Security Engineer. I mostly post about IPv6 and pictures of my cats.
I help run Tor relays for @emeraldonion@disobey.net.
Also trying to bring more chaos to the UK with @MinistryOfChaos@chaos.social.

Posts
Thank you so much!
what sort of things are you looking to swap for Immich on DVD? I love it
part of an unfinished project, naturally
Well I gave NixOS a good go for a while and I do like the declarative config.
But the latest Bluefin update has got me excited about uBlue’s direction with bootc and all the possibilities that brings for measured boot and system transparency. :neocat_laptop_owo:
https://docs.projectbluefin.io/blog/bluefin-spring-2026/#the-future-of-bluefin-and-fedora
Plus they seem to be looking for help polishing those parts up. Might have to check it out.
I still have an hour left on this train :neocat_shocked:
I meant to start posting regularly for #BandcampFriday but keep forgetting.
This month’s earworm :neocat_bongo_down: :
Nekrogoblikon have a collab with Reel Big Fish on their latest album, and it goes unreasonably hard: https://nekrogoblikon.bandcamp.com/track/secret-elephant
If you like melodic death metal mixed with ska (who wouldn’t), it might be for you.
Today’s featured article on English Wikipedia
The UK NCSC are releasing some kind of inline display connection widget thing to “secure” HDMI and DisplayPort connections.
Really struggling to understand the threat model on this one… it seems so badly explained in the post.
Are they trying to suggest channels like EDID or HDMI CEC are actual threat vectors? Or maybe it’s an attempt to defend against people plugging in inline capture cards or something? (Can’t really see how that’d work anyway) 
https://www.ncsc.gov.uk/news/world-first-ncsc-engineered-device-secures-vulnerable-display-links
Woop. Last month’s Bandcamp Friday purchase finally arrived 
RE: @alexhaydock@infosec.exchange
It occurs to me that if Bazzite inherits this config unmodified, then my Steam Deck should work on the IPv6-only VLAN just in time for No NAT November this year.
I might try and redo my attempt this year and see how much has changed since Nov 2024.
Nice — Fedora Engineering proposal for Fedora 45 to enable the CLAT support in NetworkManager by default.
IPv6-mostly is becoming a thing everywhere :neocat_bongo_down:
https://fedoraproject.org/wiki/Changes/IPv6-Mostly_Support_In_NetworkManager
Google Maps API key has expired for the knockoff version of Geoguessr I've been playing and it just added a whole new fun game mode tbf 
Things we know:
* Valve have been working on an unknown project called” HLX”
* Valve promised an updated version of the Half-Life 2 “Raising the Bar” book in 2025, but missed the deadline for unknown reasons
* Valve’s new hardware launch has been delayed by the RAM crisis
…there is a non-zero chance that Sam Altman has delayed Half-Life 3
Okay, next make the IPv4 stack modular so I can compile without it :neocat_devil:
https://www.phoronix.com/news/Linux-IPv6-Built-In-Or-Nothing
EMF Ticket ✅ Acquired

Starting to get worried that when the AI bubble pops, all these companies left holding empty AI DCs will try and pivot hard to the “stream your PC from the cloud” model and consumer IT will just start to disappear.
Is this just an excuse to buy a 48U rack for my garage and start filling it with hardware? … Mayyyyybe 
But it also doesn’t seem that farfetched which is quite depressing.
Real world implications of the OSA
“Sorry I’m 15 so I can’t say the name of the [Sexual Offences Act 2003] or Reddit will mark my post as not visible to me and I won’t be able to verify my identity to view my own post.”
Looks like Graphene’s new OEM partner is going to be Motorola
https://motorolanews.com/motorola-three-new-b2b-solutions-at-mwc-2026/
Framework motherboard isn't booting again
On the plus side, the latest updates to the Asahi Fairydust kernel seem very stable so I can daily drive this MacBook even with external monitors.
The new "AI Kill Switch" in Firefox is a welcome addition, but did they really not hook this up to the Enterprise Policy framework? 
Doesn't seem to be affected by the existing GenerativeAI policy.
Welp. Time to learn how #NixOS packaging works.
NetworkManager in nixpkgs-unstable should have all the fancy new CLAT code as it's at version 1.56.0 now
No such luck after pulling it in though. I had to go back to my horrible module that builds from the latest Git commit.
My build needed a bunch of BPF dependencies to get the CLAT support working, while the nixpkgs version bump bumped nothing but the version string and SHA so maybe I need to try and add those build-time deps upstream: https://github.com/NixOS/nixpkgs/commit/20f0d91b2273d998b83b46f11b3b229e93a1d5c7
Not sure though 
Press embargo has lifted for the Ofcom press release that ended up circulating on their general discussion mailing lists earlier.
Looks like they're trying for a UK version of #ChatControl to me.
https://www.mirror.co.uk/news/politics/plans-ban-social-media-under-36719524
> “I'm going to announce on Monday that we will take a power in the Children's Wellbeing and Schools Bill that will allow us to implement the result of our consultation
[…]
> action on VPNs to stop you getting around things”
They’re really trying this huh 
I’ve been trying to use less YouTube (directly at least) so I’ve been using the “Unwatched” app for iOS and casting it to the TV via AirPlay
It’s been working flawlessly for weeks but randomly today it’s stuck on auto-dubbed Spanish for all videos and I can’t make it stop
…al menos me está obligando a recordar algunas de mis lecciones de español en el instituto 🇪🇸
Lazyweb: Does anyone have a good FreshRSS client for iOS that actually acts as a client?
I’ve tried a few, like FeedFlow, but the ones I’ve tried seem to download the list of feeds from the server and then fetch all the feeds locally.
One of the main reasons I’m self hosting FreshRSS is so my phone *isn’t* fetching 95 different feeds in the background :neocat_shocked:
Do you think I need more speakers? 
Had great fun and met some great folk at my first #FOSDEM!
Learned some interesting things that are relevant to our Confidential Compute plans for Tor Relays with @emeraldonion@disobey.net
Very tired now. Time to try and not fall asleep on the Eurostar back home 