Skip to main content




I moved my work laptop from Devuan to Debian because Zscaler doesn't know you can launch an program without systemd, but somehow Thunderbird on Debian is eye searingly, upsettingly, bad.

All the other Thunderbirds I've seen are great, but Debian is doing something that I can't turn off.



For @Becky 's birthday, our 5yo wanted to make a custom PvZ mod where everything is rainbows.

So our first attempt all the work we did got eaten because the game didn't like the files. So we redid it, and then had to test.

And my son is being a proper game dev, having all his work ruined and needing to fix it

Ben Zanin reshared this.




I have a friend who is being harassed and threatened semi-anonymously via Facebook. She knows *who* it is, but Facebook and Police are characteristically being uselss.

I am kinda useless at this side of deanonymization, but does anyone have advice or resources for deanonymizing enough to get cops to move?

#infosec #batsignal

in reply to silverwizard

if you can host a file on a site where you can look at the access logs and then post a link to that file, you might be able to bait them into downloading the file which could give you their IP address in the access logs. A whois search for the IP address.could get you their ISP and geolocation information on the IP could get you the general area.

That's a lot of "ifs" and "coulds", though.

in reply to Jim Jones

here is a Forbes article (that also points to more sources) on how to do it. Beware that it isn't a quick fix, but it can work if they are persistent (and it require some legal action, which isn't always affordable). forbes.com/sites/kashmirhill/2…
in reply to Jim Jones

from there, if the police still won't do something, it turns to filing court orders to get information from the IP holders about who had the IP at the time of access and harassment.

Good luck.

This entry was edited (3 months ago)


I am reading my kid The Hobbit at bedtime, and this feels like the most authentic and fun way to read it
in reply to Mason Loring Bliss

@Mason Loring Bliss this is making me realize I can use this as an excuse to start The Dark is Rising, a series I never read as a kid
in reply to silverwizard

@silverwizard Oh, absolutely. There's no better excuse in the world. Reading about it, it reminds me of a similar-sounding story I read when I was young, but I can't remember the name now. I'll have to dig around. Something that might help me find it was that it existed as of somewhere between 1980 and 1984.
en.wikipedia.org/wiki/The_Dark…

Unknown parent

djb
@allenstenhaus memories of Cisco CF cards they charged absolutely insane prices for
in reply to silverwizard

I feel like a proper cyberpunk when I manage to pull apart a set top box, pull out the disk, and use that to rebuild my router.


Hobbesian philosophy sounds deep until you say it, "Ain't no claws when you're drinking laws"


Slack, Discord, and all of those all bind /me to italics - and it's wildly annoying because my /me instincts still exist
Unknown parent

@🩷 eva 🩷 See that's the issue! I hate irssi! I can't get my head around it!

People keep recommending me WeeChat but I keep forgetting. One day.

My friends run an XMPP project, soprani.ca/, which has some MUCs if you want to look around!

in reply to silverwizard

@silverwizard @🩷 eva 🩷 I've migrated mostly to XMPP (for the half dozen or so people I know who use it) but I was pretty happy with irssi for IRC. It can even pull double duty and do XMPP, though admittedly a little buggily.
This entry was edited (3 months ago)


Any #FreeBSD folk know why the rust compiler might give me

ld-elf.so.1: /usr/local/bin/../lib/librustc_driver-d829a4d8a572ebe4.so: Undefined symbol "_ZNSt3__122__libcpp_verbose_abortEPKcz"

I am worried the problem is my kernel is 13.2 but the rust package claims to be from 13.3? Is this a "just upgrade and stop worrying" situation

in reply to silverwizard

I'm neither a FreeBSD folk nor a Rust folk but that looks like a library version mismatch to me - is your libc++ the one that came with your 13.2 system? The symbol it's missing might be new in 13.3. (Not sure whether there's a feasible way to get a 13.3 libc++ without upgrading the whole system, your path of least resistance might be finding a 13.2 rust package.)
in reply to Dave

@Dave Yeah - in theory this package should be fine for all FreeBSDs - but I have a worry something happened with the package DB accidentally giving me an incompatible rustc binary - which ... shouldn't happen - I think?!
@Dave


Infosec apparently doesn't realize that cheques are ancient technology no one under 40 has seen in over a decade


Remember, the vulnerability in Yubikeys doesn't make them weaker than most sms 2fa

reshared this

in reply to Rivetgeek (He/Him)

@Rivetgeek yeah, so much of the time. someone told me that facebook tells employees to leave theirs in their laptops, which is, at least, funny.

