h3artbl33d :openbsd: :antifa:

Hacker | OpenBSD | InfoSec | Coffee addict | Todays paranoia is tomorrows truth | صمود

Ephemeral toots: 1 month

Dutch posts are with the #Dutch tag (allowing filtering)

Views, attitude and Toots are solely on personal title!

Chief Threat Architect @ Exquisite.{social,tube, network}

Trans and queer rights are human rights. He/him. Also, praise the catgirls, trans people, daddies and twinks that keep Fedi running. 🏳️‍🌈

Public Key

npub1v70mrky2vnaxed7u6pwwm0xlarl6zhxwjghq4kfv3hwu4g4u6pusrvnv8r

NIP-05 Address

[email protected]

Profile Code

nprofile1qqsx08a3mz9xf7nvklwdqh8dhn073laptn8fyts2mykgmhw2527dq7gpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dsdh75eq

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub1v70mrky2vnaxed7u6pwwm0xlarl6zhxwjghq4kfv3hwu4g4u6pusrvnv8r

Show more details

Last Notes

2026-06-27 12:02:54 GMT

- reply

@nprofile…ugpy
No offense, but I think the best way would be to subscribe yourself and to ask if Cloudmark is on there (which is likely). It is free and a very valueable resource if you are running your own mailserver: Mailop.org.
Also, would this be an okay opportunity to recommend @nprofile…u76z's "Run Your Own Mail Server"?
I have been doing that for decades. On OpenSMTPD since years now, but still, the book offered tips and insights that I wasn't aware of.
Please let me know if the purchase is an issue. Would be my honor to sponsor a copy :awesome:

2026-05-19 20:39:57 GMT

- reply

@nprofile…vf35 Still on GOS? :)

2026-04-14 05:55:55 GMT

Just had to transfer ~ 25GB before heading off to $DAYJOB. What caught my surprise was that the average wireless throughput was 45.3 MByte/s with iwx(4) on #OpenBSD (current).
It might be even faster - I was a bit off from the nearest AP and it had to work through a solid wall or two.

2026-03-31 21:33:37 GMT

- reply

@nprofile…6acr @nprofile…umer @nprofile…8d0p @nprofile…y3u0
Normally, I wouldn't share these details publicly - but with so much misinformation and adversarial campaigns against #GrapheneOS going on, I will breach my own OpSec as it benefits the greater good (IMHO).
Should there be any follow up questions, either publicly or privately, happy to answer all of them. I have a Signal account listed on the about page of my blog - DMs are open.
Granted, a reply might take one or two days - IRL is somewhat busy and demanding at the moment.

2026-03-31 21:28:11 GMT

- reply

@nprofile…6acr @nprofile…umer @nprofile…8d0p
I can confirm all of this :flan_wave:
I contributed to the article - my Tweakers handle being jurroen, was interviewed by @nprofile…y3u0 in a (pleasant, I might add) phone call of 45-ish minutes. I even had Abdoul over in my home (back then).
What the GrapheneOS project account mentions here is completely truthful. I am glad that Arnoud responder the way he did (he is a very kind person) and made the corrections.

2026-03-25 07:38:01 GMT

- reply

@nprofile…vf35
Have a great day, dear friend :flan_heart:

2026-03-22 14:47:13 GMT

A stranger was playing songs from the Amélie soundtrack (by Yann Tiersen) on a public piano, really well.
Totally filled me with joy and made my day :flan_heart:

2026-03-02 15:35:41 GMT

- reply

@nprofile…65q8
Ah, meh :( I feel like - but not entirely sure, that some of the screen protectors are better served with the option off.
Still, I have a privacy screen high on my todo list - will report back what I got and whether it works. Main daily driver is a P9P.

2026-03-02 15:29:10 GMT

- reply

@nprofile…65q8
If we are talking GrapheneOS, have you enabled the screen protrctor mode?
https://media.exquisite.social/exquisite/media_attachments/files/116/160/284/343/041/827/original/126f46fc77ca3d96.jpg

2026-02-27 16:26:37 GMT

- reply

In my humble opinion, hosting instant messaging is something completely different than ActivityPub - due to the instant aspect of it.
With this, availability is a far more important aspect of it all. Hence the high available setup. Ofcourse, backups are just as important, but it shouldn't cause a full service outage in the unlikely event that one datacenter has a blackout.
You have given me your trust - and I want to do just by all of you. No matter whether you are messaging a family member about dinner or blowing the whistle about injustice.
At the moment in the upcoming two weeks when Exquisite.chat will be taking signups, I will be vocal about it. Thank you all - Exquisite has been such an awesome experience from the very start. And continues to be just that. :flan_heart:
(2/2)

