Much like the "if your company depends on running other people's x86 code, then Spectre/Meltdown/etc are devastating", I think if your company is/was depending on the user separation boundaries in the OS to work, then you are in a lot of trouble.

[Unauth'd file read/Local Priv Esc]'s have always kind of been low(er) hanging fruit, but they are nowhere near as cool/good at RCEs.

Now that we have machines to find these at reasonable competence and speed, it is probably a good time to look at anything that you run that [processes user supplied data, or speaks over the network] that is written in C/C++ and find memory safe alternatives. It's not those memory safe alternatives are going to be bug free, but they are far less likely to cause you to need to upgrade your kernel every few days to urgently catch up with local LPE's

Even if you are not going to use the new auditing systems for whatever reason, the "enemy" (whether that is your intelligence agencies, ransom gangs, etc) will have no problem trading a few 100$ for what used to cost $10,000's to do.

The sysctls location change being the #1 killer, but there are so many paper cuts in that particular upgrade to keep an eye out for

bgp.tools has been sending it's own outbound email since day one of having the ability to send email, while i have been doing a migration i have discovered that rspamd (for DKIM signing) was keeping it's own logs outside of journalctl, meaning they never got rotated (grrr)

The upside of this log rotation failure is that I can give you this graph: The total email volume sent per month via bgp.tools

I don't think it has been particularly hard (other than hotmail) to run this, and it means that I don't have to give customer emails to another 3rd party.

I think the only struggle for a lot of people is that it's quite difficult to find "clean" or at least "boring" IPs to send out from. i suspect you probably couldn't replicate these results with Hetzner/Digital Ocean/etc without some serious fighting or luck

(*) unless your service depends on sending to hotmail/live/msn emails, because that shit is impossible

Attachment: A graph that starts in 2022 with ~1000 emails a month and slowly grows to over 20,000 emails a month]]> https://benjojo.co.uk/u/benjojo/h/B8xQhhL521D1k1dvmk Wed, 13 May 2026 16:55:32 UTC https://benjojo.co.uk/u/benjojo/h/B8xQhhL521D1k1dvmk Cracking open a new tube of toothpaste and uh, they shurnkflated the toothpaste 😢

Attachment: Old tube 125ml, new 75ml]]> https://benjojo.co.uk/u/benjojo/h/vL3DXvXQyxD8hLy6mS Sun, 10 May 2026 23:39:20 UTC https://benjojo.co.uk/u/benjojo/h/vL3DXvXQyxD8hLy6mS The Kagi LinkedIn translate is honestly a incredible marketing tool for them.

Throwing the Cloudflare layoff blog post into it and putting it through a few round trips as the "English" translation gets shorter and more frank

Attachment: Everyone, We’re firing over 1,100 of you because we think AI can do your jobs for free and the shareholders are breathing down our necks. We’re calling this "innovation" and "agility" so we don't have to say "mass layoffs." It’s not that you’re bad at your jobs; it’s just that we’d rather have a higher profit margin than a staff. Matthew and I are going to pretend this is about "integrity" while we sit safely in our offices and watch your Slack access get cut off. Check your email to see if you still have a paycheck. We’re throwing some equity at you to keep you from suing us or making a scene while you figure out how to pay rent. The "scrappy" startup phase is over; now we’re just a cold corporation obsessed with the next earnings call. Cutting you loose is just "fiscal discipline" to make the numbers look better for the investors. To those of you we just screwed over: thanks for the free labor. Good luck out there. We’ll be bragging about our "leaner" team to the analysts later. For the survivors, see you at the meeting where we’ll explain how you now have to do three people's jobs for the same salary.]]> https://benjojo.co.uk/u/benjojo/h/KTKyzSB1K3b229TX74 Fri, 08 May 2026 12:47:06 UTC https://benjojo.co.uk/u/benjojo/h/KTKyzSB1K3b229TX74

Warnings of major disruption as trains across southern England disrupted by radio fault

Did someone/something break the UK's GSM-R stack?

