X_Cli @x_cli@infosec.exchange
- Real Name
- Florian Maury
- Occupation
- Network Guardian Angel
I am a RNG (Random Network-#infosec Guy): do not expect better toots than those produced by an infinite number of monkeys. #Antispeciesist
Joined Nov 2017
UK ISP group names Mozilla 'Internet Villain' for supporting 'DNS-over-HTTPS' | ZDNet
UK government and local ISPs are putting the pressure on browsers to drop plans to support DoH protocol.
Who comes up with this kind of #API?
`shutil.move(src, dst)`
> If the destination is on the current filesystem, then os.rename() is used. Otherwise, src is copied (using shutil.copy2()) to dst and then removed.
Except that shutil.copy2 does not copy ownership info on some OSes. So depending on your OS and mountpoints, you may end up with a security hole, because of lost ownership info.
TIL: sh, in shutil, stands for shitty. Same applies to shlex.
Why, oh why, would you, #Cisco, implement #QinQ so incorrectly?
> PPP over Q-in-Q encapsulation supports configurable outer tag Ethertype. The configurable Ethertype field values are 0x8100 (default), 0x9100, and 0x9200.
Why not use 0x88A8 like everybody else? Why would you not even consider this standard value as an acceptable config?
F*** U, Cisco.
https://www.cisco.com/en/US/docs/ios/lanswitch/configuration/guide/lsw_ieee_802.1q.html
X_Cli
boosted
@x_cli Thank you so much for your kind words!
We have recently posted a piece about wanting to stay small (both
for decentralization and to keep the human way we do things), and rationalizing our services over the next 2 years. The english translation is available here https://framablog.org/2019/09/26/lets-de-frama-tify-the-internet/ ;)
So Cloudflare CTO John Graham-Cumming told me:
"US-based company (Mozilla) is working with US-based company (Cloudflare) on technology to be used by US-based users defending against ISP #DNS BS which ISPs have chosen to defend in Congress."
I read "Europeans should develop their own browser". (cc @Framasoft)
I also read that #Mozilla sold us, non-US citizens.
I also read no argument against my accusation of an unfair competitive advantage for #Cloudflare.
#DoH
https://twitter.com/jgrahamc/status/1184476869279866880?s=19
Announcing release of #Suricata 5.0.0
Protocol additions, rule lang cleanup, eBPF/#XDP, (experimental) datasets, JA3S and more:
https://suricata-ids.org/2019/10/15/announcing-suricata-5-0-0/
X_Cli
boosted
@aidalgol @moritzheiber They've just announced they'll take more money https://www.meetup.com/lp/paymentchanges
This is a true coincidence, because today is also the 1st beta release of #Mobilizon https://framablog.org/2019/10/15/mobilizon-lifting-the-veil-on-the-beta-release/
So let's thank MeetUp for giving us even more reasons to free our events from their walled garden 
!
X_Cli
boosted
The ultimate messenger protocol comparison chart
https://docs.google.com/spreadsheets/d/1-UlA4-tslROBDS9IqHalWVztqZo7uxlCeKPQ-8uoFOU/htmlview
Open hardware, open source 48-ports serial port hub: https://freetserv.github.io/
That project is amazing :)
X_Cli
boosted
Speaking of criminals trying to trick you into disclosing your online banking credentials on the phone: compare this script to the legit one outlined above.
https://twitter.com/DigitalLawyer/status/1181348689756864513
X_Cli
boosted
So switching social is back with a new maintainer and account at @switchingsoftware 🎉👍
X_Cli
boosted
Few months ago, we started an instance with @Steve12L dedicated to the protection of animals.
We first opened it to French speakers, but that's maybe time to open it more globally.
Special thanks to "La SPA de Montluçon" 🙏
Don't hesitate to spread it :)
X_Cli
boosted
Poll. What kind of #DNS servers/resolution do you use?
I can only provide 4 answers, so if you use other methods please reply to the toot. Also if you want to explain why.
Boosts appreciated!
X_Cli
boosted
Looking back, I think one of the most useful things I ever did in an internship was move Coinbase off of ImageMagick and onto a cloud image processing/hosting service. That hardening step has insulated them from so many horrific bugs at this point.
X_Cli
boosted
PuTTY 0.73 available:
https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html
– Fixes for three different security vulnerabilities.
– Several bug fixes.
#ssh #putty #vulnerability #update #security #infosec #security
X_Cli
boosted
"At first I thought DoH was (US) Department of Homeland Security, then I thought it could be an exclamation of Homer Simpson (doh); finally read the article and it seems to be a mixture of the two"
Tant que j'y suis, je cherche aussi un chef de projet (#CDP) avec des bonnes bases techniques ainsi qu'un #testeur, qui devra effectuer des tests de #conformité, de robustesse et de montées en charge, améliorer la #CI/CD et automatiser les tests d'#intégration. Environnement principalement #Python. Un peu de Bash, C et de #Rust.
I have to say I am really impressed by #Pleroma.
As least one of their contributors has a very good understanding of web security, and managed to have the software use basically all security HTTP headers (even Cookie prefixes!)
Setting up a #Wireguard tunnel took me 1 hour on my first attempt, reading docs included
Got to upgrade a box to buster (it was still a deb stretch, oopsie).
It is incredibly easy, compared to setting up an IPsec tunnel with Strongswan.
I strongly recommend you try this, for knowledge and fun :)
- Real Name
- Florian Maury
- Occupation
- Network Guardian Angel
I am a RNG (Random Network-#infosec Guy): do not expect better toots than those produced by an infinite number of monkeys. #Antispeciesist
Joined Nov 2017
