h3artbl33d :openbsd: :antifa:

Hacker | OpenBSD | InfoSec | Coffee addict | Todays paranoia is tomorrows truth | صمود

Ephemeral toots: 1 month

Dutch posts are with the #Dutch tag (allowing filtering)

Views, attitude and Toots are solely on personal title!

Chief Threat Architect @ Exquisite.{social,tube, network}

Trans and queer rights are human rights. He/him. Also, praise the catgirls, trans people, daddies and twinks that keep Fedi running. 🏳️‍🌈

Website: https://h3artbl33d.nl
Location: Eleusís
Identifies as: Threat
Pronouns: Try/Me

Public Key

npub1y90887enayft4damsycxahzuwa87jvx3vhrq37c74wdzv9vdgvcq2z900y

NIP-05 Address

h3artbl33d_at_exquisite.social@momostr.pink

Profile Code

nprofile1qqszzhnnlve7jy46k7aczvrwm3w8wnlfxrgkt3sglv02hx3xzkx5xvqpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dsulxv0t

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub1y90887enayft4damsycxahzuwa87jvx3vhrq37c74wdzv9vdgvcq2z900y

Show more details

Published at

2026-08-28T03:24:06Z

Kind type

0 Metadata

Event JSON

{ "id": "a9921be5259fa1da32e066d7abdec3eeed30c10dffc95800a87eab2673878d70", "pubkey": "215e73fb33e912bab7bb81306edc5c774fe930d165c608fb1eab9a26158d4330", "created_at": 1787887446, "kind": 0, "tags": [ [ "emoji", "openbsd", "https://media.exquisite.social/exquisite/custom_emojis/images/000/046/194/original/fd77f94e8f7091ea.png" ], [ "emoji", "antifa", "https://media.exquisite.social/exquisite/custom_emojis/images/000/009/025/original/79a91987e1f660ca.png" ], [ "t", "dutch" ], [ "proxy", "https://exquisite.social/users/h3artbl33d", "activitypub" ], [ "L", "pink.momostr" ], [ "l", "pink.momostr.activitypub:https://exquisite.social/users/h3artbl33d", "pink.momostr" ], [ "-" ] ], "content": "{\"name\":\"h3artbl33d :openbsd: :antifa:\",\"about\":\"Hacker | OpenBSD | InfoSec | Coffee addict | Todays paranoia is tomorrows truth | صمود\\n\\nEphemeral toots: 1 month\\n\\nDutch posts are with the #Dutch tag (allowing filtering) \\n\\nViews, attitude and Toots are solely on personal title!\\n\\nChief Threat Architect @ Exquisite.{social,tube, network}\\n\\nTrans and queer rights are human rights. He/him. Also, praise the catgirls, trans people, daddies and twinks that keep Fedi running. 🏳️‍🌈\\n\\nWebsite: https://h3artbl33d.nl\\nLocation: Eleusís\\nIdentifies as: Threat\\nPronouns: Try/Me\\n\",\"website\":\"https://exquisite.social/@h3artbl33d\",\"picture\":\"https://media.exquisite.social/exquisite/accounts/avatars/109/491/199/486/260/631/original/fd8523256a635901.png\",\"banner\":\"https://media.exquisite.social/exquisite/accounts/headers/109/491/199/486/260/631/original/1b356fdfe6eb6d67.png\",\"nip05\":\"h3artbl33d_at_exquisite.social@momostr.pink\"}", "sig": "5d9e0b585175cc778b322628b31e8ee5957f6960c7b2aa005b9a74791a5aa4478c5c758d70254052fcdb621bfe1a7775d74ec8541463f4eaf9e5cb734bef52c0" }

Last Notes

2026-08-28 09:15:21 UTC

- reply

For what its worth: I spend averagely less than five minutes a month on maintenance. Some months not even doing anything.
Reading yourself in and setting it up does require some time investment, eg:<li>Selecting a proper and clean network,</li><li>Setting up and configuring the stack (MTA, MDA, anti-spam, etc),</li><li>Setting up the DNS records, including SPF, DKIM and DMARC, PTR etc,</li><li>Making sure yourl have solid backups setup.</li>
Depending on how you set it up, if you are using a VPS, hosting your mailserver can be done for €80/year.

