Notices by Jan Schaumann (jschauma@mstdn.social)

I miss Web 1.0. You click a link, you get to the website, you read the content. What a concept.

So people are totally now using AI models for regular stuff that you can do via shell scripts and cron, because why do something for free when you can burn tokens and at the same time actively forget how to use the normal tools at your disposal?

🤦 🙏 🤦

Now this is some bullshit.

Today: Don't have an "approved" phone? Too bad for you.
Tomorrow: Don't have a Google account? Good bye.

Another nail in the coffin of the Open Web. Those fuckers.

https://thecodersblog.com/google-breaks-recaptcha-for-de-googled-android-users-2026/

https://cybernews.com/privacy/google-qr-code-recaptcha-requires-approved-phone/

Now what the fresh fuck is this, then?

Not today, Satan.

#DirtyFrag status/advisories:

AlmaLinux:
https://almalinux.org/blog/2026-05-07-dirty-frag/

Debian:
https://security-tracker.debian.org/tracker/CVE-2026-43500
https://security-tracker.debian.org/tracker/CVE-2026-43284

Gentoo:
https://bugs.gentoo.org/974307

RedHat:
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2026-43284
https://access.redhat.com/security/cve/cve-2026-43284
nothing yet on CVE-2026-43500

Rocky:
https://kb.ciq.com/article/rocky-linux/rl-dirty-frag-mitigation

SUSE / OpenSUSE:
https://www.suse.com/security/cve/CVE-2026-43500.html
https://www.suse.com/security/cve/CVE-2026-43284.html
https://www.suse.com/c/addressing-copy-fail2-aka-dirtyfrag-in-suse-virtualization/

Ubuntu:
https://ubuntu.com/security/CVE-2026-43284
https://ubuntu.com/security/CVE-2026-43500
https://ubuntu.com/blog/dirty-frag-linux-vulnerability-fixes-available

AWS:
https://aws.amazon.com/security/security-bulletins/rss/2026-027-aws/
https://explore.alas.aws.amazon.com/CVE-2026-43284.html

The rxrpc module is likely easier for you to block, but if you can't blocklist the ESP kernel modules, note that that exploit path requires the ability to call `unshare(CLONE_NEWUSER | CLONE_NEWNET)`.

That is

```
sysctl -w kernel.unprivileged_userns_clone=1
```

prevents the ESP exploit.

(That also prevents that other silly variant.)

#DirtyFrag

Oh FFS.

#DirtyFrag
https://github.com/V4bel/dirtyfrag/blob/master/assets/write-up.md

"Because the embargo has now been broken, no patches or CVEs exist for these vulnerabilities."

https://www.openwall.com/lists/oss-security/2026/05/07/8

Well, just put that CopyFail incident work on rinse and repeat, I suppose...

*slow clap* to everybody out there doing Anthropic's Marketing Team's job for them. 🍿

"#Mythos discovers 27-year-old bug" is intentionally conflating length of existence of a bug with difficulty of finding it. There is no such correlation.

If software projects and companies performed regular, ongoing, in-depth code audits over and over and missed it, sure, then age would be meaningful, but that is simply not what organizations do.

But sure, it makes for great headlines.

The monetary waste aside, and assuming companies using leaderboards and bonus incentives for token use haven't ever heard (!) of Goodhart's Law, the obliviousness to the environmental impact resulting from "tokenmaxxing" is just obscene.

Encouraging and rewarding employees to do maximum environmental damage is positively evil and journalists should call this out in their coverage every single time.

https://www.nytimes.com/2026/03/20/technology/tokenmaxxing-ai-agents.html

Starting to think the real risk is not AI replacing junior staff, but senior staff quitting because they just can’t take this AI bullshit any longer and just opt for early retirement.

Why I'm such a jolly chap these days.

System Administration: Week 5: Networking I: IPv6 Basics

In this video, we get familiar with our Big Hero IPv6, looking at the structure of the IPv6 header and IPv6 address representations.

Since we're using AWS #EC2, remember that we have instructions for how to set up a dual-stack VPC and subnet to launch your instances in:

https://www.netmeister.org/blog/ec2-ipv6.html

https://youtu.be/wZ5cmlIlP3I

#sysadmin #devops #sre

System Administration: Week 5: Networking I: IP Allocation & IPv4 Exhaustion

Mommy, where do IP addresses come from? In this video, we discuss how IANA allocates IP addresses to the Regional Internet Registries and try to illustrate just how large the #IPv6 address space is.

https://youtu.be/r2GXh8uUgWc

#sysadmin #devops #sre

System Administration: Week 5: Networking I:The Physical Internet

In this video, we look at the physical structure of the internet, with a focus on submarine internet communications cables. Jumping from the bottom of the OSI stack all the way to Layer 9 ("political"), we then discuss how different countries use their political power to enforce internet blocks on their citizens, leading us to warrantless wiretapping in AT&T's room 641A.

https://youtu.be/4YrHdD1uIxs

#sysadmin #devops #sre

System Administration: Week 5: Networking I: A Network of Networks

In this video, we look at how independent networks connect to one another, how Autonomous Systems numbers allow us to identify network operators, and how peering between independent ASs works.

https://youtu.be/OOq7jGlhBjY

#sysadmin #devops #sre

System Administration: Week 6: Networking II: A Simple Request

In this video, we trace a simple HTTP request made via telnet to find out just how exactly our application knows how to connect to the remote server. In the process we learn about the ktrace(1) utility, as well as the nsswitch.conf(5), hosts(5), and resolv.conf(5) configuration files.

https://youtu.be/mw1YzFSYuwE

#sysadmin #devops #sre

System Administration: Week 6: Networking II: ARP and NDP

In this video, we illustrate the functionality of the Address Resolution Protocol (ARP) and it's IPv6 equivalent, the Neighbor Discovery Protocol (NDP).

https://youtu.be/1gtkpbF_h6M

#sysadmin #devops #sre

System Administration: Week 6: Networking II: ICMP

In this video, we demonstrate the use of the Internet Control Message Protocol or ICMP by tracing and analyzing ping(1) and traceroute(1) invocations.

And in case you're wondering: http://shouldiblockicmp.com

https://youtu.be/JQn8PgfZ68M

#sysadmin #devops #sre

System Administration: Week 7: DNS, Part I

In this video, we are beginning our discussion of the #DNS. We go back to the early days of the internet when copying /etc/hosts from system to system was the way to resolve hosts...

(Hosts file from 1983: https://rscott.org/OldInternetFiles/hosts.19831104.txt)

...and we cover the structure of the domain name space and the creation of the top-level domains.

(Second-level domain inventory from 1987: https://rscott.org/OldInternetFiles/domain-info.19871215.txt)

https://youtu.be/-bpIT7M9i00

#sysadmin #devops #sre