In-reply-to » Fuck me dead, what a giant piece of shit. On my Linux work laptop I have the problem that some unknown snakeoil "security" junk is dropping any IPv4 connections to ports 80 and 443. All other ports and IPv6 seem unaffected. I get an immediate "connection refused" when trying to estabslish a connection.

@lyse@lyse.isobeef.org

But then, why just block IPv4 and not also IPv6?

I’ll take “what’s the most overlooked thing in corporate networks” for 200. 😅

⤋ Read More
In-reply-to » Fuck me dead, what a giant piece of shit. On my Linux work laptop I have the problem that some unknown snakeoil "security" junk is dropping any IPv4 connections to ports 80 and 443. All other ports and IPv6 seem unaffected. I get an immediate "connection refused" when trying to estabslish a connection.

Thank you, @movq@www.uninformativ.de! Luckily, I can disable it. I also tried it, no luck, though. But the problem is, I don’t really know how much snakeoil actually runs on my machine. There is definitely a ClownStrike infestation, I stopped the falcon sensor. But there might be even more, I’ve no idea. From the vague answers I got last time, it feels like even the UHD/IT guys don’t know what is in use. O_o

Yeah, it is definitely something on my laptop that rejects connections to IPv4 ports 80 and 443. All other devices here can access the stuff without issue, only this work machine is unable to. The “Connection refused” happens within a few milliseconds.

Unfortunately, I do not have the slightest idea how it works. But maybe I can look into that tomorrow. Kernel modules are a very good hint, thank you! <3

You’re right, it might be some sort of fail-safe mechanism. But then, why just block IPv4 and not also IPv6? But maybe because the VPN and company servers require IPv4, there is zero IPv6 support. (Yeah, don’t ask, I don’t understand it either.)

⤋ Read More
In-reply-to » Fuck me dead, what a giant piece of shit. On my Linux work laptop I have the problem that some unknown snakeoil "security" junk is dropping any IPv4 connections to ports 80 and 443. All other ports and IPv6 seem unaffected. I get an immediate "connection refused" when trying to estabslish a connection.

@lyse@lyse.isobeef.org Oh gawd. This is the point where computing stops being fun. 😂

  • Can you disable the snakeoil junk temporarily? Probably not, eh?
  • Have you verified with an external device that it really is your laptop that’s dropping the packets? Like, what does tcpdump on your router see?

If this works reliably in the office, then it feels like some kind of fail-safe mechanism of the snakeoil stuff. If it can’t see its control server (which might only be reachable from the office?), then it shuts down web traffic? Something like that?

Any idea how the snakeoil works? Maybe it does LD_PRELOAD magic to hijack syscalls like connect()? Does it use kernel modules?

⤋ Read More

Fuck me dead, what a giant piece of shit. On my Linux work laptop I have the problem that some unknown snakeoil “security” junk is dropping any IPv4 connections to ports 80 and 443. All other ports and IPv6 seem unaffected. I get an immediate “connection refused” when trying to estabslish a connection.

I had this problem four weeks ago on Friday morning the very first time at home. On Thursday evening, everything was perfectly fine. Eventually, I plugged in the LAN cable in the office and everything got automatically fixed. Nobody can explain what’s happening.

Then, last week Friday morning out of the blue, the same issue was back. So, I went to the office yesterday and it got fixed again by plugging in the network cable. This evening, I have exactly the same bloody problem again.

What the hell is going on? Does anyone have any ideas? I’m certainly not an expert, but I don’t see anything suspicious in iptables or nft rules. I also do not see anything showing up in /var/log/kern.log. Even tried to stop firewalld, flush the iptables and nft rules, but that didn’t result in any changes.

⤋ Read More
In-reply-to » If there a name for those of us who dislike AI generated imagery, or for the dislike of AI generated imagery in general? A composite German word would do! :-)

@movq@www.uninformativ.de hahahahahaha! I will try to incorporate that one when I complain about AI imagery. Like, “Stop fucking using that AI shit, mon, I am an Kunstliebhaber!

⤋ Read More

If there a name for those of us who dislike AI generated imagery, or for the dislike of AI generated imagery in general? A composite German word would do! :-)

⤋ Read More
In-reply-to » What the hell is happening in South Korea?

@prologic@twtxt.net the South Korean president is facing impeachment. The president declared martial law to protect the country from North Korea and eliminate anti-state elements. However, the declaration was seen as a response to domestic pressure and scandals. MPs blocked the declaration and forced the president to reverse his decision. The president’s defense minister resigned and the president is now facing impeachment proceedings.

⤋ Read More

Problem 2: Your SSD-backed database has a usage-pattern that rewards you with a 80% page-cache hit-rate (i.e. 80% of disk reads are served directly out of memory instead of going to the SSD). The median is 50 distinct disk pages for a query to gather its query results (e.g. InnoDB pages in MySQL). What is the expected average query time from your database?

Share your solution via Twtxt and how you arrived at it and I’ll share my solution tomorrow!

#napkin-math

⤋ Read More
In-reply-to » @bender Well, so far, I’m using the standard web client. Haven’t found a great client yet. 🫤 Mastodon/Fediverse is also very different from twtxt, there are way more images/videos that I’d like to see – a TUI client like toot wouldn’t work for me.

@aelaraji@aelaraji.com ah, yes! The thing is, I have too many broken pieces already. 🤭

⤋ Read More
In-reply-to » @bender Well, so far, I’m using the standard web client. Haven’t found a great client yet. 🫤 Mastodon/Fediverse is also very different from twtxt, there are way more images/videos that I’d like to see – a TUI client like toot wouldn’t work for me.

@movq@www.uninformativ.de Mastodon offers the “deluxe” experience, but it is a resource hungry beast, that can also be feeble as hell. I miss it, a lot, but am running GoToSocial instead because of its simplicity, and nimbleness.

⤋ Read More

I think it’s time I set up jenny for this feed… been echo-ing my twits manually and there came times when it made me feel like a dork xD Plus I don’t have my vim’s :set spell to catch up with the typos

⤋ Read More
In-reply-to » Today's discovery: Iris a Serverless text-based forum for tilde-likes. I still haven't posted anything out there yet, but I'm in love with it already. Let's see what we find out next... rubbing hands

Also interesting:

edit_hash: When a message is edited, a new message is created– this field holds the hash of the modified message. The client follows the chain of edit hashes to end up at the final, edited message to display. This lets us keep an “undo” history (not yet implemented) and is a marker so the client can display a marker that the message has been edited.

⤋ Read More
In-reply-to » Today's discovery: Iris a Serverless text-based forum for tilde-likes. I still haven't posted anything out there yet, but I'm in love with it already. Let's see what we find out next... rubbing hands

@bender@twtxt.net Thanks! Also very interesting rid bits here 🤣

The author, parent hash, timestamp, and message values go into the hash. (see Message Hash for details)

⤋ Read More
In-reply-to » Today's discovery: Iris a Serverless text-based forum for tilde-likes. I still haven't posted anything out there yet, but I'm in love with it already. Let's see what we find out next... rubbing hands

Worth noting that this is a local “forum”. BBJ uses an SQLite database.

⤋ Read More