h3artbl33d :openbsd: :antifa:

Hacker | OpenBSD | InfoSec | Coffee addict | Todays paranoia is tomorrows truth | صمود

Ephemeral toots: 1 month

Dutch posts are with the #Dutch tag (allowing filtering)

Views, attitude and Toots are solely on personal title!

Chief Threat Architect @ Exquisite.{social,tube, network}

Trans and queer rights are human rights. He/him. Also, praise the catgirls, trans people, daddies and twinks that keep Fedi running. 🏳️‍🌈

Website: https://h3artbl33d.nl
Location: Eleusís
Identifies as: Threat
Pronouns: Try/Me

Public Key

npub1y90887enayft4damsycxahzuwa87jvx3vhrq37c74wdzv9vdgvcq2z900y

NIP-05 Address

h3artbl33d_at_exquisite.social@momostr.pink

Profile Code

nprofile1qqszzhnnlve7jy46k7aczvrwm3w8wnlfxrgkt3sglv02hx3xzkx5xvqpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dsulxv0t

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub1y90887enayft4damsycxahzuwa87jvx3vhrq37c74wdzv9vdgvcq2z900y

Show more details

Published at

2026-07-01T22:10:49Z

Kind type

0 Metadata

Event JSON

{ "id": "c4817294a83ad14aba20663bc2e0e306aad7c6c7f616bdc1f547a13a8c7f1e76", "pubkey": "215e73fb33e912bab7bb81306edc5c774fe930d165c608fb1eab9a26158d4330", "created_at": 1782943849, "kind": 0, "tags": [ [ "emoji", "openbsd", "https://media.exquisite.social/exquisite/custom_emojis/images/000/046/194/original/fd77f94e8f7091ea.png" ], [ "emoji", "antifa", "https://media.exquisite.social/exquisite/custom_emojis/images/000/009/025/original/79a91987e1f660ca.png" ], [ "t", "dutch" ], [ "proxy", "https://exquisite.social/users/h3artbl33d", "activitypub" ], [ "L", "pink.momostr" ], [ "l", "pink.momostr.activitypub:https://exquisite.social/users/h3artbl33d", "pink.momostr" ], [ "-" ] ], "content": "{\"name\":\"h3artbl33d :openbsd: :antifa:\",\"about\":\"Hacker | OpenBSD | InfoSec | Coffee addict | Todays paranoia is tomorrows truth | صمود\\n\\nEphemeral toots: 1 month\\n\\nDutch posts are with the #Dutch tag (allowing filtering) \\n\\nViews, attitude and Toots are solely on personal title!\\n\\nChief Threat Architect @ Exquisite.{social,tube, network}\\n\\nTrans and queer rights are human rights. He/him. Also, praise the catgirls, trans people, daddies and twinks that keep Fedi running. 🏳️‍🌈\\n\\nWebsite: https://h3artbl33d.nl\\nLocation: Eleusís\\nIdentifies as: Threat\\nPronouns: Try/Me\\n\",\"website\":\"https://exquisite.social/@h3artbl33d\",\"picture\":\"https://media.exquisite.social/exquisite/accounts/avatars/109/491/199/486/260/631/original/fd8523256a635901.png\",\"banner\":\"https://media.exquisite.social/exquisite/accounts/headers/109/491/199/486/260/631/original/1b356fdfe6eb6d67.png\",\"nip05\":\"h3artbl33d_at_exquisite.social@momostr.pink\"}", "sig": "2ddb095b105c250192d68ee504500161452bae5c0182baa9208f95fd91792a17b0bd16880a305504563e3508fcb6460f3c38f927c14104cb27f09f8ef1615851" }

Last Notes

2026-06-06 12:27:40 UTC

- reply

FANTASTIC! Now we'll have to follow this example. Does it run well on FreeBSD?