2026-02-27 16:14:15 GMT

Announcing Exquisite.chat :flan_cheer:
Within the upcoming two weeks, Exquisite.chat will officially be launched. The first iteration will be an XMPP server - in a later phase more services will be added.
It does have a few twists:
Uses a hardened setup, powered by both OpenBSD and HardenedBSD.
We have our own STUN/TURN setup so you can talk / video with your beloved ones.
No logs, full encryption to benefit your (and our) privacy.
It is setup in 'high availability' mode. Served from two different datacenters in the Netherlands (our main datacenter, DC1 in Amsterdam, but now adding Rotterdam to the mix) for increased resiliency. So, no clouds (oh hai us-east-1).
And some more details that will follow shortly :flan_XD:
(1/2)

2026-02-23 09:31:22 GMT

In September, Exquisite.tube, our #Peertube instance, reached one hundred accounts. We have just surpassed double that - a whopping 200 members :flan_hurrah:
I don't celebrate the numbers themselves, but I do celebrate that more and more people are choosing solid alternatives for Big Tech platforms.

2026-02-17 07:08:01 GMT

Stay tuned and hold your XMPP horses. Mark the 27th on your calendars :flan_aww:

2026-02-12 22:25:58 GMT

Also, a large Dutch telco - Odido - was hacked. The following data was breached from 6+ million Dutchies:
Name
Address
Phone number
Email address
IBAN
Date of birth" (For the majority if not all) Identification document no and validity
This data shouldn't have been on their records to begin with. Identification papers are needed for the "loan" of a mobile device - but could easily be wiped after the necessary checks are made. Keeping a DoB on file is shite as well.
Always minimize PII data of others (whether persons or orgs) and wipe evey detail as soon as possible.

2026-02-12 22:09:24 GMT

And thanks to fantastic software like imapsync, the migration is a breeze and can be done relatively simple. Even by the clients themselves.
Granted that they aren't likely to run Perl scripts from the terminal. But a web interface is included - and a custom one is quickly build.

2026-02-07 09:18:29 GMT

Newsflash: we have a date for BSD-NL, for the Early 2026 day-conference. Go follow @nprofile…x40h to get the announcement straight into your timeline :flan_heart:
#BSDNL #BSD #OpenBSD #HardenedBSD #FreeBSD #SecBSD #NetBSD #RUNBSD #MyMotherRunsBSD

2026-02-03 21:04:01 GMT

- reply

@nprofile…vf35
For sure. And our momentum is right now. Move all the things off proprietary clouds and big tech. Decentralize the net (again).

2026-02-03 20:58:21 GMT

- reply

@nprofile…vf35
I personally like to think that it is not just waiting; but being brave enough to be yourself and not letting anyone tell you otherwise.
On the verge of taking your comment too literally: nothing will happen if we all were playing the waiting game :flan_XD:

2026-02-03 20:29:31 GMT

- reply

@nprofile…vf35
Never ever. Fun fact - when I finally gave them the "no, can't do that, not even for my weight in diamonds" - the following day I was contacted by a new client with a project for months, that suited me way better.
Just came back from them a couple of hours ago, and I am very happy to be able to go there again tomorrow!

2026-02-03 20:20:50 GMT

Tools of the trade
Ask any SysOp what kind of tools they prefer and you get very different answers. And that is a beauty, because any SysOp whom has been in "the field" have build up their preferred toolchain :flan_hacker:
In the last decade (or so), I've grown quite fond of Ansible, for system automation and orchestration. It is not perfect - far from it. But it allows me to manage fleets of machines and keep everything running well :flan_hurrah: I was asked to partake in a project. Big (sub)client, quite a high pay. It required being comfortable with Terraform. No previous experience, just being comfortable with it.
I told them I was willing to give it a go and learn it on the fly. But heck, I ended up throwing in the towel after one week - due to it seriously draining my energy (and with that, my mental health).
High pay is nice. But your mental health should never, ever be for sale. No amount of money should weigh up to selling your soul.
[/rant]

2026-02-02 21:51:34 GMT

- reply

@nprofile…vf35
This. Hundred percent.
Thank you for doing the right thing. :flan_heart:

2026-01-31 16:56:35 GMT

- reply

Also, another way cool thing is that @nprofile…gxkf choose to go with Exquisite.tube.
In the quest to abolish Big Tech, I am so incredibly grateful to serve you all.
And there isn't a better 'second in command' than the awesome @nprofile…n5vr, of @nprofile…tqgk fame :flan_hearts:
Really, thank you all for sticking with us. The privilege is all mine - truly.

