Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)S

SteveTech

@ SteveTech @aussie.zone

Posts
0
Comments
68
Joined
5 mo. ago

  • Cloudflare Tunnel: proxy-dns Command Removal 2026 | What are some nice alternatives to encrypted DNS?

    Jump

  • they are asking customers to shift to their WARP client instead.

    I just use WARP, and just send plain text DNS over it to 1.1.1.1. I believe this is superior to DoT or DoH, because the client don't have to do any sort of handshake for each request and everything still goes over UDP while still being encrypted. If it's setup correctly, one.one.one.one/help will say you're using DNS over WARP.

    Actually I've got a weird setup where I've converted the WARP client to a wireguard profile and I run it on my router, but only route 1.1.1.2 and 1.0.0.2 through WARP. That way I can still traceroute 1.1.1.1 while debugging my network.

  • Arch Linux Website Hit by DDoS and Temporarily Limited to IPv6

    Jump

  • The botnet's code probably doesn't support IPv6.

    Is there something about it that makes it more resilient to DDOS?

    While archlinux.org doesn't do this, you can have multiple A and AAAA records which can provide DNS based load balancing, and IPv6 is easier to do that with since you usually get allocated a whole prefix. Of course that only helps to distribute the load, if your internet connection is the bottleneck then it won't help.

  • [SUPPORT] iptables - rules for OUTPUT chain

    Jump

  • also allow responses from any established connection

    You shouldn't need to as iptables is stateful, you would need to for stateless firewalls though.

    You'd also need to open UDP 123 for NTP, I see that mistake a lot.

  • Removed

    But you should say you're fluent in both on your job application

    Jump

  • Some image formats will ignore junk data after the image. So you can probably run cat image.png message.txt to embed text in image files, although I haven't tried this myself.

  • Here is a more polished release of nanogram. Fully compatible on raspberry pi now.

    Jump

  • You can still have that script, but put it on the releases page. Git works best with actual source code and it doesn't belong there. You should also add an extra script that generates one of those 'compiled' scripts to the git repo, so that people can do it themselves.

  • This is why we can't have nice things.

    Jump

  • I can find the official Pi Pico for $3.50, I'm sure clones are cheaper than that.

  • Maybe we don't need a server

    Jump

  • But that means that someone else's server is used whenever you leave your home network.

    I'm pretty sure syncthing does NAT hole punching, so someone else's server is only used for initial connection, after that, your data goes directly to your devices.

  • Notepad++ updater installed malware

    Jump

  • Maybe it was used as some sort of privilege escalation? E.g. NP++ downloads an XML file to %TEMP%, some already present malware modifies it, then GUP downloads a payload and executes it with administrator permissions.

  • Grub and the Microsoft Ransomware

    Jump

  • It's easy enough to add your own secure boot keys, you can even remove the Microsoft keys so that only your OS will boot.

  • Grub and the Microsoft Ransomware

    Jump

  • windows server edition which not possible to get if u are not business client and it cost 800$

    It probably depends on your uni, but students can get Windows Server licenses for free on Azure Education.

  • Network Configuration Questions

    Jump

  • It does DNS already, so why do I need an external DNS server?

    You need an external DNS server to access it externally. If you're happy with internal access only, you can probably set some sort of DNS override in UniFi.

  • Removed

    Crows are intelligent birds and learn quickly – even from each other. In Sweden, they are used to collect cigarette butts and bring them to a machine that automatically rewards them with peanuts.

    Jump

  • There are things I don't understand about the machine that also make me think AI, but Google Translate seems to understand so maybe it isn't?

    Edit: Actually I think AI is better than I thought it would be.

  • Mozilla’s Betrayal of Open Source: Google’s Gemini AI is Overwriting Volunteer Work on Support Mozilla

    Jump

  • This isn't about Firefox, and there are zero mentions of Firefox in the article. This is about Mozilla screwing over their volunteers by replacing their human written translations, with inaccurate machine translations written by a closed source LLM.

  • Network Configuration Questions

    Jump

  • It doesn't really matter how you setup dynamic DNS and SSL. I prefer to handle dynamic DNS on the router, incase it's smart enough to refresh the IP after DHCP renews it. I do SSL on a seperate nginx instance, but I run a few other sites; it might be easier to configure it directly on home assistant, but I haven't tried.

    If you want some extra security, I'd look into mTLS, as that establishes some cert based authentication at the TLS layer before HTTP, but it can be complicated to configure.

  • Why won’t Steam Machine support HDMI 2.1? Digging in on the display standard drama.

    Jump

  • on these atomic distros where even something like syncthing involves shenanigans to keep active week to week? Ain't happening.

    I don't see why you couldn't kexec into a new kernel. kexec will load a kernel into memory from an already running kernel, and jump into it. It'll suck for the user as they'll have to semi-reboot everytime they want HDMI 2.1, but it's easy and doesn't install anything.

    There's also live patching, but I think that'll be a bit of work.

    Of course the kernel needs to be compiled with those options enabled, but most distros do.

    Edit: And they probably won't work with kernel lockdown/secure boot.

  • Why won’t Steam Machine support HDMI 2.1? Digging in on the display standard drama.

    Jump

  • DP has an option to transmit HDMI signals instead, this is what passive adapters use and will still have the same HDMI 2.0 issue. A DP source can be passively adapted to HDMI, but a HDMI source cannot be passively adapted to DP.

    You can also get active HDMI adapters which actively convert the signal, and can work with HDMI 2.1. Intel actually has an active converter chip built into their ARC GPUs, and is how they get around this issue.

  • Options for remote Wake-on-lan. Or I guess wake on WAN.

    Jump

  • You're going to have a hard time trying to get that working over the WAN (if that's even possible).

    Wake on LAN is still encapsulated in an IP packet, so you can send it over the internet, and most WOL clients let you specify an IP. However your router will need to DNAT it to a broadcast address. Some routers have a check box for this (e.g. An ISP provided Technicolor router I have), some let you port forward to broadcast (e.g. Many routers, sometimes with workarounds), and some let you manually configure NAT (e.g. MikroTik routers).

    So it is possible, but forwarding public internet traffic to a broadcast address seems like a bad idea, and I wouldn't recommend it. Why I know this: I used to do this in middle school, and it does work quite well.

  • "You are in emergency mode. (...) Cannot open access to console, the root account is locked."

    Jump

  • Depending on your BIOS and with fast boot, you might need to just hold one of the keys while booting instead of spamming it on boot.

  • How did my ISP identify my AP?

    Jump

  • Yep, but it's required, and also present in every frame sent between your router and the ISP BNG.

    I was trying to think of a reason why ASUS would still be showing.