h3artbl33d

Large website in the Alexa 500: can't hold that Mastodon traffic yo My blog at @OpenBSDAms@mastodon.bsd.cafe with the same traffic: hold my beer Yes. That happened.

Our Mastodon instance is powered by #OpenBSD. The media storage, however, is powered by #HardenedBSD. Our Mastodon media is about 1,3TB - including 30 days of remote cache. Adding the storage of our PeerTube instance triples that amount. Using any other filesystem than ZFS makes no sense whatsoever with storage arrays like this. And for ZFS, HardenedBSD is the most logical choice. The benefits of FreeBSD with added exploit mitigations and other security measures. Plus, a project that actively advocates and works for human rights!

Heartfelt thank you to everyone whom was at EuroBSDCon - including the stream viewers. It was a blast. And still, couldn't talk to everyone whom I wanted to talk to and give everyone the attention they deserve. You all rock. Really. See you next year in Bratislava, through the pipe at Exquisite.tube or through whatever communication channel #EuroBSDCon #EuroBSDCon26

@stefano@mastodon.bsd.cafe I've had multiple clients come to $dayjob with this reason, only to find out they had been lied to by an incapable party. It is sad.

@stefano@mastodon.bsd.cafe "It was a DDoS"

If you are #selfhosting / #homelabbing: you have my utmost respect. Do not trust other parties to have your back - because they don't. However, few words to the wise: if you operate a minimalist setup - eg everything running in VMs on a single host: please do consider the consequences of downtime. You probably don't want to run your critical services on one machine without a fallback. If those services include your smarthome foundation, DNS and firewalling: you don't want to troubleshoot in the dark because everything is down and you can't even turn on the light anymore. You aren't the first nor won't be the last to learn this lesson when disaster strikes though

GrapheneOS, the mobile Android OS geared towards security and privacy without consessions, is at Android 17. It is now in the beta channel, there will likely follow another build shortly that makes it to the stable channel. The team did a fantastic job porting over so quickly and meticously. I have been running the experimental releases on a Pixel 9 Pro and a Pixel 7 and it has been smooth sailing. #GrapheneOS #Android #Security #Privacy

@rqm@exquisite.social Morning! kern.version=OpenBSD 8.0-beta (GENERIC.MP) #45: Wed Sep 16 10:30:23 MDT 2026

I just got an email from the Belastingdienst (Dutch tax authority). Apparenttly they have switched mail providers, as they were mailing me from a hotmail address

And talking about EuroBSDCon: have you already gotten your ticket? Will you be there in Brussels? If not: check out this years edition. It is going to be effin awesome - like very year. Again and again.

It is beautiful when this plan comes together. Exquisite (Mastodon, Peertube and side infra like MX, DNS) is fully powered by BSD - straight to the metal. Dogfooding is a very powerful concept. And no, I am not hosting EuroBSDCon as a SaaS / Cloud thing - I am one of the persons with UID 0 in EBC

OH: GitHub has connectivity issues. That is why we switched to Azure DevOps. Uhm...

Whereas DirtyClone exploits a kernel module (which can be tackled by unloading and blocking it), Bad Epoll (CVE-2026-46242) does not. #Linux #Kernel #Vulnerability #Security

@fd0@mastodon.nl @mischa@exquisite.social @OpenBSDAms@mastodon.bsd.cafe Uhhh they told me that they have switched to a Nigerian bank, so transferred everything over to that account. Oh well, this is fine (yeah, I know that they switched - although they should have made a better choice - but might be due ING shitting the bed with their subscriptions)

@fd0@mastodon.nl @mischa@exquisite.social @OpenBSDAms@mastodon.bsd.cafe Beyond any reasonable comprehension.

@mischa@exquisite.social Would that happen to be the same account as @OpenBSDAms@mastodon.bsd.cafe by pure coincidence?

100% European infrastructure While using CloudFlare. On the shitlist you go

How on earth should I fill twelve DDR5 channels? I have only two kidneys :(

@thomholwerda@exquisite.social They are gone.

@michaelharley@infosec.exchange Totally! Main DNS server in the homelab. Secondary on a Raspberry Pi elsewhere in the home. For Home Assistant I do not have HA. I do however have one spare Zigbee2MQTT box with another Zigbee stick (coordinator) just in case. If everything goes down, I do not need Home Assistant per se, as long as I can make sure that there is light in the darkness haha.

@jana@social.jsteuernagel.de Totally. Makes much sense. I do have the core documented nowadays, including a hardcopy of the relevant steps (without getting too technical), should anything happen and I am not around. If you are posting your progress: looking forward to it!

@VeroniqueB99@mastodon.social Therapist: The cloud is a lie and can't hurt you. Meanwhile, the cloud: https://technical.ly/entrepreneurship/aws-us-east-1-outage-explainer/

Today I received an email from Supermicro that they've released new BMC firmware and a BIOS for some systems I subscribed to. Nothing special. That is, until I noticed what machine was listed. Introduced late 2015/early 2016 I have never purchased whatever support. Both Supermicro and Dell work this way. HPE does not. They require you to have overzealous support agreements, costing an arm and a leg. No agreement, no BIOS updates for you In most cases, companies do prefer these support agreements. Having someone to assist you when shit hits the fan for a (relatively) small stack of dough is a no-brainer. However - this is completely fucked up. It really hurts the second hand market, homelabs, etc. Imagine not being able to patch against nasty silicon-level vulnerabilities because those fuckers want to see 5K of your hard earned cash #Rant #Security #Vulnerabilities #Hardware #Servers #HPE #SysOp #Homelab

@thomholwerda@exquisite.social Djeez. Wanne flapdrol.

