uhm

good morning

@bwDraco considering the ages of the posts...

even if they needed to, its too late

Hmm... Ah, okay. I didn't really pay attention to that.

But no, that's not something the community team would meddle in

I was kinda busy at the time managing Windows updates.

Yeah, I get that. It was semi-serious at most...

(though the posts that were referenced actually got me somewhat worried)

Quite literally, we do not bring in the community team outside literal issues of life and death, or things that can impact the entire community as a whole

Yeah. I've been out of the loop when it comes to modding, and I really have little interest in trying to be a mod at this point. It's abundantly clear that I simply don't have the people skills needed to be a mod. This doesn't exclude any future possibility of becoming one, but I think it's still years and possibly a decade or more away.

Thanks for the help.

It's not about being a mod though

It's about being able to judge

@JourneymanGeek Do you see Riot PMs?

I wonder if that broke

@JourneymanGeek That, too, is likely to take several years to address. I'm far from mature.

@Bob nothing new

Bee. Having odd issues with the desktop client though

@bob see my ping?

do you guys need me to update my Synapse to 1.0.0?

Oh

I just updated mine

I thought .99 was still compatible?

same

I updated to 0.99.5.2-py3

the last 0.99 version

@JourneymanGeek I see the ping but you don't seem to have read the messages I sent you after it

1.0 is supposedly incompatible with much older servers being in the federation with it

Seems like you don't get notified?

but 0.99 servers should support both

@JourneymanGeek You should see 3 messages after the ping?

I wonder if federation between our servers is screwed

what versions on each end?

I'm still 0.99.3

Ah no then

1.0

Oops

@JourneymanGeek you have time to investigate? trying steam chat :P

I'm walking the dog lol

ah

Trying to get him tired out . I have a busy day

@JourneymanGeek So basically I have no name resolution on chat.lupinenet.com

Oh

Hm. Ok. That's not just me

I've had that happen randomly over the last few weeks

Assumed it was ipv6

It's been a little flappy since that scaleway fire

@JourneymanGeek So. Erm. lupinenet.com is SERVFAIL including on 8.8.8.8.

Can you traceroute 163.172.61.163

@JourneymanGeek Yea that works fine

Hm

My DNS settings haven't changed ._.

I've been having ipv6 issues so maybe I'll try removing the AAAA records

@JourneymanGeek ...there are no AAAA records

there are no records

there is no domain

.... Whaaa?

SERVFAIL

Ok..I'll check and take it up with namecheap

> nslookup lupinenet.com 1.1.1.1
Server:  one.one.one.one
Address:  1.1.1.1

*** one.one.one.one can't find lupinenet.com: Server failed

(from my laptop Stolas)

Blah

What's weird though is a +trace works

root@merry-guinea:~# dig @dns1.registrar-servers.com lupinenet.com

; <<>> DiG 9.10.3-P4-Debian <<>> @dns1.registrar-servers.com lupinenet.com
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 57872
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;lupinenet.com.                 IN      A

bwha

@JourneymanGeek do you have DNSSEC enabled?

@rahuldottech Do you have the Scheduled on and off feature from the accessibility features on your phone?

@bertieb "Do you want SKYNET? Cause that's how you get SKYNET!" to the AI stack.

@Bob I think so

@JourneymanGeek Ok, found your problem. You have a DS record but no RRSIG.

You have DNSSEC enabled/enforced but not configured.

your domain's broken, yo

Eh..uhm.

I'll turn it off first ;p

I am no expert on this stuff.

Compare, no DNSSEC: dnsviz.net/d/vulpin.com/dnssec, broken DNSSEC: dnsviz.net/d/lupinenet.com/dnssec

Or, dnssec-analyzer.verisignlabs.com/vulpin.com and dnssec-analyzer.verisignlabs.com/lupinenet.com

@bwDraco This is very star-able... >:D

Gotta read, read, read!

turned it off for now

kinda odd that it started acting up at around the same time as the other issues

@JourneymanGeek see the message? (I just upgraded my own synapse sooo...)

No

I guess we need to wait for the changes to propagate?

