So, three websites I manage are all vulnerable to the PHP CVE.
Rather than clear my entire schedule for the day to remediate them, I've just opted to take them all offline and rebuild them on new infrastructure, with a few extra security tricks to minimize the damage from any one component getting popped like this.
I hate being forced into this situation, but it's easier than rebuilding after getting hacked.
So…. There’s lots of activity in the #OpenBSD hashtag today with the impending release of v8.0.
So, I’ll take the opportunity to ask a dumb question — I see there’s a lot of talk of #AMDGPU updates and upgrades…. Does this mean it’s possible to run #OpenCL jobs on OpenBSD now?
Bonus question: Are the more recent (but still EOL’d) Vega GPUs on the supported list? I only ask because I have two of them that used to live in eGPU cases.
Hey #infosec Mastodon.
I’ve been tasked with building a small camera system for monitoring a pet - and the request specifically asks for it to have zero #cloud services. There’s a mostly-static IP, and web traffic is permitted. I’m planning on putting it behind a self-hosted VPN connection…
What I need help with is decent hardware that has an open source firmware - or hardware that can be flashed with an open source firmware. HD or better (3-8MP?) with support for high quality video (MPEG4?). Bonus Points for POE & Pan/Tilt/Zoom.
Nice to know that the UK has the same problem as Canada...
In the recent Clacton election, 63% of the 43% of people who showed up voted for Farage... That's 27% of eligible voters.
This idiot was voted for by 27% of eligible voters... and won.
The electoral system is utterly broken in the UK in the same way it is in Canada.
It’s been a while since I last played with this, but I’m wondering if someone has a recommendation for a really good #SDR - receive only, a mix of #hamradio, #CB, #APRS…. Something with wide bandwidth so I could record say, all #FMRS or #GMRS channels at once, or listen to the whole #900Mhz #ISM band for #LoRA and #Meshtastic chatter.
I’d probably run it off a #RaspberryPi 500, so USB is preferred rather than PCI-E.
So, my #MARCHintosh adventure wasn't great this year. In trying to convert my internal drives to a CF card, I suspect I blew out the secondary IDE bus on my old #PowerMac #PMG3. It still runs, but I think this might be very close to the end of the road for my 30 year old Mac.
I did manage to copy the contents of the main boot drive to a 128GB MicroSD card, so I'll likely play with an emulator and see if I can restore that drive to a working VM.
I've also gone through my boxes of old CDs and DVDs, and I'll be converting them to ISOs, for upload to one of the old software repositories for #MacOS software, before disposing of the physical media in pursuit of downsizing and reducing clutter in my life.
Okay #hardware #nerd types and #DataHoarders or #DigitalArchivists...
I'm using #Ubuntu #Linux on an old #iMac with #dvgrab to download the exact copies of all my #MiniDV tapes in #DV format.
But I have to say... This thing is a monster.
Can anyone recommend a laptop with #Firewire 800 that also runs Linux well?
#MARCHintosh
Worst case scenario is here…. Plugging anything into the second IDE bus stops the Mac from booting into the finder. It gets about half way, then locks up. I’m hoping I didn’t kill the Zip Drive, since the “click of death” rendered them so rare. It might be time for a BlueSCSI, or maybe it’s time to part this thing out.
I’m genuinely shocked that this thing made it to its 29th birthday.
So…. Just a reminder to all the folks working on #MARCHintosh - when tinkering inside your Macs and adding new stuff…. Don’t let random pins on the new equipment touch anything grounded.
I let the magic smoke out of an IDE -> CF adapter… and appear to have killed a 40GB drive… which is the best case scenario…. I hope I haven’t killed the IDE bus on my PowerMac G3.
Thankfully, it was a mostly empty data drive, not my boot disk with all my data.
So, planning on participating in #MARCHintosh this year -- broke my old #PowerMac #G3 out of storage, and it's sitting on my desk... But the only monitor I can find with a VGA socket doesn't have a power adapter... So that's the last missing piece...
The plan for this year is to back up the internal IDE drives to a CF->IDE adapter, then image the disks and throw them onto my backup server (ZFS zraid3!) for safekeeping. I have a 128GB CF card, but only 70GB of drives... So with the rest, I'll try and mirror some archives from MacintoshGarden, etc.
So, while clearing out my storage locker, I found a box of MiniDV tapes. I have two cameras, known to be working when they were put in storage about two years ago, but it’s probably time to get the video off the tapes before they deteriorate or the cameras stop working.
What’s the preferred #OpenSource #FOSS #Linux way of downloading copies of the data from tape? I think I have an old Mac Mini with a FireWire port, but I never liked the way iMovie chopped up the clips it downloaded.
