@tykling@mastodon.social
@tykling@mastodon.social avatar

tykling

@tykling@mastodon.social

Før kommerciel kommer sjæl. Brænd som en bongglød i alt hvad du gør.

This profile is from a federated server and may be incomplete. Browse more on the original instance.

tykling, to random
@tykling@mastodon.social avatar

Would an album/grouping of CC licensed files be considered a work in itself? On a site where users can create albums for slideshows of CC content.

jonty, to random
@jonty@chaos.social avatar

[wearily turns to camera]

tykling,
@tykling@mastodon.social avatar

@jonty what is the exit strategy

nixCraft, to linux
@nixCraft@mastodon.social avatar

Do you agree?

tykling,
@tykling@mastodon.social avatar

@nixCraft this is not the flex you are looking for

tykling, to random
@tykling@mastodon.social avatar

In case you missed this gem from RIPE55 almost 20 years ago it is abolutely worth a watch. If you already know it then have fun re-watching and wondering where the hell IPv6 support on Github is at in 2024

https://www.youtube.com/watch?v=_y36fG2Oba0

Have a great weekend! <3

jchillerup, to random Danish
@jchillerup@social.data.coop avatar

Drømmer om et regnskabsprogram som ikke er en SaaS og som er godkendt af Skattestyrelsen til en bittelille virksomhed (og som meget gerne er let at integrere imod)

tykling,
@tykling@mastodon.social avatar

@jchillerup @p der findes ingen brugergruppe som er mere tæt knyttede til deres værktøjer end bogholdere/regnskabsfolk. Sikke et drama hver gang jeg har skullet lave den mindste ændring. Så det tror jeg bestemt der er. Hvad med Saldi?

tykling, to random
@tykling@mastodon.social avatar

Yesterday I tagged v1.0.0 of dns_exporter, a Prometheus exporter with an exclusive focus on DNS monitoring. It can help monitor DNS servers or domain names for performance and correctness.

I have never before in my life felt something was "done" enough to call it 1.0, mostly because I have high standards and am a bit of a perfectionist. So I am very proud to have reached 1.0 with this! <3

The code is on Github https://github.com/tykling/dns_exporter which also has links for docs, pypi, dockerhub etc.

image/png
image/png

minkiu, to django
@minkiu@mastodon.social avatar

Hey veterans, what features differentiate someone that knows Django (beginner) from someone that really knows Django (senior)?

tykling,
@tykling@mastodon.social avatar

@minkiu having a strong opinion on CBV vs FBV :) (I will let you decide if that is something beginners or seniors have)

cryptohagen, to random Danish
@cryptohagen@social.data.coop avatar

Hidden gem in @donncha Security Lab - Amnesty International talk on Predator spyware: state actors could generate
@letsencrypt certificates for any website by using their MitM capabilities at ISP level to complete verification challenges (both HTTP and DNS I expect).

CT may be the only way to detect this

https://media.ccc.de/v/37c3-12168-predator_files_how_european_spyware_threatens_civil_society_around_the_world

tykling,
@tykling@mastodon.social avatar

@cryptohagen
you can prevent this attack by adding a CAA record pinning your ACME account (using DNSSEC of course). See also https://mastodon.social/@tykling/111415645019779866
@donncha

markwalker, to python
@markwalker@fosstodon.org avatar

I've got a django management command that uses python logging to output info.

How can I capture that output with pytest? I've tried a StringIO context manager for stdout with a root logging handler to the console 🤔

tykling,
@tykling@mastodon.social avatar

@markwalker try caplog https://docs.pytest.org/en/7.1.x/how-to/logging.html

flameeyes, to random
@flameeyes@mastodon.social avatar

Does anyone know of a Python library to generate compatible metrics as a static file?

I want to augment https://ipv6-in-real.life/ so that I can report how many resolution failures it encountered when it regenerated.

tykling,
@tykling@mastodon.social avatar

@flameeyes the regular prometheus client_python can do this https://prometheus.github.io/client_python/exporting/textfile/

tykling, to FreeBSD
@tykling@mastodon.social avatar

Today I tagged v0.2.0 of gstat_exporter, a Prometheus exporter for FreeBSD gstat(8) data: https://github.com/tykling/gstat_exporter/releases/tag/v0.2.0

It is available on PyPi now: https://pypi.org/project/gstat-exporter/

I have opened a PR to update the port: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=275762

I have also updated the Grafana dashboard to use some more modern panels: https://grafana.com/grafana/dashboards/11223-freebsd-gstat-exporter/

I will tag v1.0.0 of gstat_exporter soon if no issues appear with the changes I've made over the last couple of days. If you use it please test! Thanks :)

tykling,
@tykling@mastodon.social avatar

@feld like .02% of a core, nothing noticable on my systems at least.

bagder, to random
@bagder@mastodon.social avatar

On this day, 22 years ago, the #Rockbox project started, co-founded by me. We wrote an open source firmware for mp3 players. On its 10 year anniversary 2011, I wrote this:

https://daniel.haxx.se/blog/2011/12/07/ten-years-of-rockbox/

tykling,
@tykling@mastodon.social avatar

@bagder I had no idea you were involved in this project. It made my iriver player sooooo much better. Good memories, thanks!

tykling, to random
@tykling@mastodon.social avatar

Hi @thunderbird what is the status of ManageSieve support?

