Posts by benjojo@benjojo.co.uk
 (DIR) Post #B5574vXsfLk4VUNfs0 by benjojo@benjojo.co.uk
       0 likes, 1 repeats
       
       How many TCP segments is a reasonable number for a TLS Client Hello?Depending on your network set up, for connecting to bgp.tools until maybe a couple of hours ago the (non reasonable, but real) answer may have been up to 22!It turns out on IPv4 bgp.tools has been advertising the wrong TCP window scale for quite some time and it's a true testament to TCP's flexibility that any of this was working in the first place.Regardless, connection setups on bgp.tools should now work a little better on IPv4 now that your machine wont have to send 21 extra packets
       
 (DIR) Post #B5574w1ItxHHyk9AjQ by benjojo@benjojo.co.uk
       0 likes, 0 repeats
       
       It was only figured out because of a Fortinet/FortiGate firewall user who wrote a email to me about having weird problems with accessing bgp.tools, and them being patient for debugging on both sides over email.Remember, if you see weird stuff, email it in! It's entirely possible your setup is unearthing some deeply cursed behaviour that the operator would really like to know aboutApparently FortiGate's do not like it when you send your TLS Client Hello spread over 10+ packets, I don't really blame them since that does look quite insane over the wire
       
 (DIR) Post #B5Rsw7A1BLE9CZCXOS by benjojo@benjojo.co.uk
       0 likes, 0 repeats
       
       On a ocean facing fence full of love locks full of people's relationship commitments, somebody was just like "well this one's probably more of a combination lock job to be honest"
       
 (DIR) Post #B5S0GcAMJTy6pn5CeO by benjojo@benjojo.co.uk
       1 likes, 0 repeats
       
       scdaemon -> scDemons
       
 (DIR) Post #B5Snw2DdFYHpGKzheC by benjojo@benjojo.co.uk
       1 likes, 0 repeats
       
       Birds, the angle you take a photo of them can change the vibe a lotFrom a >:| to a :o
       
 (DIR) Post #B5So9TT1FkY5XHbFmS by benjojo@benjojo.co.uk
       2 likes, 3 repeats
       
       While travelling last week I came across this in my hotel room, this seems like a fantastic way to have your USB C powered device's chassis float to 120V live if you use it wrong enough in the dark
       
 (DIR) Post #B5ZzZbzWdppR6ZBpOC by benjojo@benjojo.co.uk
       2 likes, 0 repeats
       
       Iran claims US exploited networking equipment backdoors during strikesCisco, Juniper, Fortinet, and MikroTik devices allegedly rebooted or disconnected during the conflict.Oh don't worry about the MikroTik's, they just do that (reboot unexpectedly in production at inopportune times)
       
 (DIR) Post #B5zY4fRq5sjMCDPZvU by benjojo@benjojo.co.uk
       1 likes, 0 repeats
       
       The Spezi people bring you: Bi-Sexual Cola
       
 (DIR) Post #B61WbjnR8Wexe84hHM by benjojo@benjojo.co.uk
       0 likes, 0 repeats
       
       Mildly interesting, it seems that one of the name servers for the .de DNS zone has all of their Cogent customers going via CNNIC (China Internet Network Information Center) all the way to ChinaA traceroute from Cogent in Frankfurt:traceroute to 194.246.96.1 (194.246.96.1), 30 hops max, 60 byte packets 1  * * 2  be5200.ccr41.fra05.atlas.cogentco.com (154.54.76.169)  0.603 ms 3  be7946.ccr42.par01.atlas.cogentco.com (154.54.72.117)  9.937 ms  4  be2780.ccr32.mrs02.atlas.cogentco.com (154.54.72.226)  20.813 ms  5  be2899.ccr21.hkg02.atlas.cogentco.com (154.54.0.42)  181.371 ms  6  154.18.9.165 (154.18.9.165)  185.283 ms  7  159.226.254.229 (159.226.254.229)  220.828 ms  8  * * 9  218.241.107.69 (218.241.107.69)  221.520 ms !X *Probably a mistake rather than anything malicious, but that's still some extra long haul miles for some DNS queries
       