2026-06-05 18:09:01 UTC

- reply

Sorry might have missed something here

2026-05-28 16:46:02 UTC

We are seeing an increased number of account signups on our #Mastodon instance. They are fake and very likely to be a [part of the Russian LLM-backed campaign](https://exquisite.social/@exquisite/116420930523009081 ).
The reason for joining tends to be very broad and vague:
> I'm looking to join a friendly Mastodon community and participate in discussions.
The email addresses used in these signups are valid (as they are able to verify it), but seem to be automatically generated.
The IP addresses they use either stem from a VPN, Tor exit node or a compromised webhosting thing *(we do not log IP addresses - except during the registration, which is deleted once an account is approved or denied)*.
One positive consequence: this is really helpful to maintain our blocklist :flan_XD: :flan_molotov: These bots end up being blocked by our pf(4) across the infrastructure.
#MastoAdmin

2026-05-25 08:01:35 UTC

- reply

Some remarks upfront:<li>Please inform readers about checking their IP reputation upfront - as it can be a real burden to start out 'bad'.</li><li>The default TLS config is decent, but it currently isn't able to score 100% at internet.nl. LibreSSL doesn't currently support EMS with TLSv1.2 (only supporting TLSv1.3 means that a lot of mail traffic is going to be plain text).</li><li>I personally think that RBLs are more of a requirement than a nice to have. However, using them would be best with Unbound. If that is not an option: use different, stable and non rate-limiting DNS servers from different parties.</li><li>In addition to the former, a filter for FCrDNS mismatches prevents a lot of junk too.</li>
Michael Lucas' book does use Postfix - but explains the concepts of a mail server in general and has some pretty neat tips in there too. Can recommend it - even just as an inspiration.

2026-05-24 21:29:18 UTC

- reply

Oh yes! I have more than one mailserver running on OpenBSD. But would love to help you test stuff - as long as it is with OpenSMTPD. Postfix makes me want to cry.

2026-05-15 17:23:44 UTC

- reply

My experience with HardenedBSD is with servers, appliances and networking equipment - on a daily basis.
My daily drivers (workstation and laptop) are running OpenBSD - for over two decades. And yeah, one does have to be a bit mindful when selecting the hardware. But newest gen x64 runs smooth - like butter.
And no, it doesn't have a CoW FS, nor FS snapshots. But I have no real usecase for that. Important data is stored in my SAN anyways - which runs atop of ZFS :awesome:

2026-05-04 20:26:27 UTC

- reply

Well well.
cc @npub1m9m…nuez

2026-05-01 17:57:43 UTC

Wow. RightsCon 2026 cancelled due to foreign interference:
https://www.rightscon.org/rc26-statement/

2026-05-01 17:15:33 UTC

I iz faairfoks hooman, doing ACPI S3, baai now :flan_sleep:
https://media.exquisite.social/exquisite/media_attachments/files/116/500/436/583/261/020/original/a6a05ffc24be2541.jpg

2026-05-01 07:26:14 UTC

- reply

They did contact me beforehand. And this is only the specific network, not the entire party (which might be a different discussion).

2026-04-30 13:29:09 UTC

- reply

On the other hand - it did accept 150 random characters as passwords. And parsed them correctly. Now unto trying more... substandard character sets :flan_set_fire:

2026-04-30 13:24:44 UTC

Me, during an audit:
> Well let's see if this thing accepts secure passwords for this admin account.<li><code>hunter02' (naturally I mean</code>••••••••`)</li><li><code>abc123</code></li><li><code>password</code></li>
**Rejoice!** All three were accepted!
If anyone is wondering why we can't have nice things... Well here you go.