2026-08-28 09:04:29 UTC

- reply

Wow it just dawned upon me that if you switch the TLD around that your domain is radiator. How cool!
Selfhosting email is not hard. Doing it properly does require some reading in before starting. It isn't always desirable or even possible to do it at home (technical aspects). Or you might prefer to have it external anyway. Selecting a good VPS provider makes all the difference.
Two resources I can recommend:<li><a href="https://mwl.io/static/books/run-your-own-mail-server.html" target="_blank" rel="nofollow noopener">Run Your Own Mail Server</a> - a book by <a href="https://io.mwl.io/@mwl" class="u-url mention" rel="nofollow noopener" target="_blank">@mwl</a> </li><li><a href="https://bsd-audit.com/self-hosting/running-your-own-mailserver/" target="_blank" rel="nofollow noopener">Running your own mail server with OpenBSD and OpenSMTPD</a> - a tutorial by <a href="https://mastodon.nl/@mboelen" class="u-url mention" rel="nofollow noopener" target="_blank">@mboelen</a> </li>
Feel free to hit me up if you have any questions, would like to brainstorm or need some help.

2026-08-27 21:26:15 UTC

Proton had very much become the thing they've initially set to replace. They've reached the level of "Big Tech" none of us should use.

2026-07-30 16:54:05 UTC

- reply

Beyond any reasonable comprehension.

2026-07-29 18:21:54 UTC

I just got an email from the Belastingdienst (Dutch tax authority). Apparenttly they have switched mail providers, as they were mailing me from a hotmail address :flan_XD:

2026-07-29 15:43:12 UTC

- reply

Fantastic :flan_hurrah: See you in Brussels!

2026-07-29 15:28:53 UTC

- reply

Would love to see you there too!

2026-07-29 08:28:47 UTC

- reply

Why are you hesitating? Brussels is beautiful, the program is fantastic and the social event is going to be awesome :flan_hacker:

2026-07-26 21:44:21 UTC

If you are #selfhosting / #homelabbing: you have my utmost respect. Do not trust other parties to have your back - because they don't.
However, few words to the wise: if you operate a minimalist setup - eg everything running in VMs on a single host: please do consider the consequences of downtime.
You probably don't want to run your critical services on one machine without a fallback. If those services include your smarthome foundation, DNS and firewalling: you don't want to troubleshoot in the dark because everything is down and you can't even turn on the light anymore.
You aren't the first nor won't he the last to learn this lesson when disaster strikes though :flan_XD:

2026-07-25 14:57:34 UTC

- reply

PHP as in FPM?
I don't know about Prometheus - Zabbix makes it relatively simple to roll your own.

2026-07-18 08:09:50 UTC

Klant kreeg een aanbod voor het AI optimaliseren van hun website. Ik mocht antwoorden. Dat ging er zo aan toe:
#Dutch
https://media.exquisite.social/exquisite/media_attachments/files/116/939/949/096/133/691/original/57db5cc4ac900708.jpg

2026-07-15 16:26:32 UTC

- reply

Yes - that would do.

2026-07-15 14:49:30 UTC

- reply

If that would be the sole reason for having a VPS... that would be a tidbit overkill.

2026-07-15 13:40:51 UTC

- reply

KeePassXC

2026-07-05 21:05:08 UTC

- reply

Als kind is mij aangeleerd ze in mn broek te houden. Heeft space karen die les niet gehad? :flan_facepalm:

2026-07-02 22:07:16 UTC

- reply

Or you don't by running a mirror yourself :flan_aww:

2026-07-02 13:48:51 UTC

Whoop whoop. Yet another Linux privileges recovery method kernel vulnerability: DirtyClone (CVE-2026-43503) :flan_hacker:
https://media.exquisite.social/exquisite/media_attachments/files/116/850/694/580/284/542/original/6be66df0087cef71.mp4

2026-06-30 14:04:37 UTC

- reply

Oh I just thought of a sport I do like to watch: datacenter migrations!

2026-06-30 14:02:52 UTC

- reply

At times I am able to watch some defensive sports (which I practice myself too) - but I am more into sporting myself rather than watching others sport :flan_XD:

2026-06-30 13:47:28 UTC

You didn't ask for my opinion, but I am going to voice it anyway.
Close your eyes. Imagine a big field, consisting of beautiful green grass.
Now picture twenty two players - eleven on both ends. A ball is kicked onto the field.
Then, twenty of those players (one lazy player on each end) are running towards the ball like utter mad dogs, kicking it as far away as they can...
Only to run towards it and kick it in the opposite reaction. This completely deluded scenario is being repeated for no less than ninety minutes. Sometimes even longer.
Now, that is how I think of football and especially watching this so-called "sport".
#football #soccer #sport

2026-06-27 07:22:33 UTC

- reply

The Toot was carefully engineered to be funny to one particular person.
It is FairEmail though. And I like it *a lot*.

