Security Engineer. I mostly post about IPv6 and pictures of my cats. I help run Tor relays for @emeraldonion. Also trying to bring more chaos to the UK with @MinistryOfChaos. :rainbow_heart: :trans_heart:
Public Key
npub1f33tc4gp08g0jy9mac4f8anmfh8w8ugr7mpvg3ta9e78ha5r6jkqwj6udj Profile Code
nprofile1qqsycc4u25qhn58ezza7u25n7ea5mnhr7ypldskyg47julrm76paftqpz4mhxue69uhhyetvv9ujuerfw36x7tnsw43qg3av76
Show more details
Published at
2026-10-06T13:45:29Z Event JSON
{
"id": "9a806c4b498e724cf91b98c22a8608f48ec2ade80f06c821b3faefa8f2aac08e" ,
"pubkey": "4c62bc550179d0f910bbee2a93f67b4dcee3f103f6c2c4457d2e7c7bf683d4ac" ,
"created_at": 1791294329 ,
"kind": 0 ,
"tags": [
[
"emoji",
"rainbow_heart",
"https://media.infosec.exchange/infosec.exchange/custom_emojis/images/000/162/368/original/01d6c2b8ab653df5.png"
],
[
"emoji",
"trans_heart",
"https://media.infosec.exchange/infosec.exchange/custom_emojis/images/000/028/458/original/30df78137843f162.png"
],
[
"proxy",
"https://infosec.exchange/users/alexhaydock",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub"
]
],
"content": "{\"name\":\"Alex\",\"about\":\"Security Engineer. I mostly post about IPv6 and pictures of my cats.\\n\\nI help run Tor relays for @emeraldonion.\\n \\nAlso trying to bring more chaos to the UK with @MinistryOfChaos.\\n\\n:rainbow_heart: :trans_heart:\",\"picture\":\"https://media.infosec.exchange/infosec.exchange/accounts/avatars/109/380/986/342/771/746/original/f035154e03e19fb2.jpg\",\"banner\":\"https://media.infosec.exchange/infosec.exchange/accounts/headers/109/380/986/342/771/746/original/1bb85c90be8c9888.png\",\"nip05\":\"[email protected] \",\"fields\":[[\"Pronouns\",\"he/him\"],[\"Locale\",\"en_GB\"],[\"Blog\",\"https://blog.infected.systems\"],[\"GitHub\",\"https://github.com/alexhaydock\"],[\"AS\",\"https://as215768.net\"]]}" ,
"sig": "07201df100e5145ed203721ac5192c3cdc18ac8feaaed1815bbc3a82d2219aa44500250db26bf8b21f22176263e649e5bc37c6694f11c09c924120a35c231806"
}
Last Notes npub1f33tc4gp08g0jy9mac4f8anmfh8w8ugr7mpvg3ta9e78ha5r6jkqwj6udj Alex Did anyone say IPv6-only couch gaming? :neocat_cool_fingerguns: #ipv6 #ipv6only #bazzite https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/560/144/134/431/255/original/eb5d6688fa215147.jpeg npub1f33tc4gp08g0jy9mac4f8anmfh8w8ugr7mpvg3ta9e78ha5r6jkqwj6udj Alex Trying to read the CA cert inclusion policy because of Today's Massive Security Problem #1 but the site is offline due to Today's Massive Security Problem #2 :blobcat_thisisfine: https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/478/487/914/446/621/original/c059abac07128b78.png npub1f33tc4gp08g0jy9mac4f8anmfh8w8ugr7mpvg3ta9e78ha5r6jkqwj6udj Alex cursed technology of the day https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/439/130/672/239/407/original/8048cafc2e196373.png npub1f33tc4gp08g0jy9mac4f8anmfh8w8ugr7mpvg3ta9e78ha5r6jkqwj6udj Alex No NAT November shaping up nicely this year :neocat_laptop: On a fresh out of the box install of Win 11 it only takes one command and a reboot to enable WinCLAT: ``` netsh.exe interface clat set global permit=enabled ``` #ipv6 #ipv6only https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/394/425/809/636/295/original/bf6248b98dd2914e.png npub1f33tc4gp08g0jy9mac4f8anmfh8w8ugr7mpvg3ta9e78ha5r6jkqwj6udj Alex it's way easier than I thought to inject arbitrary data into a system using EFI vars :eyes_happy: i can think of so many uses for this :neocat_evil_3c: i think each var can be up to 64KB but nothing stops data spanning multiple vars https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/385/260/191/690/015/original/415ea5cec1866f74.png npub1f33tc4gp08g0jy9mac4f8anmfh8w8ugr7mpvg3ta9e78ha5r6jkqwj6udj Alex the whole of the UK this week: #caturday https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/101/335/597/670/442/original/036c1a5ffe970b17.mp4 