2026-04-30 03:10:47 UTC

Need emergency remote access to your boxes? No prob, [Linux has your back](https://copy.fail/ ).
https://media.exquisite.social/exquisite/media_attachments/files/116/491/451/507/154/059/original/c4b130fc1a5a7588.mp4

2026-04-29 21:58:12 UTC

- reply

Indeed. Got an online ticket - like previous years. I don't care at all about my ticket - but I do care about the setback that his is :flan_nooo:

2026-04-29 21:50:49 UTC

- reply

De talks zijn beschikbaar op PeerTube en daarmee de Fediverse. Gewoon, op een server in Amsterdam, voorzien van groene, hernieuwbare stroom. Geen big tech of rare telemetrie:
https://exquisite.tube/c/digital_summit/videos

2026-04-29 21:26:10 UTC

- reply

Ugh. Extremely poor timing of this Toot:
https://dustri.org/b/carrot-disclosure-forgejo.html

2026-04-29 21:21:01 UTC

Considering moving your Github repos to Codeberg, Sourcehut or a selfhosted Forgejo instance?
Well.... you are [already too late](https://www.wiz.io/blog/github-rce-vulnerability-cve-2026-3854 )

2026-04-29 21:09:01 UTC

- reply

And for that, we have a human sized catapult. To yeet them into outer space. Bye!

2026-04-29 21:06:29 UTC

- reply

Wat dat betreft is KPN "big tech in het klein".

2026-04-29 21:04:37 UTC

- reply

Just ping @npub1ef5…gcpc - he might be able to add your country and/or city :)

2026-04-29 21:03:37 UTC

- reply

Die hele cloud in de hens steken is wat onpraktisch. Daarom zouden we iets als "groundhosting" ofzo moeten hebben. Met beide voeten op de grond (of in de aarde), in plaats van zwevend op een of ander wolkje.

2026-04-29 15:13:08 UTC

- reply

London is covered, right?

2026-04-29 15:12:28 UTC

- reply

Wow... Dat is triest. Welk MNO netwerk?

2026-04-29 06:19:31 UTC

- reply

Wat in theorie kan meespelen is het toestel - zeker iPhones van een aantal generaties geleden. Dat kan te maken hebben met de ondersteunde banden.
Ik heb zelf een Pixel 9 Pro, op 4G/5G only. In Nederland zit ik bijna overal op 5G en haal ik honderden megabits per seconde.
Als je wilt kan ik het voor je in de gaten houden met KPN en Odido (netwerk, gebruik MVNO).

2026-04-29 06:07:53 UTC

- reply

Who needs a weather app when you can have it [appear in your Fedi timeline](https://fedimeteo.com )?

2026-04-29 06:05:15 UTC

- reply

Ah cool! Have yet to try the AMD Memory Guard, despite having machines capable of it. How is your experience running it?

2026-04-29 05:24:19 UTC

Morning lovely Fedi! ☕
The Network Digitale Samenleving (Network Digital Society) of the Dutch Greens (GroenLinks-PvdA / Progessief Nederland) embraced PeerTube. They've posted the talks of their Digital Summit at [Exquisite.tube](https://exquisite.tube/c/digital_summit/videos ) :flan_hurrah:
This is fantastic news!
#Fediverse #PeerTube #Decentralised #GroenLinks #PvdA #ProgressiefNederland

2026-04-28 21:47:17 UTC

- reply

Very cool idea!

2026-04-28 21:36:35 UTC

- reply

My typical "first hour of waking up, before the coffee kicks in.

2026-04-28 21:33:18 UTC

- reply

Hahaha! Wish I could. Would be lovely to descale to a 486DX.

2026-04-28 21:20:55 UTC

One of the reasons I switched to btop :flan_hacker:
https://media.exquisite.social/exquisite/media_attachments/files/116/484/420/490/130/947/original/c33cc2f53829e1dd.png

2026-04-28 20:18:41 UTC

- reply

Oh nooooo!
I do have experience with repurposing BMC/IPMI sensors to protect against cold boot attacks :flan_XD:
But those aren't available in most TinyMiniMicro machines.
I do think that nail polish might be able to withstand the heat more than hot glue goo, but at the downside of being worse for the RAM lifespan. In the sense that I think it degrades the cooliny capability.
With the encrypted RAM - you are likely depending on some Intel / AMD tech?

