications faster and more easily. Go to linode.com/25a and get started with $100 credit.