2026-01-31 16:51:23 GMT

I am really honored that @nprofile…hevt choose our instance for their Fediverse presence. If you need repository hosting that isn't big tech, go with them :flan_heart:

2026-01-29 16:38:07 GMT

- reply

@nprofile…ynd9
Wow. Flashbacks from Android KitKat. Is this a more modern version though?

2026-01-26 19:39:18 GMT

I think I might switch my mailservers over to SmarterMail. It has this dandy feature that allows resetting the admin pass, remotely, without authorization.
I am fed up with forgetting the password to my OpenSMTPD+Dovecot root account - at least this will give me a solid experience.
(Please note, this shitpost is highly sarcastic and refers to an actively exploited vuln in SmarterMail - which doesn't seem that smart)

2026-01-26 17:20:13 GMT

- reply

@nprofile…65q8
Haven't had any issues with the stable v10 series.
However, the biggest surprise is yet to come. And it will be quite painful: the selfhosted UniFi Network application will eventually be discontinued in favor of UniFi OS Server.
Which can also be selfhosted - albeit being containerized with Podman.
Rumor has it that it might just bring the selfhosted Protect (formerly Video) app back on-prem too.
I really dislike them discontinuing the Network app. Personally don't need / want all that other shite.

2026-01-25 20:49:04 GMT

Sunday is the day to rest, they said. But if I would have taken that literally, parts of the Dutch medical sector would be drastically impaired. So naturally, I fixed it.
"Cosplaying as a sysadmin" equals "no rest for the wicked".

2026-01-23 07:43:48 GMT

Goodmorning lovely Fedi :flan_coffee: :flan_wave:
Together with @nprofile…3xx2 and @nprofile…dla5 we have devised a new scientific methodology that quantifies trust in a specific technology.
It is applied by measuring that trust and comparing it to throwing a meringue underwater.
As an example:
My meringue underwater for US owned clouds, whether public or private, is at most 1 micron.
Let's make this methodology as widely implemented as we possibly can :flan_hacker:
#MeasureByMeringueUnderwater

2026-01-20 23:32:39 GMT

Enough for today. 32 mins in.
https://media.exquisite.social/exquisite/media_attachments/files/115/930/025/289/231/319/original/1314d6e77b6dfe96.webp

2026-01-18 12:10:56 GMT

- reply

Please do note that not only video streaming uses Widevine DRM, but audio / music streaming tends to use it too.
I personally greatly prefer media without DRM. Eg, I tend to get my music albums from Bandcamp - especially on their Friday specials where 100% goes to the artist.

2026-01-18 12:06:29 GMT

#OpenBSD gains (open) Widevine DRM support on Chromium. This will fix compatibility with a large number of streaming services.
Please do note that Widevine has three security levels. Platforms can dictate what level they require. For instance, Netflix only allows SD (480p) playback at L3 and limits 4K to L1.
L1 requires secure boot, a signed and approved kernel, etc. This is not going to happen. Not on the BSDs, not on Linux.
Have yet to experiment with it - I presume it will default to L2. That is 720p playback on Netflix, if I am not mistaken.

2026-01-16 14:39:17 GMT

Newer HP machines (#Elitebook laptops, #Elitedesk desktops) seem to be woefully incompatible with #OpenBSD.
During boot, both the regular kernel and the ramdisk kernel hang at "entry point at 0x1001000". After tinkering for literal hours (BIOS options, different boot mediums, different versions, etc) I managed to get it working.
The problem is with the memory space. It can be fixed relatively simple with a custom kernel that uses a different address space. Here is the patch: https://marc.info/?l=openbsd-tech&m=161674750427354&w=2
Now running OpenBSD-current on an Elitebook with an eleventh gen Intel i5. The special keys (screen brightness, volume, etc) work out of the box :flan_hacker:

2026-01-15 09:29:21 GMT

Goodmorning lovely Fedi people :flan_coffee: :flan_wave:
Heads-up: if you use gurk-rs, a Signal client for the terminal, you should update it to either the commit done an hour ago or to version 0.8.1 once it is out. It fixes missing incoming messages due to missing trusted roots :flan_hacker:
#Signal #Gurk #OpenBSD #HardenedBSD #FreeBSD #Rust #Terminal

2026-01-12 21:26:20 GMT

- reply

@nprofile…vf35 @nprofile…nkdp
"This time" :flan_XD:

2026-01-12 20:03:20 GMT

- reply

@nprofile…vf35
Masterpiece by Gary Jules!

