letters90 · HackerTrans

letztes Jahrdiscuss

It's simple to setup a resolver, really. Basically just "apt install unbound" and you have a resolver ready.

the only thing you might have to adjust is the access control

https://www.linuxbabe.com/ubuntu/set-up-unbound-dns-resolver...

      access-control: 10.0.0.0/8 allow
      access-control: 127.0.0.1/24 allow
      access-control: 2001:DB8::/64 allow

letters90

letztes Jahrdiscuss

That'd be a really good idea

https://en.wikipedia.org/wiki/Root_name_server

To be honest, setting up a DNS4EU replica would just be a simple unbound

letters90

letztes Jahrdiscuss

If denmark was to successfully adopt libreoffice they would probably invest in its upkeep aswell

Preventing another migration is a cost reduction in itself

letters90

letztes Jahrdiscuss

Not in other countries besides the US. Haven't seen a printout since I started doing taxes.

letters90

letztes Jahrdiscuss

With DBeaver I was able to use tnsnames.ora to use a few tricks to connect to an oracle db

It required certain host/user/cid combination to pass the whitelist.

letters90

letztes Jahrdiscuss

The minecraft demo is quite impressive

https://browsercraft.cheerpj.com/

letters90

letztes Jahrdiscuss

the update is gold, original message: "They are reproduceable" updated message "lol actually not"

letters90

letztes Jahrdiscuss

I'm not the type to write a blog. I just don't want to invest that much.

What I do though is documenting for myself, everything.

It has helped me greatly in the last few years

letters90

letztes Jahrdiscuss

I was asking myself the same question, looking for something noteworthy.

No there's nothing here to find. The way to go is in the linked discourse, god it's ugly, use iperf.

letters90

letztes Jahrdiscuss

I used nspawn to get a system running in the most ridiculous way.

A debian aarch64 vm on kvm starting a systemd-nspawn for an unpacked raspberry pi 3 iso.

It works way too well judging by how ridiculous it was.

Still saved me a few days instead of setting things up myself.

I actually liked how easy it is to spin up nspawn as a systemd service

  [Unit]
  Description=Raspberry Image Machine
  After=multi-user.target

  [Service]
  Type=simple
  User=root

  ExecStart=/usr/bin/systemd-nspawn -D /mnt/ /sbin/init

  [Install]
  WantedBy=multi-user.target

letters90

letztes Jahrdiscuss

> All you need to use is a mac.

Might as well require you to pay 1000$ up front to use.

letters90

vor 2 Jahrendiscuss

If you wanted to view this from a darker side it could also be titled:

How to generate a hit list to hurt a global economy

letters90

vor 2 Jahrendiscuss

it's nothing new for cars to be susceptible to replay attacks, yet it's always a proof of incapacity of the involved developers.

to even implement such a design is audacious

letters90

vor 2 Jahrendiscuss

or just a portable mingw coming with an openssh and a dynamic proxy

there you go with an easy socks5 proxy.

letters90

vor 2 Jahrendiscuss

So much work just because someone is using advertised dns from pppoe

letters90

vor 2 Jahrendiscuss

I don't really see where you are getting that

https://github.com/hcengineering/huly-selfhost

letters90

vor 2 Jahrendiscuss

I didn't consider embedded, probably the biggest target for this.

letters90

vor 2 Jahrendiscuss

> In our experiments, it takes ~10,000 tries on average to win this race condition, so ~3-4 hours with 100 connections (MaxStartups) accepted per 120 seconds (LoginGraceTime). Ultimately, it takes ~6-8 hours on average to obtain a remote root shell, because we can only guess the glibc's address correctly half of the time (because of ASLR).

Mitigate by using fail2ban?

Nice to see that Ubuntu isn't affected at all

letters90

vor 2 Jahrendiscuss

Scan Created? Scan Created where? ...

Usage Instructions seem lacking.

letters90

vor 7 Jahrendiscuss

I'm curious but too lazy to look it up myself. SO I'll just ask.

How far does the 'linux' specification go. Say I want to run a V program on AIX what kind of libraries will I need?

What about the 'windows' specification. Do the redistributables support windows 2000/7/Vista/8/8.1/10

We have a lot of different systems on our clients, mac as well. It would be nice to read concrete requirements for running to really see how much effort rolling out a V application would be.

comments