Okj, turned off dnssec and turned off ipv6 records... set the ttl to 1 minute

@JourneymanGeek You're going to have to wait for that DS record to go

ya

@allquixotic you need to put a proper cert on 8448, not self-signed. either reverse proxy it (straightforward with nginx, needs config with apache) or configure a cert in homeserver.yaml

Ok. I have a fully functional router on the orange pi

Even crappy wifi ;p

echo -n | openssl s_client -connect roota.cc:8448 | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > roota.cc.crt
cp roota.cc.crt /usr/local/share/ca-certificates/
update-ca-certificates

temporary fix while waiting for the roota.cc cert to be updated

@JourneymanGeek ^

done

@JourneymanGeek DS TTL is 24 hours

@Bob then I guess we will need to wait ._.

@MichaelFrank holy crap that might work!

Thanks!

okay trying this now

okay the auto power off worked

should start up in a few minutes...

YES! IT WORKED!

Thanks so much @MichaelFrank that never occurred to me

It may not be totally technically accurate...

but

twitter.com/telegram/status/1138773578592268288

this is an awesome explaination of a DDOS atack

@JourneymanGeek lmao I love it

Start at 12:30

Thoughts, @JourneymanGeek @bwDraco?

oh also

@rahuldottech if you're looking at cheaper SBCs outside raspis...

armbian.com

these guys do excellent linux images

@JourneymanGeek thanks! I'll check 'em out!

@rahuldottech With my orange pi - it went from nightmare (version they shipped was mislabelled) to "dang, its done!"

@JourneymanGeek you're still DNSSEC'd

or cached

@Bob maaaybe

@JourneymanGeek yeees

root@merry-guinea:~# dig lupinenet.com DS @8.8.8.8

; <<>> DiG 9.10.3-P4-Debian <<>> lupinenet.com DS @8.8.8.8
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 57588
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;lupinenet.com.                 IN      DS

;; ANSWER SECTION:
lupinenet.com.          74520   IN      DS      7015 8 1 6FE0A34AB17031DFE0251962E2A53A7C0BD4FD36

maybe the dns server quix is using is already updated...

root@merry-guinea:~# dig lupinenet.com DS @8.8.4.4

; <<>> DiG 9.10.3-P4-Debian <<>> lupinenet.com DS @8.8.4.4
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 3932
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;lupinenet.com.                 IN      DS

;; ANSWER SECTION:
lupinenet.com.          74510   IN      DS      7015 8 1 6FE0A34AB17031DFE0251962E2A53A7C0BD4FD36

@JourneymanGeek still means PMs are screwed

ah

but you're getting my PMs and not vice versa right? 0_0

@JourneymanGeek yup

makes perfect sense actually

you send a PM => your server looks up mine and opens a connection => stuff happens

I send a PM => my server looks up yours and ... BOOM

Ah, the old explosives-over-DNS

Fun reading, that RFC was

@bertieb the big ACME over the heading should've tipped me off

Was it... a blast?

;-P

How does one add media in this new (well, 'new') WP editor dealie?

@bertieb aka TNT-over-DNS or ToD

giving us the possibility of ToDoH

ToD over HTTP?

That I could see giving good... bang for its buck

Okay, so it seem you need to insert a file block, copy the link from that and then use the link thingy in the block where you want the link

Seemples!

github.com/WordPress/gutenberg/issues/8322

Oh yeah, don't forget to remove the file block afterwards

@djsmiley2k do you deal with IPsec VPNs?

yus...

plz don't askl hard questions :D

@djsmiley2k lol, I'm at the stage of "what's that"

only ever used OpenVPN

Ah ok :)

Ask away then

@djsmiley2k so. linux (debian) on both ends - what's the go for software?

I'm seeing ... strongswan, openswan, libreswan, ipsec-tools, racoon, KAME, ...

seems like maybe strongswan is the recommended one

strongswan, afaik, is the one that kind of came out of no where, as a new freshly written client, and seems to be widely applauded

however, all my working has been on enterprise kit, so Cisco, Checkpoint, VMware NSX.

has anyone used the bitbucket pipelines?

@djsmiley2k ah, that's what I was afraid of :P

@Bob other question, site to site, or client to server?

Site to site is very easy really. Litterally 'put the same settings both sides'.