2026-06-26 19:52:37 UTC

Just read somewhere on the net that I am using the "Homer car" of email clients on my phone.
Pink to rule 'em all!
https://media.exquisite.social/exquisite/media_attachments/files/116/818/150/395/540/316/original/b047ea81dbe06c2c.png

2026-06-24 07:49:07 UTC

- reply

So, whatever HP did in the UEFI update "unfucked" the relevant bits and freed the offset that OpenBSD uses.
And now that I am sharing this - I recall that I have experienced the same before - on a HP Elitedesk (IIRC: DM 800 G5).
I hope that this might be useful information for others. If you have some HP hardware that won't boot OpenBSD, make sure you have the latest firmware.
I don't know if this affects the Elite series only or also the Pro series.
#OpenBSD #HP #Elitebook #Elitedesk

2026-06-24 07:44:45 UTC

About a year ago, I had gotten my hands on an Elitebook 840 G8. It would not boot #OpenBSD. After some deep research, I found out that it was due to a broken UEFI architecture - thanks to the always wonderful HP.
I eventually found a fix - recompiling the OpenBSD kernel with a bit higher offset. While I had it scripted (loosely based on earlier work by @npub1prm…rs6z ), it still was a pain for someone whom upgrades the snapshots daily.
So, I eventually gave up and moved to a different machine. Slapped #SecureBlue on the Elitebook for the occassional shits and giggles.
Recently though there was a firmware update for the UEFI. With a long list of fixes, I thought I'd try again.
And it worked :flan_hurrah: I am now typing this Toot on the Elitebook, running OpenBSD-current with the vanilla kernel :flan_hacker:

2026-06-17 14:04:52 UTC

- reply

I might be misinterpreting your reply - but as mentioned I am running the release on a P9P (Pixel 9 Pro) and P7 (Pixel 7) and do not have encountered any issue whatsoever.
If this does not answer whatever you are asking, could you rephrase your question?

2026-06-17 13:20:06 UTC

- reply

Running this release on a P9P and P7 - seems to be stable. Couldn't find any issues whatsoever.

2026-06-15 21:37:01 UTC

- reply

Yay! 2,5Gbit/s, how much pizza would that be able to carry?

2026-06-14 18:15:50 UTC

##
Do you dream?

2026-06-06 12:30:07 UTC

- reply

Nice! We have played a (minor) part into getting it ready for #OpenBSD, by giving the devs access to some compute - which resulted in a commit spree that I hadn't seen before.
They are incredibly kind, humble and knowledgeable.

2026-06-06 12:27:40 UTC

- reply

FANTASTIC! Now we'll have to follow this example. Does it run well on FreeBSD?

2026-06-05 18:09:01 UTC

- reply

Sorry might have missed something here

2026-06-04 21:21:27 UTC

- reply

In the TV series 'Doom Patrol' they have this immensely huge catapults used to yeet folks into outer space. I propose that we actually build those things IRL and yeet billionaires from this planet :flan_molotov:

2026-06-03 14:19:56 UTC

- reply

Dan doet mijn hoofd HTTP status 418 :flan_XD:

2026-06-03 12:08:35 UTC

Kreeg per (werk)mail:
> Thanks topper, Ik ga nu even een patatje eten
Heb aangegeven dat ik hoop dat hij een frietje gaat eten, want patat is gewoon een aardappel - die eet je toch niet rauw? :flan_molotov:
#Dutch

2026-05-28 16:46:02 UTC

We are seeing an increased number of account signups on our #Mastodon instance. They are fake and very likely to be a [part of the Russian LLM-backed campaign](https://exquisite.social/@exquisite/116420930523009081 ).
The reason for joining tends to be very broad and vague:
> I'm looking to join a friendly Mastodon community and participate in discussions.
The email addresses used in these signups are valid (as they are able to verify it), but seem to be automatically generated.
The IP addresses they use either stem from a VPN, Tor exit node or a compromised webhosting thing *(we do not log IP addresses - except during the registration, which is deleted once an account is approved or denied)*.
One positive consequence: this is really helpful to maintain our blocklist :flan_XD: :flan_molotov: These bots end up being blocked by our pf(4) across the infrastructure.
#MastoAdmin

