DrScriptt

@bobjonkman@mastodon.sdf.org @jpaskaruk@growers.social I might not understand the original data correctly. But I’ll often do something like the following: sed -n ‘/-A/,/^$/p’ Print lines that contain ‘-A’ through blank lines.

RE: https://social.treehouse.systems/@CursedSilicon/116893386012419544 Well, after threatening to join #cghmn for the better part of two years, I’ve finally gone and done it. @CursedSilicon@social.treehouse.systems’s video is what finally pushed me over the edge. It helped that other things had settled down and I had infrastructure in place to allow me to do it.

@paul_ipv6@infosec.exchange @mcr314@todon.nl it’s really seeming like it’s a business choice that the IXP makes how they want the IXP to run.

Does anyone know why Internet Exchange Points (IXPs) dislike -> discourage -> prohibit transit providers from joining the IXP? Is it a resource consumption issue? • bps / pps? • # of prefixes in the RS? Is it an incompatible policy issue? • Wherein transit providers are trying to profit off of what IXPs are trying to exchange for free? • discrepancy in peering policies; open & free vs closed & for profit I don’t see any technical reason why it couldn’t be done. I feel the need to search my NANOG archive to see if it’s been discussed.

@CursedSilicon@social.treehouse.systems you’re being mean by teasing me with something I want to do again. 😝 I’m oh so much closer to setting things up. Great talk! Even more so considering that was your first talk. Only request I have is to repeat (summaries of) questions asked in Q&A so those watching the recording know what the gist of the question was.

@ryanc@infosec.exchange do the real USOC RJ-45 some time to blow peoples minds. When they ask what it is, say “RJ-45” and have fun. 😈

@andre123 @pheonix I’m okay with an upgrade fee between major versions.

@pheonix I have, Netscape back in the ‘90s before it was free.

@pheonix It is usual in the sequence of events and the request. It is unusually that they didn’t escalate (read: throw a fit) because they couldn’t get the mailbox back.

@masukomi@connectified.com @hazelnoot@enby.life Interesting take on this. I can’t say as I disagree. I personally like the idea of separate work trees against a common repo. Each random idea being its own work tree. That way they are very visible and I don’t need to stash for urgent things. I can work on the urgent issue in a different work tree, possibly specific to the urgent issue.

@barefootliam@floss.social why would XML not be useful for LLMs? I’d think that semantic markup would be a good thing for LLMs. IMHO XML is more useful than JSON.

@jima@mspsocial.net @ryanc@infosec.exchange @woe2you@beige.party receive pin pair was on second pair of wires — ostensibly orange. But transmit pin pair crossed third and fourth pairs — ostensibly green and brown. The split pair made things much more noise sensitive.

@rmbolger@mastodon.social @nicksilkey@hachyderm.io there is the best practice of not less than two for redundancy no single point of failure. But the only upper bound guideline that I’ve seen is what will fit in a single reply packet without truncation. Remember it used to be 512 bytes was the smallest common denominator. Not it’s larger but I’m not sure what.

@CursedSilicon fair enough. I may spelunk sometime if I’m bored.

@CursedSilicon How does the “makeself” differ from a shell archive (shar)?

@tubetime@mastodon.social that’s a critter!

@gumnos I’ve never bothered beyond (at) / (dot) and that’s mostly just to break automatic linkification.

@ryanc after overcoming kernel issues I was / will be dealing with net booting RHEL installer and using an NFS root without using an initrd at work. Weird memory thing on an IBM Power 10 server which still has the 256 MB memory region not able to hold kernel and initrd in memory. Something about Power 10 changes the way memory is allocated. Seems as if the kernel needs to negotiate more memory. But GRUB doesn’t do that. IBM’s answer is to change a frame configuration setting. But that requires a full frame outage. And there are production LPARs on this frame.

@gumnos I’ve dabbled with tmux a few times. But I’ve stayed with screen because most of the systems I work on, including macOS include screen (already) and don’t have an option for tmux. Living off the land / lowest common denominator type thing

@mikebabcock @Retreival9096 @Madagascar_Sky I’m surprised that the AV doesn’t trust the local root certificate store. 🤔 TIL I share your concern about a root certificate as a vendor. In corporate IT there is more freedom for such things. Though lately I’ve been messing with name based constraints as I work on things. It’s an ongoing effort that both works (for the name on the tin) and doesn’t work (for IPs when name constraining to corp domain) at the same time. Doing unconstrained allows me to sign SANs for the FQDN, UQN, nickname, and IP.

@mikebabcock that sounds about like what I’ve seen most other people not try to do. Kudos to you sir! What database? I was actually thinking Oracle when I typed my previous comment. Aside; I’ve seen a very small number of things fail in permissive mode but work when disabled. That was weird. It too required audit log mining and updating the policy to make work.