I'll probably end up going openvpn anyway but thought I'd figure out ipsec if only to learn something

@djsmiley2k hmmmmmmmmmmmmmmmmm.

either would work tbh

though client to server might be easier network wise

client to server is very simular to openvpn

i just add routes for the networks/hosts behind the other end of the tunnel.

@djsmiley2k so yea I have one end behind nat and the other public

idea was to route a public ip through to the one behind nat

client server is probably easiest

@rahuldottech sorry

I literally cannot stand more than a few minutes of Linus.

he makes me laugh

@djsmiley2k I feel like there's two ways to do this... DNAT a single address to the other end of a layer 3 VPN, or route entire addresses over a layer 2 VPN

with ovpn anyway

not sure how that translates to ipsec

ip forwarding and static routes on both sides, I guess

grrrrrrrrrrrrrr

don't you hate it when documentation contradicts itself?

yes

@Burgi not sure if that's better or worse than a complete lack of documentation

i think it is marginally better

hm. if I do a layer 2 VPN and just route addresses in ... responses will go out the default route wouldn't they? shit.

there goes that plan

the cpanel git help say to use the UI to create an SSH key (which forces you to have a passphrase) but the docs on the cpanel website say to use the cmd line

@Bob have routes on the other end?

For some reason my Iphone 5s refuses to make photos, saying that the memory is full, although there is 6 Gb of free space. After I turn it off and on again, it does make photos, but after a while again says that there is no memory.

I got tired of restarting it again and again just to snap a picture.

Because apple?

I mean, my old android phone used to say 'no camera' randomly, and I'd have to reboot it to fix that, but lets not bring that up ;)

@CowperKettle have you tried deleting some stuff? are you backing up to iCloud? Have you run out of space on iCloud?

@CowperKettle could try ask different

@Burgi It constantly says that I've run out of space on iCloud, but should it matter?

I don't even know what to do about this iCloud, I never cared much about it.

I thought that since there's room in physical memory, it must be possible to snap picture.

I'll have to read up about iCloud..

@djsmiley2k how?

public ip in => destination host is easy

but host => out, I'd only want it to go out public if it came in public

otherwise I'd want it to take the direct non-VPN route

that's doable on linux but not on windows iirc

dnat is probably easier

@djsmiley2k My android phone sometimes says that "camera server is broken" and I have to reboot to fix that.

@Bob err on windows? No clue :/

Y'all should read the Amazon reviews on sugar free gummy bears: amazon.com/Haribo-Sugar-Free-Gummy-Bears/dp/B008JELLCA

welcome to 2009

@Burgi hm?

that review has been doing the rounds for years

@djsmiley2k so... two VPN endpoints will be linux but IP will be routed to a Windows host eventually

probably

maybe

idk

has matrix died?

somethings died.

Can't check from here

very weird

@Burgi I think at the moment - quix needs to set up ssl keys, my server's kinda semi communicative....

I've just deleted Facebook from the iPhone, and memory usage suddenly went almost to 100%. After that, it started fluctuating, and now the phone stopped saying that the memory is full.

o0

I forgot to make a screenshot when after deleting Facebook the phone suddenly started showing that 15.6 Gb out of 16 Gb are occupied

But whatever, at least now the issue is solved

maybe facebook had a lot of cache?

Maybe - but I wonder why that did not show in iPhone's Memory Usage screen

I guess one has to think different to understand iPhone's peculiarities

:D

Oh god

IT head at one of our clients "we have an engineer attending on 17th June to do the needful."

/me ponders

or just upgrade to an iPhone that isn't 5+ years old

never had such issues on my XS Max (or any current-gen iPhone I've ever used since the 6S gen)

o_O

my house is 45 years old

better upgrade quick.

not everyone can afford to upgrade to apple's latest and greatest

A current generation iPhone costs more than a good monthly salary in Russia

same for the UK

Only idiots and rich dad's daughters buy them

lol

Each manufactured item, digital and otherwise, has an expected lifespan. The expected lifespan is generally higher the pricier the item, but not always. For most consumer goods, this is true. A $0.20 plastic zip-lock bag lasts you a day or two if you use it a couple times. A $2000 desktop should last 4-5 years minimum, usually longer. Smartphones are engineered to basically work for 5 years; beyond that you're extendinng its lifespan longer than it was designed to go.