2026-05-26 12:43:40 UTC

- reply

> But surely Svetlana, who wants to sign up because the community might appreciate her erotic content, isn't exactly what BSD Cafe is about
It isn't? You mean I have been wrong this entire time thinking it actually was a misspelled BSDM Cafe?
So... What is this BSD thing? :flan_XD:
(sorry I will show myself out now)

2026-05-25 08:01:35 UTC

- reply

Some remarks upfront:<li>Please inform readers about checking their IP reputation upfront - as it can be a real burden to start out 'bad'.</li><li>The default TLS config is decent, but it currently isn't able to score 100% at internet.nl. LibreSSL doesn't currently support EMS with TLSv1.2 (only supporting TLSv1.3 means that a lot of mail traffic is going to be plain text).</li><li>I personally think that RBLs are more of a requirement than a nice to have. However, using them would be best with Unbound. If that is not an option: use different, stable and non rate-limiting DNS servers from different parties.</li><li>In addition to the former, a filter for FCrDNS mismatches prevents a lot of junk too.</li>
Michael Lucas' book does use Postfix - but explains the concepts of a mail server in general and has some pretty neat tips in there too. Can recommend it - even just as an inspiration.

2026-05-24 21:29:18 UTC

- reply

Oh yes! I have more than one mailserver running on OpenBSD. But would love to help you test stuff - as long as it is with OpenSMTPD. Postfix makes me want to cry.

2026-05-21 15:54:53 UTC

[Dutch]
Bert heeft weer een uitstekend artikel getypt. [Wat kunnen organisaties NU doen voor digitale autonomie](https://berthub.eu/articles/posts/digitale-autonomie-wat-kunnen-organisaties-nu-doen/ )? :flan_molotov:

2026-05-20 17:30:27 UTC

##
Music time :flan_dance:[Heartbleed](https://activ8te.bandcamp.com/track/heartbleed )
> Feel my heartbeat
> Make my heart bleed
Cybersecurity on the dance floor. Apparently made fully by humans.

2026-05-20 06:25:12 UTC

- reply

I am not a switcher, please do keep that in mind with my reply. A good friend did switch over from an iPhone to GOS - due to the UK seizing the E2EE in iCloud (limited to the UK AFAIK).
GrapheneOS has, by default, no Google Play installed. This is by design. It can be installed within two taps - in a sandboxed version. Meaning: it runs with regular permissions, like any other app. Permissions that you can grant and take away.
Possible downsides:<li>It does not pass the Play Integrity, due to Google abusing their powers with their DRM,</li><li>As a result, NFC payments tend to not work with most banks, requiring that check. <a href="https://privsec.dev/posts/android/banking-applications-compatibility-with-grapheneos/" target="_blank" rel="nofollow noopener">Refer to this list for more info</a>.</li><li>Some people report troubles with getting Android Auto to work reliably </li><li>Right now, it still requires a Google Pixel (Motorola support upcoming, with a couple of their devices from next year) - and thus giving money to Google.</li>

2026-05-19 21:29:52 UTC

- reply

Nice! Is the other one a more recent model? Then I would personally do it the other way around - due to GOD having full production MTE whereas the stock OS implementation is opt-in and way less secure.
But hey, just my attitude as a security extremist. I get that I am a bit different in this regard :flan_XD:

2026-05-19 20:39:57 UTC

- reply

Still on GOS? :)

2026-05-19 09:09:35 UTC

- reply

Fantastic! Makes me happy.
Just to confirm that they haven't allowlisted that one and blocking all the `.social` domains, does `climatejustice.social` work from there?

2026-05-19 07:28:12 UTC

- reply

Switching from -current to -stable was on my todo list. We've ran with the April 20 snapshot, until 7.9 hit the mirrors.
Then it was as simple as:<code>sysupgrade -n -R 7.9 </code>
Might not have been possible or wrecked havoc if we'd been on a newer snapshot.

2026-05-19 07:25:28 UTC

Whoop. [Exquisite.social](https://exquisite.social ) is now on #OpenBSD 7.9 (-release):<code>OpenBSD 7.9 (GENERIC.MP) #449: Wed May 6 13:17:25 MDT 2026 </code>
#MastoAdmin

2026-05-18 16:13:48 UTC

- reply

Whoop! Fantastic! Does it state a category?

