Lmst

Dobrica Pavlinušić boosted:

DORS/CLUC RadionaORG

I vibe-coded #firefox plugin for Google AI studio to use #Gemini 2.5 pro for free. It took me a week, 200k tokens, it can save files locally to disk, track them in #git and execute python and shell. Good question is are you afraid of AI which executes code on your machine?

https://github.com/dpavlin/firefox-aistudio-plugin

gemini generates shell script which is executed locally

If you want to protect #koha from web crawlers take a look at https://blog.rot13.org/2025/04/protect-koha-from-web-crawlers.html

@hvulin I have that automatically when post is not in english most of the time.

Blocking requests for dynamic pages which don't have HTTP_REFERER header seems to work well for this new age on internet where where bots don't identify them self and ignore robots.txt

Today I learned that #wordpress infections can also install cron jobs to overwrite files which are cleared every minute.

Dobrica Pavlinušić boosted:

Should you be wondering why @LWN #LWN is occasionally sluggish... since the new year, the DDOS onslaughts from AI-scraper bots has picked up considerably. Only a small fraction of our traffic is serving actual human readers at this point. At times, some bot decides to hit us from hundreds of IP addresses at once, clogging the works. They don't identify themselves as bots, and robots.txt is the only thing they *don't* read off the site.

This is beyond unsustainable. We are going to have to put time into deploying some sort of active defenses just to keep the site online. I think I'd even rather be writing about accounting systems than dealing with this crap. And it's not just us, of course; this behavior is going to wreck the net even more than it's already wrecked.

Happy new year :)

Today I learned that on #mikrotik #tilera the order of /ip firewall filter rules matter for performance. Bump at end of graph was result of moving return to end of all rules, and then moving it back after last rule from this chain.

Dobrica Pavlinušić boosted:

New board sent to @aislerhq ... and now the wait begins 😅

It's a dedicated test board for designs I have on #TinyTapeout 07 and 08, a 500 MBps differential receiver.

The board is designed to connect to a Radiona ULX3S that will provide stimuli and check responses.

3D kicad render of a PCB with a large 40 pin on the right, a QFN64 footprint in the center, some random 2/3 pins headers and a shitload of passives.

Dobrica Pavlinušić boosted:

Getting made fun of because you cover laptop webcam with a sticker? 😭

Here are materials from my talk about controlling ThinkPad X230 webcam LED over USB presented at POC 😎

Use these as a comeback 😁

Slides: https://docs.google.com/presentation/d/1NSS2frdiyRVr-5vIjAU-2wf_agzpdiMR1DvVhz2eDwc/edit?usp=sharing
Code: https://github.com/xairy/lights-out

Dobrica Pavlinušić boosted:

Gas boilers suck! Hack yours today, save money, save the planet! (emf2024)

Gas boilers, almost all homes in the UK have them, but they are dreadful!
+90% of the ones I've seen are badly spec'ed and horribly configured, so they burn way too much gas.
Then Martin Lewis keeps t
https://media.ccc.de/v/emf2024-161-gas-boilers-suck-hack-yours-today-save-money-save-the-planet #ccc #emf2024 #StageA #talk #2024 #Day3 #161

Dobrica Pavlinušić boosted:

Quoting directly from the GPL: `The “source code” for a work means the preferred form of the work for making modifications to it.`

If a project is so difficult to build, package or redistribute that the only practical way is to use docker then this is hardly #FOSS.

Please boost for visibility if you don't mind.

bots agregating together over time

web robots aggregating over time, graph with visible jumps as each web robot goes up and down, sometime with multiple robots in same time as visible as bumps in graph which are over increasing trend interrupted by gap in data which is result of failed iptables attempt to block robots, but with 1000+ of addresses it didn't work for long and noral, increasing robots load returned again

https://gist.github.com/dpavlin/a97838ed4464e0e5640dc0921597be52
is my /etc/apache2/bots-disable.conf which I usually copy around. This is denial of service attack from my point of view, 1000+ different ips making iptables unless, without any considerations for slow servers

#http #user-agent "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" this is #dos attack on cgi application

I can't say enough good things about #duckdb this is using sql to query #zeek conn.log

It's very nice to see that all we need on #bookwoorm #raspberrypi to automount usb devices is:

# /etc/udev/rules.d/90-usb.rules
ACTION=="add", SUBSYSTEMS=="usb", SUBSYSTEM=="block", ENV{ID_FS_USAGE}=="filesystem", \
RUN{program}+="/usr/bin/systemd-mount --bind-device --no-block --automount=yes --collect $devnode"

Dobrica Pavlinušić boosted:

Link is here: https://github.com/systemd/systemd/pull/29748

Dobrica Pavlinušić boosted:

I recently implemented a fun little feature for systemd: inspired by MacOS' "target disk mode", a tiny tool called systemd-storagetm, that exposes all local block devices as NVMe-TCP devices, as they pop up. The idea is that if available in your initrd you can just boot into that (instead of into your full OS), and can access your disks via NVMe-TCP (in case you wonder what that is: it's the new hot shit for exposing block devices over the network, kinda like iSCSI, NBD, …, but cool).

Today I learned that you can't run Debian Bullseye on 3.16 kernel because apache will return AH00141: Could not initialize random number generator and refuse to work.

Client Info