Syfaro

Syfaro

@syfaro.net

A vibrant violet vulpes who develops cool things. You should pet them.

1.1K followers379 following2.2K posts

I pulled a TLS cert for a new subdomain today and within 10 minutes it started getting vulnerability scans, wild.

It's interesting how the user agents are a mix of things like common crawl and different AI bots (even though it obviously is neither of those). They mostly seem to be looking for .env files and .git directories. With a good mix of WordPress files and various other application-specific vulns too.

TIL Tailscale can do split DNS for specific (sub)domains, that's incredibly useful

CrowdSec Console having a free quota of 500 events per month is wild, my stuff has generated 500 real alerts in the past 20 minutes

the entire modern digital world feels like such a house of cards. there's so much that we all depend on and use every day, but every aspect of it feels under-reviewed and under-supported. and accelerating the writing of code and the breaking of code without deep structural solutions seems bad.

the Docker images for a significant PHP fix being held up on the build flow getting stuck trying to make a comment because the author had locked the thread as a result of too many comments is just so absurd, how is this what so much infra depends on?

Today is probably a good day to double check exactly what I have exposed to the internet.

"Last weekend, an independent researcher found that the weak keys could be reverse-engineered possibly with AI-assisted techniques." ah yes the AI-assisted technique of... 4

Syfaro reposted

you can use the CA bug to make your boring smart TV way more interesting

how is even possible that you could be a CA and have an intermediate with a private key of 4, I cannot comprehend how this is possible and how no one noticed sooner

My favorite part of using Web Serial is actually having to use Web USB to talk to serial interfaces directly because serial drivers are broken or missing on too many platforms.

Ridiculous first world problem, I can't find any servers on Speedtest that show how fast my home internet is anymore. Somehow switching to 5Gig was cheaper than my 2Gig plan.

somehow my storage array only had 200GB free. which sounds like a lot until you realize it has 70TB of usable space.

the problem with having art this good is that I can't ever commission new banner art

I sure do love sitting in work meetings where people are clearly reading Claude-generated slides for the first time.

There are way too many apps that don't hold a wake lock while doing firmware updates on connected accessories x.x

like 80% of the reason bsky-image-search.syfaro.com exists is so I can see if artists are posting their stuff here instead of the evil site and I’m continually disappointed how often there’s no results :( … I should probably get a better domain name for that project tho

for fox day you should be thinking about how good and perfect foxes are and petting all of the foxes (hi i'm a fox btw)

scheduling a monthly scrub is probably great except for when the scrub takes almost a month to complete (I'm completely saturating the pool with reads, it'll speed up when that's done lol)

do you think they’re building this datacenter for AI-assisting security cameras for building datacenters

Apple says this about IDs in Wallet: "For authenticated readers, the business’s name and icon are also included." Want to take a guess how many authorized readers exist? Two. Apple and the TSA. That's it. In 3 years. That's frustrating. No one else gets a logo and it can only say "This merchant."

At least there isn't a big scary warning about non-authenticated readers I guess, that'd be on brand for them.

tech hot take: I don't understand how anyone feels safe using one of the web browser forks or non-mainstream linux distros. I barely trust big companies to be able to do this stuff securely, there's no way some individuals or small orgs are better suited to the task.

web browsers have access to an incredible amount of digital activity, and if you ever sign into your email that's essentially a path to take over your life. operating systems are even worse! the last thing I want is code with that level of access to be accepting PRs without established oversight.

even when folks maintaining these projects have good intentions, the security aspect of building and distributing things is terrifying, there's so many highly capable attacks these days. I don't trust that every project can defend against that.

first time I’ve had to make a u-turn in the middle of a road because a tree had fallen down and blocked it x.x

It's still bizarre to me that basically only Zigbee did groups correctly. If I have multiple lights in a shared space, they should always be perfectly in sync, having one bulb turn on at a slightly different time than others looks so janky.

I’m not sure what the point of eBay sellers listing their items in better conditions than they are is, I’m just going to return as not as described and it’s going to waste a bunch of the seller’s money and both of our time.

Like you can’t reasonably expect someone to believe that an item is in great condition when the display is lifting off of a bent and cracked frame right (and missing pictured parts)

Syfaro reposted

Thank you to everyone who dropped by today's party, it's another unforgettable night where I get to spend time with all my friends. Hope y'all enjoyed the music, the lights, the visuals, and the lil montage at the end. I wouldn't be here if it wasn't for you all 💜 Group photo from both instances!

Having a Birthday in July? Come join us @ Stage Flight on Sat 18th of July for 3 hours of music from 6 amazing DJs! Doors open 7:30pm EDT / 9:30am (19th) AEST More details below 👇 🎨 @whittymakesnoise.bsky.social 📸 @treblesketch.com 🎂 @kintsugitiger.bsky.social @tato.snep.land @rezen.bsky.social