2026-01-12 20:00:42 GMT

- reply

@nprofile…vf35
This is madness.

2025-12-10 00:08:55 GMT

Wow. Third anniversary on the Fediverse - on the lovely @nprofile…d8sn community.
I am incredibly grateful to each and everyone whom I've ever interacted with. I think this does warrant a #FollowWednesday list :flan_hurrah:
@nprofile…actl - Emergency admin, trusted advisor, external decorum and awesome human being.
@nprofile…yshp - Destroyer of disks, creator of the OpenBSDonApple wiki and a continuous inspiration to hack harder.
@nprofile…2pyj - "The eternal smiling Italian", proper *BSD advocate and lovely hobbit kindred spirit.
@nprofile…86r2 - for being the second (active) person to join and being an advocate on accessibility and occasionally showing me a mirror.
@nprofile…2kx2 - for being a true friend, inspiration of a proper beard and being a *BSD terrorist,
@nprofile…z88j - for being the first true stress test of our innocuous community, eternal trolling and having the "balls" to join a BSD-minded instance as a systemd(umpsterfire) advocate,
@nprofile…azqu - the best effin designer, artist, cat mother and being an inspiration to see the light no matter how dark the times are,
@nprofile…tmhj - for being your lovely self, growing a beard and becoming NourV2,
@nprofile…kgn8 - for being the ring person that binds the entire *BSD community, no matter the poison,
@nprofile…fa5d - for HardenedBSD, for your advocacy to human rights - you have meant more to me than I will ever be able to voice,
@nprofile…ylfx - for guidance, inspiration and your minimalist attitude. Sorry for this really unminimalist post,
@nprofile…998y - for your continued words, publications, shared insights, they mean the world to me,
@nprofile…hc5w - for showing us all that there are deeper levels of pain and hurt to be endured. And for giving rats a voice - we aren't talking about the remote access trojan sort of 'em.
I am entirely sure that I am forgetting a boatload of people - including the bsd.network staff for having me and teaching me how a decent social network should be.
Whether I named you or not - my eternal love and love to you all :flan_heart:

2025-12-05 15:54:51 GMT

I use OpenBSD, btw.

2025-11-25 22:24:11 GMT

I am pretty tired after a long day - in the best possible way :flan_thumbs:
Had five meetings today. One of them was pretty unexpected and involved a live, on the fly debugging session. Managed to find the root cause together with the client and fixed it :flan_hacker:
My former UPS was finally picked up by the party I donated it too. It was somewhat burning on my unconsciousness :flan_sf:
Completed three smaller projects :flan_hurrah:
After the workday was done, went dining out with my sister and had a lovely heart-to-heart and catch-up :flan_heart:
And when I returned, I noticed how Exquisite.tube (our #Peertube instance) is shining bright. Somebody shared their first selfmade beats, videos about skydiving, a package manager for C, Minecraft animations and livecoding from a radiochannel. Effin fantastic :flan_awe:
Good night you all lovely Fedi folks :flan_sleep: Remember: you are awesome!

2025-11-21 17:45:20 GMT

Grab your #Macbook compatible, updated and shiny as fuck #OpenBSD 7.8 install sets #RIGHTNOW :flan_hacker:
Clickity :awesome: :goose_hacker: :runbsdBg: :this_is_fine:
https://media.exquisite.social/exquisite/media_attachments/files/115/588/916/636/932/049/original/665dd63e1b8dfcb0.png

2025-11-20 11:07:05 GMT

- reply

@nprofile…znyy
Totally agreed! For me personally, it is the kind of wisdom that came throughout the years. I used to be much bolder, harsher and strongly opinionated on these things, that are so close to home to me.
But doing so actually has the opposite effect - it alienates and creates distance where there should be none, ideally. An open dialogue, with the hopes of sparking interest and possibly even aligning goals, that is the best way (IMHO).
I do imagine that you have to deal with this too, in your line of work.

2025-11-19 09:57:59 GMT

I've had a pretty heated argument with a supplier of a client the other day - since they use Cloudflare on their infrastructure. I wanted them to ditch CF - because of obvious reasons. And moreover because this particular client needs to take the examplary lead.
Later in the conversation they were open to replacing CF with an EU based alternative, as long as it is a single party that offers the equivalent levels of DDoS protection (the Pro level) and functions of a CDN too.
As much as I wanted to come up with EU-based alternatives, there are currently none. At least none that are a close enough match for the requirements.
In the end, we voiced respect to one another and agreed to create a playbook that allows for easy switching over once there is a fitting EU alternative.
This discussion turned out to be one of the best I've had this year.

