Centroid.EU Blog

(this blog is mostly encrypted - adults only)

My switch at home is too loud

January 1st, 2019

The 10 GbE switch is too loud. I'm going to work today to set a timer on it so that it turns off at 8PM and turns on at 8AM. Also I'm going to set up a wireless alternative path from office to Internet (and from living room to Internet). This requires trunk(4) and bridge(4) modifications in OpenBSD. In theory it should work, but we'll see about that really.

0 comments

My self-education schedule for 2019

January 1st, 2019

I'm learning Microsoft Windows (Server and Active Directory). My schedule looks like this:

Saturday->Monday	family + reading books
Tuesday + Thursday	Windows Administration	(34 days or  272 hours)
Wednesday + Friday	Delphinusdnsd + Windows Programming (34 days or 272h)

Start: January 7th, 2019
Duration: 17 weeks
End:  May 3rd, 2019

I'm going to have a very ghetto basics course that I'm developing as I go. I'm using literature to guide me. Also I'm looking at jobs on the side, but I'm not going to apply for a Windows job until May 3rd as I'd really like to learn more about this system first. If a good UNIX job comes along I'll apply to it likely before May 3rd. I'm very excited about this all and I'm glad I have the opportunity to do this. Here is a list of books I purchased last year that I will receive today.

Mastering Active Directory - Francis, Dishan
Gruppenrichtlinien in Windows Server und Windows 10 - Holger Voges et al.
Windows Server 2019: Praxiseinstieg - Joerg Schieb

I'm sure I'll find valuable things in these books. I'm also going to start another course in June if no job found by then, it'll likely run until October. In it I believe I want to learn reverse engineering tools in Windows. Not sure if I'll get there yet. Like said I'm very excited.

0 comments

2019, Something great is about to happen...

January 1st, 2019

I'm sitting on 1000 EUR of donation money for OpenBSD. I will begin paying out half of that shortly. By end of May I should have paid the full amount minus the small donation I gave to Gilles Chehade of OpenSMTPD in late 2018 (unless something unexpected happens and I have to use it for something else). Either way it all makes it into the OpenBSD eco-system. I'm very proud of this and I'm making sure that my investments in Microsoft will never surpass the invest ment for OpenBSD.

0 comments

Happy New Year 2019

December 31st, 2018

As I write this the earth already rolled into 2019. Currently the east coast of Australia is celebrating new years. It will be new years here in about 10 hours. I'm likely going to have a quiet new years. I'm at my parents but going to bed at 8PM or so. Whether I'll get woken at midnight will depend on other people whether they decide to have fireworks this year or not. So happy new year 2019. One year away from 2020! May peace be unto thee.

0 comments

Open vs. Closed

December 30th, 2018

I have been thinking around this often. I use OpenBSD which promises security, yet functionality and at free cost. In conversation people often mention this "great open society". But what challenges does an open society really have? For one you can simplify and think of security vs. functionality as a scale like in the constellation sign "libra" of the zodiac. But is this a false view of the world? When we think of a closed society (ie. Germany in 1942, or Soviet Union in 1982) what would you say if I said European Union in 2018?

Think of laws as the prescription for a society. A totally closed society you can do nothing. You shouldn't even try because the default policy is a black list. On the other hand a totally open society you can do everything, the default policy is a white list. Obviously in all societies there is the meaning of law and order. Meaning you don't go out and kill at will just because there there is no law. So in this context, an open model has a modification, it has a "black entry" on something you can't do. In this case murder. Throw in the security. Now what changes? An Open Society has to add 153 exception policies into its fabric, and the Closed Society does nothing. Is it more secure? In a systematic approach are "hacks" or exception policies wanted? Or should we just let it be closed? Then throw freedom into the mix and guess who has to add nothing and who has to write exceptions to grant citizens a feeling of being wanted, given opportunity too, in order to progress.

It's a never-ending philosophical debate I would think but if there is a way to find a balance between open and closed without systematically hacking the default policy, I'd like to know about it.

0 comments

DE-CIX: Traffic tripled, BND still spies there after six years

December 30th, 2018

In my archives I found this link (german). Notice the date... 2013. It's close to 2019 now. Meaning the honey is very sweet in Frankfurt for the BND. And.. the current management of DE-CIX don't really seem to mind much, you'd think after 6 years they might have done an action other than taking the Republic to court over this. Somehow I think this is all old news and recycled.

0 comments

Transitioning from a Star to a Mesh

December 30th, 2018

DE-CIX (the frankfurt exchange point) is a victim to its own success. The honey is sweet here, hence it's easy for parasytes like BND to spy here. The realisation that a mesh is really a set of stars that are interconnected can be seen in the picture (I made it myself). What we need is a few more "mini" IX's that complete the fabric from transitioning from star to mesh. Some links will need to be taken out and others will have to be shortened in order to route around Frankfurt. It's costlier, so expect your internet to become costlier too. We also need better routing that won't just take the shortest path but also the safest path (around a potential spy node). More on this later.

0 comments

German Spy Service thought to spy en-masse at Internet Exchange Point

December 28th, 2018

The maintainer of the IX point has lost a challenge in court to remove the BND spy service from Frankfurt (Europes biggest IX). There is only one thing left to do now. Dissolution of the IX.

The fabric of Germany's IP network may be better off without such a huge IX in its midst. It should be natural to be able to fight mass spying. And it should not be at any length be illegal. Stay tuned!

0 comments