If a new iPhone is too expensive for you, use a different brand of smartphone, but don't keep using a phone older than 5 years. It's like driving a 1940 car.

um...

You don't have to buy the latest and greatest. You can buy a 3 year old used or refurbished phone every 2 years at a fraction of retail price.

that still sounds excessive

anyway, off to the quacks ttyl

I disagree. Expecting a phone to last 6, 7, 10 years is unreasonable, just like it's unreasonable to expect your car to last your entire lifetime, or a house to last 1000 years, or to use the same plastic ziplock bag for your sandwich in your lunch every day for a year. The car will break down and need part replacement more expensive than a new car at some point; the house will fall apart; the plastic bag will get moldy.

@allquixotic but 1940's cars don't just have a smaller fuel tank because ford have brought out a new model.

housebeautiful.com/uk/lifestyle/property/news/a2384/…

erm

1000 yr old house

You've heard of castles, right?

xD

I get apple are 'exclusive' and all that crap

Yes, some houses can last that long with very expensive maintenance and renovations and careful attention (basically making it a historic site) but keeping them maintained like that is expensive, too, so it's not necessarily the most economically feasible thing. Also, those houses don't have modern amenities and features.

but so are 1940's porsches

In 1000 years it's very likely the house's foundation would have been eroded, meaning it'll be hella expensive to keep it upright.

Nah, you build it on solid rock in the first place.

For phones, instead of it being just hella expensive to keep running an "antique" phone, it becomes near impossible, because the technology moves too fast. It's like trying to put a horse and buggy on a highway with a speed limit of 65 mph.

yes

but he's trying to take a photo

you're saying you can't take a horse and cart at 5mph to the shops

because it's 'out dated' - go tell the mormons.

He didn't go 'why doesn't my phone run the latest games at 9000fps?'

I don't expect a 1940's porsche to do 210mph either.

But I expect, if cared for, that the engine will run

the windscreen still blocks the wind. The lights, still, light up.

Terrible comparison is terrible.

Installing Facebook (and keeping it updated) is akin to putting someone in your car who just keeps growing and growing year after year... gaining several kg of weight each year, and expecting them to fit in the car forever. It's not the same Facebook app as it was when the 5S was released.

lol, except you'd know the car was too heavy as the thing would be bottoming out

In fact, few apps (including the core OS) are the same as they were when the 5S was released. They all take up way more RAM and storage than they used to. If he kept using the same old apps from when the 5S was released and the networked services supported those old app versions, then yes I'd expect it to keep working

the phone was lying, litterally, about the storage being used.

randomly on a related note

turning this old tablet back on

and wow it owrks

Yes, it was, and that's a bug, but the point is, if he had more than 16 gigs of storage, that wouldn't be a problem. I'd love to see how well Android P or Q or Z or whatever the latest is runs on a Galaxy S3.

roar

IMO phones aren't meant to be used for more that three years.

support.apple.com/en-us/HT201624 -- So the iPhone 5S isn't vintage yet, but iOS 13 released this September is going to make it vintage because it won't be able to upgrade to iOS 13. It's literally 3-4 months away from being declared vintage by the manufacturer, and 2.25 years from being declared obsolete altogether

Even if you take good care of the battery, mobile-oriented workloads will only get more and more demanding over time.

If that's unacceptable, I defy you to find an Android manufacturer still supporting phones for as long or longer than Apple

And Apple has always supposed their devices much longer than any Android device manufacturer has.

3 years is a little aggressive but I can see how several manufacturers (cough Samsung) are pushing it down to that level

at least Apple has an official policy on it and you know how long you're going to get updates for when you buy an Apple product

with the old Android phones I've had, I just randomly notice that updates stop coming in and wonder why

did they get bored? did they fire the team working on the updates? did they turn off the update servers? who knows

Oh androids not much better, I agree there

FWIW, Apple has much more money to spend on R&D than any other device manufacturer.

Hence custom processors that beat everyone else.

Hence support lifecycles that are much longer than anyone else.

