wgs

joined 2 years ago
MODERATOR OF
[–] wgs 4 points 9 months ago (3 children)

Une dictature, comme vous y allez !

[–] wgs 4 points 9 months ago (1 children)

The real answer here.

[–] wgs 9 points 9 months ago
[–] wgs 2 points 9 months ago* (last edited 9 months ago)

Right now overlays requires elevated privilèges, but ideally it shouldn't. Rewriting the Linux kernel to implement per user namespaces like plan9 does would allow unprivileged actions from any user (just like if any user was sitting in a container, overlayed from the base system).

I know we're not there, and that's not the direction development is going, but this thread is about dreams, right ? 😉

About the XDG specs, they serve a totally different purpose so they're out of the discussion IMO. I'm not advocating against env variables. Just $PATH which is a workaround as I see it, but your mileage may vary. As for your "issue" with steam, of course this is the best way to solve it. Because of today's OS limitation. My point is that with a better designed namespacing implementation, there would be more elegant solutions to solve it (and would get rid of the need to use LD_LIBRARY_PATH too, or literally any *_PATH env variable)

[–] wgs 1 points 9 months ago* (last edited 9 months ago) (2 children)

By mounting the binary over, I mean something like a bind mount. But in your case of a wrapper script, it doesn't apply indeed. Though in this case I would simply name the script steam-launcher and call it a day 🙂

Having multiple executables with the same name and relying on $PATH and absolute paths feels hackish to me, but that's only a matter of preference at this point.

[–] wgs 1 points 9 months ago

I'm not saying we should get rid of $PATH right now. My point is that it was created to solve a problem we don't have anymore (not enough disk capacity), but we still keep it out of habit.

As a reminder, the discussion is about what should be rewritten from scratch in linux. And IMO, we should get rid of $PATH as there are better options.

[–] wgs 1 points 9 months ago

Today's software would probably break, but my point is that $PATH is a relic from ancient times that solved a problem we don't have anymore.

[–] wgs 2 points 9 months ago (5 children)

You missed my point. The reason $PATH exists in the first place is because binaries were too large to fit on a single disk, so they were scattered around multiple partitions (/bin, /sbin, /usr/bin, etc...). Now, all your binaries can easily fit on a single partition (weirdly enough, /usr/bin was chosen as the "best candidate" for it), but we still have all the other locations, symlinked there. It just makes no sense.

As for the override mechanism you mention, there are much better tools nowadays to do that (overlayfs for example).

This is what plan9 does for example. There is no need for $PATH because all binaries are in /bin anyways. And to override a binary, you simply "mount" it over the existing one in place.

[–] wgs 2 points 10 months ago (9 children)

$PATH shouldn't even be a thing, as today disk space is cheap so there is no need to scatter binaries all over the place.

Historically, /usr was created so that you could mount a new disk here and have more binaries installed on your system when the disk with /bin was full.

And there are just so many other stuff like that which doesn't make sense anymore (/var/tmp comes to mind, /opt, /home which was supposed to be /usr but name was already taken, etc ...).

[–] wgs 10 points 10 months ago

I KNEW IT !! Last of the puffer clan, that couldn't be real !

[–] wgs 4 points 10 months ago* (last edited 10 months ago) (1 children)

sysupgrade seems to fetch 7.5 right now. I'll see how well it goes !

Edit: upgrade went fine, running 7.5 now !

[–] wgs 2 points 10 months ago

Can't wait for next year to keep on investigating this... Girl does have the same "run bad" tatoo as her though so that's why I'm asking ;)

85
Feeling floppy today ? (lemmy.sdf.org)
submitted 1 year ago by wgs to c/unixporn@lemmy.ml
 

CYB3R HUNT is an epochalyptic online adventure of which you are the hero! Check out the about page, the rules, and prepare for the opening on the 31^st^ of october !

Artworks are made by prahou, creator of the unix_surrealism universe (check out his mastodon account for the image on the background, and more quality content!).

As for the programs running :

  • window manager: glazier & wmutils
  • terminal: st
  • web browser: firefox (with borders removed for better visual effect)
  • irc client: irssi
  • image viewer: lel
  • widgets: lemonbar
 

Je viens d'achever la création de ma CYB3R HUNT, une aventure dystopique dont vous êtes le héros!

L'accès ouvrira à la fin du mois, et offrira un grand nombre de challenge techniques allant crescendo en terme de difficulté et d'implication. En progressant dans les défis proposés, vous ferez avancer l'histoire vers son dénouement, et gagnerez des "flags" permettant de mettre à jour votre score sur le tableau général.

Rendez-vous le 31 octobre pour vous mesurer à ce défi technique que je vous propose ! N'hésitez pas à repartager le lien d'ici là; plus on est de fous, plus ont rit ! 😉

https://cyb.farm

(J'espère que l'auto promotion n'est pas un problème, auquel cas je retirerais mon post)

 

Came back from a trip in Corsica where we climb the most mental slab I've ever put my hands on !

16
Signed epochalypse (lemmy.sdf.org)
submitted 1 year ago* (last edited 1 year ago) by wgs to c/unix_surrealism
 

cross-posted from: https://lemmy.sdf.org/post/5947610

On the 19th of January [...] The admin team was helpless. In the split of a second, the whole CYBFARM network went down. Every subsystem on the planet stopped, and there was nothing they could do against it. The CYBFARM has always been autonomous, and nobody had enough knowledges of its internals to debug or fix anything.