SMS 2FA is mostly because because SMS numbers suck

in reply to silverwizard

The funny thing is mine still isn't plugged into my laptop itself. I just never unplug the Yubikey from where it is. So it's not totally pointless if someone stole my laptop (they'd have a bad time either way considering the hard drive is encrypted).


An important parenting skill is not giggling when you say "What hurts?" and they answer "all of it"


If your wrapper script requires as many or more flags/inputs than the original script, it's probably bad for you
in reply to silverwizard

(Caveat: not if it's abstracting multiple different tools on different systems)


Someone needs to write a sysadmin version of the Last Sea Shanty

A sysadmins not a sysadmin anymore

in reply to Andy H3

@Andy H3 He also does a Last Sea Shanty that I like youtube.com/watch?v=zw0FZs_J2I…

also some wildly good River Shanties around on.soundcloud.com/dWAaRJRCEY75…

I mostly love the Sea Shanty as a repository of blue collar solidarity songs that are great for groups and to scream, so I don't understand the love for the Wellerman, though enjoy it fine



404media.co/this-is-doom-runni…

This is the *stupidest* use of LLMs - right?

The primary problems with video games are:
1) too well written
2) don't suffer from enough bloat
3) run too quickly

Luckily Google has fixed it in a way even worse than Stadia!

reshared this

in reply to silverwizard

I agree keep it running on bacteria not the software equivalent of an elementary school kid that pees his pants daily and licks the windows because he likes the taste/


Got to pull a coworker into a call and just explain logs to them

That's what they call a good day?



Listen, if your branching and commit message strategy takes more than 15 minutes to explain. And I need to work with every team and this is just yours.

I'm not gonna follow it.



I finally finished Siege of Dragonspear in my quest to get through all of Baldur's Gate.

I am shocked by how unpleasant it was to play through.

Only having BG1 to compare to - it's like night and day.



Explaining why my Wizard RPG character can't write:
"I wanted to make sure I mastered all the letters before I started figuring out writing"


I really need to stop assuming that most developers have a mental model of DNS delegation in their head.

I need to accept that I'm the weirdo here.

in reply to silverwizard

I have a post-it note that says "it's always DNS" stuck up my nose
in reply to screwlisp

@screwlisp just write down "it'll be easy! We'll just do split horizon DNS with a second local domain, it'll make it way more efficient!"

screwlisp reshared this.

Unknown parent

@Craig Brozefsky 🇵🇸 yeah, there's lots of cultural contexts, but I constantly assume that things that make The Internet Work are default skills tech people have.


Does anyone else listen to this sometimes? archive.org/details/cyber-fina…

It's such an important artifact

in reply to silverwizard

This is wildly important. It's bitter and it's complicated. But it's probably the real Cyberpunk. It's good. Listen to people think about journalism during a tragedy.


I am currently regularly dealing with Zscaler support and Drata support.

Drata support is awful because you need to get answers from an LLM before you can talk to it. But the LLM is worthless because it just puts out a segment from the knowledge base and you only contact support when things are broken.

Zscaler support is worthless because they're undertrained and given a flow chart to follow. The flow chart means they just parrot the knowledge base repeatedly.

Drata's support is better because there's only one human trapped in this hell.




Zscaler seeing a user has an IP in 100.0.0.0/8 tells me that wont work because that's a Zscaler internal IP.

Of course, the user's ISP is misusing CGNAT and also claiming IANA reserved IPs are theirs.

Abolish legacy IP

Unknown parent

@The Psychotic Network Ferret the problem was that neither group using 100.6.0.0/16 *owned* it. Both of them were using it for extra IPv4 space.

And I've been a ISP grunt, I know we want IPv4 to die, but there's some ISPs that have bonkers IPv4 stacks and massive CGNATs without a whisper of IPv6



Me vs @Becky parenting
@Becky - buys the kids mars bars
Sean - tells the kids Mars Bars are made by war criminals and then starts teaching them to make nougat
This entry was edited (4 months ago)


My 3 year old kid has a 1 string guitar to learn to make sound, To protect his fingers I handed him a guitar pick. He yelled "Can I open it!" and started trying to find a seam to shove the pick in to spudge the guitar.