2025-11-11 22:44:17 GMT

The Fediverse, applications like Nextcloud, Matrix and even OS'es like OpenBSD and GrapheneOS aren't an alternative.
Simply because they are the way - how it should have been in the first place.
Big Tech are the alternatives. And they suck at that. Big time.

2025-11-05 21:35:53 GMT

No AI being used here :flan_molotov:
Also: #RunYourOwnMailServer
#selfhosting #email #openbsd #opensmtpd
https://media.exquisite.social/exquisite/media_attachments/files/115/499/225/317/829/298/original/b3e3319816e35c68.jpg

2025-10-29 11:01:25 GMT

New blogpost: Using a SSH config: https://h3artbl33d.nl/blog/using-a-ssh-config

2025-10-28 22:10:12 GMT

- reply

@nprofile…qpns @nprofile…0ux3
Depends in your MTA. Chatmail does, most MTAs do. The ludacris X-Originating-IP is mostly a ghost of the past. And unless you are acting as an MTA you are likely safe.

2025-10-26 18:52:31 GMT

- reply

@nprofile…x4wz
https://media.exquisite.social/exquisite/media_attachments/files/115/441/969/812/163/053/original/15c67926745f2f4a.png

2025-10-25 20:36:53 GMT

- reply

@nprofile…va3u
Android (16) does have this functionality natively, Private Spaces.

2025-10-23 21:59:02 GMT

Me, running #OpenBSD-current on a large number of machines (including servers):
https://media.exquisite.social/exquisite/media_attachments/files/115/425/716/665/784/884/original/86a5ff774b71ec82.png

2025-10-11 18:21:00 GMT

- reply

@nprofile…naem
Even better to have the privacy policy cover that completely.

2025-10-11 16:12:28 GMT

Truly excellent writeup about the current clusterfuck that is Framework (computers):
Framework under fire for Omarchy/DHH/Hyprland support?
There are alternatives!
Get a refurbished ThinkPad through Minifree, preinstalled with Libreboot and funds the further development.
Or get a vintage ThinkPad with modern internals.
Also, there is:
MNT Reform
Tuxedo
Slimbook
NovaCustom
Star Labs
and others

2025-10-08 16:57:28 GMT

I want custom emoji in Signal. So we can finally have Flans :flan_guns:

2025-10-08 15:10:48 GMT

Linus Torvalds in late 1993:
"If 386BSD had been available when I started on Linux, Linux would probably never had happened."

2025-09-10 06:38:21 GMT

Tracking someone for hours to days is considered stalking. But when Big Tech does it, it is considered a service? :flan_think:

2025-09-09 20:00:56 GMT

Apple introduces EMTE. #GrapheneOS has a stronger version in production for years.
Still, happy to see this in a broader ecosystem.

2025-09-09 18:10:12 GMT

Erm, fellow mailserver hackers: did I miss something?
I was just told that I should use SHA256 hashes, rather than SHA512 for MTA DANE (meaning: eg 3 1 1 rather than 3 1 2).
Is this correct? I fail miserably at finding the corresponding RFCs.
#DANE #MTA #DNS #mailserver #RYOMS #selfhosting

2025-09-06 13:37:51 GMT

After having updated (and subsequently fixed) our Mastodon instance, going to take the bike out for a long nice ride.
Non-motorised and non-electrical - but hacked nevertheless :flan_hacker:

2025-09-06 09:03:53 GMT

Winter is Signal backups are coming

2025-09-03 20:23:15 GMT

wE uSe DoCkEr BeCaUsE oF sEkJoErItAaHj
Yes.

2025-08-27 22:06:43 GMT

Things are escalating fast :flan_aww:
Both me and the awesome @nprofile…sr9k will be giving a talk at @nprofile…qs6z: Liberating the social web using *BSD
I will be giving a talk at BSides Querétaro: "Defending the democracy - through hacking"
And I have some blogs lined up to be published soon-ish ™️
It is a true honor to serve you all. I am incredibly grateful to be given this space - and your attention. Don't ever forget that, no matter whom you are - you are awesome and you really deserve to be you.
If you ever want to talk: just reach out.

2025-08-27 21:04:33 GMT

- reply

@nprofile…sr9k
Possible reason: because they are hallucinating (like an AI) what "good" an AI unleashed on the Fedi would do.
If this is the reason, please connect them with me. I will have a stern talk with them.