A traceroute from Cogent in Frankfurt:

traceroute to 194.246.96.1 (194.246.96.1), 30 hops max, 60 byte packets
 1  * *
 2  be5200.ccr41.fra05.atlas.cogentco.com (154.54.76.169)  0.603 ms
 3  be7946.ccr42.par01.atlas.cogentco.com (154.54.72.117)  9.937 ms 
 4  be2780.ccr32.mrs02.atlas.cogentco.com (154.54.72.226)  20.813 ms 
 5  be2899.ccr21.hkg02.atlas.cogentco.com (154.54.0.42)  181.371 ms 
 6  154.18.9.165 (154.18.9.165)  185.283 ms 
 7  159.226.254.229 (159.226.254.229)  220.828 ms 
 8  * *
 9  218.241.107.69 (218.241.107.69)  221.520 ms !X *

Probably a mistake rather than anything malicious, but that's still some extra long haul miles for some DNS queries

Attachment: A bgp.tools propergation graph that shows 194.246.96.0/24 going via CNNIC AS24151 then to Cogent as it's only path that cogent wants to use]]> https://benjojo.co.uk/u/benjojo/h/B1gTJtTvhJ814pr5xK Wed, 06 May 2026 14:49:50 UTC https://benjojo.co.uk/u/benjojo/h/B1gTJtTvhJ814pr5xK Polymarket market for "next TLD or major domain to break DNSSEC" because it is not "if" but "when"

Unmatched at turning small ops mistakes into country wide ops consequences

You can see a very similar (likely the same model) still being used in Pakistan for PTCL here on google maps

Attachment: various photos of a very large satellite dish (at least thirty meters in diameter) that is abandoned and is slowly growing a lot of moss and mode as if it has been reclaimed by nature.

Attachment: various photos of a very large satellite dish (at least thirty meters in diameter) that is abandoned and is slowly growing a lot of moss and mode as if it has been reclaimed by nature.

Attachment: various photos of a very large satellite dish (at least thirty meters in diameter) that is abandoned and is slowly growing a lot of moss and mode as if it has been reclaimed by nature.

Attachment: various photos of a very large satellite dish (at least thirty meters in diameter) that is abandoned and is slowly growing a lot of moss and mode as if it has been reclaimed by nature.]]> https://benjojo.co.uk/u/benjojo/h/38TcJ4C5h358r3Myn8 Tue, 05 May 2026 16:17:26 UTC https://benjojo.co.uk/u/benjojo/h/38TcJ4C5h358r3Myn8 The Spezi people bring you: Bi-Sexual Cola

Attachment: A can of Paulaner cola with the bisexual flag colour scheme]]> https://benjojo.co.uk/u/benjojo/h/f32Pj51w9VP3HB18t6 Tue, 05 May 2026 16:03:05 UTC https://benjojo.co.uk/u/benjojo/h/f32Pj51w9VP3HB18t6 Observations from my letter box:

A) The green party sure do send a lot of paper to me

B) Labor seemingly have picked up the tricks of the Americans by sending me increasingly insidious smear letters about the Greens

Like, look at this stuff:

https://electionleaflets.org/leaflets/23707/

https://electionleaflets.org/leaflets/23685/

https://electionleaflets.org/leaflets/23701/

Perhaps my "favourite" (not my scan) is the this bullet point list: https://electionleaflets.org/leaflets/23702/

I uploaded all of my election letters to https://electionleaflets.org ( You should upload yours too! )

Firefox might be a chrome advertising psyop

Attachment: A screeshot of the menu bar in firefox, where the back and forward button normally is, there is a big "VPN" button in the middle, it looks extremely out of place]]> https://benjojo.co.uk/u/benjojo/h/2jr1pfd194Mq6js37D Mon, 04 May 2026 08:40:53 UTC https://benjojo.co.uk/u/benjojo/h/2jr1pfd194Mq6js37D Otters!

