moreentropy

5 ms·

1.
by moreentropy 2y ago
How about just shipping a networkd.conf(.d) config snippet and .network file with the wanted defaults. This is just another instance of I-hate-systemd-for-no-reason whining
2.
by moreentropy 2y ago
> P.S. I actually run systemd-nspawn in production, but I am probably the only person on earth to do so. You're not alone, systemd-nspawn is very much underrated. I have used it a lot for machine containers, though I'm using po
3.
by moreentropy 3y ago
I would consider PIV and SSH through PIV/OpenPGP legacy and undesired nowadays. If you're only interested in state of the art second factor instead of passwords for sensitive use cases, a simple FIDO2 security key w/o all the
4.
by moreentropy 4y ago
While having a YK neo with all the features, I prefer the simple FIDO security key. Everything you could want apart from legacy/special use cases can be achieved with fido. websites -> fido/u2f ssh -> native fido support in
5.
by moreentropy 5y ago
Currently, it is. The "S" offering is at 2€/month long term. I'm still on a "S" contract that stays at 1€. Can't complain about 1&1, also had dedicated 1HE boxes there for a long time w/o issues b
6.
by moreentropy 5y ago
No specific reason against Cloudflare, just a DIY attutide in this case. HAProxy is fun, and I also run it as a TCP proxy, so HTTPS is terminated in my (hidden) home server and I don't need to trust my proxy server, I guess that's
7.
by moreentropy 5y ago
I'm using a Ionos (oneandone) VPS S: https://www.ionos.de/server/vps 1&1/Ionos is one of the largest and best connected ISP and Hosting providers in Germany, not some small shady shop. I see they doubled
8.
by moreentropy 5y ago
I'm in the same situation (50 Mbps uplink at one place, 100Mbps at another) and that's enough to do all hosting for hobby projects at home, which I really love. Instead of exposing my home directly using DynDNS, I got a really c
9.
by moreentropy 5y ago
I have some buildroot external trees on github that build images using github actions. It's for personal stuff I needed and only need to update occasionally. The Buildroot manual is fantastic and it's worth working through the get
10.
by moreentropy 5y ago
While these tutorials are a great way to teach system administration to those who want to start tinkering, I wish people would put more energy into building well crafted firmware images using frameworks like openembedded or buildroot and te
11.
TinyGo v0.15 Is Out(github.com)
4 points by moreentropy 6y ago|0 comments
12.
by moreentropy 6y ago
I wonder why systemd-nspawn isn't mentioned/used more. I've been using it for years for full system containerization and I'm really happy with how lightweight and functional it is. No need for additinal LXC/LXD laye
13.
by moreentropy 7y ago
WG exposes a point to point / l3 network interface like any other to userspace, so an answer would not be specific to wireguard but about networking and routing in general. Network Namespaces and VRFs are the correct way to approach th
14.
by moreentropy 7y ago
sure. freenode for free and open projects and hackint for everything ccc / chaos community related.
15.
by moreentropy 7y ago
That's your most pressing question?
16.
by moreentropy 7y ago
Private messages, relaying for 3rd parties and encryption are prohibited in Ham Radio, so thinking about (international) transactions over ham radio is just plain bullshit. This is the first thing every licensed Ham learns. What you're
17.
by moreentropy 7y ago
Welcome to enterprise IT. You'll receive your badge in two weeks eventually and your login won't work for another month.
18.
by moreentropy 7y ago
You don't seem to have spent a single minute researching before posting :/ The original implementation is a kernel module. You can find a bunch of (excellent) talks online by wireguard's author which all have a focus on secur
19.
by moreentropy 7y ago
I wonder if the Maidenhead locator system devised by radio amateurs in 1980 and still used by all hams today would be a better fit. This uses geocodes not much longer than a zip code which are not random. It's easy to check if two loca
20.
by moreentropy 7y ago
The CCCamp 2019 badge will be a (low cost) smart watch called card10: https://gitlab.hamburg.ccc.de/card10/logix
21.
The hyper-specialist shops of Berlin(theguardian.com)
294 points by moreentropy 7y ago|166 comments
22.
by moreentropy 7y ago
Yes, TermBot (Fork of ConnectBot with YK support) can use the Authentications key of the OpenPGP applet for SSH using OpenKeychain. Works like a charm but you need have the key in the OpenPGP applet, not the PIV applet.
23.
by moreentropy 7y ago
Thanks, cattlepi looks super interesting!
24.
by moreentropy 7y ago
I started building "real" firmware for my raspi appliances using buildroot. That makes it super easy to build images that completely run from initramfs without a single write on the sd card (and are fully booted in a few seconds i
25.
by moreentropy 7y ago
Is the limit he found CPU bound? IO bound? I suspect he basically tested some random SD card's performance.
26.
by moreentropy 7y ago
This was exactly my experience from two years ago. But to my surprise with recent gpg2 versions most of those issues are gone (plus EC ssh key files are supported, older gpg-agent could only do RSA) scdaemon used to crash all the time, that
27.
by moreentropy 7y ago
While this might improve user experience for some, I don't see the greater value in a VPN solution like this. It's the fast path to replacing the decentralized internet with a few proprietary CDNs. I'm much more excited about
28.
by moreentropy 7y ago
Would love to see FIDO2 / Webauthn in SSH. Working with PKI tokens for key auth works but has to be set up in the client.
29.
by moreentropy 8y ago
He's comparing a language (w/ extensive standard library) with a web application framework.
30.
by moreentropy 8y ago
I'd recommend using Restic ( https://restic.net/ ), it supports backing up to Backblaze B2 and generally is the best and most innovative backup tool I've ever used. Backblaze has a Restic howto: https://h

More ›