I am... raising children.

shyduroff reshared this.



A recent chat lead to the idea of the Standard Reference Olympian

Someone who is *not* good at the sport. Just to remind everyone how intense everyone there is.

"Oh this person got 20th place! Unremarkable"

make people compare them to the SRO

in reply to silverwizard

@silverwizard At least the SRO wouldn’t have defended “her creative vision” in the numerous interviews she’s given since.


Hey #Bhyve/#FreeBSD people!

I'm trying to manage USB passthrough into a guest, I can't find anything in the manpages. Is there something I'm missing?

reshared this

in reply to silverwizard

Not currently supported, as far as I’m aware. The closest you can get is to pass through a whole USB host adapter PCI device to the guest, then all devices connected to its ports will end up in the (same) VM.
Proper USB passthrough isn’t ridiculously difficult to implement by any stretch, but I guess nobody’s got around to it yet.
in reply to Phil Dennis-Jordan 😷

@Phil Dennis-Jordan 😷 "Not missing something" is a good answer! Thanks!

I gotta figure out if I have a host I can give my homeassistant server. But thanks!

in reply to silverwizard

You can pass entire USB controller (PCI passthru) into Bhyve VM but not a USB port or USB device.

Here instructions how to do it:

vermaden.wordpress.com/2023/08…



Alone for lunch (yes it's 4pm) for the first time since the kids were born.

writing a complex regex to manage emails, since, ya know, I know how to have fun.



I get all my music as FLACs because I'm not unwise.

My car will only play mp3s (and oggs?!).

This 2012 MacBook Air is not made for this find command.



InfoSec: If you use the wrong crypto, and have SSL broken, you could, maybe, get the email of the user. 10/10 CVE, Information Disclosure

Also Infosec: This Is Good And Normal


This battle was lost a long time ago. There is no going back to sane defaults. Data collection is now the primary goal of paid and free products. You don’t own anything, and you will be happy. Of course, you can still use privacy-enabled products at home, but those options are limited, and not all your apps will be available. bsky.app/profile/ahhmandah.bsk…



've seen so many hearing aids on kids this week, often low profile, some very large, all taking wild abuse, like a child spraying his repeatedly with a water jet in a splash park

and - I feel so good about this - this is the core of accessibility - you didn't see a lot of deaf kids before because they were isolated! and now they're not!

knightly reshared this.

in reply to silverwizard

almost sounds like that one kid wants some quiet and is trying to break it ;)


Phillips Hue keeps threatening me they're going to shut down everything. I put their app on a side device that wont download things and I don't update it, and I put their bridge on a no-internet-access VLAN - but I'd like to just not deal with their shit.

Is there a bulb that doesn't deal with their shit?

Bee O'Problem reshared this.

Unknown parent

@Neil Brown UK is a tall order, but I'd love to get good Tasmota bulbs. I am dangerously close to building one.
Unknown parent

@Mischa 🐡😎 Wait - you can connect them directly through zigbee?!

Hmmmmm

Bhyve USB passthrough reseach commences.



Security is Threat Modelling

Security Advice or guidance without a threat model is not correct. Full stop.



the Humble Bundle copy of Gratuitous Space Battles I bought years ago is causing OpenAL issues every time it makes a sound and seems to have no mute option.

I need to figure out dummying the linker...



Last night I had a dream that I was (kinda accidentally) elected UK Prime Minister, and I was confused as hell because I was a tourist and didn't know any of the ritual.

And I think that it's telling about the UK that my brain can find no holes in the theory that this is plausible



Security vendor demanding I install servers in my network running out of date FreeBSD which can't be updated and RCEs in SSH

I really wish there was a compliance framework these types needed to follow

Unknown parent

@The Psychotic Network Ferret I think it's so they don't need to tell me it's FreeBSD.

They also tell me to use the IP address on eth1 and the server *is FreeBSD*.

It's 11.4 so it's not dire - but it looks like they haven't updated it ever. I tried a poke at pkg and they don't have their own repo so the repo is just gone. And yes, the SSH is 8.4 from 2022.



Talking to coworkers "Remember, your laptop is 4-10x as powerful as one of the servers, your laptop has to run Slack and none of the servers take that kind of abuse"