Attachment: Photos of Otters sleeping on each other, playing

Attachment: Photos of Otters sleeping on each other, playing]]> https://benjojo.co.uk/u/benjojo/h/Xz2dKJVmF3kky7R9zR Sun, 03 May 2026 18:05:45 UTC https://benjojo.co.uk/u/benjojo/h/Xz2dKJVmF3kky7R9zR Please enjoy this absolutely furious goose

Attachment: A Egyptian goose with both wings out rapidly chasing after something, the background is slightly blurry due to the speed of the goose movement]]> https://benjojo.co.uk/u/benjojo/h/B5T1yG3b1zHw73VZG9 Sun, 03 May 2026 18:00:55 UTC https://benjojo.co.uk/u/benjojo/h/B5T1yG3b1zHw73VZG9 HONK!

Attachment: A Canadian goose hunting a pidgeon. The pigeon is taking off and already in flight, the goose seems to be hissing or honking. It’s an amusing scene ]]> https://mystical.garden/@janamarie/116506535352180555 Sat, 02 May 2026 20:49:08 UTC https://mystical.garden/@janamarie/116506535352180555 Fluffy!

Attachment: gooselings in a fluffy pile, their presumably mother stands guard near the pile of chicks

Attachment: gooselings in a fluffy pile, their presumably mother stands guard near the pile of chicks]]> https://benjojo.co.uk/u/benjojo/h/pwf2rY174sJlPX48Fh Sat, 02 May 2026 12:13:25 UTC https://benjojo.co.uk/u/benjojo/h/pwf2rY174sJlPX48Fh When the crunchy bit of grass is just so good

Attachment: A muskrat / Nutria asking a big blade of grass and looking like they are in heven

Attachment: A muskrat / Nutria asking a big blade of grass and looking like they are in heven]]> https://benjojo.co.uk/u/benjojo/h/j842Tj211p29Sh1LzH Sat, 02 May 2026 11:37:43 UTC https://benjojo.co.uk/u/benjojo/h/j842Tj211p29Sh1LzH "Bring back triple cheeseburger in McDonalds" https://petition.parliament.uk/petitions/768167

Cisco, Juniper, Fortinet, and MikroTik devices allegedly rebooted or disconnected during the conflict.

Oh don't worry about the MikroTik's, they just do that (reboot unexpectedly in production at inopportune times)

#define PREPOSTEROUS_YEARS (2021 - POSIX_BASE_YEAR)

Sun Microsystems clearly accidentality hired a Cassandra because that was worryingly spot on

via https://mastodon.social/@zarbet/110823319981235740 / https://mastodon.social/@tubetime/110811949233318077

Attachment: A dual 120V (USA) plug outlet, but in the middle is a USB A and a USB socket, but the USB-C seems almost the same size as the 120V live pins]]> https://benjojo.co.uk/u/benjojo/h/nXCrkB2K5cVQt835XL Sun, 19 Apr 2026 21:04:26 UTC https://benjojo.co.uk/u/benjojo/h/nXCrkB2K5cVQt835XL Birds, the angle you take a photo of them can change the vibe a lot

From a

>:|

to a

:o

Attachment: A black bird with a almost gasping face impression, the next photo it is looking at me/you and definately looks like it's not amused or frowing

Attachment: A black bird with a almost gasping face impression, the next photo it is looking at me/you and definately looks like it's not amused or frowing]]> https://benjojo.co.uk/u/benjojo/h/Lzg523c169vMB2M5y4 Sun, 19 Apr 2026 21:00:34 UTC https://benjojo.co.uk/u/benjojo/h/Lzg523c169vMB2M5y4 On a ocean facing fence full of love locks full of people's relationship commitments, somebody was just like "well this one's probably more of a combination lock job to be honest"

Attachment: ocean facing fence with lots of brass key locks, except one red 3 digit combo lock]]> https://benjojo.co.uk/u/benjojo/h/k7LPjW7wy3Nc2p13M1 Sun, 19 Apr 2026 10:24:31 UTC https://benjojo.co.uk/u/benjojo/h/k7LPjW7wy3Nc2p13M1 scdaemon -> scDemons

