K. Ryabitsev π
@monsieuricon
Moderator
Posts
2012Following
229Followers
2502This account is for Linux/Kernel/FOSS topics in general: #linux, #kernel, #foss, #git, #sysadmin, #infrastructure.
For my personal account, please follow @monsieuricon@castoranxieux.ca.
MontrΓ©al, QuΓ©bec, Canada π¨π¦πΊπ¦
K. Ryabitsev π
monsieuricon
I look forward to not having to spend a chunk of my day adding spam instances to the MRF policy. ΰ² _ΰ²
1
0
3
K. Ryabitsev π
repeated
repeated
Tristan Snell
tristansnell@mstdn.socialMASSIVE - Hunter Biden βstar witnessβ admitted to DOJ that he was getting information from the Kremlin and serving as a conduit for Russian disinfo.
Thatβs right.
Looks like the whole Hunter Biden βscandalβ was a Russian psy-op β straight from Putin.
2
5
3
K. Ryabitsev π
monsieuricon
When a site forces you to register, and then tries to spam you, lovingly addressing you by that username you picked in the heat of the moment.
1
1
16
K. Ryabitsev π
monsieuricon
@gsuberland does anyone else now pronounce "goretex" as "goretek" just because of this?
0
0
4
K. Ryabitsev π
repeated
repeated
Paul Cantrell
inthehands@hachyderm.io
Edited 1 year ago
You know how young children will see some toy or shiny object on a store shelf, and somehow β by design! Marketers know what theyβre doing! β they instantly β’haveβ’ to have it, and are obsessed, and all sense and proportion go out they window and they need it now now NOW, but if they get it they soon abandon it because itβs junk that only looked good on the shelf?
Itβs like that with CEOs and AI right now.
2
8
2
K. Ryabitsev π
repeated
repeated
sj
sj
I just marked my linux kernel mails management tool as v1 (https://sjp38.github.io/post/hackermail_v1/). I hope it answers the questions on my mails management workflow, better than I did in the past.
#linux #kernel #hackermail
#linux #kernel #hackermail
2
4
11
K. Ryabitsev π
monsieuricon
To help clear up some confusion:
DKIM and DMARC were not created to combat email spam, they were created to combat phishing. In fact, it is very easy for spammers to send DMARC-compliant mail via a spammer botnet, with a valid DKIM signature from Gmail (or any other large provider):
1. a spammer registers an account at gmail.com and sends a single spammy message to another Gmail account they control
2. they download that message, with all the headers, from their other account
3. they then send this same unaltered message to thousands of addresses via their spam botnet using a different envelope-from domain that has valid SPF entries matching the botnet
4. The spam email arrives 100% DMARC-compliant, because the SPF records matched the envelope-from domain and the DKIM signature matched gmail.com in the From: header
Google is fully aware of this, but they can't do anything to stop spammers from using this scheme -- at least not yet. They are pushing for "Replay-Resistant ARC" (https://datatracker.ietf.org/doc/draft-chuang-replay-resistant-arc/), which is why you will see a "darn=" header in the DKIM signature you get from gmail. However, even if they succeed in getting it adopted, we're still easily years away from it making any kind of impact on spam.
DKIM and DMARC were not created to combat email spam, they were created to combat phishing. In fact, it is very easy for spammers to send DMARC-compliant mail via a spammer botnet, with a valid DKIM signature from Gmail (or any other large provider):
1. a spammer registers an account at gmail.com and sends a single spammy message to another Gmail account they control
2. they download that message, with all the headers, from their other account
3. they then send this same unaltered message to thousands of addresses via their spam botnet using a different envelope-from domain that has valid SPF entries matching the botnet
4. The spam email arrives 100% DMARC-compliant, because the SPF records matched the envelope-from domain and the DKIM signature matched gmail.com in the From: header
Google is fully aware of this, but they can't do anything to stop spammers from using this scheme -- at least not yet. They are pushing for "Replay-Resistant ARC" (https://datatracker.ietf.org/doc/draft-chuang-replay-resistant-arc/), which is why you will see a "darn=" header in the DKIM signature you get from gmail. However, even if they succeed in getting it adopted, we're still easily years away from it making any kind of impact on spam.