2026-04-28 19:50:20 UTC

- reply

Oh yes. And not just the server room. This actually happened in a datacenter in NL, somebody tripped over the most unlucky cables and took out the core routers, causing a DC blackout :flan_XD:
Granted, that DC was a complete and utter shitshow.

2026-04-28 19:46:36 UTC

- reply

I will kick this one off myself:
At one point (not currently), I've had multiple sensors in the server room, combined with a cooldown timer. Entering it unauthorized or not waiting for the timer would instantly cut the power off (from the most sensitive machines).

2026-04-28 19:43:03 UTC

Hi folks! I would love to hear about the non-standard physical #homelab #selfhosting security measures you've taken. From alarms to boobytraps, from customized IKEA boxes to reinforced closets. The crazier the better!
One requirement: you need to have it implemented (at some point in the past or currently). No concepts that never left the design table please.

2026-04-27 19:06:26 UTC

- reply

ALL THE PETS! ALL DAY LONG!

2026-04-27 19:05:48 UTC

- reply

Operating the Fedi on BSD is such a bliss. We use both #OpenBSD and #HardenedBSD. They both have their own areas where they shine.
I am very glad and humbled to have them both - and to stand on the shoulders of giants.
I so much prefer the dinos over the modern shite, because well - it is truly unmatched stability while maintaining my sanity.

2026-04-27 18:57:38 UTC

Remember when a Russian threat actor abusing LLMs was knocking on our door earlier this month?
It caused quite a spike in the Sidekiq workers. I am pretty confident we can now handle that traffic without causing the failures to go up too.
We've done a deep dive into further resource optimizations to a point where I can confidently say we can even handle that spike in threefold.
And should shit hit the fan, the monitoring is now able to call me out of bed too.
Don't thank me, but thank Puffy :openbsd: and the #OpenBSD developers for developing such a sane operating system.
https://media.exquisite.social/exquisite/media_attachments/files/116/478/163/170/931/376/original/ffc159644b32f436.png

2026-04-27 18:44:05 UTC

- reply

Tof!
En ja. Dat is allemaal mogelijk :flan_hacker:

2026-04-27 18:34:38 UTC

- reply

Dunno about that. But switching to OpenBSD is definitely worth it. Less slop, less crap, more stability, more security and more awesomeness.

2026-04-27 18:10:36 UTC

- reply

Yes! :flan_hacker:

2026-04-27 18:09:34 UTC

Can haz pets pwetty please hooman
https://media.exquisite.social/exquisite/media_attachments/files/116/478/006/448/822/877/original/e11de2c6cc168a5a.jpg

2026-04-27 18:06:01 UTC

Unplanned sneakernet action was a success :flan_hacker: Needed to travel ~ 200km through the kingsday craze to fetch a private key :flan_set_fire:
The transfer rate was slow - even 14k4 baud would have defeated this sneakernet big time - but alas, sending it through whatever wire or airspace wasn't an option.

2026-04-27 12:08:07 UTC

The main #PeerTube dev, Chocobozzz, is the GOAT. Always quick to respond, get stuff fixed fast. The last issues we've had on [Exquisite.tube](https://exquisite.tube ) directly resulted into documentation improvements:
https://github.com/Chocobozzz/PeerTube/commit/bbb8e6ac4eaadf88bcd9c6b65f727571655dad8d
(we are actually running #HardenedBSD - but this applies to #FreeBSD too)

2026-04-27 12:00:05 UTC

Electric Callboy has truly ascended to the next level bringing Nico onboard. Wow. Just wow.

2026-04-26 15:57:45 UTC

- reply

Hahahahaha :flan_XD: You made me laugh out loud.

2026-04-26 15:57:05 UTC

- reply

Yeah, Groningen is nice too - if you are outside of the "drill area" - as well as the hyperscaler datacenter (was it Microslop in Groningen too?)