npub1f33tc4gp08g0jy9mac4f8anmfh8w8ugr7mpvg3ta9e78ha5r6jkqwj6udj Alex This blog is hosted on a Nintendo Wii... in a field https://blog.infected.systems/posts/2026-07-17-this-blog-is-hosted-on-a-nintendo-wii-in-a-field/ #emfcamp https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/935/161/218/169/916/original/32b1c2b892bcd484.jpg npub1f33tc4gp08g0jy9mac4f8anmfh8w8ugr7mpvg3ta9e78ha5r6jkqwj6udj Alex @nprofile…a2ht I moved my blog to a Wii one rainy weekend as a joke, but then people liked it so much I’m still running it like that over a year later… https://blog.infected.systems/posts/2025-04-21-this-blog-is-hosted-on-a-nintendo-wii/ npub1f33tc4gp08g0jy9mac4f8anmfh8w8ugr7mpvg3ta9e78ha5r6jkqwj6udj Alex Still not 100% sold on #NixOS, but I guess this is how I do major version upgrades for my desktop now which is fun... :neocat_laptop: https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/648/046/797/805/953/original/20f9191df0bfac7a.png npub1f33tc4gp08g0jy9mac4f8anmfh8w8ugr7mpvg3ta9e78ha5r6jkqwj6udj Alex The UK NCSC are releasing some kind of inline display connection widget thing to “secure” HDMI and DisplayPort connections. Really struggling to understand the threat model on this one… it seems so badly explained in the post. Are they trying to suggest channels like EDID or HDMI CEC are actual threat vectors? Or maybe it’s an attempt to defend against people plugging in inline capture cards or something? (Can’t really see how that’d work anyway) :neocat_googly: https://www.ncsc.gov.uk/news/world-first-ncsc-engineered-device-secures-vulnerable-display-links npub1f33tc4gp08g0jy9mac4f8anmfh8w8ugr7mpvg3ta9e78ha5r6jkqwj6udj Alex Real world implications of the OSA “Sorry I’m 15 so I can’t say the name of the [Sexual Offences Act 2003] or Reddit will mark my post as not visible to me and I won’t be able to verify my identity to view my own post.” https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/159/758/931/134/357/original/5e84060491b2daac.jpeg npub1f33tc4gp08g0jy9mac4f8anmfh8w8ugr7mpvg3ta9e78ha5r6jkqwj6udj Alex The new "AI Kill Switch" in Firefox is a welcome addition, but did they really not hook this up to the Enterprise Policy framework? :neocat_scream: Doesn't seem to be affected by the existing GenerativeAI policy. @nprofile…26hz https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/136/581/994/171/178/original/879b27194e50b371.png npub1f33tc4gp08g0jy9mac4f8anmfh8w8ugr7mpvg3ta9e78ha5r6jkqwj6udj Alex Lazyweb: Does anyone have a good FreshRSS client for iOS that actually acts as a client? I’ve tried a few, like FeedFlow, but the ones I’ve tried seem to download the list of feeds from the server and then fetch all the feeds locally. One of the main reasons I’m self hosting FreshRSS is so my phone *isn’t* fetching 95 different feeds in the background :neocat_shocked: npub1f33tc4gp08g0jy9mac4f8anmfh8w8ugr7mpvg3ta9e78ha5r6jkqwj6udj Alex @nprofile…ml9f I don’t use enough Bazzite on desktop but I maintain the Quickemu package in Fedora and have been using it with `rpm-ostree install quickemu` successfully on Silverblue for quite some time. Do you know whether the ostree package overlays are disabled on Bazzite, or just discouraged? npub1f33tc4gp08g0jy9mac4f8anmfh8w8ugr7mpvg3ta9e78ha5r6jkqwj6udj Alex excellent :blobcat_thisisfine: https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/691/233/667/198/986/original/fa0c5945f1915236.jpeg npub1f33tc4gp08g0jy9mac4f8anmfh8w8ugr7mpvg3ta9e78ha5r6jkqwj6udj Alex Oooh the CLAT for Windows is in Private Preview :neocat_laptop_owo: They made it in time for No NAT November! https://techcommunity.microsoft.com/blog/NetworkingBlog/windows-clat-enters-private-preview-a-milestone-for-ipv6-adoption/4459534 #ipv6 npub1f33tc4gp08g0jy9mac4f8anmfh8w8ugr7mpvg3ta9e78ha5r6jkqwj6udj