equinox

he/him · FRRouting · Junisco & Hp3Com slayer · knows more about IP routing than is healthy · moonlights in bullying electrons around a circuit board

github: https://github.com/eqvinox
threema: 95JJFCSA
signal: equinox.79
pronouns: he/him

Public Key

npub1zefnswadswgj263e6kyuuu6emhkgdy0hptux5082wljhm499efeqtlrg9h

NIP-05 Address

equinox_at_chaos.social@momostr.pink

Profile Code

nprofile1qqspv5ec8wkc8yf9dguatzwwwdvammyxj8ms47r28n480eta6jju5usprpmhxue69uhhyetvv9ujumt0d4hhxarj9ecxjmntqyxhwumn8ghj7mn0wvhxcmmvzkhver

Publishing to

relay.momostr.pink

nos.lol

nostr.wine

Author Public Key

npub1zefnswadswgj263e6kyuuu6emhkgdy0hptux5082wljhm499efeqtlrg9h

Show more details

Last Notes

2026-10-09 09:23:34 UTC

- reply

ah yeah the "unmanaged" part there really just means moving complexity around… and increasing it… 🫠

2026-10-09 09:14:17 UTC

- reply

/128 (GUA), issued by the RADIUS server by filling the lower 64bit with random bytes. (It's an IPsec VPN, the client can't choose its own address sadly.)
You can absolutely use /128 with ULAs; the /64 boundary is a SLAAC concept.
What do you need RIOs for in your setup?

2026-09-17 07:47:24 UTC

- reply

there you go, there's now a "drop-ipv4" option 🙂 (and a "v0.1" tag)
… haven't tested this as much … maybe I should copy over the tests from glibc … but right now this is only a "because it annoyed me enough" thing so no tests

2026-09-17 06:51:17 UTC

- reply

it temporarily had that functionality already during hacking, as a side effect 🙂… might readd it

2026-09-16 23:23:43 UTC

https://codeberg.org/eqvinox/nss_dns64
DNS64 / #nat64 in glibc's NSS…
…why did I have to hack this together? It seems so obvious… but I couldn't find anything
#ipv6

2026-09-06 14:05:13 UTC

- reply

there is nothing to support /yet/, this is exploratory and will, at best, be shipped on some embedded devices in a few years, maaaaaaaybe.

2026-07-17 21:26:16 UTC

- reply

10-Minuten-slots? o.O

2026-06-12 20:31:17 UTC

https://lantian.pub/en/article/fun/ai-agent-bankrupted-their-operator-scan-dn42lantian.lantian/
https://news.ycombinator.com/item?id=48500012
Seeing what dn42 has become truly warms my heart… especially the bits like this https://news.ycombinator.com/item?id=48501597 :rainbow_heart:

2026-05-20 19:41:36 UTC

- reply

CVSS *is* useless for routers & switches

2026-05-12 00:17:18 UTC

- reply

for the non-German speakers, since it's not in the tweet: she lists 4 European militaries as credible:
Ukraine, Turkey, Poland, and Finland.

2026-05-12 00:14:31 UTC

- reply

it's also remarkable that she's saying this in *perfect, completely accent free* German on German television (as a native German speaker I was seriously WTF'd by that, - she grew up bilingual & partially in Germany. Still, powerful.)
And the host pointed out midway through that she hadn't mentioned the German military. (And I'll add: neither the French, regardless their driving EU defense ambitions.)

2026-03-11 21:58:08 UTC

- reply

not yet. From your post I assume it doesn't work properly?

2026-03-11 21:46:23 UTC

Oh for fucks' sake…
HomeAssistant VM: #IPv6 capable
Philips/WIZ lightbulbs: IPv6 capable
Shelly relays: IPv6 capable
ESPHome DSMR-P1 gateway: NOT IPv6 capable 🤬
"Defaults to false"… are you for fucking real, #ESPHome ?
https://assets.chaos.social/media_attachments/files/116/212/724/866/871/738/original/ab5ab4b2056a943c.png

2025-10-27 15:57:53 UTC

- reply

I'm not getting the Communist Himbo either… Eddington maybe? 🤔

2025-09-07 06:02:39 UTC

Nix is just Gentoo for gen Z
*runs away*

2025-07-08 01:52:26 UTC

- reply

as a networking person: please don't use 10Gbase-T. It's a pile of power-wasting, overheating garbage with short range. 10Gbase-R at 10.3125Gbd is the only real 10GE.
(Which means optical fibre. Did I mention that while yes it is a bit more fragile than copper cable, it's nowhere near as fragile as people think?)

2024-08-25 00:20:20 UTC

- reply

WebUSB…
I had looked at it for a project of my own ("Web" interface for an STM32), but I'm primarily a Firefox user and Mozilla decided they don't want to support it for security reasons. After some research and thought, I actually agree with them for the general case.
My "way out" would be to try for WebUSB support for browser extensions rather than general webpages, to get an extra "barrier".
…maybe this is a good spot to get a few +1s on that? [except I can't find where… 🤔]

2024-08-23 00:42:50 UTC

- reply

or just define THCI, for an USB 2.0 controller attached via USB 3.0. Like Thunderbolt does it for providing USB ports down the line…

2024-08-17 02:40:03 UTC

- reply

"your modified version must prominently offer […] an opportunity to receive the Corresponding Source of your version by providing access to the Corresponding Source from a network server"
Where are you getting that that "network server" must be the related/the same as the software is running on? To me this reads as "a link to the commit hash on github" would satisfy this requirement, with github being that network server…
(has this ever been enforced?)