2026-04-26 15:46:24 UTC

- reply

Wow. What the actual F. I knew that the Dutch housing market was broken beyond repair - but seeing that beauty for the price of an acceptable rijtjeshuis in the achterhoek (and that is a steal compared to the pricing in Amsterdam)... Utter madness.
Personally, I would save up a bit, get my affairs in order and move yesteryear if my circumstances would allow me to.
(my work mostly relates to IT infrastructure - and touching the servers very once in a while makes me very happy, moving to rural France I'd miss out on that)
Buying right now is nothing short of placing a bet - I don't think the prices are going to plumet in a couple of years but who knows?
Are you okay if I DM you a house that I wanted to get? Rather not have that one in public due to opsec reasons.

2026-04-26 15:27:37 UTC

- reply

Makes sense. I am bound to NL too, at least for now, due to infrastructure :flan_set_fire:
I found it way easier to get housing in Gelderland, Overrijsel etc. More affordable, more options and generally more nature. The general attitude is way different than Randstad too. In my experience: more laid back.
Are you looking to buy or rent?

2026-04-26 15:21:14 UTC

- reply

Are you bound to the Netherlands? If you are, have you considered looking more in the eastern parts of the country?
If you aren't, you might want to look at countries like France, Spain, Portugal.

2026-04-25 22:46:18 UTC

- reply

> already runs the latest snapshot on -current, all locked and loaded for the imminent release of 7.9!
So does OpenBSDonApple.wiki!

2026-04-24 14:53:01 UTC

- reply

Speaking as the admin of a fellow OpenBSD powered instance, it may be a resource thing.
Toots and boosts (especially when boosted by other instances) can put quite a strain on the resources. We are running with eight (x64) cores and 64G of mem.
I think it ought to be rather impossible to use Mastodon through a VMM-powered OpenBSD guest - even for a single user instance. Or that person has to follow just a handful of accounts.

2026-04-24 13:49:58 UTC

- reply

Might want to tag a staffer of bsd.network ;)

2026-04-24 13:49:24 UTC

- reply

Why don't you?
Excquisite can also host @npub1mfy…hthg - just saying ;)

2026-04-24 13:01:02 UTC

- reply

Hahaha and that is okay too! :awesome:

2026-04-24 13:00:33 UTC

- reply

Hahaha the Dutch government "tolerates" it - at least weed and hash. It is more legal than illegal, at least for the customers.
Shops aren't allowed to have more than 500 grams at any given time and at any location. This does pose a bit of a challenge, especially for the shops in Amsterdam which sell way more than that amount, daily.

2026-04-24 12:47:56 UTC

What are the lovely folks at @npub1060…ydzs smoking? They are doing custom emoji requests to an instance they aren't even on.
Soooo... move those buttocks over! :hamsterroll:

2026-04-24 12:45:26 UTC

- reply

Exquisite: done :blobfoxcheck:

2026-04-24 12:02:34 UTC

- reply

I believe the disk preferably has to be 400 gigs, with lots of space to /usr and /usr/obj - at least, when building multiple ports or large ones (think browsers).

2026-04-24 11:58:58 UTC

- reply

Also: see: https://exquisite.social/deck/@h3artbl33d/116458582853362527
I don't care whether tedu moved on from OpenBSD, is chilling out on a beach and surfin' the tides - or moved to a cabin in the woods.
Just want to make sure he is alive and okay - especially since I think he is US based.

2026-04-24 11:43:12 UTC

- reply

Just spoke with someone whom received an email from tedu dated on the 26th of feb

2026-04-24 07:50:14 UTC

- reply

PUFFFYYYYY!

2026-04-24 07:49:10 UTC

Hey fellow #OpenBSD crowd :flan_coffee:
I am worried about [@tedu](https://honk.tedunangst.com/u/tedu ) - can't get a hold of him, last CVS commits were somewhere 2025, no Fedi activity, websites down, etc.
Just wanted to make sure he is okay, regardless of the reason for being inactive.

