Pinned post
cynicalsecurity :cm_2:

#introduction 

# This is a shell archive. Save it in a file, remove anything before
# this line, and then unpack it by entering "sh file". Note, it may
# create directories; files and directories will be owned by you and
# have default permissions.
#
# This archive contains:
#
# introduction.uu
#
echo x - introduction.uu
sed 's/^X//' >introduction.uu << 'ceed7c5dd63177fdc63f505a0fd23268'
Xbegin-base64 644 introduction.txt.bz2
XQlpoOTFBWSZTWfJafNMAAcvfgAAQWOf/8D/u3+q/79/gYAeEUE+eLa2OO7oNzjumOGVuGgmgSeg1
XGjVPJlNGm0mg0aAbU02k09INT0BASBpTU/U0amTIDRoANGjQZDmEwCYATCYTTAAAJk00DCUymiZT
XUbSNJP0nqMpgA9RBho0mmaNA5hMAmAEwmE0wAACZNNAwlNIBBTYhpD0pP0iHlPSDygzU9Q0AOMyB
XSRfQaH9jK3xQD5ngvFSaGFZOKf1W2aeR8MXtfx85R4cXBvHBnHGslkU4b1Q/4o8lkEqFFo3wCJer
Xtc8Ju/1dbW0sGabjndFdbGfet6Qa352iNKd+Ct6uWJfbkNB1FgnI8n1mYRCfKmcQImVbn7FjKZjX
X+IrLftE/tVRWFrnqu+2gnFLGQh9/42hscZbGoy7DfaLN59gpw7OCOVeY7JskFXVFrnbLVDDBhkRD
XCF9TFt+blciLbphCDMWOcK7V24E5VbFNQiYjtFk61MZtrOz4dxV6qFfZFBWEIPw9Ke4+LV/NYWxE
XtHHM8r9GrWV6W5PXribYJvF69/rrBribi/C8z6DLJu4Q34cSeRB6oF0kL5FHCtngOa9z21oQoKFr
XkZtBePhCOjbrJfVYmDGCCCTUOCVqKvCAzVNvDa9tXv0+zwmuPQB9Avz3hCdvMB+z49W01x6UJ40X
XIoxp4O3nF+WVJWCw8o6GFf6I/qyl+qzPdY9DyVb+DYGOysdcdqgpQubXTrkQHP685A+jxZj1JMHT
XLyYFB3GF+Xme9eiPRx13wlKR5ET0pU/sO8m6V2tuv/IEj1Q6KCMLxz80QlAtW0ydxwWXKVKejp50
XdKIN2s2nYPTgxppI+iGjr+6GNuKzlR/DsNZ21iy71R17gdVChiV9ZIGkoFrG1jtfYC1pVrQd2GCX
XMFi/y7Vxuh8WXvFk1cW5N8kYoIy6v59De3tn7kbLmvJRTrFeSikd57/D5/Hx/b3e+UoHJoPlKXPm

1
cynicalsecurity :cm_2:

Took this photo this morning at sunrise - you can see the Aiguille du Midi with snow blowing around it and the Mont Blanc covered by a cloud which follows its shape. It is quite particular so I thought I'd share it.

1+
cynicalsecurity :cm_2:

sysupgrade -s on arm64 this morning on the marvellous ThinkPad T14s Gen 6 (Qualcomm Elite X chip) and… uh-oh, now it is a brick.

The boot process flashes as `fchmod … /bsd.upgrade` and then reboots - booting /bsd gives the same error but with `fchmod /bsd`.

Now what? I would prefer not to reinstall but I can see an alternative booting off USB and changing the kernel by hand.

1+
cynicalsecurity :cm_2: boosted
lcamtuf :verified: :verified: :verified:

They don't exist to meet demand; they exist to game the engagement systems we put in place. I think that's true for a lot of other AI content on the internet too.

3/3

Show thread
1+
cynicalsecurity :cm_2:

P.S. the marvel that SBB actually washes trains so you can take beautiful photos through the windows is not lost on me, grown in Italy, where train windows used to be so grotty that you'd never take photos like this through them.

Show thread
0
cynicalsecurity :cm_2:

Paradoxically taken from a train, the EC14 from Milano Centrale to Zurich HB, my contribution to today's

1+
cynicalsecurity :cm_2:

My patience with the Bombardier Twindexx Wankkompensation¹ has completely expired.

For Cthulhu's sake, the one time the Zurich-Bern IC1 takes the old line for engineering works it is like being in a washing machine. I've already moved seats three times trying to find one which oscillates a little less and does not trigger my vertigo².

I don't think I will ever forgive for buying this sorry excuse for a train instead of the Stadler offering.

__
¹ de.wikipedia.org/wiki/SBB_RABe (in German only, thank goodness for the Bombardier image)
² Accident-induced, I cannot fix it so please no "take a pill" suggestions, it is an actual disability.