0
9
17
K. Ryabitsev π
monsieuricon
To paraphrase: "we reinvented the usenet not because it was easy, but because we thought it would be easy."
0
3
29
K. Ryabitsev π
monsieuricon
@atax1a it's hardly shocking considering we reinvent static linking about once a decade, each time in more and more convoluted ways that make it even harder to figure out what the heck you're actually shipping and what is the provenance of all components (see "containers").
1
3
8
K. Ryabitsev π
monsieuricon
@torvalds Notwithstanding your canine situation, I must say that I am kind of in awe of any device where you can set an alarm to go off in 10 years and actually have it work.
2
10
32
K. Ryabitsev π
monsieuricon
FYI, the Fedi spam problem is only starting out. It won't take much effort for someone to write a payload running on random compromised webservers to send copious amounts of spam via activitypub, making blocklists ineffective.
We will basically need to implement all the same anti-abuse stuff we're already doing for email in order to cope with it on the fediverse -- greylisting, dnsbl, domain authentication, etc.
Sadly, the only way this won't happen is if ActivityPub stays sufficiently niche to make other targets more popular for spammers.
We will basically need to implement all the same anti-abuse stuff we're already doing for email in order to cope with it on the fediverse -- greylisting, dnsbl, domain authentication, etc.
Sadly, the only way this won't happen is if ActivityPub stays sufficiently niche to make other targets more popular for spammers.
16
116
179
K. Ryabitsev π
monsieuricon
In the face of hundreds of thousands murdered in Ukraine, and millions more displaced fleeing Russian military aggression, it is hard to focus on the death of one man. And yet, Navalny meant a lot to the Russian opposition and his death is just another proof that Putin's regime is criminal to the core and cannot be dealt with by appeasement or backroom deals. Ukrainians are the only force actively fighting the Kremlin mafia regime and we should continue to give them all they need to achieve a swift and decisive victory.
0
17
28
K. Ryabitsev π
monsieuricon
b4-0.13.0 is now available!
This is a quality-of-life release that improves on many features but doesn't add any new major functionality (yet).
https://lore.kernel.org/tools/20240215-refreshing-spotted-kiwi-ae2e99@lemur/T/#u
This is a quality-of-life release that improves on many features but doesn't add any new major functionality (yet).
https://lore.kernel.org/tools/20240215-refreshing-spotted-kiwi-ae2e99@lemur/T/#u
0
6
14
K. Ryabitsev π
repeated
repeated
LWN.net is now @LWN@lwn.net
LWN@fosstodon.org[$] A turning point for CVE numbers https://lwn.net/Articles/961978/ #LWN
0
5
3
K. Ryabitsev π
repeated
repeated
Roman Yeremenko
roal_yr@social.kyiv.dcomm.net.uaSo what does the world do to stop russia from killing civilians and destroying cities and villages by bombing and shelling?
What does the world do to stop the genocide, forced re-education of children, deportation, torture in detention, starvation of people?
Why is this the new norm?
#UkrainianView
0
3
1
K. Ryabitsev π
repeated
repeated
K. Ryabitsev π
repeated
repeated
Greg K-H
gregkh
Linux is now a CNA: http://www.kroah.com/log/blog/2024/02/13/linux-is-a-cna/
This has taken a long time, I'd like to thank all the groups that helped, and especially the CVE group themselves. Our application was a bit different than other groups, but they understood that this is important for security overall.
This has taken a long time, I'd like to thank all the groups that helped, and especially the CVE group themselves. Our application was a bit different than other groups, but they understood that this is important for security overall.
6
80
125
K. Ryabitsev π
monsieuricon
@ljs @christmastree @daxtens let's not forget Java applets, either, which was a very cpu-intensive way of drawing grey rectangles on a web page (that did nothing).
1
0
3