Posts

This profile is from a federated server and may be incomplete. Browse more on the original instance.

h3artbl33d, to random
@h3artbl33d@exquisite.social avatar

Upon troubleshooting a hosting issue, I stumbled upon a rather aggressive bot that was crawling the website - for an AI.

The crawler is Claude and the user-agent:

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)<br></br>

They use thousands of IP addresses from AWS that don't seem to be unique to this bot; the party responsible doesn't publish a list of IPs. They do however mention that it can be blocked by adding this to robots.txt:

User-agent: ClaudeBot<br></br>Disallow: /<br></br>

Adding: Here is an nginx config for WordPress websites.

h3artbl33d, to random
@h3artbl33d@exquisite.social avatar

I was doing some project work for a client and had to change some DNS settings at the registrar they use. I couldn't get past the login - seems that they launched a new control thingy that requires webassembly :flan_nooo:

@transip please get your act together.. WASM for a DNS panel is utter madness.

(and yes, right now, I can still use the old panel by entering the URL manually, but that is besides the point)

h3artbl33d,
@h3artbl33d@exquisite.social avatar

@xvilo @transip

Totally! To be honest, I didn't expect a reply back - not so soon anyway as the Fediverse is more niche. So, thank you very much for your swift response and action.

If you'd like, I'd be sure to tag you if something breaks in the future. I don't use the CP that often - but my little setup can bring some edge cases to light.

xvilo,
@xvilo@mastodon.org.uk avatar

@h3artbl33d Definitely do, I can't promises a (swift) fix but if it's easy to do I'm willing to look into it or create an internal ticket on, eh, Jira shivers down spine

h3artbl33d, to random
@h3artbl33d@exquisite.social avatar

With Microsoft pushing their supercharged spyware soon, today is - like any other day - perfect to make the switch to #OpenBSD. The sane, well-documented, secure OS that isn't bloated and doesn't spy on you.

#RUNBSD

h3artbl33d, to random
@h3artbl33d@exquisite.social avatar

I am wearing a top today :flan_XD:

Shirt designed and made by my sister from another mister @Banshee

h3artbl33d, to random
@h3artbl33d@exquisite.social avatar

@delta

I run into the issue that deltachat-rpc-server doesn't build on OpenBSD, due to the quinn crate (in particular, quinn-udp). The fix isn't trivial.

Should I file a bug report as an issue in deltachat-core-rust repo or as a feature request / support issue on the forum?

shalien,
@shalien@projetretro.io avatar
h3artbl33d, to random
@h3artbl33d@exquisite.social avatar

OpenBSD was right

Newsflash: #OpenBSD is always right.

h3artbl33d, to random
@h3artbl33d@exquisite.social avatar
h3artbl33d, to random
@h3artbl33d@exquisite.social avatar

We become what we behold
We shape our tools and then
our tools shape us
~ Marshall McLuhan

That quote struck me :flan_aww: I have been using #OpenBSD for little over two decades. Back then, it wasn't love at first sight as documented on a blog. It did grow on me, right to the point where I could say that I truly loved it. I still remember socially engineering my mother for permission to get a Puffy tattoo (which was a requirement before turning 18). Much to my surprise, she was not only okay with it, but offered to give it as my birthday present :flan_heart:

Over the years, OpenBSD and the community have been shaping my views on computing, security and privacy. I am incredibly grateful to Theo, to OpenBSD, to the developers, to the contributors and community at large.

You - collectively and without exception - have been a bless. It has been (and continues to be) an honor. I am forever grateful to you all :heartcyber:

(soon to be continued)

h3artbl33d, to random
@h3artbl33d@exquisite.social avatar

Oh my :flan_ooh: A big Youtuber with 20M subscribers (Mrwhosetheboss) talks about Enshittification, features @pluralistic right in the intro.

Now that there is some momentum, it might be a good time to help your loved ones move away from big tech and reclaim their privacy. Please help, you all, increase the awareness!

The video in question:

h3artbl33d, to random
@h3artbl33d@exquisite.social avatar

Eleventy is a simpler static site generator

Have you even met ssg?

$ doas pkg_add lowdown<br></br>$ mkdir -p bin<br></br>$ ftp -Vo bin/ssg https://romanzolotarev.com/bin/ssg<br></br>$ chmod +x bin/ssh<br></br>

Way simpler and doesn't require the bizarre nodejs kitchensink.