2025-08-27 20:37:20 GMT

Fuck you, Bloomberg :flan_molotov:
They tried to silence journalism and news reporting, by hitting an in-depth report of Gamers Nexus with a copyright strike over an included reference of mere seconds.
I won't stand by and allow this to happen. Not on my watch. It seems that Bloomberg is unfamiliar with the Streisand effect.
Well, here you go, Bloomberg. Fucking pieces of shit you are.

2025-08-21 22:31:03 GMT

Complaints about Bluetooth chips not working on OpenBSD... Well duuuh. There is no BT stack. There was, way back, but didn't get maintained and thus removed.
#OpenBSD isn't against BT or anything - just no one that could be bothered to implement and maintain it.
Over the years I have been asked whether I would be open to implementing it. I don't code in C nor do I have the deep level familiarity with it.
More importantly, for me personally it is a big and hard "no I don't trust Bluetooth". Sending your keystrokes through the air seems one of the most terrible ideas mankind ever had.
And for audio, Creative actually has BT audio dongles which do work on OpenBSD because they aren't Bluetooth adapters, but rather audio interfaces that do the BT part on-chip.

2025-08-21 20:16:25 GMT

- reply

@nprofile…t4qe
Haha sorry - was a joke referring to my Puffy tattoo. And I know of two others whom have the permaPuffy 😁

2025-08-21 19:55:25 GMT

- reply

@nprofile…t4qe
Will you be the fourth person permanently wearing Puffy? :flan_XD:

2025-08-20 11:35:25 GMT

- reply

@nprofile…x2sd
Depends on what you need. I personally use Ansible for automation - enough Playbooks readily available that cover nearly every scenario.

2025-08-20 11:30:53 GMT

"Slightly" mad
Yeah, bit more than slightly in my case. But nevertheless, this is a real gem :flan_hearts:
The book is even better. And you should definitely patronize mwl cause we need moah books - SELFHOST ALL THE THINGS!
#RYOMS #runyourownmailserver #selfhosting
https://media.exquisite.social/exquisite/media_attachments/files/115/060/832/234/340/548/original/0963b561ebffd045.jpeg
https://media.exquisite.social/exquisite/media_attachments/files/115/060/835/362/449/190/original/40eeaf37f8f7b5f5.jpeg

2025-08-17 15:25:38 GMT

- reply

@nprofile…sr9k @nprofile…7dm2 @nprofile…93qq
That sounds Fantastic! Where can I sign up?

2025-08-16 11:17:56 GMT

- reply

ps. You can follow the @nprofile…dd7e account to keep in touch with new videos from your favourite ActivityPub instance!

2025-08-16 11:00:01 GMT

The @nprofile…qs6z 2021 😈⛳🐡 video's are now mirrored on Exquisite.tube.
So, if you want to:
Learn how to setup high available WANs with OpenBSD,
Get familiar with GhostBSD as a daily driver,
Verify whether 'our' Dexter is a serial BSD tester and not the serial killer,
Learn why FreeBSD Aarch64 Virtual Machines are boring,
Now you can! Errr, you already could, but now more privately, federated and without Big Tech.
The playlist for all 2021 talks can be found here.
Good weekend all and happy hacking! :flan_hacker:
#OpenBSD #FreeBSD #NetBSD #GhostBSD #RunBSD

2025-08-13 17:24:34 GMT

- reply

@nprofile…sr9k
Hahaha never underestimate a passionate Italian person, that much I do know. So my bet is on you.

2025-08-12 18:15:38 GMT

The fact that the UK Government is asking people to delete their emails rather than to ban AI factories and other nonsense is so incredibly upsetting and so fucking inhumane...
:flan_molotov:

2025-08-12 08:16:47 GMT

If you are feeling somewhat down, perhaps this Corgi puppy snorkling for food will cheer you up :flan_hearts:

2025-08-07 20:30:26 GMT

- reply

@nprofile…t4qe
Asking for a friend: where lies the difference between a homelab and homeDC?

2025-08-07 17:29:16 GMT

Sometimes the world has to fucking burn. Today was one of those days - so I challenged myself to see how easy it would be to get #OpenBSD -current to run Python 2.7 code, alongside with downgrading modules (like lxml and cryptography).
A bit ro my surprise - it was relatively easy to both install packages from 7.2 in -current and have it operating stable and smooth. When attempting this on Linux, it ends up uninstalling systemd :systemd: with most package managers :flan_XD:
DO NOT TRY THIS AT HOME - OR WHEREVER - DO NOT TRY THIS AT ALL. YOU HAVE BEEN WARNED.

2025-08-02 14:22:19 GMT

Hooman, I go make a nap, bye and serve me again in an hour or so.
#caturday #lazy #saturday
https://media.exquisite.social/exquisite/media_attachments/files/114/959/610/559/715/018/original/ae9b9a9057e5dd9f.jpg

2025-07-23 18:53:58 GMT

I am sorry to inforn you that I will be pulling the plug on Jouwbuis (Piped) and Cybernuk.es (Redlib and Searx). It has become way too much of a constant cat and mouse game and the instances had more issues than they were actually available for use.
This will free both some time and mindspace on my side, that I like to throw at the Fediverse and actually building stuff that is the future, rather than fighting big tech that won't be around anymore in a couple of decades.
It has been a wild ride - but the time has come to step up and do the right thing - contributing towards humanity, rather than wasting it on ductaping the shit of big tech gazillionares together.

2025-07-22 21:07:25 GMT

- reply

@nprofile…f796
OBSDAms out if budget? Their network is excellent to run your own mailserver.

2025-07-22 19:00:52 GMT

Casual reminder: you are supposed to run your own mailserver
If you aren't operating your own mailserver by now, what is your excuse? Don't have the hardware? Get a VM with @nprofile…h2u5. Too much effort? Nah, @nprofile…q5wq has you covered.
Never surrender the protocols.
Run your own mail server.
Revolt.
Rebel.
#RYOMS #mail #selfhosting #decentralize #reclaim
https://media.exquisite.social/exquisite/media_attachments/files/114/898/419/642/717/082/original/f9aac1308812b4c3.jpg

2025-07-22 07:11:27 GMT

- reply

@nprofile…38gs @nprofile…t4qe
PPP is single threaded on OpenBSD and AFAIK all of the *BSDs. If I have that correct, should be no difference switching whatever sense to Puffy :openbsd: :runbsdBg:

2025-07-20 10:08:46 GMT

- reply

@nprofile…sr9k
Congratations :flan_hurrah: You are doing an awesome job - and like you mentioned to me in private, it is the other way around too. If I didn't serve Exquisite, I'd likely be at the cafe!
Here is to another anniversary and milestone :flan_beer:

2025-07-19 23:16:48 GMT

From hackers of the lost RAID to hackers of ACPI S3.
Goodnight all - will be sleeping for 12 hours :flan_XD:
https://media.exquisite.social/exquisite/media_attachments/files/114/882/436/062/842/918/original/8a0e53438eee2674.gif

2025-07-19 13:49:40 GMT

- reply

This is a part of the documentation process - ultimately I want to share any and all changes that we make for fellow OpenBSD instances.
The guide to selfhost Mastodon on OpenBSD has come a long way and is at... 80/90 percent of completion.

2025-07-19 13:47:41 GMT

Exquisite.social maintains an extra version string, in addition to the official one; EXQ-x.xx.
I have originally set that up so I could maintain a changelog of updates and maintenance. Just made that one public: https://codeberg.org/exquisite/mastodon/src/branch/main/changelog.md

2025-07-15 19:28:42 GMT

- reply

@nprofile…t4qe @nprofile…l6g7
Oh - listen to 61 - Winter of 95. Almost like Brian Adams turned OpenBSD :flan_XD:
And if Prodogy is your thing too 68, Hacker People.
My blog is near empty, but finishing multiple posts the upcoming weeks :flan_hacker:

2025-07-15 19:03:09 GMT

- reply

@nprofile…sr9k
I sniped her too much and then contacted John Mastodon. I think getting a single call from John was sufficient.

2025-07-15 15:15:59 GMT

Bruce Schneier on Ubuntu disabling the spectre mitigations:
I agree with this trade-off. These attacks are hard to get working, and it’s not easy to exfiltrate useful data. There are way easier ways to attack systems.
(source)
Uh yes, lets replace the blast doors at bank vaults with wooden doors because humans working there are an easier attack surface.

2025-07-13 19:29:18 GMT

- reply

@nprofile…sr9k 2,5 months, give or take :flan_hearts:

2025-07-13 18:14:49 GMT

- reply

@nprofile…sr9k
The first real life BSD café?