Alex cursed server upgrade time :neocat_googly: https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/565/075/575/550/825/original/80c32298b6759a30.jpeg npub1f33tc4gp08g0jy9mac4f8anmfh8w8ugr7mpvg3ta9e78ha5r6jkqwj6udj Alex average cat bed purchasing experience https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/544/274/107/974/368/original/0419b482587b7440.jpeg npub1f33tc4gp08g0jy9mac4f8anmfh8w8ugr7mpvg3ta9e78ha5r6jkqwj6udj Alex uk-wii-1 still up and working on my bookshelf #decentralization https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/405/838/258/216/650/original/6ac0848d17408dba.jpeg npub1f33tc4gp08g0jy9mac4f8anmfh8w8ugr7mpvg3ta9e78ha5r6jkqwj6udj Alex Thought my Wii-based webserver had broken while I wasn't around to fix it. Turns out it was just the WireGuard tunnel to the VPS that's presenting my ASN further upstream. Turned that off-and-on-again and now it works. Still going strong after 50 days! https://blog.infected.systems/status/ #wiibsite https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/663/798/902/222/408/original/1cc4062f6ff9469b.png npub1f33tc4gp08g0jy9mac4f8anmfh8w8ugr7mpvg3ta9e78ha5r6jkqwj6udj Alex Switch 2 has a working #IPv6 stack it seems, according to Reddit. I wonder if the days of Nintendo’s “forward all 65535 ports to your Switch” advice are coming to an end… https://www.reddit.com/r/ipv6/s/cmy7tWkZ18 https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/631/414/900/505/491/original/f6853f27d7065eb3.jpeg npub1f33tc4gp08g0jy9mac4f8anmfh8w8ugr7mpvg3ta9e78ha5r6jkqwj6udj Alex @nprofile…uy6d 👀 interesting. Should be working. The v4 frontend is just a redirect to the v6 backend so if either works then the v6 is working. Maybe it’s just not routable from your ASN for some reason? npub1f33tc4gp08g0jy9mac4f8anmfh8w8ugr7mpvg3ta9e78ha5r6jkqwj6udj Alex #caturday vibes https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/562/357/018/937/170/original/c4240cd00aa91372.jpeg npub1f33tc4gp08g0jy9mac4f8anmfh8w8ugr7mpvg3ta9e78ha5r6jkqwj6udj Alex Framework's diagnostic LED sequence design is a wonderfully human piece of engineering. Quite a comprehensive set of checks, and the status LED is on the *outside* of the machine! So you can just record a video of the blink sequence and compare it to their chart to find out what's going on. No opening it up or messing with debug pins or anything like that. https://gist.github.com/phaseOne/28b6666b94a837f67b39d4ab02ce86f7 https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/488/326/141/542/048/original/1a264789fecae428.mp4 npub1f33tc4gp08g0jy9mac4f8anmfh8w8ugr7mpvg3ta9e78ha5r6jkqwj6udj Alex @nprofile…xlhv @nprofile…xr5k Did somebody say Wii cluster? npub1f33tc4gp08g0jy9mac4f8anmfh8w8ugr7mpvg3ta9e78ha5r6jkqwj6udj Alex I’ve always felt the world needs more extremely indignant sounding error messages like this Better update that TOD clock I guess #netbsd https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/370/744/043/210/491/original/cdda9e14f5578982.jpeg npub1f33tc4gp08g0jy9mac4f8anmfh8w8ugr7mpvg3ta9e78ha5r6jkqwj6udj Alex Fantastic news — The Investigatory Powers Tribunal has rejected the Home Office’s attempt to have the Apple encryption case heard in secret! https://investigatorypowerstribunal.org.uk/judgement/apple-inc-v-secretary-of-state-for-the-home-department/ npub1f33tc4gp08g0jy9mac4f8anmfh8w8ugr7mpvg3ta9e78ha5r6jkqwj6udj Alex please don't judge my terrible cable management I promise it's a work in progress :blobnervous: npub1f33tc4gp08g0jy9mac4f8anmfh8w8ugr7mpvg3ta9e78ha5r6jkqwj6udj Alex Finally found a useful application for a smart speaker! https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/139/970/528/107/320/original/5212a8ce2afcd5cc.jpeg npub1f33tc4gp08g0jy9mac4f8anmfh8w8ugr7mpvg3ta9e78ha5r6jkqwj6udj Alex My assistant is honestly not