 (DIR) Post #B6AkreIEVqcuzabGgS by benjojo@benjojo.co.uk
       0 likes, 1 repeats
       
       Cracking open a new tube of toothpaste and uh, they shurnkflated the toothpaste 😢
       
 (DIR) Post #B6CKPvnvbVG4haT3fE by benjojo@benjojo.co.uk
       1 likes, 1 repeats
       
       Forgot to post this last month, but there is a abandoned huge 32m satellite dish sitting in the Azores, with nature slowly reclaiming it with weeds and moss (as is everything in the Azores)You can see a very similar (likely the same model) still being used in Pakistan for PTCL here on google maps
       
 (DIR) Post #B6CKPwGdskE88dtzQ8 by benjojo@benjojo.co.uk
       0 likes, 0 repeats
       
       The nameplate on the dish, I would love to know what the story on this dish. I guess it became defunct when subsea optical cables landed on the Azores(the photo here has been altered a bit to make it easier to read)
       
 (DIR) Post #B6GC7rhi5Vo9luH0uO by benjojo@benjojo.co.uk
       1 likes, 0 repeats
       
       Despite the common consensus, self hosting your outbound email it's not impossible to do (*)bgp.tools has been sending it's own outbound email since day one of having the ability to send email, while i have been doing a migration i have discovered that rspamd (for DKIM signing) was keeping it's own logs outside of journalctl, meaning they never got rotated (grrr)The upside of this log rotation failure is that I can give you this graph: The total email volume sent per month via bgp.toolsI don't think it has been particularly hard (other than hotmail) to run this, and it means that I don't have to give customer emails to another 3rd party.I think the only struggle for a lot of people is that it's quite difficult to find "clean" or at least "boring" IPs to send out from. i suspect you probably couldn't replicate these results with Hetzner/Digital Ocean/etc without some serious fighting or luck(*) unless your service depends on sending to hotmail/live/msn emails, because that shit is impossible
       
 (DIR) Post #B6JxTu0vSVZqcu9RAm by benjojo@benjojo.co.uk
       1 likes, 0 repeats
       
       The Debian Bookworm -> Trixie upgrade path is by far the [worst/most explosive] I have in recent memory, on the same level of tricky as the sysvinit -> systemd migrationThe sysctls location change being the #1 killer, but there are so many paper cuts in that particular upgrade to keep an eye out for
       
 (DIR) Post #B6T07LFc4i7Wj0auMC by benjojo@benjojo.co.uk
       1 likes, 0 repeats
       
       The puzzling habit of networking social events having counterproductively super loud live music
       
 (DIR) Post #B6YlMs1UB7PuLUgzdg by benjojo@benjojo.co.uk
       1 likes, 0 repeats
       
       Cor, RIPE just had a Brexit referendum moment 51.12% to a 48.88% vote On a incredibly contentious topic that has been squabbled for yearsOr 68 votesThis will surely not have any long running consequences to the mailing list arguments...
       
 (DIR) Post #B6dNIX9QPZfPLQbYvI by benjojo@benjojo.co.uk
       1 likes, 0 repeats
       
       A classic situation
       
 (DIR) Post #B6iqdo3582wzeogS24 by benjojo@benjojo.co.uk
       1 likes, 0 repeats
       
       No thank you, I would rather do some incredibly unpleasant things than that
       
 (DIR) Post #B6natzRFvEHs8iUAfQ by benjojo@benjojo.co.uk
       0 likes, 0 repeats
       
       Got lost in a rabbit hole, and ended up adding MBR (aka "BIOS") booting support to the headless IPMI resetter, So I could wipe a HPE Gen 8 machine without faffing with a screen and OSMan there are about 1000 different ways to make a ISO and about 3 of them actually result in a bootable image on all BIOS + UEFI + HPhttps://github.com/benjojo/headless-ipmi-reset
       
 (DIR) Post #B6pQ7KhNTjoUf46e3s by benjojo@benjojo.co.uk
       0 likes, 0 repeats
       
       FWIW, It seems like one of the old Twitter ASNs AS63179 seems to be now doing heavy web scraping (presumably for grok), you can probs get away with dropping the whole thing