systemd/florian @florian@bsd.network

#introduction

Hello, I'm Florian. I have been on here since 2018.

I work as a system and network engineer for the RIPE NCC. I'm a Domain Name System (DNS) and Border Gateway Protocol (BGP) expert and I'm responsible for running one of the 13 root name servers. In short, I'm one of the people keeping the Internet running.

In my spare time I hack on OpenBSD and found my niche with privilege separated network daemons.

I like hiking and bicycle touring. We live with four people (two species felis catus, two species homo sapiens) in a house with a garden in the Netherlands.

I identify as socialist but you'll find very little political commentary from me here.

A wise person once said: "Computers were a mistake." I can't agree more.

Warning

This account features activities performed either by professional network engineers or under the supervision of professional network engineers.

Accordingly we must insist that no one attempt to recreate or re-enact any activity performed by this account.

Apropos...

Is Honest Ahmed still issuing certificates? Asking for a friend. ​

Since srand(time(NULL)) is good enough for the NSA, it ought to be good enough for everyone. We can stop with the getentropy() / arc4random() nonsense...

OH: Pneuma is a 12 minute drum solo with some music in it.

Boring is good. Boring is reliable.

[fobser@pocketcapybara:~]
$ dig +norec +dnssec @k.root-servers.net DNSKEY .

; <<>> DiG 9.20.29 <<>> -r +nocookie +nocrypto +nsid +retry=0 +norec +dnssec @k.root-servers.net DNSKEY .
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 45103
;; flags: qr aa; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 1232
; NSID: 6e 73 32 2e 6e 6c 2d 61 6d 73 2e 6b 2e 72 69 70 65 2e 6e 65 74 ("ns2.nl-ams.k.ripe.net")
;; QUESTION SECTION:
;.              IN  DNSKEY

;; ANSWER SECTION:
.           172800  IN  DNSKEY  256 3 8 [key id = 8763]
.           172800  IN  DNSKEY  257 3 8 [key id = 20326]
.           172800  IN  DNSKEY  257 3 8 [key id = 38696]
.           172800  IN  RRSIG   DNSKEY 8 0 172800 20261101000000 20261011000000 38696 . [omitted]

;; Query time: 18 msec
;; SERVER: 2001:7fd::1#53(k.root-servers.net) (UDP)
;; WHEN: Sun Oct 11 16:01:51 CEST 2026
;; MSG SIZE  rcvd: 1164

​

#DNS #KSK2024

#nocontext

This (*waves at everything*) turns more and more into a Culture novel. The only problem is, it's the Affront who are designing and training the ship minds...

Every plan needs at least 4 people:
1. The person with the plan.
2. The person who's responsible.
3. A patsy
4. The person doing the work.

@mwl you mentioned the other day that you'd been introduced to the LOTR movies. I just came across this open tab, HTH: https://mastodon.social/@Richard_Littler/116698955540864133

Oh: " I don't know what I'm doing. I'm rawdogging life..."

oh right, spooky season ​

Turning the hamster into a mouse.

Nobody:
Absolutely fucking nobody:
Apple: