Jana

I'm gonna give restic a try. Let's see if it makes for a good tool to run file-level backups.

Having a completely normal morning, editing some configs.

I found a cool little Android app for interactions with hardware security keys. It's called Passchain and it allows the keys to work, without needing Google Play Services (Passchain uses parts of MicroG). This part is also done by another app, that I used previously, called AuthnKey. But what makes Passchain fun is that it also supports scanning QR codes on other devices to do the signin with a security token that's connected to or scanned by the phone. Now I don't see that much practical use for this, because in the majority of cases I could just connect the token directly to the other device instead, but it’s still fun to see this implemented :D In the video you can see me using a YubiKey attached to my phone to login to my kanidm on a laptop. Also don't be like me and give the app Network permissions from the start and enable Bluetooth, otherwise it won't work. I was confused about that for a good bit https://codeberg.org/s1m/hw-fido2-provider

My little side project of configuring a FreeBSD installation on a ThinkPad T480 is coming along nicely

THIS FILE SYSTEM TYPE IS NOT YET FULLY SUPPORTED (READ: IT DOESN'T WORK) AND USING IT MAY, IN FACT, DESTROY DATA ON YOUR SYSTEM. USE AT YOUR OWN RISK. Uuuuh, okay

Intel card is cheap as heck, so I just ordered one. Not dealing with Broadcom shenanigans. Even has 2 10G ports, which is neat.

@privateger@plasmatrap.com Only time I ever got one was when I somehow missed a sign and thought the zone was still 70, even though it was 50. Otherwise I am always amused people that speed, but as soon as they see a speeding camera, they drop way below the speed limit. Like what do you think it will do? Catch you driving 30 in a 50 zone

It's interesting how on GrapheneOS you could easily just miss a major Android upgrade having happened. With all of the stuff stripped out that Google puts on top, there's not that much that noticeably changes. Sure, there's some new stuff in settings, but the only thing that caught my eye immediately after the 17 upgrade was that an app (that I installed) now uses a different icon by default. And honestly, it's nice.

Postponed CPU change to later and rather looked at finally getting FreeBSD on there. Storage problems could be solved by switching from the older mfi driver to the newer mrsas one. This makes the drives show up and work as they should. Next problem is that the Broadcom NetXtreme ethernet isn't working. It shows up as connected in iDRAC, but FreeBSD doesn't know there's a connection. I'm surprised by the amount of config changes this enterprise hardware needs to work. I expected the opposite tbh.

What I was planning to do: Improve my firewall rules to further limit how much access jails have to the internet. What ended up happening: I got confused as to how to best do that, read through the entire pf.conf man page, discovered the weird jail issue, fixed that and ran a full update on everything. I guess that's also something.

I've also been annoyed by how impossible it feels nowadays to find good wallpapers, because the internet is littered with AI generated ones. So I started going through episodes of shows and taking screenshots of stills that can be used as wallpapers. The collection is still very small, but it's been fun to do and it gives me a lot of material for some small edits I want to do

@h3artbl33d@exquisite.social I have suffered from the consequences of minor parts of my setup failing and it was already pretty bad. And even now I am still in dire need to improve things, but I'm building the foundation of something which should allow me to more rapidly fallback to some other system, if stuff breaks. Excited to finally set those plans into motion.

Currently considering to just yeet the Broadcom card and install an Intel ethernet card. Even if I get this to work, my confidence in Broadcom is ... not there.

In the last few weeks and months I've written more code than I have in multiple years prior. The sad part of it is that the motivation for that has largely been that it's no longer fun for me to look for existing solutions, as so many disappoint me in their development practices. The really cool part is, that I have finally found ways for me to make writing software fun and I can create the things that can solve exactly my problem and I don't have to worry about them changing in ways that I don't want, as I am solely responsible for them. I hope I can keep my motivation to work on these projects up. I think once the meditrack thing is in a baselines usable state (hopefully soon), I can also start tackling the home automation replacement. I already have some ideas how to do it and yes, they once again include bash :D

@privateger@plasmatrap.com Omfg, I hadn't seen the new cloud prices yet

@stefano@mastodon.bsd.cafe Maybe just to add: The live stream can be found here: https://streaming.media.ccc.de/gpn24/vortragssaal The recording will be available afterwards in: https://media.ccc.de/c/gpn24

@firstyear@infosec.exchange Good to know, thanks! Though as the app uses microGs implementation of the fido2 service and the connection is established directly between the devices, I don't understand at which point Google is still involved?