2026-04-23 22:15:04 UTC

- reply

Truly fantastic

2026-04-22 22:01:50 UTC

- reply

Dat is in mijn optiek *besides the point*. Als de rest van de organisatie, inclusief support, onboarding, etc op Big Tech draait is het in mijn ogen geen soevereine cloud.
Met hoe erg KPN op Microslop leunt... Nextcloud zal vast door blijven draaien (tenzij de authenticatie / SSO daarvan afhankelijk is) - maar als ze de stekker naar Europa eruit trekken gaat KPN op z'n smoel.

2026-04-22 19:57:14 UTC

- reply

This is the anniversary edition of "Systemagic, the extra release song for OpenBSD 5.9. There are dozens more, including the much more electric original of this track.
Check it out:
https://www.openbsd.org/lyrics.html#59b

2026-04-22 19:54:17 UTC

#MastoAdmin on #OpenBSD feel:
https://media.exquisite.social/exquisite/media_attachments/files/116/450/104/516/242/579/original/e9ae4ad70b7664ff.mp3

2026-04-22 07:29:17 UTC

- reply

Ofcourse! Altijd meer dan genoeg ander werk; kan mij prima voorstellen dat er (veel) meer hogere priorities zijn.
En Yivi - ik had het kunnen weten. Is denk ik wel de meest solide keuze. Ik wil voor ons platform (Mastodon en Peertube) ook SSO bouwen; als het mogelijk is om dat met meerdere OIDC providers te doen is Yivi daarin een goede optie. als het beperkt is tot een enkele, dan niet (een deel van onze members zit niet in Nederland, kleiner deel zelfs buiten de EU).

2026-04-22 06:33:29 UTC

- reply

Ja, snap ik volledig. Rome was ook niet in een dag gebouwd natuurlijk ;)
Misschien zou je een module kunnen maken voor Paymenter / Fossbilling, want WHMCS moet je niet willen (smerige ioncubed meuk).

2026-04-21 16:58:20 UTC

- reply

Fantastic. Finally, some work to be done. Scored easily 100% in the previous version, but now there is a failure at EMS.

2026-04-21 16:49:12 UTC

- reply

Het lastige is dat het in Nederland heel moeilijk is om het aantrekkelijk te maken voor particulieren. Wat Hetzner doet, eigen NC instance van 1TB voor vijf euro kan hier simpelweg niet (inkoop simpelweg te duur).
Zie inmiddels wel dat wij (Exquisite) hooguit een paar meter van de infra af zitten van TheGoodCloud haha.

2026-04-21 16:32:55 UTC

- reply

Dankjewel! Krijg alleen niet het idee dat Koen / Procolix NC ook aanbiedt aan "consumenten"? Hun pagina lijkt vooral het samenstellen van een offerteaanvraag.

2026-04-21 16:30:56 UTC

- reply

Als je Nextcloud zoekt: vooral selfhosten. Eigen infra eerst!
Maar als dat geen optie is: The Good Cloud komt er, extern gezien, het beste uit. Dan is er ook nog Hetzner die met hun Storage Share (niet te verwarren met Storage Box) een managed instance aanbieden voor een paar euro.

2026-04-21 16:28:14 UTC

- reply

De Nextcloud signup geeft mij twee aanbieders aan: TheGood.Cloud en Tab.Digital.
De eerste heeft Matomo (selfhosted Google Analytics) embedded. De tweede heeft DoubleClick, GoogleApis en Youtube.
Beiden lijken verder geheel in de EU te staan, ook qua andere systemen (zoals mailserver).