being particularly helpful #caturday https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/086/357/268/994/760/original/dedd9cd73d491525.jpeg https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/086/357/479/717/502/original/e431d206dbdeb020.jpeg https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/086/357/714/018/957/original/a51d14f90c60565f.jpeg npub1f33tc4gp08g0jy9mac4f8anmfh8w8ugr7mpvg3ta9e78ha5r6jkqwj6udj Alex An #ageverification story in two parts https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/775/345/773/850/357/original/6e41173c70d75d79.png https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/775/346/698/418/006/original/1bb6d9c202f0c1bb.png npub1f33tc4gp08g0jy9mac4f8anmfh8w8ugr7mpvg3ta9e78ha5r6jkqwj6udj Alex Off-grid mesh networking never looked so adorable Having great fun with Meshtastic at #38c3 https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/741/506/048/898/234/original/d265cc746f314cd8.jpeg npub1f33tc4gp08g0jy9mac4f8anmfh8w8ugr7mpvg3ta9e78ha5r6jkqwj6udj Alex Do I know any #Fedora developers or package maintainers at #38c3 who might be willing to chat and help sponsor my first package? Looking to get into maintainership to improve the state of FOSS security tooling available in Fedora (and the wider CentOS / EPEL / RHEL ecosystem). npub1f33tc4gp08g0jy9mac4f8anmfh8w8ugr7mpvg3ta9e78ha5r6jkqwj6udj Alex If you've deployed an IPv6-only or IPv6-mostly network and you're having issues with Apple devices 'forgetting' they have DNS servers after they've been in sleep mode, I described the bug and some workarounds in this post since I haven't seen anyone else do it yet: https://blog.infected.systems/posts/2024-12-18-working-around-macos-and-ios-rdnss-expiry-bug/ #ipv6 #ipv6only npub1f33tc4gp08g0jy9mac4f8anmfh8w8ugr7mpvg3ta9e78ha5r6jkqwj6udj Alex "It's devastating to just... turn it off... but this is what the Act forces a sole individual running so many social websites for a public good to do." The London Fixed Gear and Single-Speed cycling forum, which is has been a cornerstone of UK cycling culture for many years is shutting down as a direct consequence of the Online Safety Act. We're already seeing the chilling effect of the Act with small communities like this choosing to shut down rather than deal with the burden of complying with the Act. I can only imagine more will follow. https://www.lfgss.com/conversations/401475/ cc @nprofile…zqfp #onlinesafetyact #ukpolitics #censorship npub1f33tc4gp08g0jy9mac4f8anmfh8w8ugr7mpvg3ta9e78ha5r6jkqwj6udj Alex Hugs of Death: How should we think about resilience in the IndieWeb? (aka 'Uh oh... Hacker News found my blog post') https://blog.infected.systems/posts/2024-12-04-hugs-of-death/ #indieweb npub1f33tc4gp08g0jy9mac4f8anmfh8w8ugr7mpvg3ta9e78ha5r6jkqwj6udj Alex I think there's definitely room in the fediverse for a 'Documentation Examples That Look Like Shitposts' bot. https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/590/987/430/553/740/original/8ead387c2c204141.png npub1f33tc4gp08g0jy9mac4f8anmfh8w8ugr7mpvg3ta9e78ha5r6jkqwj6udj Alex I took @nprofile…0tvd's 'No NAT November' challenge and switched my network to IPv6-only! :blobcat_thisisfine: New blog post: No NAT November - My Month Without IPv4 https://blog.infected.systems/posts/2024-12-01-no-nat-november/ #ipv6 https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/579/173/198/241/965/original/b339cbe46d5ab0e3.png npub1f33tc4gp08g0jy9mac4f8anmfh8w8ugr7mpvg3ta9e78ha5r6jkqwj6udj Alex Today’s project - finally giving Home Assistant a proper try. https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/888/232/924/897/292/original/580bed770b4770b5.png npub1f33tc4gp08g0jy9mac4f8anmfh8w8ugr7mpvg3ta9e78ha5r6jkqwj6udj Alex @npub1r9s…xge4 I’m guessing there’s no EMF-IX this year. Any plans for a 2026 revival?