2026-05-15 17:23:44 UTC

- reply

My experience with HardenedBSD is with servers, appliances and networking equipment - on a daily basis.
My daily drivers (workstation and laptop) are running OpenBSD - for over two decades. And yeah, one does have to be a bit mindful when selecting the hardware. But newest gen x64 runs smooth - like butter.
And no, it doesn't have a CoW FS, nor FS snapshots. But I have no real usecase for that. Important data is stored in my SAN anyways - which runs atop of ZFS :awesome:

2026-05-15 16:43:43 UTC

- reply

Even more reason to run #OpenBSD and #HardenedBSD!

2026-05-15 16:42:02 UTC

- reply

Four quite severe Linux kernel vulns in three weeks
https://media.exquisite.social/exquisite/media_attachments/files/116/579/580/809/527/625/original/cefe267070071540.mp4

2026-05-15 16:34:10 UTC

- reply

About that... We now have a fourth vulnerability: ssh-keysign-pwn. Despite the first three letters, this is a Linux kernel vuln. PoC already available.
#Linux #Security #Vulnerabilities #InfoSec

2026-05-15 09:14:18 UTC

- reply

I did. But switched to HAOS when they deprecated all the rest. See also this thread: https://exquisite.social/@h3artbl33d/116563002821070527

2026-05-14 09:14:40 UTC

Oh right. Ofcourse [Bitlocker encryption can be bypassed](https://github.com/Nightmare-Eclipse/YellowKey ) with a mere thumbdrive.
If you **MUST** use Windows, then at least Veracrypt that shit.
#Windows #Security #Bitlocker #FDE #Disk #Encryption #Bypass

2026-05-13 19:15:12 UTC

Copy Fail, Dirty Frag and now Fragnesia...
Upside: if you have already ripped out esp4, esp6 and rxrpc for Dirty Frag, you already have the mitigation in place for Fragnesia.
#Linux #Security #Vulnerabilities

2026-05-04 20:26:27 UTC

- reply

Well well.
cc @npub1m9m…nuez

2026-05-01 17:57:43 UTC

Wow. RightsCon 2026 cancelled due to foreign interference:
https://www.rightscon.org/rc26-statement/

2026-05-01 17:15:33 UTC

I iz faairfoks hooman, doing ACPI S3, baai now :flan_sleep:
https://media.exquisite.social/exquisite/media_attachments/files/116/500/436/583/261/020/original/a6a05ffc24be2541.jpg

2026-05-01 07:26:14 UTC

- reply

They did contact me beforehand. And this is only the specific network, not the entire party (which might be a different discussion).

2026-04-30 13:29:09 UTC

- reply

On the other hand - it did accept 150 random characters as passwords. And parsed them correctly. Now unto trying more... substandard character sets :flan_set_fire:

2026-04-30 13:24:44 UTC

Me, during an audit:
> Well let's see if this thing accepts secure passwords for this admin account.<li><code>hunter02' (naturally I mean</code>••••••••`)</li><li><code>abc123</code></li><li><code>password</code></li>
**Rejoice!** All three were accepted!
If anyone is wondering why we can't have nice things... Well here you go.

2026-04-30 03:10:47 UTC

Need emergency remote access to your boxes? No prob, [Linux has your back](https://copy.fail/ ).
https://media.exquisite.social/exquisite/media_attachments/files/116/491/451/507/154/059/original/c4b130fc1a5a7588.mp4

2026-04-29 21:58:12 UTC

- reply

Indeed. Got an online ticket - like previous years. I don't care at all about my ticket - but I do care about the setback that his is :flan_nooo:

2026-04-29 21:50:49 UTC

- reply

De talks zijn beschikbaar op PeerTube en daarmee de Fediverse. Gewoon, op een server in Amsterdam, voorzien van groene, hernieuwbare stroom. Geen big tech of rare telemetrie:
https://exquisite.tube/c/digital_summit/videos

2026-04-29 21:26:10 UTC

- reply

Ugh. Extremely poor timing of this Toot:
https://dustri.org/b/carrot-disclosure-forgejo.html

2026-04-29 21:21:01 UTC

Considering moving your Github repos to Codeberg, Sourcehut or a selfhosted Forgejo instance?
Well.... you are [already too late](https://www.wiz.io/blog/github-rce-vulnerability-cve-2026-3854 )

2026-04-29 21:09:01 UTC

- reply

And for that, we have a human sized catapult. To yeet them into outer space. Bye!