So…. Is anyone else anticipating that today will see another President #TACO trade? A small group of traders making hundreds of millions from market volatility spawned by the latest tariff threats? #TrumpAlwaysChikensOut
One of my projects for the #NewYear is to minimize the number of #cloud #servers I run and manage. A big part of that is finding a new #DNS host for my 30+ domains that I #selfhost for myself and others.
Can any of the #sysadmin or #infosec folks recommend a service that provides a good web interface, and a reasonable flat-rate for a couple dozen low-volume #domains?
Ones that I've found charge a monthly fee that eclipses my server costs (3x-4x!), even when taking discounts for up-front annual payments into consideration. I could run my own DNS servers on cloud VMs for a fraction of the price, but again, trying to minimize the complexity in my life.
Okay #Gamer #Gamers... A friend's 16 year old is looking to build a PC for #gaming over the holidays... Now, I have a bunch of old PC components lying around... So I have to ask the question... Is an #AMD #Radeon Vega RX 64 or a WX9100 usable for a modern game machine? I remember these as monsters for #OpenCL -- but I don't think I *ever* connected a monitor to them.
Mostly interested in running #Linux for now, but might move over to #Windows eventually...
Okay #OpenBSD folks... I'm migrating my main web/mail server from one cloud server to another. I've been bashing my head against this for a few hours now. Let me know where I'm screwing up.
The only thing to know is that it runs with only three filesystems - / (root), /var/www, and /dump. The root filesystem is about 3.5GB.
1) I reboot and load up bsd.rd, and get into a shell. From there, I create the disk devices, and then mount the filesystems. The root goes to /mnt, and the dump filesystem goes to /mnt2.
2) I run /mnt/sbin/dump -0a -f /mnt2/root.dump / , and it completes without warnings/errors.
3) On the new server which is already built with the same base level of OpenBSD, I scp the root.dump file to it's /dump filesystem.
4) Reboot the new server with bsd.rd, create the disk devices, run newfs on the target root filesystem, and mount the dump filesystem on /mnt2.
5) I cd to /mnt, and run restore -r -y -f /mnt2/root.dump -- but I get tons of errors about "expected next file" and then dozens, maybe even hundreds, of missing inodes.
When I check the directories of the new root filesystem, /usr, /etc, and /home are all empty.
Any insight or references would be appreciated!
Anyone happen to know if #Signal #SignalApp is still working in #Tanzania? I’ve got friends there, and I know that during the unrest they severely cut the internet access.
I’m wondering if Signal is able to avoid any black hole filters that the government may have set up to block access to other popular (subsidized) instant messenger apps.
EDIT: Solution is below!
So... I need to pick everyone's brains.
Trying to configure #LDAP #OpenLDAP on a #RedHat #RHEL server, and any and all attempts to use #ldapsearch to test the connection fail. The error is that it's 'unable to get local issuer certificate'.
So, yeah, it's an #SSL / #TLS error.
Here's where it gets weird.
When I use the TLS_CACERT environment variable to point to the root cert, same error. When I add the root cert to /etc/pki/ca-trust/source/anchors and run update-ca-trust, same error. Even when I check that it's been extracted properly, it's there in the extracted/pem directory.
I've tried adding all the intermediate certificates to the TLS_CACERT .pem file, and to the anchors directory, same error. Double-checked the validity dates, made sure the subject and issuer lines all matched up...
Tried testing the SSL/TLS certificates with 'openssl s_client -connect' and it connects reliably. Using the -verify_depth parameter to set the number to less than the number of certificates causes a failure, increasing it shows it's validated.
I can't use #curl, the version I've got is buggy for ldaps:// connections.
Any insight would be greatly appreciated before I lose my mind... :)
So, it turns out that OpenLDAP environment variables are prefixed with “LDAP” so it’s LDAPTLS_CACERT and LDAPTLS_REQCERT that modifies the behaviour, not the config parameters. This feels like bad form.
Okay, I’ve tried half a dozen different searches, and can’t come close to what I’m looking for…
I want to build a virtual desktop environment in a Linux *server*, which is remote at a client site. (Not on a cloud server! Not in a VM!)
This server would connect to a cloud hosted VPN, then I’d connect to the same VPN from a tablet, and access a GUI desktop over VNC, so I can fire up a web browser / terminal and fix devices on their network…
The server’s screen should be a CLI login, so my work remains private.
Any help would be greatly appreciated!
FYI, if you use an iPhone, and don't want Apple Intelligence on your device, switch Siri's language to something other than English. I don't use Siri, so I switched it to Chinese... The installation/download of Apple Intelligence stopped, because it's not available in Mandarin/Cantonese.
#LazyWeb: Anyone happen to know if any of the standard #Meshtastic boxes (LilyGo / Heltec) will run off 3 or 4 AA rechargeable batteries? The big lithium ion batteries are expensive and I have like... 16+ rechargeable AA batteries lying around.