3/10: being completely exhausted after work travel
5/10: sitting in the plane taxiing for departure
8/10: work turning out quite productive
10/10: work might actually have impact for good
11/11: listening to Ella Red sing about smashing the patriarchy (literally) (https://www.youtube.com/watch?v=ZFc4itpTpxc)
15/11: pushed into seat by TO/GA power for takeoff just as the refrain comes in
99/11: feeling good about your life
♾️/11: fusing & holding this memory

🎶he…asked it, asked it🎶casket, casket🎶savage, savage🎶🎶🎶🎶🎶

D&D wizards: want time stop as ultimate battle control ability

Me: want time stop to take naps

Head "https://registry-1.docker.io/v2/library/ubuntu/manifests/22.04": Get "https://auth.docker.io/token?scope=repository%3Alibrary%2Fubuntu%3Apull&service=registry.docker.io": context deadline exceeded

wtf is "context deadline exceeded"?!

#ShitMyDockerSays

I accidentally committed bribery! 😱

A relative had to be rescued by a bystander (living next door) a little while ago. We decided to gift them a bit of money as a thank you…

…we didn't know the bystander was a police officer. 😂

(It all got sorted out)

RE: https://chaos.social/@equinox/117479606625021853

I guess "if" is now, and we're all fucked.

(I'm lucky on the current one, musl is only in containers for me & I've been preferring nsenter/lxc-attach, so no exposed ssh. 😮‍💨 — if you're in a similar situation, go look up how to enter containers without ssh!)

Just because it's still worth posting:

💉💉💉💉💉💉💉💉

Unfortunately, my 5G reception in Germany hasn't improved even with 8 Covid vaccinations. Damn hollow promises!

So the CVE JSON schema has additional text blocks like "configurations" and "workarounds", beyond the primary "description".

…guess how many "CVE frontend" webpages display those. And what cve.org itself shows.

Oh and guess how well the HTML alternate option works, or how \n in the text/plain description gets treated.

I just rejected a mailing list subscription request with "fuck off with your AI spam".

I'll admit it's cathartic and I've enjoyed that a little bit. 😁

(spammer had previously subscribed to the list & got 2 spam mails through, we assumed they'd ditch the e-mail address after the 1st mail… but no… they actually tried to resubscribe after getting kicked off! I almost respect the chutzpah. Almost.)

I'm sorry but why the fuck is a nightjet sleeper ticket *the same train [NJ470] and day [Nov 7th→8th]* for ZRH → HAM 135€ but KAE (Karlsruhe) → HAM 190€?

Can we please make these pricing games illegal? kthxbai 😡

On a completely random note, the shit the US pulled on Autistici/Inventati is absolutely rippling through the networking community, and people are actively discussing what to do about it… and against it.

The US will probably be able to pull these stunts a few more times, but hopefully not too many. There's work to be done.

On a completely random note, the shit the US pulled on Autistici/Inventati is absolutely rippling through the networking community, and people are actively discussing what to do about it… and against it.

The US will probably be able to pull these stunts a few more times, but not too many.

Fun things to (have to) put in an #IETF draft you're writing:

"This document defers discussing expected or recommended behavior for these devices for a later document, hopefully with more experience which approaches are effective on the more limited problem outlined here."

This is what happens if you are editing text in Dia and press Ctrl+A (expecting to select everything…)

(for the screenshot I moved the cursor to the end of the input after hitting ^A, just to show it's cursed on at least 3 levels)

(I'll try my best to find some time for a proper bug report later. Or maybe it's fixed already. "0.98+git20260221-3+b1")

Why is making diagrams/flowcharts such a shitshow? The commercial software (Visio) seems vaguely fine, the auto-layout stuff¹ (Mermaid, Pele) is somewhere between barely OK and plain junk, and Dia… oh Dia… can't even copy&paste from one diagram to another.

:thisisfine: or what?

¹ graphviz AFAIK isn't suitable for making flowcharts(?)

mitre.org…

does not have any #IPv6 on its nameservers.

wow.

(that's where e.g. the API is to get CVE IDs)

Last time I've noticed somebody "important" fail this hard is wikipedia.org years ago…

mitre.org. 3600 IN NS dns-ext-bedford.mitre.org.
mitre.org. 3600 IN NS dns-ext-mclean.mitre.org.

dns-ext-mclean.mitre.org. 10800 IN A 66.170.232.62
dns-ext-bedford.mitre.org. 10800 IN A 66.170.227.133

Congratulations (and Thanks!) to the Brazilian and Serbian voters for providing some of the most encouraging news we've had in a long time!

Where do you find professional catgirl herders? I think we need one.

(This isn't even a joke really, although the sad reality is there's no catgirls just cis male nerds. Not sure which are easier to herd, probably neither, just different tricks to use.)

I'm currently making flow charts containing an item/action "immediately alert entire <X> security team, do not publish anything unless already public"

How's everybody else's life in IT going?

Sigh.

(not everything has an AppArmor profile - but the only things without one *with a network port open* are sshd and auditd. The latter is on my TODO list, the former… if openssh has an issue, we're all fucked and nothing I can do will make a difference.)

In retrospect the day or two I put into #AppArmor rules *and* wiring up auditd so that audit logs trigger notifications on my phone seems… well spent. I even set it up to collect audit logs from most of my boxes centrally.

(I didn't get anything today, I don't run PHP and my stuff doesn't auto-update = no exploitable TLS clients… the latter being a bit questionable maybe.)

#auditd is an interesting piece of Linux infrastructure, if you weren't aware it exists I recommend a look!