h3artbl33d 🐡

Cyberthug | OpenBSD | InfoSec | Coffee addict | Todays paranoia is tomorrows truth

Public Key

npub1v70mrky2vnaxed7u6pwwm0xlarl6zhxwjghq4kfv3hwu4g4u6pusrvnv8r

NIP-05 Address

h3artbl33d_at_exquisite.social@mostr.pub

Profile Code

nprofile1qqsx08a3mz9xf7nvklwdqh8dhn073laptn8fyts2mykgmhw2527dq7gpz4mhxue69uhhyetvv9ujumt0wd68ytnsw43qz9thwden5te0v35hgar09ec82c30wfjkcctezcxtvp

Publishing to

relay.mostr.pub

ditto.pub/relay

Author Public Key

npub1v70mrky2vnaxed7u6pwwm0xlarl6zhxwjghq4kfv3hwu4g4u6pusrvnv8r

Show more details

Last Notes

2024-10-15 22:09:30

So, it seems that #OpenBSD fully supports arm64 on Apple Silicon. Including the proprietary WiFi chipset. Even browsers like #UngoogledChromium are in packages.
Any technical reason why I should not go with OBSD for a Macbook M1/M2? Asking for a friend, ofcourse.

2024-10-15 18:56:33

Hey you :flan_wave: Are you Dutch or relatively close to The Netherlands? You might want to keep the 9th of November free in your calendar - as we are going to have another BSD-NL full day conference :flan_hurrah:
It will be in Utrecht, at the Maximus brewery. We do have a mandatory registration - but it'll be on our selfhosted Pretix. Because fuck big tech!
More details will follow very, very soon :flan_aww: :flan_hacker:
#OpenBSD #HardenedBSD #SecBSD #FreeBSD #NetBSD #DragonflyBSD #RUNBSD #Awesome #Meetup

2024-10-09 15:46:05

Cuteness to brighten up your day
#OpenBSD #Puffy #Pufferfish
(Source)
https://media.exquisite.social/exquisite/media_attachments/files/113/278/225/757/135/104/original/e9983d3abd928faa.mp4

2024-09-17 09:24:05

Exquisite will have ~ 10-15 minutes of downtime in an hour or so. Some small updates and preparations to keep the experience smooth while the admins are in Dublin for #EuroBSDcon.
The remote backupserver just finished the ZFS scrub with no errors, which means I'll be able to travel without having to worry about resiliency.
Hope to see a bunch of you in Dublin!

2024-08-31 16:15:27

While #Telegram boasts itself as a secure and private messenger, it is neither.
I've written a more extensive blog on how fundamentally broken Telegram is: Heliography in Darkness.
Feedback is welcome, including additional information (that is citable).
https://exquisite.social/system/media_attachments/files/113/057/516/338/565/866/original/fea2362477ab0080.jpg

2024-08-27 07:46:05

Another day, another #Intel #clusterfuck 🎉
Researchers managed to extract the SGX Fuse Key0 (AKA Root Provisioning Key). Together with the FK1 (AKA Root Sealing Key, which is also compromised), it represents the root of trust for SGX.
#SGX #secureenclave #Intel #CPU #oops
https://exquisite.social/system/media_attachments/files/113/032/870/733/667/131/original/e313e72cdd16f243.mp4

2024-08-06 18:44:41

Todays shirt :flan_hacker:
https://exquisite.social/system/media_attachments/files/112/916/547/682/274/184/original/13ab63e46f89e6ff.jpg

2024-08-06 17:31:43

I have always been fond of the idea of OpenBSD — a relatively minimal and opinionated system with a cohesive vision and an emphasis on quality and craftsmanship.
~John Carmack
#OpenBSD #RUNBSD

2024-08-02 19:49:55

- reply

@npub1axm…dsle
That would be highly counter to protecting our members :) So no, it is not something that is enabled by default.

2024-08-02 19:25:52

- reply

@npub1axm…dsle
Some Fediverse instances have a local only publish setting. But yeah, we need E2EE DMs. Integrated into the protocol, implemented by all software and used for all DMs.

2024-07-02 08:27:41

- reply

@npub1f2l…8jmd
Thank you for the JB link. Seeing it passing by in my TL always gives that nice and fuzzy warm feeling.

2024-07-01 19:49:27

Let's update all the things to fix regreSSHion...
...oh wait, nevermind:
OpenBSD is notably not vulnerable, because its SIGALRM handler calls syslog_r(), an async-signal safer version of syslog() that was invented by OpenBSD in 2001.
Yet another reason to #RUNBSD #OpenBSD

2024-06-26 08:26:25

- reply

@npub17ut…rzd9
Heel graag gedaan. Fascinerend stukje vrij onbekende geschiedenis.

2024-06-26 07:04:32

- reply

@npub17ut…rzd9
Ben je bekend met de documentaire van andere tijden, toevallig?

2024-06-23 22:19:18

- reply

@npub1t7d…pqpp
Sweet! See you in Dublin, I'll be at your talk.

2024-06-18 19:07:12

Regret in a bottle :flan_set_fire:
https://exquisite.social/system/media_attachments/files/112/639/181/289/380/008/original/ab9e2a6eaf03a2a3.jpg

2024-06-14 17:50:35

Ofcourse - VPN services are a complete clusterfuck and not to be trusted. They do not offer anonymity or a magic protection against adversaries and data theft.
However, it is way worse than I assumed. For instance, NordVPN pays competitor employees visits in their personal address, threatens and extorts them. They are owned by a data mining company - and much, much more.
This is sick. Better steer clear of VPN services.