2026-04-29 21:06:29 UTC

- reply

Wat dat betreft is KPN "big tech in het klein".

2026-04-29 21:04:37 UTC

- reply

Just ping @npub1ef5…gcpc - he might be able to add your country and/or city :)

2026-04-29 21:03:37 UTC

- reply

Die hele cloud in de hens steken is wat onpraktisch. Daarom zouden we iets als "groundhosting" ofzo moeten hebben. Met beide voeten op de grond (of in de aarde), in plaats van zwevend op een of ander wolkje.

2026-04-29 15:13:08 UTC

- reply

London is covered, right?

2026-04-29 15:12:28 UTC

- reply

Wow... Dat is triest. Welk MNO netwerk?

2026-04-29 06:19:31 UTC

- reply

Wat in theorie kan meespelen is het toestel - zeker iPhones van een aantal generaties geleden. Dat kan te maken hebben met de ondersteunde banden.
Ik heb zelf een Pixel 9 Pro, op 4G/5G only. In Nederland zit ik bijna overal op 5G en haal ik honderden megabits per seconde.
Als je wilt kan ik het voor je in de gaten houden met KPN en Odido (netwerk, gebruik MVNO).

2026-04-29 06:07:53 UTC

- reply

Who needs a weather app when you can have it [appear in your Fedi timeline](https://fedimeteo.com )?

2026-04-29 06:05:15 UTC

- reply

Ah cool! Have yet to try the AMD Memory Guard, despite having machines capable of it. How is your experience running it?

2026-04-29 05:24:19 UTC

Morning lovely Fedi! ☕
The Network Digitale Samenleving (Network Digital Society) of the Dutch Greens (GroenLinks-PvdA / Progessief Nederland) embraced PeerTube. They've posted the talks of their Digital Summit at [Exquisite.tube](https://exquisite.tube/c/digital_summit/videos ) :flan_hurrah:
This is fantastic news!
#Fediverse #PeerTube #Decentralised #GroenLinks #PvdA #ProgressiefNederland

2026-04-28 21:47:17 UTC

- reply

Very cool idea!

2026-04-28 21:36:35 UTC

- reply

My typical "first hour of waking up, before the coffee kicks in.

2026-04-28 21:33:18 UTC

- reply

Hahaha! Wish I could. Would be lovely to descale to a 486DX.

2026-04-28 21:20:55 UTC

One of the reasons I switched to btop :flan_hacker:
https://media.exquisite.social/exquisite/media_attachments/files/116/484/420/490/130/947/original/c33cc2f53829e1dd.png

2026-04-28 20:18:41 UTC

- reply

Oh nooooo!
I do have experience with repurposing BMC/IPMI sensors to protect against cold boot attacks :flan_XD:
But those aren't available in most TinyMiniMicro machines.
I do think that nail polish might be able to withstand the heat more than hot glue goo, but at the downside of being worse for the RAM lifespan. In the sense that I think it degrades the cooliny capability.
With the encrypted RAM - you are likely depending on some Intel / AMD tech?

2026-04-28 19:50:20 UTC

- reply

Oh yes. And not just the server room. This actually happened in a datacenter in NL, somebody tripped over the most unlucky cables and took out the core routers, causing a DC blackout :flan_XD:
Granted, that DC was a complete and utter shitshow.

2026-04-28 19:46:36 UTC

- reply

I will kick this one off myself:
At one point (not currently), I've had multiple sensors in the server room, combined with a cooldown timer. Entering it unauthorized or not waiting for the timer would instantly cut the power off (from the most sensitive machines).

2026-04-28 19:43:03 UTC

Hi folks! I would love to hear about the non-standard physical #homelab #selfhosting security measures you've taken. From alarms to boobytraps, from customized IKEA boxes to reinforced closets. The crazier the better!
One requirement: you need to have it implemented (at some point in the past or currently). No concepts that never left the design table please.

2026-04-27 19:06:26 UTC

- reply

ALL THE PETS! ALL DAY LONG!

2026-04-27 19:05:48 UTC

- reply

Operating the Fedi on BSD is such a bliss. We use both #OpenBSD and #HardenedBSD. They both have their own areas where they shine.
I am very glad and humbled to have them both - and to stand on the shoulders of giants.
I so much prefer the dinos over the modern shite, because well - it is truly unmatched stability while maintaining my sanity.