Attachment: A generic stock photo guy trying to start a lawn mower (with a pull cord) and next to it me trying to get ssh-add to see my yubikey/smartcard SSH key, before it finally works]]> https://benjojo.co.uk/u/benjojo/h/g4t3FG7FHDRRC2z3Rw Sun, 19 Apr 2026 10:19:37 UTC https://benjojo.co.uk/u/benjojo/h/g4t3FG7FHDRRC2z3Rw The asynchronous_metric_log clickhouse table that has no auto expiry and just grows forever is a ploy by big SSD to get you to blindly buy more storage without checking if the cluster is just infinitely growing for no reason

Attachment: A SQL output screenshot, showing the asynchronous_metric_log table consuming 44 MB a day, and other tables being 20 to 5 MB a day]]> https://benjojo.co.uk/u/benjojo/h/h341kxQxBjSGbcSZq9 Thu, 09 Apr 2026 16:43:57 UTC https://benjojo.co.uk/u/benjojo/h/h341kxQxBjSGbcSZq9 I was in the Azores a few weeks ago, and it really does feel like a place where if humans suddenly decided to leave all at once, it would not take long for nature to reclaim everything

Great place to go for those who like [Moss, Ferns, Abandoned stuff]

Attachment: Photos of various nature reclaiming man made things: plants growing inside rusted pipes, moss taking over buildings, large industrial pipes becoming overgrown etc

Attachment: Photos of various nature reclaiming man made things: plants growing inside rusted pipes, moss taking over buildings, large industrial pipes becoming overgrown etc

Attachment: Photos of various nature reclaiming man made things: plants growing inside rusted pipes, moss taking over buildings, large industrial pipes becoming overgrown etc

Attachment: Photos of various nature reclaiming man made things: plants growing inside rusted pipes, moss taking over buildings, large industrial pipes becoming overgrown etc]]> https://benjojo.co.uk/u/benjojo/h/N3T4BcBNqPYgsPx3Wy Wed, 08 Apr 2026 09:47:27 UTC https://benjojo.co.uk/u/benjojo/h/N3T4BcBNqPYgsPx3Wy How many TCP segments is a reasonable number for a TLS Client Hello?

Depending on your network set up, for connecting to bgp.tools until maybe a couple of hours ago the (non reasonable, but real) answer may have been up to 22!

It turns out on IPv4 bgp.tools has been advertising the wrong TCP window scale for quite some time and it's a true testament to TCP's flexibility that any of this was working in the first place.

Regardless, connection setups on bgp.tools should now work a little better on IPv4 now that your machine wont have to send 21 extra packets

Attachment: A wireshark screenshot showing a TCP segment being reassembled out of incredibly tiny parts into a single TLS hello]]> https://benjojo.co.uk/u/benjojo/h/3785P84Vbq519NSY2l Tue, 07 Apr 2026 14:03:01 UTC https://benjojo.co.uk/u/benjojo/h/3785P84Vbq519NSY2l inet_aton wins again

Here I was waiting for output on a tcpdump -ni any host 3306... that should have been port 3306, but of course in the world of inet_aton "3306" is a valid IP address of 0.0.12.234!

Thanks inet_aton!

A) Cogent is now averaging at 800 tbit/s of traffic

B) While their office broadband biz is 4%~ of their total traffic, it's 43% of their $ revenue! Not bad!

C) For their off-net IP offering (aka, they use another provider to do the last mile) over half of the cost to the customer is to the last mile loop provider!

Full thing here: https://www.cogentco.com/files/docs/about_cogent/investor_relations/presentation/Cogent_IR_Presentation_4Q25.pdf

Attachment: I dont think it's possible to make alt-text for this, sorry! I've linked the slides in main post, I've put alt-text here because if I don't then your screenreader will read out a file name instead

Attachment: I dont think it's possible to make alt-text for this, sorry! I've linked the slides in main post, I've put alt-text here because if I don't then your screenreader will read out a file name instead

Attachment: I dont think it's possible to make alt-text for this, sorry! I've linked the slides in main post, I've put alt-text here because if I don't then your screenreader will read out a file name instead]]> https://benjojo.co.uk/u/benjojo/h/LlN5LvJcFh8ztrxCD4 Mon, 06 Apr 2026 22:44:02 UTC https://benjojo.co.uk/u/benjojo/h/LlN5LvJcFh8ztrxCD4 Hah, Cogent CEO seems to recognize that having the ability for customers to make RPKI ROA's on their space (aka, signing a ARIN agreement) made its IPv4 rentable there's a lot more appealing to customers!