Conveniently the backup server only has a 500 Mbit/s internet connection, so it can't even fully saturate the source servers connection. Integrated rate limiting :D

@domi@donotsta.re @merlin@toot.kif.rocks I was just about to add as an example that ever since learning that ServFail runs in a tmux session, that fact has been haunting me, when I had a cute idea on how to do a generic rc service for http.sh. I should try that tomorrow. (And figure out how different Alpines RC stuff is from FreeBSDs)

@domi@donotsta.re There's nothing more permanent than a temporary solution (I already see myself at some point fixing your Mikrotik, as I did with @merlin@toot.kif.rocks's during Congress )

@domi@donotsta.re @merlin@toot.kif.rocks I do not doubt your ability, I merely have the tendency to want to clean up funky workaround if I can

@h3artbl33d@exquisite.social I do have enough documentation that someone could roughly trace what I am doing, but not easy so far. I've been thinking about doing something physical, but I don't see who I could help with that. Currently I'm thinking of making it possible and easy to restore a service on a different machine, if something breaks on the primary such that I could initiate a move in little time and get things back up easily. Standardizing the majority of services on FreeBSD jails should make that easy, though I'll definitely at least have to overhaul networking for migrations to be easily possible. Plus I'm thinking about giving someone else backup access such that if I were to be unavailable for an extended period of time, they could fix minor things or run important security updates etc. And yeah, ofc I'm going to be posting about it, as it happens. Primary limitation currently is time, as is so often

@arichtman@eigenmagic.net @ShadowJonathan@tech.lgbt Luckily it wasn’t merged yet. I managed to reject the MR and then did it myself. Was quite annoying to have to deal with and it‘s just a minor victory, but at least something.

Cronjob is now also enabled, mail config is fixed, such that it can send me reports. Now I'm waiting for my first nightly wave of mails from it :D

@privateger@plasmatrap.com Mood. Similarly I'm taking my auction server to the grave :D (If the price doesn't randomly increase too, in the future)

@merlin@toot.kif.rocks I'm debating whether to use my company phone as a beta device. Surely that's a good idea, right?

FreeBSD update time! Started 3 system at the same time. One is already done and rebooted. And it's not my main one

@mmeier@social.mei-home.net Ah, another one for the "why is this an app?" pile :neobot_flop_tired:

@mmeier@social.mei-home.net Yeah, getting English ebooks is pretty hard (at least drm free). I get most of mine from beam-shop.de and even though their selection is great for my needs, it's usually just the German variants :/

@ShadowJonathan@tech.lgbt Damn, I only did a roughly +350/-3000 one so far. Was very satisfying too though

@MiaWinter@tech.lgbt Aaaah, that’ll do it It just looks pretty funny to have a 48 page epub with 30MB sitting next to a 850 page epub with 2MB :neobot_laugh: But it certainly already has better formatting than the last epub you made, so big thumbs up on that

@MiaWinter@tech.lgbt This was once again very fun to read :3! I love the unique way of telling the story. (Also: How did that epub become 30MB big? It‘s just text :neobot_eyes: )

@MiaWinter@tech.lgbt Yeah, I can imagine this being quite a pain to deal with. The first epub you put out there had an incredibly tiny font on KOReader for me, but I just disabled the embedded styling and then could read it. Kinda wild that epub is just html, yet again. We really have built everything on top of browser by now…

@cristianyxen@mastodon.social https://github.com/psy0rz/zfs_autobackup

@domi@donotsta.re I didn’t know about optipng and now I’m curious whether I can optimize my beloved neobots.

I also prepared a setup to share the ones I have taken for others to download and use. I won't share the link yet though, because I first want to improve the thumbnail view on the file listing to not download all images in full size for the preview :D (And gather some more, currently it's still kinda empty)

If anyone wants to do the same thing: Video players can often take screenshots right from the video. Has the benefit of not being affected by resolution differences, other things on screen, subtitles being shown, etc. I use IINA on macOS, but there's nothing special about it. VLC can also do it. mpv can do it. Probably more. And skipping frame by frame can often be your friend in the quest of finding that one frame in the intro that doesn't yet have text fading in :D

@domi@donotsta.re I don't even understand what it will do

@domi@donotsta.re Uhm, so you're doing NAT66 between some static internal prefix (ULA or OPF, I assume) and the shit ISP provided one. Sounds like you might have to somehow exclude the stuff the router has to do from the rule?

@firstyear@infosec.exchange ... What The Fuck And I assume if one scans the code on an iPhone, Apple does the tunnelling?

@domi@donotsta.re

@q@glauca.space Whaaaaaaaaaaat???