@stefano@mastodon.bsd.cafe @outofcreativity@exquisite.social Nice! We have played a (minor) part into getting it ready for #OpenBSD, by giving the devs access to some compute - which resulted in a commit spree that I hadn't seen before. They are incredibly kind, humble and knowledgeable.

@ics@tau-ceti.space I would be impressed if the spam was actually targetted. I mean, I don't want (or need) viagra, the legacy of a far uncle I've never heard of, a magical sleeping pillow, some fancy cooling equipment. Would be totally cool if they were to change that spam and target me with low power computers, decent food, lovely wines and the most recommendable books. Oh wait did I just reinvent marketing and applied it to myself?

@queen_fennec@mas.to Grrrrr. Dit maakt mij wel wat meer dan een angry nerd - hier word ik best leip van. Dit is je reinste FUD. De vraag is ook hoe je meet. Mythos maakte deadlines met een 'kwetsbaarheid' in OpenBSD die er al meer dan een decennia in zat. Werd hoog van de toren geblazen, "kijk hoe knap wij zijn". De kleine lettertjes: ze hebben 20K (MSRP of inkoop?) verspilt aan het vinden van een DoS. Ja, dat is zeker een kwetsbaarheid - omdat je de beschikbaarheid ermee om zeep kunt helpen - maar het is niet zo dat het een fancy achterdeurtje is waarmee nation states een blikje hoodie dragende "hackers" kan opentrekken om staatsgeheimen te exfiltreren. Dat was wel een beetje de indruk die het artikel mij gaf qua cyber.

@K4bergen@mastodon.social @queen_fennec@mas.to Dutch IT channel is een grote advertorial.

@VeroniqueB99@mastodon.social Hahaha it took a bit of thinking. Turns of the last name of the actor did not belong there.

@stilla@exquisite.social Aww stop. I am hardly a celebrity And that is okay too - I prefer to do my things mainly behind the scenes (that might be why I struggle doing presentations / talks).

Adding: get it from Timmy through Zazzle

@gnomon@mastodon.social @gumnos@mastodon.bsd.cafe Yeah, got it from there!

@roy_calum@universeodon.com Are they though? People trying to spam, scam, insult or whatever to our lovely Exquisite community won't like me

@heinragas@mublog.nl @RoosVonk@mastodon.social @S_VanTeutem@mastodon.social Dit. Precies dit. Ik haal mijn vlees veelal bij een lokale boerderij. Daar zie ik, met mijn eigen ogen, dat de dieren vrij naar buiten kunnen, een enorme oppervlakte hebben en een goed leven. Daarnaast bespaart het ook CO2 uitstoot door nodeloos verpakken, transport en alles. Ik haal het gewoon lekker op mijn tweewieler wat de CO2 uitstoot drastisch verminderd. En er is niet altijd volle keuze uit varken, kip of rund. Dat zet ook weer aan tot minder verspilling en een beetje meer planning dan stel-op-sprong consumerisme.

@oxy@social.bsdlab.au Yeah, that is actually a rather painful one

@stefano@mastodon.bsd.cafe But surely Svetlana, who wants to sign up because the community might appreciate her erotic content, isn't exactly what BSD Cafe is about It isn't? You mean I have been wrong this entire time thinking it actually was a misspelled BSDM Cafe? So... What is this BSD thing? (sorry I will show myself out now)

@VeroniqueB99@mastodon.social Hahahaha! Hannibal enters the chat

@infoseclogger@infosec.exchange @luilegeant@mastodon.luilegeant.com @jerry@infosec.exchange They do offer on-prem. Just need to supply them with a VM/VPS if I read it correctly.

@RoosVonk@mastodon.social @heinragas@mublog.nl @S_VanTeutem@mastodon.social Klopt - daar was ik mij bewust van. Was meer een reactie op Hein :) En dat voer, dat is een interessante om eens na te gaan hoe de lokale partij daarmee omgaat, waar zij het vandaan halen en hoe de verdere 'supply chain' van het voeder eruit ziet.

@fox@social.hostnetwork.xyz Truth be told: they might have stopped doing that. Never used the ML line, the latest machine I had it on was a DL Gen 9. That was the first and last HPE for me.

@VeroniqueB99@mastodon.social Hahaha OMG. Hardly a hack, more of a scam. But hey, whatever floats the boat.

@VeroniqueB99@mastodon.social Whomever did this is an effin end boss.

@AncTreat5358@lgbtqia.space @mcgov@fosstodon.org "Refined" Windows Vista was the public beta of liquid glass.

@stefano@mastodon.bsd.cafe @outofcreativity@exquisite.social INSERT INTO toot (attachment, alt) VALIES ('$ALLTHEBSDS.PNG', 'Meme of RUN ALL THE BSDs');