Attachment: Today, we're about 46% of our addresses are leased and approximately 4% of our addresses are allocated to customers at no cost. This is nothing new. It's been part of our strategy to win business since Cogent's inception. But we do still have half of our address space that is sitting fallow. We have greatly improved the marketability of that address space by being able to deploy RPKI or additional security features across those addresses, which have made them more desirable to counterparties.]]> https://benjojo.co.uk/u/benjojo/h/yYzKbPLt411kk7jw9q Mon, 06 Apr 2026 22:38:19 UTC https://benjojo.co.uk/u/benjojo/h/yYzKbPLt411kk7jw9q It's a outrage that Firefox only has these two adorable error icons for the mascot so far: https://github.com/mozilla-firefox/firefox/tree/4cbe9648c5d4c1cf600b7a8c3589e4589541ded5/toolkit/themes/shared/illustrations

Attachment: Firefox error screenshots with a drawn fox face looking alarmed or playing with a broken power cord

Attachment: Firefox error screenshots with a drawn fox face looking alarmed or playing with a broken power cord]]> https://benjojo.co.uk/u/benjojo/h/PZlWxlwhZ256ymXDm5 Mon, 06 Apr 2026 15:50:35 UTC https://benjojo.co.uk/u/benjojo/h/PZlWxlwhZ256ymXDm5 🦎

Attachment: A tiny lizard / geko on a concerte block, everything apart from the lizard is out of focus in a dreamy like way]]> https://benjojo.co.uk/u/benjojo/h/6phfg4tyLYQM3yt6t9 Mon, 06 Apr 2026 10:48:43 UTC https://benjojo.co.uk/u/benjojo/h/6phfg4tyLYQM3yt6t9 As a emoji in work presentations connoisseur, it pains me that the best ✨ emoji implementation was the original Twemoji, before in 2017 it went from purple to just boring yellow sparkles.

( I also hate that sparkles has been used to signal AI features :( )

Also, always embed actual PNGs of your emoji into your presentations, to avoid a surprise jankmoji (normally the windows ones) when your stuff gets loaded on to the event presentation laptop

Attachment: A screenshot of emojipedia, showing a purple sparkles emoji from the old twitter emoji back, the page says Sparkles on Twitter / X Twemoji 1.0]]> https://benjojo.co.uk/u/benjojo/h/85F15DbP4GlbRwNwTP Sat, 04 Apr 2026 18:16:30 UTC https://benjojo.co.uk/u/benjojo/h/85F15DbP4GlbRwNwTP yeah sci-hub bird, I was surprised too

Attachment: A browser screenshot of a PDF, the scihub crow is there with a text box next to it (like a speech bubble) saying "Wait, There’s Torture in Zootopia?" (a truncated title of the paper)]]> https://benjojo.co.uk/u/benjojo/h/6vk1Tkb517Bj3jN68k Sat, 04 Apr 2026 13:57:56 UTC https://benjojo.co.uk/u/benjojo/h/6vk1Tkb517Bj3jN68k You know, somehow, a IDE update on April 1st is really unappealing, I'll pass

Attachment: A VSCode update prompt box that says the new release is from April 1st (april fools day)]]> https://benjojo.co.uk/u/benjojo/h/w886833dwzbnhL2J5g Fri, 03 Apr 2026 09:51:47 UTC https://benjojo.co.uk/u/benjojo/h/w886833dwzbnhL2J5g Sir, another "Customers should enact their disaster recovery plans" has hit the AWS status page

Attachment: A bgp.tools screenshot of the Vatican's network, but the website screenshot box shows a Nginx forbidden error]]> https://benjojo.co.uk/u/benjojo/h/kV3t233nnp1JtFlWF2 Tue, 31 Mar 2026 21:33:57 UTC https://benjojo.co.uk/u/benjojo/h/kV3t233nnp1JtFlWF2 Damn they really did save that day light last weekend didn't they