2026-04-21 14:21:25 UTC

KPN biedt Nextcloud aan onder de noemer soevereine cloud. Dat gaat in dit geval niet echt op:<li>Als je supprt nodig hebt: KPN.com heeft <code>kpn-com.i-v1.mx.microsoft.</code> als MX,</li><li>Telefoongesprekken worden opgenomen in Azure, door Copilot getranscribed,</li><li>Vrijwel alle werkplekken zijn Microslop,</li><li>Ze waren "partner of the year" 2025 van hetzelfde big tech bedrijf,</li><li>De knop om meer informatie aan te vragen over het Nextcloud aanbod stuurt data naar Doubleclick (Google),</li><li>Alsmede embeds van Adobe, Bing, LinkedIn, Tag Manager, OneTrust,</li><li>Het formulier wordt "beschermd" door reCaptcha.</li>
Dus wat nou soverein? :flan_molotov:

2026-04-18 18:30:34 UTC

Pet me hooman #caturday
https://media.exquisite.social/exquisite/media_attachments/files/116/427/129/235/527/567/original/60d8a2fc75bb7803.jpg

2026-04-18 07:13:21 UTC

- reply

Everything seems to be returned to normal :flan_hurrah: Also made some tweaks to better handle future spikes.
For what its worth: normally our Sidekiqs handle ~ 400K events a day. Yesterday, that was 1M2K :flan_molotov:
Thanks for bearing with us.

2026-04-17 21:24:17 UTC

- reply

Ofcourse! Thanks for your kind words by the way.

2026-04-17 21:03:26 UTC

- reply

Yeah, server is smokin' hawt - that much that it would make a teen with the biggest vape jealous - all that due to having to deal with our "FSB friends" (well, not entirely though).
It is catching up, expect everything to be back to normal soon.

2026-04-17 18:02:28 UTC

- reply

PeerTube speaks ActivityPub, meaning that you can follow and interact with PeerTube accounts and channels through Mastodon (and GoToSocial, Pleroma etc).
But yeah, if you want to post videos to PeerTube, you will need an account there, which is separate - at least for now.
Building some form of SSO is on my todo.txt - just not that high.

2026-04-17 17:42:59 UTC

- reply

Amazing! Thank you for this :flan_heart:

2026-04-17 17:40:34 UTC

So... after squashing some bugs, [Exquisite.tube](https://exquisite.tube ) is now at v8.1.5 :flan_hurrah: :flan_hacker:
And earlier today, somebody uploaded beautiful videos from their diving adventures :flan_awe:
For example: https://exquisite.tube/w/6Yxz5ktWjYXq7Mm17NStQE

2026-04-17 16:21:45 UTC

- reply

I am collaborating with some fellow #MastoAdmin's in order to combat this.
Please, if you suspect any account of being a part of this attack, whether local or remote: do report them!

2026-04-17 16:18:36 UTC

We were infiltrated by the Russians :flan_nooo:
Tooted about it from the owner account (as I personally have ephemeral toots): https://exquisite.social/@exquisite/116420930523009081
I will take further countermeasures to make sure that this does not happen again. I am really, really sorry about this - as I see it as my task to keep this lovely and exquisite community safe and sound.
#note1zlx…2hx4

2026-04-16 14:07:22 UTC

- reply

tmux and mg
(seriously though)

2026-04-14 21:29:57 UTC

- reply

Hah! I am a bit of a dinosaur (meant purely positive) too. Think it might have been the same release for me. Since then, daily driving OpenBSD.

2026-04-14 20:31:28 UTC

#OpenBSD 7.9 coming soon... And it is going to be one heck of a release.
If you want to tinker with it already, go -current.
https://media.exquisite.social/exquisite/media_attachments/files/116/404/950/152/873/299/original/5a91561b9a4bf080.jpg

2026-04-14 20:28:00 UTC

- reply

You **can** use #GrapheneOS for that. It completely isolates components through IOMMUs (and others), meaning that if you disable mobile connectivity, WIFi, BT or enable the airplane mode, the hardware is **actually off**.
Currently there is no device with an e-ink display that is supported by GrapheneOS. That is not due to development capabilities of the project, but solely due to unavailable hardware that [meets the requirements](https://grapheneos.org/faq#future-devices ). Can't build a proper and safe home on quicksand, just as you can't build a secure OS on insecure hardware.

