Onno (VK6FLAB)
Anything and everything Amateur Radio and beyond. Heavily into Open Source and SDR, working on a multi band monitor and transmitter.
#geek #nerd #hamradio VK6FLAB #podcaster #australia #ITProfessional #voiceover #opentowork
- 7 Posts
- 236 Comments
Onno (VK6FLAB)@lemmy.radioto
Cybersecurity@sh.itjust.works•Every crawler IP range operators publish, mirrored into one schema (1987 IPv4 + 1062 IPv6 prefixes from 15 endpoints) with a diff feed for when they moveEnglish
1·13 days agoWhat are you trying to block?
I’m asking because based on the traffic I saw on a live retail website had malicious access attempts coming from significantly more addresses than you seem to be indicating and more often than not the address was different for each request.
That said, Meta DDoS bots were outright blocked because they hit the same URL thousands of times for no apparent reason.
Note that this was during the first half of this year, the landscape has undoubtedly worsened since then.
Onno (VK6FLAB)@lemmy.radioto
Selfhosted@lemmy.world•What is your cloud backup solution?English
1·20 days agoFor how much data?
Onno (VK6FLAB)@lemmy.radioto
Selfhosted@lemmy.world•What is your cloud backup solution?English
2·20 days agoWhat are you using to get it there and back?
I’m asking because I had been using this for years and only after a catastrophic event, discovered that my “helpful” backup software had turned on versioning which AWS, also helpfully, doesn’t explicitly tell you when you attempt to delete old backup sets, showing no objects but charging you anyway.
I did recover all my data after a catastrophic event, but it was an expensive experience to put it mildly.
Onno (VK6FLAB)@lemmy.radioto
Cybersecurity@sh.itjust.works•Replacement for Docker Content Trust (DCT)English
1·25 days agoUnless I misunderstood your original question, you don’t trust the Docker signing process, so getting a cryptographically signed image from there seems to fail your criteria.
You could build a Debian base image in-house from scratch if you wanted to and limit your tools to Debian only signed packages.
Ultimately you need to trust something.
For example, how do you trust the microcode updates to your CPU?
Onno (VK6FLAB)@lemmy.radioto
Cybersecurity@sh.itjust.works•Replacement for Docker Content Trust (DCT)English
4·25 days agoI tend to build my own containers for anything that matters, but that might not be a viable option.
Onno (VK6FLAB)@lemmy.radioto
Cybersecurity@sh.itjust.works•Microsoft Defender's Own Driver Can Be Weaponized to Delete Security Software at BootEnglish
5·28 days agoMicrosoft continues to be the best advocate for migrating to Linux.
Onno (VK6FLAB)@lemmy.radioto
Cybersecurity@sh.itjust.works•WhatsApp Web chats exposed by Adobe's Acrobat extension flaw | MalwarebytesEnglish
6·2 months ago“That’s not a flaw … that’s a feature!”
Onno (VK6FLAB)@lemmy.radioto
Programmer Humor@programming.dev•Interview via MS Teams? How about NO.
21·2 months agoAround the turn of the century I built a “middleware” layer for an Oracle to MySQL bridge which enabled legacy systems to keep running while modern and open source tooling could be built.
The biggest challenge was moving from columnar to row based data … that and compiling Solaris tools using Oracle libraries.
Oracle is like sendmail, user friendly, just very picky whom it makes friends with.
I’m getting flashbacks to debugging an Oracle connection file.
Onno (VK6FLAB)@lemmy.radioto
Cybersecurity@sh.itjust.works•Google pays $250K for Linux vulnerability allowing guest VM escapesEnglish
61·2 months ago… and replace them with a whole new class of bugs.
Source: I’ve been writing software since 1982.
Onno (VK6FLAB)@lemmy.radioto
Cybersecurity@sh.itjust.works•Google pays $250K for Linux vulnerability allowing guest VM escapesEnglish
71·2 months agoAnd if you think that migration to Rust will magically remove all bugs and vulnerabilities, you haven’t been writing software for very long.
Onno (VK6FLAB)@lemmy.radioto
Cybersecurity@sh.itjust.works•Malicious websites trick AI agents into crypto payments, context poisoning | news | SC MediaEnglish
16·2 months agoSeems like a valid use of the technology…
Onno (VK6FLAB)@lemmy.radioto
Cybersecurity@sh.itjust.works•New "Bad Epoll" Linux Kernel Flaw Lets Unprivileged Users Gain Root, Hits AndroidEnglish
2·3 months agoThe website has a heading proclaiming that apparently it’s a bad year for the Linux kernel.
I have to ask … compared to what … the Windows kernel?
Onno (VK6FLAB)@lemmy.radioto
Cybersecurity@sh.itjust.works•New "Bad Epoll" Linux Kernel Flaw Lets Unprivileged Users Gain Root, Hits AndroidEnglish
19·3 months agoWow … so I can finally have root on my own phone?
At the rate Microsoft is going, by the time we set up a community on Mars, everyone will have migrated to Linux 😁
You don’t need to go to Mars to deal with timezones … plenty of people right here who have absolutely no idea that half the planet is dark at any one time and still schedule global events in their colloquial timezone rather than UTC.
Onno (VK6FLAB)@lemmy.radioto
Selfhosted@lemmy.world•[META] Should AI disclosure tags [AI], [NOT AI] be mandated when sharing projects?English
173·3 months agoI think that unless you have some way to enforce accuracy, it’s meaningless and AFAIK automatic detection tools are no better than chance and to my knowledge, getting worse.
An AI bot operator isn’t going to tag their material as [AI], more likely than not they’d attempt to use [NOT AI].
I’d also point out that while lemmy doesn’t (yet) support hashtags, any “tagging” would probably benefit from using the existing method using a #tag.
Ultimately, you need to ask yourself, is undeclared AI that goes undetected by the community a problem, or the new “normal”?
I’ll note that I’m not a proponent of Assumed Intelligence and think that when the bubble bursts we’re going to be in a world of hurt, but with a little luck the billionaires will have lost their shirts in the process.
Onno (VK6FLAB)@lemmy.radioto
Selfhosted@lemmy.world•Selfhosted birthday calendar for the whole family?English
8·3 months agoThere’s nothing to host.
Create an iCal file and import it into your calendar application on your phone.





PHP is written in text files which can be managed using any number of version control systems. Pick your poison.
https://en.wikipedia.org/wiki/List_of_version-control_software
As someone else said, you can document your patches with a Docker file, but you’ll still need to track your changes.
Ultimately, what you’re essentially doing is maintaining a local fork of the code and keeping it synchronised with upstream.