Elektrine lite

← Feed

John-Mark Gurney

encthenet@flyovercountry.social

<p>FreeBSD developer, consultant. </p><p>Documentation!</p><p>crypto means cryptography.</p><p>tech is inherently political.</p><p>Do your part, encrypt the Net!</p><p>if something is bullshit, spell it (bullshit) out, don&#39;t sugar coat it.</p><p>Add alt text to images.</p><p>All alt text posts are CC BY-NC-SA 4.0: <a href="https://creativecommons.org/licenses/by-nc-sa/4.0/" target="_blank" rel="nofollow noopener" translate="no"><span class="invisible">https://</span><span class="ellipsis">creativecommons.org/licenses/b</span><span class="invisible">y-nc-sa/4.0/</span></a></p><p>For commercial use, license available upon request, $75/post (i.e. if the alt text takes 3 posts, it&#39;ll cost $225 to license), just send me a message w/ where I can send the invoice.</p>

Posts

  • Post #4275648

    At a previous work, I implemented a SAML login flow and once I found out how easy the back end is, it really made me wish that more websites would allow you to enter your own SAML provider instead of locking you into the big ones. If you could, I&amp;#39;d likely run my own, but it also would mean that your password manager company could instead be your SSO provider because that&amp;#39;s really what a password manager is. They use a normal local auth/master password unlock and approve it. Bu...

  • Post #3903888

    Just someone using many to put words in other people&#39;s mouths that they don&#39;t say. &gt; many in the BSD crowd, “freedom” means the freedom to make the software proprietary, Just trying to say BSD people want all software to be proprietary which is definitely not the case for me. I want people to be able to freely using software so they don&#39;t have to rewrite it and create new bugs making software shittier than it already is. &gt; https://fossforce.com/2026/07/freebsd-16-cleans-ho...

  • Post #3565611

    Just realized that the only device I use regularly that doesn&#39;t have significant BSD code in it is my android phone. Devices I use regularly/interact dirdctly with [Free]BSD on them: ✅ macos ✅ PS5 ✅ Personal FreeBSD server And at work as well. Which of course entered the cursed thought of porting android over to FreeBSD. #FreeBSD

  • Post #3479665

    Just a reminder that the IETF is broken: https://www.metzdowd.com/pipermail/cryptography/2026-June/039613.html

  • Post #3417472

    As usual, a woman doing all the work that men should be doing. (Note she&#39;s only worth $30b, just to put into perspective how little the men are doing, especially the ones who pledged to give half their fortunes away.) &gt; https://flipboard.com/users/Independent/statuses/bn7IdHoaT2264Lqf9w5Niw:a:1855170754

  • Post #2971433

    So very confused by git documentation. git(1) under Reset, restore and revert says that git-reset changes the commit history. But everywhere I&amp;#39;ve read, including git-reset(1) implies that git reset doesn&amp;#39;t modify commit history and is the correct way to unstage files. Can we please be consistent with documentation on what things do? I have a feeling that it should be the git reset MAY modify commit history, but yet, the docs are confusing.

  • Post #2513084

    A couple go to Python debugging aids of mine, first is breaking into the debugger. import pdb; pdb.set_trace() The second is: ``` def printtb(fun): import functools @functools.wraps(fun) def wrapper(*a, **kwa): try: return fun(*a, *kwa) except: import traceback; traceback.print_exc() raise return wrapper ``` Then any functions that is throwing an exception that I can&amp;#39;t easily wrap elsewhere (or have no clue where it&amp;#39;s being called from), I just throw this wra...

  • Post #2212979

    Ms: we need more people to use OneDrive. Ms: I know, why don&amp;#39;t we prevent people from downloading their email attachments directly from the web client and instead force them to save to one drive?

  • Post #2209498

    The idea that dnssec adds another failure mode neglects to mention that it also prevents other failure modes, like DNS cache poisoning or DNS spoofing/server take over. Or bgp hijacking and doing selective/targeted redirection.

  • Post #1974656

    Just looked through the security assessment on the rust rewrite of core utils, and this is why just rewriting everything in the last language is such a dangerous things. They literally threw out 20+ years of security fixes because they thought it was cool and would increase security. At least a security assessment was done, but some of those failures are pretty bad, and very likely to have had serious security implications if they were deployed into any real world system. Setting mode bits in...

  • Post #1876472

    A good reason to include urls as text even in html emails is that it makes it easier to see if it&amp;#39;s a legit link or not, and also to make it easier to see when the corporate url protection rewrites the url to some nonsense that is hard to tell. But also including the full text of the url will force you to use urls that are of sane length and not some 1k+ long url.

  • Post #1876469

    Yes, it&amp;#39;s 2026 and device manufacturers are still hard coding root passwords. &amp;gt; https://tantosec.com/blog/2026/04/route-to-root-in-4g-industrial-router/

  • Post #1434220

    I&amp;#39;ve probably told this story before, but one of my favorite debugging stories is the time we conducted a seance on a core file. At the time we were using the boehm garbage collector, but had processes not freeing memory. We had core files, but at the time, to get stats, you had to run code in a live process. I had recently done work parsing sections of elf binaries, so I wrote a script (with the help of some coworkers) that would take a minimal program, run gdb on it, and then script...

  • Post #1179587

    Just learned why I won&amp;#39;t be using passkeys. Because it requires icloude keychain, and I definitely don&amp;#39;t want apple having a copy of my passkeys. Yes, I know they&amp;#39;re supposedly e2ee and everything, but also, allowing the passkey to transit devices actually means that it isn&amp;#39;t really 2FA anymore, especially if you keep any password in the same keychain. It&amp;#39;s pretty embarrassing how the security industry has managed to rebadge a not 2FA into 2FA.

  • Post #966023

    Please, if you&amp;#39;re training people on new modern tech that&amp;#39;s supposed to be so impressive, make sure you are up to date in &amp;quot;old&amp;quot; modern tech. The creditability of the new tech is weakened when you don&amp;#39;t compare it to modern existing tech. It shows that either you&amp;#39;re out of date, or the tech wasn&amp;#39;t actually designed understand current state of the art. Was watching training in Ultra Ethernet, and the training was talking about head of li...

  • Post #683648

    Ok, FreeBSD 14.4-R is now available via torrent/magnet links. Magnet links and more information at: https://wiki.freebsd.org/Torrents As always, it takes a while for the DHT to discover the torrents, and my client is verifying the last of the images. Happy torrenting! #FreeBSD #FreeBSDMagnet

  • Post #683209

    Has anyone made a self contained Time Machine backup server (that runs on FreeBSD)? It looks like the old ways of backing up over the network finally broke, and I can&amp;#39;t fool MacOS anymore by using a sparse disk image like I have for years. I don&amp;#39;t want to have to configure and install samba, I just want something that works and is small and self contained. #Apple #Backups #MacOS

  • Post #506108

    Does anyone have experience with replacing the SLA battery in a UPS with one of the LFP batteries out there? Did it work? Or a dual replacement for a series 24V UPS? #UPS