Attachment: HSBC ads in LHR, one ad says "are we shaped by society [picture of a child with a t shirt that says i am the future] or are we shaping society?". the other adverts, "is it a midlife crisis or a midlife opportunity"

Attachment: HSBC ads in LHR, one ad says "are we shaped by society [picture of a child with a t shirt that says i am the future] or are we shaping society?". the other adverts, "is it a midlife crisis or a midlife opportunity"]]> https://benjojo.co.uk/u/benjojo/h/gms84BKqv41KT7W223 Mon, 30 Mar 2026 09:26:10 UTC https://benjojo.co.uk/u/benjojo/h/gms84BKqv41KT7W223 "aaaaaaaaaaaaaaaaaaaaaaaaaa"

Attachment: A bird on a small branch, with it's beak open to the world, presumably singing, or screaming, who knows these days]]> https://benjojo.co.uk/u/benjojo/h/1wK232SQBY86x2Fy78 Mon, 30 Mar 2026 09:15:46 UTC https://benjojo.co.uk/u/benjojo/h/1wK232SQBY86x2Fy78 Netbox labs going for that Jurassic Park nostalgia with their "NetBox Visual Explorer"

https://netboxlabs.com/blog/see-your-infrastructure-introducing-netbox-visual-explorer/

Attachment: A 3d interface of a data center floor showing racks, looks a lot like the "it's a unix system" scene from Jurassic Park]]> https://benjojo.co.uk/u/benjojo/h/PB3QB764HqpH5h7S3P Sat, 28 Mar 2026 14:21:54 UTC https://benjojo.co.uk/u/benjojo/h/PB3QB764HqpH5h7S3P Less than 1GW of fossil fuels on the GB grid klaxon!

Attachment: Screenshot of https://grid.iamkate.com/ showing gas generating 0.96 GW and renewables generating 32.5 GW]]> https://chaos.social/@russss/116289906326077511 Wed, 25 Mar 2026 14:32:11 UTC https://chaos.social/@russss/116289906326077511 I can only conclude that PeeringDB is increasingly vibe coded (in the fullest meaning) because they keep releasing busted code that clearly has not been tested. Today they email me and a lot of other networks with a non sensical email that tells me to do something that does... nothing.

https://github.com/peeringdb/peeringdb/issues/1936

I can sometimes understand the desire to use AI tools, but seemingly none of this stuff is actually going through even basic testing in a staging environment, so frustrating for a service that absorbs quite a lot of sponsor money from orgs

Attachment: A error " Your password must be between 6 and 20 characters long, and must include upper and lower case letters as well as numbers. (Password cannot start with $) ", the the goose chase meme asking why it can't start with the unix crypt hash symbol]]> https://benjojo.co.uk/u/benjojo/h/yWsT1qJ71j4DGwqj4F Thu, 19 Mar 2026 15:36:21 UTC https://benjojo.co.uk/u/benjojo/h/yWsT1qJ71j4DGwqj4F why why why the does Thunderbird let you sort by email subject, I have never wanted to do this and I always do it if I "miss" trying to open the newest email, and when you have a 100k+ inbox this little maneuver's is gonna cost you 51 years of CPU time

( and yes, it is a real job listing )

Attachment: A screenshot of Linked In job posting interface: the listing says: Anthropic Policy Manager, Chemical Weapons and High Yield Explosives New York, NY · 1 week ago · 27 people clicked apply Promoted by hirer · Responses managed off LinkedIn $245K/yr - $285K/yr Hybrid Full-time]]> https://benjojo.co.uk/u/benjojo/h/xWVSn4Tgx3kh2R5Zh7 Tue, 17 Mar 2026 14:38:59 UTC https://benjojo.co.uk/u/benjojo/h/xWVSn4Tgx3kh2R5Zh7 ✅ Muted all RIPE Charging Scheme members-discuss emails

There is basically nothing new to discuss and everyone is just going in the same conversation loop, all at expense of filling my inbox with crap