Thank you @romanzolotarev

RL_Dane,
@RL_Dane@fosstodon.org avatar

@h3artbl33d @romanzolotarev

Yikes, I avoid nodejs like the plague

h3artbl33d, to random
@h3artbl33d@exquisite.social avatar

A map of Europe drawn from memory

h3artbl33d, to random
@h3artbl33d@exquisite.social avatar

From what I gather, from the very limited information available: the signedness folks are being vocal about an NFS exploit and dubbing it as an OpenBSD RCE.

I have no reason to assume that this is misinformation, given the track record of these folks. However: NFS is disabled by default.

If you are running nfsd, especially exposed publicly, you might want to disable it until this vulnerability is patched.

#OpenBSD :openbsd:

h3artbl33d,
@h3artbl33d@exquisite.social avatar

Furthermore, both me and PurpleRaiN (from @secbsd fame) went through the source tree. Seems that this is still unpatched.

From that, there is one logical conclusion: the vulnerability is not shared with #OpenBSD. Because if it were, it'll be patched faster than one can pronounce "remote code execution".

Hence, this is irresponsible behaviour. "We have a RCE exploit for NFS on OpenBSD, but we aren't disclosing any details, nah-nah".

h3artbl33d, to Signal
@h3artbl33d@exquisite.social avatar

Signal on OpenBSD

Rust-powered Signal client for the terminal. Sans Java.

Here is how you do it, pending my port:

$ doas pkg_add git protobuf rust<br></br>$ cargo install --git https://github.com/boxdot/gurk-rs gurk<br></br>$ export PATH=~/.cargo/bin:$PATH<br></br>$ gurk<br></br>

Might want to grab a coffee (or beer, wine, whatever your poison is) while cargo runs.

Enjoy - and as always HACK THE PLANET :flan_hacker:

#OpenBSD #Signal

h3artbl33d, to random
@h3artbl33d@exquisite.social avatar

Apple's move to create a single ecosystem, based on the same architecture is fantastic.

One exploit to pwn them all :flan_hacker:

RL_Dane,
@RL_Dane@fosstodon.org avatar

@h3artbl33d

Infosec veteran located. :blobfoxlaugh:

h3artbl33d, to random
@h3artbl33d@exquisite.social avatar

Over a decade ago, I took a leap of faith and became an entrepreneur. It has somewhat escalated - as in: my company incorporated and that I have employees nowadays (still getting used to that, but that is a story for another day).

There are some key lessons that I learned, that I want to share:

  • The single most worthy 'asset' is humans. Treat them with respect. If you don't, you'll be digging your own grave. Listen, reward and pay effin attention. Nobody is perfect - nor are you and I.
  • Having an attitude can be good. The client isn't always right - and if you can explain why you don't want to work on it, it might just open their eyes.
  • Being an entrepreneur often requires taking risk. But do it at your own expense - never, ever at the expense of others.
  • Let go. You can't manage everything - even though your company feels like it is your 'child'. Micro-managing will end up hurting everyone.
  • Always be open to learn and adapt. We are human, bound to make mistakes and fuck up. Be honest and humble. Apologize if you effed up.
  • Never, ever, give tight deadlines. If your estimation is three weeks, communicate double (six weeks). It'll cut you some slack when things don't go according to plans.

1/2 🧵

h3artbl33d,
@h3artbl33d@exquisite.social avatar
  • Again: humans. Employees and workers above everything else. Don't ever throw them under the bus. If you do - I might pay you a visit and give you a deserved slap in the face.

And... Silicon Valley (...and others) should be an example of how not to conduct business. Seriously. Steer clear of VC - as it'll only end up hurting everybody.

As a business owner, you should never, ever be the first beneficiary. Because if you are, you are doing it wrong.

2/2 🧵

  • All
  • Subscribed
  • Moderated
  • Favorites
  • JUstTest
  • mdbf
  • ngwrru68w68
  • modclub
  • magazineikmin
  • thenastyranch
  • rosin
  • khanakhh
  • InstantRegret
  • Youngstown
  • slotface
  • Durango
  • kavyap
  • DreamBathrooms
  • megavids
  • GTA5RPClips
  • ethstaker
  • normalnudes
  • tester
  • osvaldo12
  • everett
  • cubers
  • tacticalgear
  • anitta
  • Leos
  • provamag3
  • cisconetworking
  • lostlight
  • All magazines