2026-04-27 18:57:38 UTC

Remember when a Russian threat actor abusing LLMs was knocking on our door earlier this month?
It caused quite a spike in the Sidekiq workers. I am pretty confident we can now handle that traffic without causing the failures to go up too.
We've done a deep dive into further resource optimizations to a point where I can confidently say we can even handle that spike in threefold.
And should shit hit the fan, the monitoring is now able to call me out of bed too.
Don't thank me, but thank Puffy :openbsd: and the #OpenBSD developers for developing such a sane operating system.
https://media.exquisite.social/exquisite/media_attachments/files/116/478/163/170/931/376/original/ffc159644b32f436.png

2026-04-27 18:44:05 UTC

- reply

Tof!
En ja. Dat is allemaal mogelijk :flan_hacker:

2026-04-27 18:34:38 UTC

- reply

Dunno about that. But switching to OpenBSD is definitely worth it. Less slop, less crap, more stability, more security and more awesomeness.

2026-04-27 18:10:36 UTC

- reply

Yes! :flan_hacker:

2026-04-27 18:09:34 UTC

Can haz pets pwetty please hooman
https://media.exquisite.social/exquisite/media_attachments/files/116/478/006/448/822/877/original/e11de2c6cc168a5a.jpg

2026-04-27 18:06:01 UTC

Unplanned sneakernet action was a success :flan_hacker: Needed to travel ~ 200km through the kingsday craze to fetch a private key :flan_set_fire:
The transfer rate was slow - even 14k4 baud would have defeated this sneakernet big time - but alas, sending it through whatever wire or airspace wasn't an option.

2026-04-27 12:08:07 UTC

The main #PeerTube dev, Chocobozzz, is the GOAT. Always quick to respond, get stuff fixed fast. The last issues we've had on [Exquisite.tube](https://exquisite.tube ) directly resulted into documentation improvements:
https://github.com/Chocobozzz/PeerTube/commit/bbb8e6ac4eaadf88bcd9c6b65f727571655dad8d
(we are actually running #HardenedBSD - but this applies to #FreeBSD too)

2026-04-27 12:00:05 UTC

Electric Callboy has truly ascended to the next level bringing Nico onboard. Wow. Just wow.

2026-04-26 15:57:45 UTC

- reply

Hahahahaha :flan_XD: You made me laugh out loud.

2026-04-26 15:57:05 UTC

- reply

Yeah, Groningen is nice too - if you are outside of the "drill area" - as well as the hyperscaler datacenter (was it Microslop in Groningen too?)

2026-04-26 15:46:24 UTC

- reply

Wow. What the actual F. I knew that the Dutch housing market was broken beyond repair - but seeing that beauty for the price of an acceptable rijtjeshuis in the achterhoek (and that is a steal compared to the pricing in Amsterdam)... Utter madness.
Personally, I would save up a bit, get my affairs in order and move yesteryear if my circumstances would allow me to.
(my work mostly relates to IT infrastructure - and touching the servers very once in a while makes me very happy, moving to rural France I'd miss out on that)
Buying right now is nothing short of placing a bet - I don't think the prices are going to plumet in a couple of years but who knows?
Are you okay if I DM you a house that I wanted to get? Rather not have that one in public due to opsec reasons.

2026-04-26 15:27:37 UTC

- reply

Makes sense. I am bound to NL too, at least for now, due to infrastructure :flan_set_fire:
I found it way easier to get housing in Gelderland, Overrijsel etc. More affordable, more options and generally more nature. The general attitude is way different than Randstad too. In my experience: more laid back.
Are you looking to buy or rent?

2026-04-26 15:21:14 UTC

- reply

Are you bound to the Netherlands? If you are, have you considered looking more in the eastern parts of the country?
If you aren't, you might want to look at countries like France, Spain, Portugal.

2026-04-25 22:46:18 UTC

- reply

> already runs the latest snapshot on -current, all locked and loaded for the imminent release of 7.9!
So does OpenBSDonApple.wiki!

2026-04-24 14:53:01 UTC

- reply

Speaking as the admin of a fellow OpenBSD powered instance, it may be a resource thing.
Toots and boosts (especially when boosted by other instances) can put quite a strain on the resources. We are running with eight (x64) cores and 64G of mem.
I think it ought to be rather impossible to use Mastodon through a VMM-powered OpenBSD guest - even for a single user instance. Or that person has to follow just a handful of accounts.