2024-06-09 20:44:16

LOL. Microsoft named their ARM translation layer PRISM. Seems they are on a streak to please the NSA. Also: Recall. The NSA couldn't have dreamed up a vendor inplementing such a spying device and marketing it as something positive.
https://exquisite.social/system/media_attachments/files/112/588/602/242/543/536/original/81b1f669f7807128.jpg

2024-06-09 07:44:56

LastPass had an outage of nearly twelve hours yesterday, where users couldn't login to access their password vault.
This is one of the (many) reasons why you shouldn't use essential tools that are either cloud-first or cloud-bound. There are decent alternatives, like KeePassXC or Bitwarden with the selfhosted server (Vaultwarden).

2024-05-21 15:18:23

With Microsoft pushing their supercharged spyware soon, today is - like any other day - perfect to make the switch to #OpenBSD. The sane, well-documented, secure OS that isn't bloated and doesn't spy on you.
#RUNBSD
https://exquisite.social/system/media_attachments/files/112/479/731/882/715/262/original/c68008ec0bbbe7fd.jpg

2024-05-15 08:18:33

Trying to build ungoogled-chromium on OpenBSD be like:
===> Extracting for ungoogled-chromium-124.0.6367.207
xz: (stdin): Cannot allocate memory
On a VM with 64G of memory. :flan_molotov:

2024-05-13 19:32:08

- reply

@npub1t7d…pqpp
Ouch! If you've separated on good terms, perhaps they'll come crawling back.
Has happened to me before a couple of times. The upside is that they will likely value your services much more.

2024-05-13 19:14:37

- reply

@npub1t7d…pqpp
Can I be so blunt to ask you the size of the aforementioned second client? IMHO, for larger businesses - or organisations that grow into larger storage needs, the "cloud" tends to be more expensive.

2024-05-12 12:36:41

LibreSSL 3.9.2 released :flan_hurrah:

2024-05-11 18:00:54

- reply

@npub1zgy…ekqk
The setup for Chatmail failed because it couldn't grab deltachat-rpc-server, the PyPI page mentioned building it since there is no prebuild for OpenBSD. And hence I ended out on the crate :)

2024-05-11 11:26:45

@npub1zgy…ekqk
I run into the issue that deltachat-rpc-server doesn't build on OpenBSD, due to the quinn crate (in particular, quinn-udp). The fix isn't trivial.
Should I file a bug report as an issue in deltachat-core-rust repo or as a feature request / support issue on the forum?

2024-05-07 20:49:10

- reply

@npub1tva…2yl5
I assume that the Pixel 8a will support MTE as well?

2024-05-07 20:12:34

OpenBSD was right
Newsflash: #OpenBSD is always right.

2024-05-07 19:48:26

- reply

@npub1qw7…q0ue
Yes. No party without me. See you there! :flan_heart:

2024-05-03 07:43:07

Tickets for EuroBSDcon 2024, Dublin are on early bird sale RIGHT NOW! Get yours today or tomorrow :flan_hacker:
https://exquisite.social/system/media_attachments/files/112/376/025/909/766/248/original/f13321a306d76bf1.jpeg

2024-04-13 19:56:45

Did you know that #Nextcloud can be configured as a fantastic Google Photos alternative too? NC can index the metafata of your photos, show them in events, on a timeline and even on a privacy respecting map!
Really, the time is here (and has been here) to move away from people farmers and reclaim your privacy. Once and for all.
As always: #HACKTHEPLANET :flan_hacker:

2024-04-04 20:29:22

Eleventy is a simpler static site generator
Have you even met ssg?
$ doas pkg_add lowdown
$ mkdir -p bin
$ ftp -Vo bin/ssg https://romanzolotarev.com/bin/ssg
$ chmod +x bin/ssg
Way simpler and doesn't require the bizarre nodejs kitchensink.
Thank you @npub1283…0dth

2024-03-24 18:16:17

A map of Europe drawn from memory
https://exquisite.social/system/media_attachments/files/112/152/026/890/963/094/original/36d946bf9eaf22a9.jpg

2024-03-23 02:14:07

- reply

@npub1jpp…u59l
Please, stop whatever you are doing now and go watch this classic.
@npub1ekf…apw8

2024-03-13 21:40:40

Apple's move to create a single ecosystem, based on the same architecture is fantastic.
One exploit to pwn them all :flan_hacker:

2024-03-05 10:42:36

Stumbled upon a weird issue with #Dell #PowerEdge servers from the 14th and 15th generation (Rx40 and Rx50) where it would not boot {Hardened,Free}BSD and Linux 6.5.13 and up. OpenBSD booted just fine with a snapshot.
Issue can be resolved by disabling #x2APIC in the system setup.
#HardenedBSD #FreeBSD #Linux #R240 #R640 #R740 #R250 #R650 #R750
(excessive hashtags for visibility, sorry...)

2024-02-16 12:37:27

There are new updates for Mastodon, fixing a major security issue, GHSA-jhrq-qvrm-qr36. Admins: time to update your instances once again :flan_hacker:
#mastoadmin

2024-02-14 23:12:28

Dear people,
Make backups. Apply the 3-2-1 model.
That is all.
Have a geat day.

2024-02-11 18:25:28

- reply

@npub1a3r…yhhn
Nice summary - thank you for sharing. Hoping your experience will stay that positive :)

2024-02-01 16:02:17

- reply

@npub1t7d…pqpp
Gratz and thank you for your prompt patching :flan_heart:

2024-01-08 14:42:14

Nextcloud admins: starting with Nextcloud v28, some applications (like Forms) need an additional MIME mapping:
application/javascript js mjs;
The mjs extension is new (ES6 module), apps relying on it fail to load without the MIME type set.
#Nextcloud @npub16rd…3v3k

2023-03-21 23:17:38

Interesting. Seems work is done on a GTK/Rust Signal client: https://gitlab.com/Schmiddiii/flare
It already has a feature that the official one doesn't have: encrypted storage.
/cc #[0]