2025-07-12 12:16:13 GMT

- reply

@nprofile…q5wq
Oh my - you are coming? I will start saving in case you throw yet another fundraiser that I must win :flan_XD:

2025-07-12 00:08:07 GMT

This is your casual reminder to #selfhost :flan_hacker: At least that what you are comfortable with :flan_guns:
#selfhosting is about being independent. About owning your data. About reclaiming the 'net and decentralizing it. It is about taking control. Being able to do things the way you see fit. And it is about breaking free from subscriptions and from big tech which is #enshittifying like there is no tomorrow.
Go #selfhosted the way you see fit. In small steps, one platform at a time - or with a head first dive if you are feeling adventurous. Share your experiences, write a blog about it, create a video or post about it on the Fediverse.
It most definitely is not too late to revolt. To give big tech the middle finger. Firmly stand your ground. Be a rebel. :flan_molotov:

2025-07-10 06:06:31 GMT

The #homeautomation protocol is named #Thread, perhaps that is a typo as #Threat is more apt and accurate. If you roll your own device you might very well experience the full force of their blood thirsty lawyers.
What the actual F.

2025-07-07 20:05:51 GMT

I recently found an iPhone at a café - looked like one of the more premium models. Tried to give it to the bar personnel, but the seat wasn't reserved and they had no clue how to contact the owner.
The phone and the case didn't have anything identifying. Tried to see if it was secured and it showed that it had a pin of six numbers. Pretty sure I couldn't get in, I tried all zeroes and 123456. Bingo. The latter one was correct
I opened the phone book just to check whether there was a favorite contact. There wasnt but there was an ICE. Texted the ICE that he phone can be picked up at the café and handed it to the personnel, solely stating that it would be picked up.
But OMG. It feels so incredibly wrong to go over those details - if I had malicious intentions I might have been able to inflict serious harm.
Please, if you want your phone to be recoverable: make sure it has some identifying info (or enable Find My) - and if you don't want that, make sure it is impossible for a hack like me to get in that easily.
Mobile phones often contain data that you don't want to share completely with one person!

2025-07-05 06:40:41 GMT

- reply

@nprofile…ra5j
Tässle Kaffee ☕️?
Yes, bitte! :flan_coffee:

2025-07-04 22:46:12 GMT

- reply

@nprofile…0ntv
Yeah, right, who the F does that? This has to be a trap.
A paraphrase of my thoughts. But somehow, I wanted to check it out, curious where the fine print was hidden away...
Well - there wasn't any. The 5K was in fact credited to my new account, with the sole condition that it was valid for three months. My thoughts ran wild with all the possibilities - so many ways to spend 5K on compute resources.
I eventually settled on writing a script that would add extra horsepower to Peertube, remote runners to assist with transcoding if the demand was there.
And it was succesful. I have yet to do more testing - but the initial results are very promising. If EuroBSDcon is livestreamed to Exquisite.tube then keep in mind that this is due to Lewis' excellent social engineering skills.
You better be warned :flan_XD:
🧵 2/2

2025-07-04 22:36:42 GMT

Listen up folks! I really don't like to kiss and tell - but I feel like I have to make an exception for this individual, @nprofile…0ntv.
Lewis socially engineered me into liking @nprofile…85m8, by playing my love for OpenBSD among others. Low and behold - as this was just the beginning.
After following UpCloud, Lewis began deploying the second phase of their carefully crafted masterplan, luring me into checking out UpCloud on a more regular basis. This was achieved by carefully writing the occasional shitpost on their account. Evntually I caved in and came to really like their Fediverse presence.
In a way that would make the NSA-TAO jaleous, Lewis then initiated the third and final stage of the playbook: offering a 5K credit reward for signing up.
🧵 1/2

2025-07-02 20:45:55 GMT

- reply

@nprofile…sr9k
And somewhat for OpenBSD: https://h3artbl33d.nl/blog/openbsd-on-scaleway
(doesn't just apply to Scaleway but nearly every IaaS providers except the ones that use OpenVZ - because OpenVZ is stupid)

2025-06-30 19:46:02 GMT

- reply

@nprofile…sr9k
Same - I will be walking around with that broad smile that you wore in Dublin at least the upcoming weeks!

2025-06-30 19:43:17 GMT

Whoop :flan_hurrah: The wonderful @nprofile…sr9k and I are going to give a talk together at #EuroBSDCon 2025 :flan_guns: Fantastic!
The title of our talk is: Liberating the social web using BSD.
Would love to see you at Zagreb - but the talk will be livestreamed and published for on-demand viewing too.
Sooo looking forward to this!
#RUNBSD

2025-06-29 18:54:32 GMT

Cosplaying as a sysadmin on a lazy sunday evening
(thanks to @nprofile…fefa for the beer! :flan_heart:)
https://media.exquisite.social/exquisite/media_attachments/files/114/768/156/432/147/514/original/e1a8a6d44ec0ab52.jpg