Notices by florian :flan_hacker: (florian@bsd.network)

First he came for the audio, and I did not speak out -
Because I did not listen to music on the computer

Then he came for init(8) and I did not speak out -
Because I did not reboot my computer

Then he came for /home - and there was nothing left.

~ https://cfp.all-systems-go.io/media/homed-asg2019.pdf

:flan_think: The Simpsons predicted the future. Again. :flan_aww:

Oh wow, this is a hoot.

use-application-dns.net. 3252 IN RRSIG A 8 2 3600 20191001050818 20190909050818 3066 use-application-dns.net. CbFnHGL18KI2HJBiW[...]

Translation: the domain that you are supposed to fuck around with to disable DNS over Clown (DoC) is DNSSEC enabled. The very thing that should prevent such fucking around.

Since there is no such thing as multicast on wifi, mobile devices drop 4 out of 5 packets send to the IPv6 all-nodes-multicast group on the baseband to safe battery.

TIL at #IETF105:
A: I propose we send an unsolicited neighbour advertisement to the all-*routers*-multicast group to speed up neighbour discovery on joining a link
B: Hang on, that might drain your battery real fast, I think we only drop all-nodes packets, not all-routers.
Me: :flan_think: :flan_evil: :flan_XD:

"DoH Preference Hints"

Congratulations, you just implemented a recursive caching resolver in your browser. :flan_thumbs:

#IETF105 #add

:flan_disappointed: if fairmont is the best Montreal / Canada has to offer then I'm not impressed.
No breakfast included, that's just cheap and a huge time sink. Not sure who's fault that is.

No free bottled water in the room, and the receptionist gave me the feeling that she wanted to get rid of me real quick because I was bringing the tone down by just standing there.

#IETF105

PSA: If the solution does not involve pizza and beer I'm not interested in the problem. :flan_royal:

"Our TLBleed exploit successfully leaks a 256-bit EdDSA key from libgcrypt (used in e.g. GPG) with a
98% success rate after just a single observation of signing operation on a co-resident hyperthread and just 17 seconds of analysis time."

https://www.blackhat.com/us-18/briefings.html#tlbleed-when-protecting-your-cpu-caches-is-not-enough

Monitoring is the path to the dark side. Monitoring leads to alerts. Alerts lead to hate. Hate leads to suffering.