The Sieve addon doesn't work anymore: https://addons.thunderbird.net/en-us/thunderbird/addon/sieve/

It would be great with some native managesieve support, any plans for that? Thanks! <3

tykling, to django
@tykling@mastodon.social avatar

Does anyone know of plance to support gdal 3.8 in GeoDjango? This commit added support for 3.7 https://github.com/django/django/commit/953f29f700a60fc09b08b2c2270c12c447490c6a but I see nothing about 3.8

tykling,
@tykling@mastodon.social avatar

@bmispelon it turns out GeoDjango does work with gdal 3.8, but gdal 3.8 does not work with an older libjpeg. Sorry about the noise! :)

tykling, to random
@tykling@mastodon.social avatar

I was investigating an MITM today where the attacker was using a real LetsEncrypt certificate. This was possible because an NS record domain expired and was re-registered by the attacker

A few weeks ago there was also the jabber.ru MITM issue where a valid LE cert had also been issued.

Both of these attacks could have been avoided by using CAA account pinning.

You should add this on all domains today!

For an example see the CAA record for bornhack.dk https://caatest.co.uk/bornhack.dk

Spread the word!

tykling,
@tykling@mastodon.social avatar

@feld you can pin both, no problem with that

tykling,
@tykling@mastodon.social avatar

@feld that is what the account pinning prevents. The attacker doesn't control the private keys for the ACME account pinned in the CAA record. ZeroSSL would refuse to issue because the attacker is using a different account.

tykling,
@tykling@mastodon.social avatar

@feld I believe LE currently does DNS checks from multiple AWS regions + from their own servers. So they likely would have gotten inconsistent answers and bailed out at that point. I don't know about ZeroSSL.

The attackers likely had to try issuing multiple times to get lucky and have all the lookups hit the "bad" server.

No guarantees here, but I would much, much rather have had CAA account pinning in place than not during this attack.

tykling,
@tykling@mastodon.social avatar

@feld I agree that DNS-01 should be pushed, and pinned. ACME tools should check for CAA records and recommend they be added.

But IMO you should never let any tool on an internet-facing server edit your zone directly, or an attacker compromising the server can also edit your zone.

Instead you should make CNAMEs for the _acme-challenge records to a dedicated subzone which is used exclusively for ACME challenges. This has all the advantages of DNS-01, but doesn't hand over control of your zone :)

tykling,
@tykling@mastodon.social avatar

@feld maybe you want an NS record, I want a CNAME. Making a delegation and seperate zone for every challenge sounds very ineffective to me, but whatever works for you.

A CNAME does exactly what is needed, and as a bonus it can carry the name being challenged in the CNAME target (below the challenge zone), so:

_acme-challenge.www.example.com CNAME www.example.com.acme.example.org

Anyway, we clearly have different views on this, which is fine. I am not on bikeshed.party, so I will stop here :)

decibyte, to random Danish
@decibyte@social.data.coop avatar

Jeg har fået nyt kreditkort og skal aktivere 3D Secure. Bliver sendt videre til Nets fra min netbank. Og før jeg får set mig om popper deres "Virtual Agent" op, chat style, og begynder at snakke til mig. Det første den fortæller mig er at jeg skal læse deres privatlivspolitik.

Fuck! Off!

Hvem finder på det her og hvem godkender det som værende en god ide?

tykling,
@tykling@mastodon.social avatar

@benjaoming @decibyte 😂

jhx, to FreeBSD
@jhx@fosstodon.org avatar

Question for the guys/gals:

Is there something one should consider when doing a mirror (Two SSD's, RAID 1)? 🙂

I normally only do:

zpool create example mirror /dev/ada1 /dev/ada2

(I'm no expert at all)

tykling,
@tykling@mastodon.social avatar

@jhx this is the way, there really is nothing else to it

drahardja, to random
@drahardja@sfba.social avatar

Ah yes, this is a great way to turn “Can I see your driver’s license?” into “Can you hand me your unlocked phone so I can rifle through it?” at a traffic stop.

Yes, it’s more convenient than having a separate card, and it may serve as a great backup in case your physical card is lost or damaged. But please don’t use this as your only driver’s license, especially if you are an often-targeted demographic.

“Californians can now carry driver’s licenses on their phone as part of pilot program”

https://www.latimes.com/california/story/2023-09-03/californians-can-now-carry-drivers-licenses-on-their-phone-as-part-of-pilot-program

tykling,
@tykling@mastodon.social avatar

@drahardja absolutely, but also: how will you film your encounter with the police if you have to hand them your phone?

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • megavids
  • magazineikmin
  • khanakhh
  • mdbf
  • slotface
  • InstantRegret
  • osvaldo12
  • Youngstown
  • kavyap
  • everett
  • DreamBathrooms
  • modclub
  • thenastyranch
  • rosin
  • JUstTest
  • tacticalgear
  • ethstaker
  • Durango
  • GTA5RPClips
  • tester
  • cubers
  • Leos
  • ngwrru68w68
  • normalnudes
  • cisconetworking
  • provamag3
  • anitta
  • lostlight
  • All magazines
    •