2026-04-14 06:47:45 UTC

- reply

Glitter :flan_hearts:
https://media.exquisite.social/exquisite/media_attachments/files/116/401/714/975/705/435/original/997b8d34ac4c0f34.jpg

2026-04-14 06:06:08 UTC

- reply

It is! Uplinks are already multigig and snapshot + package upgrades are basically done in the blink of an eye - both wired and wireless.
I guess that I will be looking at some changes in my morning routine soon (used to be sipping good coffee :flan_coffee: while upgrading my machines :flan_hacker:)

2026-04-14 05:59:55 UTC

- reply

Likely AX but might have been AC too.

2026-04-14 05:59:01 UTC

- reply

Yes, over WiFi (iwx(4) is the designator for Intel AX).

2026-04-14 05:55:55 UTC

Just had to transfer ~ 25GB before heading off to $DAYJOB. What caught my surprise was that the average throughput was 45.3 MByte/s with iwx(4) on #OpenBSD (current).
It might be even faster - I was a bit off from the nearest AP and it had to work through a solid wall or two.

2026-04-13 17:48:23 UTC

- reply

One small addition: they are employees of our client. Normally we'd report on those meetings with the general outline. I did omit this part as phrasing this correctly is hard.
I am pretty sure that there was no malice nor a severe lack of skills. And it isn't up to me to pass whatever form of judgement.

2026-04-13 17:43:04 UTC

- reply

I totally get that PKI might be hard for thise unfamiliar with it. The thing I can't wrap my mind around is how two devs spend three weeks at the problem before calling in lifeline.
I personally would expect a medior dev to know when they are out of their debt and rung the bell earlier. But perhaps my attitude isn't the right one either - that is entirely possible.

2026-04-13 07:05:27 UTC

- reply

Oh - haven't heard of that one before. Cool,. thank you for linking it!

2026-04-13 07:00:33 UTC

- reply

My oh my :flan_nooo: I do have my fair share of those folks too in $DAYJOB. The last time they spend **three weeks** (!) on debugging an issue where a webhook would not return anything.
Took me five minutes to asses and fix it for them. They were missing the CA intermediary.
In your case - I hope that they aren't vibe coding something that handles sensitive data :flan_angry:

2026-04-12 08:45:52 UTC

- reply

<code>$ man command not found: man $ which woman /usr/bin/woman $ which trans /usr/sbin/trans </code>

2026-04-11 06:14:44 UTC

- reply

What a horrible name. It took me a while to realize it is tui-greet, rather than tuig-reet.
In Dutch, the latter is 'thug ass'.

2026-04-10 08:45:51 UTC

- reply

Thank you! We are talking about an InfiniBook 16 Mk. 2. I do like the screen and the chassis that feels like it is made to be opened and being repairable. Could easily open the machine up and throw in an additional NVMe SSD in the extra M.2 slot.
Less happy about the keyboard (this is unfortunately a dealbreaker for me, but rather a personal preference). Also:<li>It seems not possible to disable the trackpad, for long typing sessions. Feels like it is overly sensitive at times. Ticking twice in the right upper corner does set it to a mode where it is less prone to accidental errors (but doesn't disable it completely).</li><li>The BIOS does not expose the ability to control whether ports are active / usable. Coming from ThinkPads as daily drivers, I did miss this. Furthermore, there doesn't seem to be a boot menu option at startup.</li><li>I do use OpenBSD - putting a full load on the machine gets it very warm, hot even. Even after a deeper dive, there seems to be no way to control the fans. TCC has it (which doesn't run on OBSD) - would be preferable that this is doable without TCC. Or to store the settings in NVRAM.</li><li>The webcam is a bit low quality / ill equipped to handle scenarios with less light. This might be a thing of this model which is older.</li>