@Madagascar_Sky @mikebabcock @geerlingguy I’m inclined to agree it will reach more eyes. But a 3 minute short is not much time to cover firewalling. Not in sufficient detail. There is so much you need to know about networking and services to be able to understand what the firewall is doing and what impact it will have other than just breaking things. Admittedly less than packet sniffing. 😈

@Retreival9096 @mikebabcock @Madagascar_Sky @geerlingguy again “no”. 😒

@mikebabcock @Madagascar_Sky @geerlingguy I say “no” followed by “not yet” and “not without explicit information on why it won’t work with SELinux enabled” when people suggest that I should disable SELinux or similar things.

@mikebabcock @Retreival9096 @Madagascar_Sky could you sign it with an internal private corp cert and load the root cert I to clients to avoid this issue? I was involved in a different discussion elsewhere about this.

@jima@mspsocial.net @ryanc@infosec.exchange @woe2you@beige.party universal service order codes and the registered jack numbers are … interesting. Especially if you look at “X” jacks.

@ryanc@infosec.exchange I like it! I see you are the “B” / data persuasion. No “A” / telco for you! Unless you cross over. 🤭

@tubetime@mastodon.social I feel like knowing what stiction is, without looking it up, dates us. 🤔

@aka_pugs@mastodon.social @SteveBellovin@infosec.exchange thank you

@bagder@mastodon.social ai toddlers.

@jessamyn @abdalian 👍🏻 I’ve done similar. I used to copy out of text files. Then I created scripts that inject the character into the clipboard; -symbol-to-clipboard.sh. I also have a script that will show all of the characters and script names; show-symbols.sh. Use what works best for you.

@paul_ipv6@infosec.exchange @mcr314@todon.nl 😆 Those are great questions. But they don’t really apply to my use case. I’m trying to learn and understand what the industry norm is so that I can replicate it in my network at my house. I currently have eight different logical entities / companies / organizations that I’m planing on having peer with a pair of route servers in my IXP. One of which is my residential SOHO ISP via one of my routers. It makes perfect sense for seven of them to use the eighth via the IXP as a transit provider. Each network is completely independent and has multiple VLANs and non-overlapping IP space: • home network (pocket super computers; smart lights, DNS server, printer, etc.) • TNCLabNet • VPS stack A (four “”systems working in concert) • VPS stack B (…) • VPS stack C (…) • CGHMN • ISP • general sandbox separate from TNCLabNet I know im making things more complex than they need to be. But I can easily see each of these bullets as separate members in an IX. Each using a private ASN when peering. Each having completely different configuration and management style. Sounds like IX members to me. 😉

@tubetime@mastodon.social was Chris Boden staging it by a cord?

@mikebabcock I would wonder if you could use (an environment variable which points to) a custom openssl.conf file that has separate configurations specifying where the trusted root certificates are. Today has been long enough that I don’t remember if it’s .conf or .cnf, so take what I’m saying for a BIG helping of salt. You might be able to have a custom file that includes the default configuration file and overwrite the CA specification at the end. Or if OpenSSL’s config is like OpenSSH’s config specify it at the top and nothing comi g after can change it. You can play (sym)link games to have some of the same certs in custom CA directories as the default CA directory. Or elsewhere if they aren’t in the default. I’m speculating out of my ring buffer. But that’s what I’d try if I were you. No, I do t fault you for wanting to do this. I may blame you a little bit for prompting me to question the same thing.

@gumnos@mastodon.bsd.cafe @jschauma@mstdn.social (ASCII bang head on desk) to such wrappers

@ryanc@infosec.exchange C five or fifteen?

@SteveBellovin@infosec.exchange @aka_pugs@mastodon.social as in 3Base6 (?) Ethernet I? Is there an electronic copy somewhere?

@abdalian @jessamyn +1 I do the same. Others don’t‽

@mikebabcock @Madagascar_Sky @geerlingguy I’d be curious to read such an article. I should do similar too. Aside: when the FORWARD and INPUT chain jump to a common (sub)chain, they can share rules. 😈 Assuming iptables which I’ve been doing for … ~25 years. I remember reading a Sys Admin magazine article about the new iptables in about 2001. Been using it ever sense.

@geerlingguy@mastodon.social can you power them on with magic wake on LAN frames?

@ryanc@infosec.exchange okay my brain can’t picture the cable ends and genders. C5 (C6) on one end and (C13) C14 on the other end. Now my brain hurts. I blame I’m IEC 60320. Maybe im thinking of this backwards. Maybe I’m misinterpreting graphics I’ve seen. What’s the source end; C5? What’s the load end; C14?

@b0rk_reruns control U deletes from current position to start of line, not entire line. See control K for deleting from current position to end of line.

@mathew @jessamyn @abdalian I e done similar on my iDevices. Though I didn’t do the colons. That’s a nice touch. TIL 🙂

@b0rk_reruns few comments • physical NICs / logical NICs therefrom, e.g. VLANs, can be moved from the host’s root network namespace I to a new network namespace. • bridges connect things inside of a namespace. You need something else to connect a bridge to. • I question the veracity of listening on 0.0.0.0, especially if the network namespace has multiple interfaces and doing routing / VPN / etc.

@sirwumpus@tilde.zone @nixCraft@mastodon.social it’s a picket fence with a latched gate. Visible boundary that will be used for other things in court.

@wec looks to be B&T attached. It also looks like it has ICS connectors for Token Ring.