Brutkey

Dio9sys
@Dio9sys@haunted.computer

Security researcher by day, weird deer lady by night. Big fan of usenet and smolnet and prone to talking in equal measure about Linux and stuffed animals.

She/her


Notes
15230
Following
0
Followers
0
Gemini capsule
<gemini://dio9sys.fun>
neocities
https://dio9sys.neocities.org/
uwu or owo
uwu
furcode2
FArD3ad A- C+ D H- M+t P+++ R- T- V++ W RLCT a+ c++l e+ f+ g++ h+++ i+wf j+s m p- a+ Sfa sfa
Dio9sys
@Dio9sys@haunted.computer

New commission day!

This piece was drawn by
https://ko-fi.com/fakegamerjamie

I like rollerblading, I like funky dresses, and I like bright colors, so this one is very fun :3

Dio9sys
@Dio9sys@haunted.computer

New commission day? New commission day!

I just got this back from didelphidae (
https://commiss.io/didelphidae) and I'm SO pleased with it.

Fun fact: I've owned the same bright green gameboy color since I was a kid :)

Dio9sys
@Dio9sys@haunted.computer

I just got a ref sheet done and I'm so pleased with it!

Ref sheet by
https://commiss.io/glyphpuppy


Dio9sys
@Dio9sys@haunted.computer

checking fedi like

Dio9sys
@Dio9sys@haunted.computer

I like how every online discussion of unions goes like this:

Person: Here is an example of gross human rights abuses at a company. It's a good thing the workers are trying to unionize!

Person 2: Yeah, a union might help in this case!

Former general contractor: let me tell you a thing or three about the time I had to work with [spits on the ground] UNION LABORERS who kept TAKING BREAKS and needing SAFETY PAPERWORK

Rest of the comments section: wow, this former general contractor makes a good point, we need to prevent unions from ever forming

Dio9sys
@Dio9sys@haunted.computer

I like how tailscale needs a special ppa added to install on ubuntu, but Canonical suggests you use the snap they make, but the snap is broken in several key features, such as the ability to use tailscale with ssh.

Because who needs to use wireguard for ssh, right?

right?

(it's fine, I'm installing the deb straight from the vendor, but omg this is the first time I've used main branch Ubuntu in years and the small mistakes Canonical has made over the years are really really obvious)

Dio9sys
@Dio9sys@haunted.computer

with god as my witness, I am going to get some local gaymers into Altered TCG so I have more than one person to play against

Dio9sys
@Dio9sys@haunted.computer

The truth is out there

Dio9sys
@Dio9sys@haunted.computer

I miss the days when I could complain about LMM (Lin Manuel Miranda) being everywhere instead of LLM (Large Language Model) being everywhere

Dio9sys
@Dio9sys@haunted.computer

what I was taught the double fisherman's knot for: tying weights into fishing line, holding climbing rope together, making an adjustable tension knot for putting up a tent

what I use the double fisherman's knot for: nalbinding, making the adjustment area of gay little bracelets and necklaces

Dio9sys
@Dio9sys@haunted.computer

Friend sent a link to this new "decentralized, censorship-resistent internet" proposal:

https://ravendevteam.org/betanet/

I will not get into the cryptocurrency part, as I'm sure Molly White is better at that than me, and I will not get i to the cryptography section as I'm sure Soatok Dreamseeker is better at that than me, but I will comment on one quote from the spec:

In this context, I believe "front origin" is the HTTPS packet that is encapsulating the rest of the traffic:

"Clients MUST mirror the front origin’s fingerprint class (JA3/JA4 family, ALPN set, extension order, GREASE, H2 SETTINGS, H3 availability)."

...this requirement has got me stumped. Does it mean you have to match the ja4 fingerprint of the front server? How would you reasonably do that in a way that can scale?

Or is it saying that you provide a fingerprint that has to match the same type of fingerprint as the origin? In that case, couldn't you just set a header value that the client pulls and repeats? why would it have to be a fingerprint specifically?

Maybe I am misreading the spec, or that requirement, but it isn't making sense to me.

Dio9sys
@Dio9sys@haunted.computer

If you wanna go to my defcon hotel party, simply drive to Maine and bring a case of moxie.

We won't be at defcon, but it'll still be a party since moxie is involved

Dio9sys
@Dio9sys@haunted.computer

Registering for my health insurance's online portal thingy.

I've heard of password requirements, but username requirements?

And the "no more than one period in a row" smells an awful lot like directory traversal...