Elektrine lite

← Feed

Dr. Bruce Simpson

bms@mastodon.bsd.cafe

<p>Cybersecurity &amp; Internet researcher. Timeline:<br />1994: 1st Internet use: blueboxed onto CompuServe<br />1997: <a href="https://mastodon.bsd.cafe/tags/phrack" class="mention hashtag" rel="tag">#<span>phrack</span></a> denizen; nfsshell&#39;d exam paper<br />2001: Onsite cybersecurity at JP Morgan.<br />2003: FreeBSD Security Team; TCP-MD5; mentored pf(4).<br />2004: International Computer Science Institute fellowship. <br />2010: CRC Canada uses my MANET stack<br />2011: Every iPhone IPv6 connection invokes my code.<br />2016: Awarded PhD in Internet architecture.</p><p>Do I wish to join the Cult of the Superficially Viable Artifacts? No.</p>

Posts

  • View post

    These days, I am constantly reminded of Philip K. Dick&#39;s concept he employed in &quot;Ubik&quot;: the inertial, an individual capable of nullifying psychic effects. I must cultivate inertia; I must aspire to be truly inertial. As my closest advisors in &quot;meatspace&quot; have said: the best thing to do in the awkward psychosocial situation in which I have been placed over the last month, such as it may be, is to say nothing, and do nothing.

  • View post

    So I switched daily browser this week from the least bad Chromium fork to the least bad Firefox fork, thinking that reduced CPU burst might reduce my exposure to my Acer [heavily patched for security and privacy] Win11 laptop&amp;#39;s wonky power management behaviour now the battery has died (replacement on order, must chase up). The thing tends to die shortly after power-on, or if I open a browser, and hibernation doesn&amp;#39;t work. It helped a little, not a lot. Only to find I&amp;#39;d f...

  • View post

    I&amp;#39;m looking into what it takes to fully Capsicumize a Python process in FreeBSD. It&amp;#39;s not just about the file descriptor rights and filesystem visibility. There are distinct dependencies by Python modules on system calls which may not be CAPENABLED. I ground it out on subprocess for a start. Whist Python 3.12 os.execve() (and thus os.exec*()) shims to fexecve() and SHOULD work if $PATH is modified to be relative, there are no such guarantees for the subprocess module.

  • View post

    To my mind, Ross Anderson was being pragmatic, when he insisted in his text &amp;quot;Security Engineering, 3e&amp;quot; that computer &amp;amp; information security models should more closely reflect underlying human trust relationships, and it could be said that capabilities models let one achieve that more readily, than the constant exercise of trying to close gaps exposed by security models rooted solely in Access Control Lists (ACLs), which amount to a form of fire-fighting; hence the HP La...

  • View post

    Field testing KScope 1.8.2 for KDE Frameworks 6, with a detour through the FreeBSD kernel&#39;s descriptor passing code paths, i.e. the SCM_RIGHTS control message for UNIX domain sockets (allegedly, supporting this makes a UNIX-like OS a &quot;real UNIX&quot;).

  • View post

    AI FAIL

  • View post

    Motivation to do systems administration my own systems tonight: 0

  • View post

    @bellegraylane@universeodon.com @gvwilson@mastodon.social Axl screams &quot;You Could Be Mine&quot; -- 13 year old me would fire that up as a cassette single while blowing away Kraits in Amiga Elite with military lasers fitted to my Cobra Mk III

  • View post

    According to RIPE Labs, IPv6 prefixes enjoy a ~68% higher level of ROA signing amongst small-scale RPKI servers for BGP routing security, and of those ROAs, only ~1.2% do not validate. https://labs.ripe.net/author/ties-dirksen/whos-running-all-those-tiny-rpki-servers/

  • View post

    https://en.wiktionary.org/wiki/bowdlerize

  • View post

    Layer 1 robustness: learning how to do Network UPS Tools (NUT) properly here with an Eaton 3S. 2nd BeagleBone Black, powered from a powered USB hub, plugged into the BBB itself. Thence, an FTDI serial cable plugged into the hub, to the primary FreeBSD dev system. The UPS itself, repatched to the BBB via the hub. So 3 things are on the 3 BS1363 mains sockets on the Eaton UPS: the FreeBSD box, the BBB via the hub, and the FS S3900 switch they&#39;re both connected to. https://www.eaton.com/gb/en-g...

  • View post

    There is no &quot;Singularity&quot;. If you believe this, you are a fool. Desperation camouflaged by utter science fiction tripe begets only the response: Sam Altman needs to get his fucking shine box, his desperation to IPO to externalize the &quot;AI&quot; con grows every day. Same with Mark Zuckerberg committing material falsehood in his WSJ op-ed this week. The manchild-CEO-for-life needs to get his shine box. Mark Shuttleworth, ignoring his user base: Shine box for you too. https://www.y...

  • View post

    Please heed Dijkstra&#39;s wisdom nearly 50 years after he spoke the words: &quot;...after careful consideration I concluded that the intellectual challenge presented by the programming task is, indeed, as unprecedented as the high-speed automatic computer itself. And it had caused in my mind a shift of attention from &quot;how to discover the unexpected&quot; towards &quot;how to avoid unmastered complexity&quot;, towards &quot;how to reduce the demands made on our quantitatively limited powers...

  • View post

    LowEndBox author on &quot;The Economics of AI and Why Cost-Conscious Companies Hate It&quot;; basically, no demonstrable ROI, even when negative externalities are not taken into account. https://lowendbox.com/blog/the-economics-of-ai-and-why-cost-conscious-companies-hate-it/