Notices by Ruby Rhod (feld@bikeshed.party), page 57
-
Ruby Rhod (feld@bikeshed.party)'s status on Saturday, 07-Sep-2019 07:52:20 UTC Ruby Rhod
@garfiald Ahmad seems to have been born in the wrong timeline. He'd be a millionaire and Ru Paul's best friend these days -
nuel but like, a skeleton (nuel@cybre.space@cybre.space)'s status on Friday, 06-Sep-2019 22:47:21 UTC nuel but like, a skeleton
essential oils
oils: deep cuts
oils – "best of"
oils 1980-2010 the entire collection -
Ruby Rhod (feld@bikeshed.party)'s status on Saturday, 07-Sep-2019 07:47:31 UTC Ruby Rhod
Just realized I could use post commit hooks for automating my blog's static site generation and web cache eviction which would greatly simplify the entire process and make it easier for me to
1) write on my own blog which I've neglected
2) host a blog for my friend like he's been asking
I'm an idiot -
Ruby Rhod (feld@bikeshed.party)'s status on Saturday, 07-Sep-2019 07:45:01 UTC Ruby Rhod
@ldopa wow it's like a perfect analog to white people calling cops on poc for existing in America -
Ruby Rhod (feld@bikeshed.party)'s status on Saturday, 07-Sep-2019 07:28:11 UTC Ruby Rhod
@cstrotm @sillystring @dvl thank you for sharing -
Ruby Rhod (feld@bikeshed.party)'s status on Saturday, 07-Sep-2019 02:30:18 UTC Ruby Rhod
@dansup cool pic -
Ruby Rhod (feld@bikeshed.party)'s status on Friday, 06-Sep-2019 22:20:13 UTC Ruby Rhod
Here's a take of social media:
My friend was driving across the country and his truck broke down 15 miles from anywhere that had the right sized sockets that he needed. Someone local who was a master mechanic saw his tweet and helped him out. It was 01:30.
If we are going to provide a social media platform that engages people we need to be at least this good. Mastodon has no interest in solving this problem which is a big warning sign that it will not even be a footnote in human history. -
Ruby Rhod (feld@bikeshed.party)'s status on Friday, 06-Sep-2019 19:49:16 UTC Ruby Rhod
@jomo interested in hearing about it when you are comfortable with sharing -
Philipp-Harald Rack (jomo@mstdn.io)'s status on Friday, 06-Sep-2019 19:48:36 UTC Philipp-Harald Rack
@feld these are pretty much the problems you're facing with VPN and DNS. (You either leak queries to the local resolver or you don't resolve local hostnames). I'm working on a $thing to at least partially fix that.
-
Romain Tartière 😈 (smortex@mamot.fr@mamot.fr)'s status on Friday, 06-Sep-2019 19:46:04 UTC Romain Tartière 😈
One day, I will recall that #Bacula bconsole cli expect it's arguments in a certain order…
Good (list files):
* list files jobid=249Bad (does not list files):
* list jobid=249 filesCompletion always complete everything and does not help 😒
-
Ruby Rhod (feld@bikeshed.party)'s status on Friday, 06-Sep-2019 19:38:26 UTC Ruby Rhod
oh of COURSE the shortage is because they brew the alcohol instead of distill it so they can avoid extra taxes in the USA
http://nymag.com/intelligencer/2019/09/how-tax-policy-gave-us-white-claw.html
:patriot: -
Ruby Rhod (feld@bikeshed.party)'s status on Friday, 06-Sep-2019 19:35:11 UTC Ruby Rhod
@tedu i can attest that Lain is a true german gentleman and likes biers -
Ruby Rhod (feld@bikeshed.party)'s status on Friday, 06-Sep-2019 19:31:01 UTC Ruby Rhod
People just want to relax but not consume calories. hello, weed. you won't even wake up with a hangover!
https://www.cnn.com/2019/09/06/business/white-claw-shortage-trnd/index.html -
Ruby Rhod (feld@bikeshed.party)'s status on Friday, 06-Sep-2019 18:55:28 UTC Ruby Rhod
@cstrotm @dvl software can include their own DoH resolver... like Firefox is doing. Malware can include it too. How do you stop that?
Require every device only run signed software? Enforce that at kernel level? I don't even know where to start with that. -
Ruby Rhod (feld@bikeshed.party)'s status on Friday, 06-Sep-2019 18:51:28 UTC Ruby Rhod
@cstrotm @dvl to clarify: you prefer individual privacy at the risk of of making it harder for security folk to enforce security on their networks which might mean $tech_giant is hacked by a state actor and they get the info they need on the targets anyway -
Ruby Rhod (feld@bikeshed.party)'s status on Friday, 06-Sep-2019 18:36:46 UTC Ruby Rhod
@cstrotm @dvl one other point important to me for security:
How do you detect malware, backdoors, and exfiltration if you can't filter DNS and alert based on it? You can no longer rely on things like a list of C&C servers, for example, or get an alert if Dropbox (banned at your company) is being used -
Ruby Rhod (feld@bikeshed.party)'s status on Friday, 06-Sep-2019 18:34:25 UTC Ruby Rhod
@cstrotm @dvl correct but the Resolverless DNS authors are not interested in supporting DNSSEC -
Ruby Rhod (feld@bikeshed.party)'s status on Friday, 06-Sep-2019 18:27:59 UTC Ruby Rhod
@cstrotm @dvl DNS filters are bypassed with a VPN though and protects you better than either of these solutions ever could. That's the point being made.
I'll send you a link to the video of Paul Vixie's talk when we have the editing completed. It will make more sense when all of the details presented. -
Ruby Rhod (feld@bikeshed.party)'s status on Friday, 06-Sep-2019 18:20:10 UTC Ruby Rhod
@cstrotm @dvl You want to do content filtering for your children: what network-wide options do you have now?
Ok, we can choose to allow censorship but we want to prevent MITM attacks on DNS records: DNSSEC is our only tool. But DNSSEC has almost no uptake and might be entirely dead if Resolverless DNS happens because they bypass it.
( Resolverless DNS has the webserver respond with a header including all DNS records of any external resources required to load the site so you don't have to waste the round trip doing DNS lookups. ) -
Ruby Rhod (feld@bikeshed.party)'s status on Friday, 06-Sep-2019 18:16:08 UTC Ruby Rhod
@cstrotm @dvl this is another issue that was discussed. Combination of DoH and TLS 1.3 (encrypted SNI) means you can no longer do filtering of traffic on the edge at your company. Now what do you do? You have to whitelist IPs?
And then look at the UK where it's illegal for ISPs to permit access to sites that host child porn. C-level execs will go to prison if the filtering is not working.
Well, Firefox is (or will be?) shipping with DNS over HTTP enabled out of the box... this bypasses the ISP's DNS filters...
So now what do we do?