0
cynicalsecurity :cm_2: boosted
bert hubert 🇺🇦🇪🇺🇺🇦

In a recent FT article, the director of Cybersecurity Belgium claimed it was impossible to store data within the EU. "Dream on" he said. This reflects the widespread lack of IT understanding among executives, who should urgently wise up & help us regain our digital autonomy: berthub.eu/articles/posts/ft-o

1+
cynicalsecurity :cm_2: boosted
not quite straight mouse

@cynicalsecurity If you're looking for quick solutions, you can block a very large percentage of these crawlers with two little ifs in a trenchcoat:

  1. If the user-agent is listed in ai.robots.txt, cut the connection.
  2. If the user-agent contains Chrome/ or Firefox/, and doesn't have a sec-fetch-mode header (assuming HTTPS), cut the connection.

Poof, the vast majority of bots gone.

Granted, this also blocks Googlebot (because it has Chrome/ in the user agent, and doesn't send a sec-fetch-mode header), but at this point, I'd consider that a happy side effect. It's easy to make an exception for it, though.

No proof of work, no extra software, no need to block the entire US, and doesn't affect legit visitors, as long as your webserver / reverse proxy can do some filtering. Not perfect, sure, but it's simple, and helps.

0
cynicalsecurity :cm_2: boosted
Chris Wysopal

“The Conscience of a Hacker” by The Mentor is 40 years old today.

1+
cynicalsecurity :cm_2:

Oh SuperMicro, I love your IPMI FRU settings sooo much…

[OK]: INFO: To Be Filled By O.E.M. None (CPU: 1, MEM: 16GB) - BIOS: P1.40 - Serial: To Be Filled By O.E.M. - Power: On - Name: NOT SET

:flan_molotov:​

0
cynicalsecurity :cm_2: boosted
Matt Blaze

Susan Landau, @SteveBellovin , and I have a piece up on Lawfare on the UK’s latest ill-advised attempts to prohibit strong encryption. lawfaremedia.org/article/the-u

0
cynicalsecurity :cm_2: boosted
Charlie Stross

Psst: Microsoft's suicide note just dropped
mastodon.social/@Migueldeicaza

1+
cynicalsecurity :cm_2: boosted
Lawfare

Susan Landau, Matt Blaze, and Steve Bellovin unpack the U.K. government's latest attempt to access encrypted cloud backups in Apple products and explain how it could make sensitive data more vulnerable to adversarial actors. lawfaremedia.org/article/the-u

0
cynicalsecurity :cm_2:

What on Earth is happening to RAM prices! :flan_angry:​

Bloody AI, a 16GB stick of decent DDR5 RAM is now 200 francs?!?! Are we joking or what?

:flan_molotov:​

1+
cynicalsecurity :cm_2: boosted
Frédéric Jacobs

🐄🍪 An Intel Fab in Arizona was seeing a sharp decline in yields when producing their chips at night.
Engineers were really puzzled why between 1 and 2AM the yields were so bad.

Turned out that at night, the direction of the wind was changing. Methane, from cow farts from nearby dairy farms, ended up in the cleanrooms via the air conditioners.

Intel didn't figure out how to solve the problem, so they just paid the three neighbouring farms to move.

Show thread
1+
*
cynicalsecurity :cm_2:

So, what's with this flood of cache queries coming in these days?

78.131.0.114#56309 (gebrauchtwagen-markt.com): query (cache) 'gebrauchtwagen-markt.com/A/IN' denied (allow-query-cache did not match)

weird domains with weird caps mixes…

Currently 8739 distinct IPs.

1
cynicalsecurity :cm_2:

This is quite a toy… the ASUS Ascent GX10 seems to be a semi-affordable LLM-at-home box¹.

Found it via a useful post on LinkedIn, well, not very useful as it did not mention the model, just a photo but Kagi (@kagihq) helped me find it :flan_hacker:​

__
¹ servethehome.com/asus-ascent-g

1
cynicalsecurity :cm_2: boosted
Simple Sabotage Field Manual

Do your work poorly and blame it on bad tools, machinery, or equipment.

0
*
cynicalsecurity :cm_2:

Following several recommendations bought a Protectli VP2430 from the EU site:

eu.protectli.com/vault-4-port/

Not cheap _but_ guaranteed OPNsense support (so OpenBSD works), and coreboot, and serial port.

The DDR5 costs more than gold, damn "AI" :flan_molotov:​

Thank you to everyone who helped!

Show thread
1
cynicalsecurity :cm_2: boosted
bert hubert 🇺🇦🇪🇺🇺🇦

@cynicalsecurity eu.protectli.com/ not cheap, but does the job for me.

1+
Show older

openbsd

209

freebsd

88

macos

9

trains

7

ipv6

4

lisp

3

plan9

1

sysadmin

1

oldskool There is nothing here!

0

greybeard There is nothing here!

0
BSD Network

bsd.network is a *BSD-adjacent Mastodon Instance. We have a code of conduct.

Resources

Developers

What is Mastodon?

bsd.network

More…

v3.5.19+iceage · Privacy policy