*sigh*Ber nard @brnrd@bsd.network
- Blog
- https://brnrd.eu
- About me
- https://brnrd.eu/pages/about.html
(Free)BSD, security, Libre-/OpenSSL, tinkering by night.
Bored-out Security Architect by day.
Running, swimming, cycling, hiking when I have the time and energy.
Joined Jan 2018
*sigh*Ber nard
boosted
Voor bij de Duitse verkiezingsuitslag...
https://www.trouw.nl/opinie/david-van-reybrouck-fascisme-veel-mensen-hebben-er-gewoon-zin-in~bedaf561/
Zelfs een rechter (van het ICJ) begrijpt hoe we ons uit de klauwen van de Amerikanen kunnen werken.
‘Een tweede les is dat we één alomvattende oplossing missen, want het is nu nog een lappendeken. Je moet met verschillende software werken. Als consument – want ik ben absoluut geen IT’er – denk ik dat we het meest gebaat zouden zijn bij compatibiliteit tussen meerdere Europese oplossingen.
Top artikel voor non-nerds van Volkskrant
https://archive.ph/q7NGV
*sigh*Ber nard
boosted
‘Je leven wordt heel onzeker’.
Rechter Nicolas Guillou van het Internationaal Strafhof vertelt wat er gebeurt als Trump het op je gemunt heeft:
Why am I seeing traffic between IP-addresses bound to rge0 blocked by pf, and linked to lo0 loopback interface?
19:49:00.899440 rule 0/0(match): block out on lo0: 192.168.2.2.40087 > 192.168.2.1.636: Flags [S], seq 132927340, win 65535, options [mss 16344,nop,wscale 8,sackOK,TS val 522535913 ecr 0], length 0
The only fix I've found for now is to use skip on lo
*sigh*Ber nard
boosted
Een eerste overzicht van de nieuwe AIVD/MIVD wet. Over hacken wat we geen hacken noemen, afluisteren wat we geen afluisteren noemen, nieuw toezicht wat juist minder toezicht is, en AI die de #sleepwet terugbrengt, want de AI mag los op de bulk (getapte) data om nieuwe *targets* te vinden:
https://berthub.eu/articles/posts/de-wiv-202x/
Top analyse weer van @bert_hubert over de nieuwe AIVD/MIVD wet.
Obstakels uit de weg, toezicht verminderen.
Weten jullie allemaal nog hoe we in een referendum de vorige wet hebben afgeserveerd, en deze toch zonder veel aanpassing werd ingevoerd?
Tijd om op de baricades te gaan!
"het eerste document wat we lazen"
-> dat
The Dutch central bank moved 86ton of gold bullion from the US and Canada to the UK this year. A quarter of its North American stick pile
Makes sense to me.
Makes no sense it isn't 100%...
Dutch newspaper NRC RSS feed showing caption with three exclamation marks 'attribute to other "newspaper"!!!'
(The other "newspaper" is a fascist rag)
Spending hours on the network cable connection to my desk.
Testing the cable, laying new cable, ...
Finding out that Windows was broken. Removal of device and uninstall, scan hardware changes, and works again
"Just reinstall Windows"
*sigh*Ber nard
boosted
@stasdigi de economie van de EU heeft veel te winnen bij goede mededinging in de ICT. Jaarlijks gaan honderden miljarden naar de VS aan softwarelicenties. De Europese markt is veel kleiner.
Het collectieve belang van een migratie uit vendor lock-in en naar Europese dienstverleners is dus enorm, maar de transitie is complex en vraagt organisaties die het voorbeeld geven.
Ziet u voor overheden en universiteiten een katalyserende voorbeeldfunctie en bent u bereid hen daarin financieel te steunen?
*sigh*Ber nard
boosted
Blog article, the first
https://blog.koehntopp.info/2026/08/22/ephemere-ssh-keys/
In which we discuss persistent and ephemeral ssh keys, ssh agent communication and ssh key CA signatures.
(The article will show up in a few minutes)
Me since forever: firewall everything, default to deny, specific allows only.
Me rewriting ipfw rules accumulated for more than 20 years to pf: Not that trivial!
(Original position still holds)
Ah. That explains why my vault seems empty 
Update Vaultwarden to 1.37.2 to fix issues with Bitwarden app 2026.8.0+
https://github.com/dani-garcia/vaultwarden/releases/tag/1.37.2
Turns out some mailservers of mijn.overheid.nl (managed by Solvinity) drop connection to my mailserver when it uses an ECDSA cert. 😢
@nextcloud @Karlitschek
Curious. I see no AI deluge of security vulnerabilities on Nextcloud and the core apps.
Am I missing something, or is Nextcloud so far ahead of the game?
Meanwhile, in my Gallic village of a "Utilities cabinet", a tiny server runs all of it.
Google Assistant down? I won't notice.
Bitwarden having a maintenance window? Likewise.
Microsoft Teams, AzureAD or OneDrive failing? No sweat.
Cloudflare, Google or AWS down? My mail still works, my backups will succeed on next run, ...
Even my phone doesn't require Google or Apple.
Here's me hoping your SPOF never fails!
Early in my working life, the enterprise I worked for had a "dual sourcing" strategy. We used SAP and MFGPro, Outlook but not Exchange, etc.
Over these early years that strategy was abandoned, everything became single sourcing.
Nowadays: One vendor for End-User devices, for productivity software, for the ERP software (up to a "SAP unless" strategy). Push to harmonize on one cloud provider, one large (usually India based) Managed Service Provider, or even source as much as possible from one provider.
The largest non-IT companies have become utterly dependent on even larger IT behemoths.
The 4 large orgs that span my career would grind to a halt the minute Microsoft has a big "oops". Login and identity: dead, network access: dead, communications (mail, chat, ...): dead. Most of enterprise functions fail.
They've created one hell of a SPOF there.
And the big red button that can shut anything down on a whim is in the hands of an idiot.
Blogging about enabling ML-DSA44 Ed25519 hybrid keys in OpenSSH.
https://brnrd.eu/security/2026-08-13/ml-dsa44-ed25519-hybrid-in-openssh.html
- Blog
- https://brnrd.eu
- About me
- https://brnrd.eu/pages/about.html
(Free)BSD, security, Libre-/OpenSSL, tinkering by night.
Bored-out Security Architect by day.
Running, swimming, cycling, hiking when I have the time and energy.
Joined Jan 2018
*sigh*Ber nard's choices:
