Today was update day1. Then the expected unexpected happened: The ZFS module was missing from initramfs. Desktop's dead in the water. I boot up my laptop to quickly flash an Arch live ISO onto a USB drive, and while at it also upgrade that one. Knowing that what went …
Today we'll talk about sandboxing. In particular, about sandboxing soldatserver, the dedicated server for the game Soldat. It's a quite old and not especially hardened code base, thus seemed like a good candidate to try to sandbox. We'll sandbox it using Linux namespaces and a simple seccomp filter.
This article …
Today, I'm annoucing the initial release of sshign, 0.1.0.
sshign uses your private SSH key to sign arbitrary chunks of data. The resulting signature can then be verified using your public SSH key.
I often need to use secondary methods to verify the authenticity …
Since migrating a VM from qemu userspace networking to a dedicated IP and bridged networking I've been seeing abysmal throughput when downloading data from it. Instead of the usual 1.3MiB/s I get 30KiB/s tops. Taking a look with Wireshark a ton of retransmits of TCP segments appear …
Isolating the network interface provided by VPN software (like OpenVPN or tinc) may be a good idea if you intent to use it to isolate a program to that specific network.
This can somewhat be achieved using a separate user or group, iptables (to mark packets sent by that user …
This time not as part of a
challenge
but because I quickly needed a parser for bencoding in Python. There
are existing modules to do that but
"bencode" needs
some Bittorrent library,
"bcode" is not
Py3-compatible out of the box.
"bcoding" seems
to work but looks slow and is about …
Unfortuantely Xfce's compositor uses Xrender which does not support vertical synchronization. This seems to create a very constant tearing effect in vsynced OpenGL applications. Some drivers like Intel's open source driver or AMD or NVidia's binary blobs manage to force Xrender to vsync but the open source radeon driver doesn't …
Long story short: add "server-ipv6 network/netmask" (for example a /80 of your server's /64) to your existing openvpn config and install npd6.
The modification of the OpenVPN config is trivial. It seems to be made primarily for the tun mode but works fine with tap (Layer 2 tunelling) as …
That's the news. Maybe I should get one for paste.mnus.de too, but that depends on whether StartCom allows more than one free cert per domain or not. Currently it's using a certificate signed by my own CA, like all my other subdomains.
Since I found the buttons on my monitor to be inconvenient, I decided to try to go for a commandline utility that could set the brightness. There are several ways this can be implemented: