Jan Schaumann / is on Nostr

Vell, I'm just zis guy, you know?

Website / Blog: https://www.netmeister.org
Github: https://github.com/jschauma
The Secret Language of Coders: https://www.netmeister.org/blog/secret-language-of-coders.html
(A few) Ops Lessons We All Learn The Hard Way: https://www.netmeister.org/blog/ops-lessons.html

Last Notes

2025-02-26 22:35:25

Wait, what? By using #Firefox, I now grant Mozilla "a nonexclusive, royalty-free, worldwide license to use" any data I "upload or input"? That seems, uhm, rather broad. Wtf.
I want my old Mozilla back.
https://www.mozilla.org/en-US/about/legal/terms/firefox/
https://media.mstdn.social/media_attachments/files/114/072/563/541/661/872/original/093a810db2f2857a.png

2024-06-11 18:39:53

If you give a typical systems project to a typical...
Software Developer: "This should be rewritten in Rust." (You might get a prototype in 6 months. It won't do what you need it to, but at least it won't have any buffer overflows.)
SRE: "I rewrote half of it in Go. The other half isn't working because that's not how you do this in Go."
SysAdmin: "Oh, I wrote that in Perl and shell years ago. Here, still works." (It does, but for some reason it contains your hardcoded password.)

2024-06-06 01:39:39

Very clever engineers:
"We use seccomp to restrict the syscalls processes running in docker can make. Security first!"
Also very clever engineers:
*adds "seccomp(2)" and "prctl(2)" to list of allowed syscalls*

2024-05-30 21:27:52

Wikipedia ain't asleep.
https://media.mstdn.social/media_attachments/files/112/532/155/695/545/587/original/7fc8781b5619e1e1.png

2024-04-17 15:34:31

#markdown
https://media.mstdn.social/media_attachments/files/112/287/287/606/741/634/original/a107c58a18bc3b75.png

2024-04-05 18:24:28

Keep an eye on the uBlock logo in the upper right...
https://media.mstdn.social/media_attachments/files/112/220/006/027/844/710/original/eadc38e455f3bbad.mp4

2024-03-30 20:58:24

Regarding the #xz backdoor, I've seen statements like "if you're not running a publicly exposed sshd, you're safe". This is not the case and reflects a pretty outdated security mindset. You're still vulnerable, because you shouldn't assume internal connections are inherently trustworthy.
Yes, it limits exposure, but that's not the same - you still have a high-severit incident on your hands. Anyway, just here stating the obvious, as usual. ✌️