Hopefully, a few minutes later, the first system came back up: the security module. Then other subsystems rebooted one after the others, and the production of goods restarted as expected.

We later found that an overflow occurred in the system clock. This caused a disruption of the internal message bus of the CYBFARM, which entered a locked state, and shut itself down to prevent harming the subsystems. The CYBFARM eventually found and patched the bug automatically, without any external intervention from our part. This was the first time in History that [an autonomous system] healed itself without human action!

This is such a major milestone in History!

Agatha Zieg-Movnieski
Epochalypse incident report

artwork: @pmjv


The CYB3R HUNT will be starting soon… Spread the word, and get ready!

3
Signed epochalypse (lemmy.sdf.org)
submitted 1 year ago* (last edited 1 year ago) by wgs to c/cybfarm
 

On the 19th of January [...] The admin team was helpless. In the split of a second, the whole CYBFARM network went down. Every subsystem on the planet stopped, and there was nothing they could do against it. The CYBFARM has always been autonomous, and nobody had enough knowledges of its internals to debug or fix anything.

Hopefully, a few minutes later, the first system came back up: the security module. Then other subsystems rebooted one after the others, and the production of goods restarted as expected.

We later found that an overflow occurred in the system clock. This caused a disruption of the internal message bus of the CYBFARM, which entered a locked state, and shut itself down to prevent harming the subsystems. The CYBFARM eventually found and patched the bug automatically, without any external intervention from our part. This was the first time in History that [an autonomous system] healed itself without human action!

This is such a major milestone in History!

Agatha Zieg-Movnieski
Epochalypse incident report

artwork: @pmjv

10
Security Mod (lemmy.sdf.org)
submitted 1 year ago* (last edited 1 year ago) by wgs to c/cybfarm
 

Case stared at the old laptop.

Is it broken ?

Molly closed the lid, and put it next the others, all destroyed by the CYBFARM security module.

There must be a way to bypass it...

artwork: @pmjv

 

I used to rock a bare metal 1Tib HDD server for 17€/month, that I used as an NFS server for all my other servers which needed storage space.

First of all, NFS kinda sucks and I'm looking for alternative solution that I can use on OpenBSD to mount remote volumes.

Secondly, I'm planning to move this server to hetzner (my current provider), but they lack affordable storage (it's 50€/month for 1Tib). Do you know an hosting provider which would provide high volumes for not so expensive prices ?

0
submitted 2 years ago* (last edited 1 year ago) by wgs to c/france@jlai.lu
 

Salut les Français !

Je bosse sur un projet dans le cadre duquel j'ai besoin de construire une table de correspondance entre des mots de passe et leurs hash cryptographiques.

Seulement voilà, l'algorithme de calcul de ces hash (argon2id) est spécifiquement construit pour être long et coûteux a calculer. Or moi j'ai besoin d'un gros volume de données aléatoires (+2Gib), et memes avec toute ma puissance dont je dispose a la maison, ça me prendrait des mois.

J'ai donc mis au point hashcrush, un "brûleur de CPU", qui calcule ces précieux hash en utilisant toute la puissance disponible sur la machine qui l'exécute. Je l'ai testé sous Linux et OpenBSD.

Parce que je crois en l''esprit communautaire et l'entraide dans la vie de tous les jours, je préfères demander de l'aide au sein des communautés auxquelles j'appartiens plutôt que d'engraisser les fournisseur de service (qui me louerait du CPU à foison pour le même résultat avec grand plaisir).

Donc si vous voulez bien me filer un coup de main, clonez le dépôt et mangez du hash ! Toutes les infos sont sur la page du projet.

Si vous avez des questions, n'hésitez pas à les poser ici.

Merci les copains :)

Edit: pour ceux que ça intéresse, on a atteint l'objectif. Ça nous aura prit 3 jours, contre 8 mois si j'avais fais ça tout seul !

25
RDP Traps ? (self.cybersecurity)
submitted 2 years ago* (last edited 2 years ago) by wgs to c/cybersecurity@sh.itjust.works
 

I've recently dug into my firewall logs and the most traffic I seem to receive from internet is targeting port 3389.

While I could just blacklist the source IPs and call it a day, I would like to actually listen on this port and "trap" them in a fake RDP connection.

There are tools like endlessh, and I've found that you can do the same for http by sending an endless stream of headers. I would like to do the same for RDP, and before I start digging into the whole spec, I was wondering if there is already something similar for RDP.

Is anyone aware of that ? Is that even a thing ?

109
Wake up, Neo ... (lemmy.sdf.org)
 

cross-posted from: https://lemmy.sdf.org/post/1341812

The one true white rabbit.

19
Wake up, Neo ... (lemmy.sdf.org)
submitted 2 years ago by wgs to c/plan9
 

The one true white rabbit.

 

Hey everyone ! I finally decided to monitor my applications more closely with Grafana. However I'm having issues building dashboards their logs.

Their logs are currently sent over syslog (in RFC3164 format) into telegraf. But it simply puts the whole message into the message field, so I can't use specific fields (eg. URL for httpd, source IP for DNS requests, username for SSH, …) to build graphs.

I've read about grok patterns, but I have no idea how to use them.

Would someone have any pointer on how I could make sense out of these logs for later use ?

view more: ‹ prev next ›