Hence operating system software that is more efficient than anyone else's.

well, budget notwithstanding, it's basically free to be transparent and upfront with your customers about how long you expect to support your devices

you just have to write a webpage like Apple did

@allquixotic are there the FB lite apps on IOS?

@allquixotic I think oneplus is probably the only one.

lack of message replies makes it tough for me to tell what you mean on your second message

@JourneymanGeek like, third-party app developers who build some kind of debloated interface to Facebook? I sort of doubt it, but there could be... lemme search

@allquixotic JMG finds it inconvenient to use the mouse, like many geeks :p

Apple probably wouldn't approve them (at the request of Facebook, at the least)

@allquixotic no

@JourneymanGeek they're official

@JourneymanGeek longer support on phones

OP tweeted today that Pie is coming / has arrived on the OP3, FWIW

play.google.com/store/apps/…

Just throwing that in there

@bertieb I'm sure I've had it a while

I can't remember where that phone is though ._.

ios.gadgethacks.com/how-to/…

hah! you have to be in the Turkish app store. I guess they figure people in Turkey are running much older iOS devices and need a cut down app

8.7 vs. 311 MB

@bertieb I've been running Pie for the last few months already.

(though via a custom ROM)

@JourneymanGeek Oh right, I need to check

Speaking of which... update time.

"Android 8.0.0."

?

is that Android 8.0.0.0.0.0.0.0 rounded up to the hundredths place? :D

@bwDraco naw, just lazy and having multiple conversatiojs

O_O

you just invented an awesome name for a JavaScript library

conversatio.js

lol

lol

or a js chat system

Oh. Apparently riot is getting threads and responses at some point

I don't use mice much. Hence, the menu key is essential to my workflow. This is why I will never buy an HP laptop. They never have the menu key. It really sucks.

And I don't like remapping keys

Riot is down again...

@allquixotic Something something, using chat on a computer with the Pentium FDIV bug

;-P

Ah, 8.0.0 is Oreoeoeoeoeoeo

So not quite on Pie yet, myself

I should probably ensure I have enough space

My phone is crammed full of photos of cats

Cats in my house, cats in my garden

(I don't own any cats)

> M_UNKNOWN was returned while trying to access the room.

Good ol' M_UNKNOWN again

roota.cc will be back in another ~hour guys. waiting on letsencrypt to unblock me (it's a long story)

:o

Funnily enough, it says you are 'online' for me on Matrix

Might be due to caching though

shouldiblamecaching.com

That's awesome

roota.cc is up guys; Riot away!

Great, thanks.

There's Android Pie

Rather weighty update

@JourneymanGeek lmao okay

@MichaelFrank Go ahead and post your solution as an answer to android.se and I'll accept it

vulpin down?

Is Android Pie anything like Raspi?

And if not, what on earth google?!

@djsmiley2k It's bigger and blockier

Seems to do more with whitespace as well

????????????

@djsmiley2k 3.14 vs apple dessert

speaking of which

The notifications are bigger, for a start

So not raspi

And now instead of 4G (how quaint, I know) it says V{symbol}LTE

VoLTE or something

And rounded rectangles are back in style

takes me back to web design in the mid 2000s (?)

trying to get rounded corners to work properly across browsers

ahh

nostalgia

there's nothing quite like it

Ha. Now even with the Facebook deleted, and with 5+ Gb memory free, the iPhone constantly says "memory of this device is full".

LOL

Maybe I should reset it to defaults.

=_)

heh

should of done them for indecent exposure.

Sigh

someone was stabbed in the city last night

police emergancy powers mean they have stop and search til 2am tonight

like... wtf

have that power all the time, please

So I just exported a list of all my tickets between my 4 elementary schools and one secondary school... The secondary school has 37% of my tickets, the 4 elementaries have between 12 and 18%

@CanadianLuke All that proves is that older children are more creative when breaking computers ...

😀

I don't deal with students, only staff

@CanadianLuke Staff are all children at heart ...

Not at heart....

@djsmiley2k Targeted or random?

Section 60?

I mean, is it "this guy has a kukri up his juke, let's stop him" or is it "this guy looks pretty... black, let's stop him"

Are we dealing with decent folks, or Constable Savage?