mig5 @mig5@rezo.mig5.net

Just finished up a sysops consulting gig at Freedom of the Press (FPF), it was great!

I now have some availability, so I’m looking to work for similar orgs in the privacy/freedom space, between 10-20 hours a month.

I work as a freelance sysadmin since 2007. I live in Australia (GMT+10) but work mostly with orgs in Europe and USA.

If interested or if you want more info, please visit https://mig5.net/availability.html

Back on my own instance 🙄 #introductions

I’m a freelance sysadmin consultant since 2007. Currently working on cool open source privacy projects such as #OnionShare. I’ve also contributed in different shapes and sizes to QubesOS, Tails, Haven, OSSEC, and others in that sort of space 🧅🔒

Been on and off Masto since the great wave of 2017 🌊

Available for hire to help provision, manage or harden your servers, automate the deployment of your apps etc https://mig5.net

Has anyone written an RSS app to passively follow the feeds of multiple masto users in a way that is not ugly as hell? Like, maybe somehow handles threads?

A regular RSS app just won’t cut it.

#antisocialmedia

Australia’s COVIDSafe app has not detected a case despite 6 million downloads

https://www.theage.com.au/politics/federal/dishonest-covidsafe-app-has-not-detected-a-case-despite-6-million-downloads-20200627-p556s7.html

The only problem with this article is the focus on whether this means the app “isn’t functioning properly”.

That’s not the message to convey.

The message is that as usual: regular, human-driven detective work is perfectly suitable. Privacy-invading technology is not the hammer with which to treat everything as a nail. Just like surveillance/encryption backdoors.

As predicted, the US now trying to follow Australia’s 2018 lead by making mathematics illegal https://www.theregister.com/2020/06/24/us_encryption_backdoor/

TIL: OpenVPN 2.4 rejects client connections when “CRL has expired” https://mig5.net/blog/openvpn-2-4-crl-has-expired/

Just finished ‘The System’ from the razor-sharp mind of James Ball: “how an invention once hailed as a democratising force has concentrated power in places it already existed – that the system, in other words, remains the same as it did before.”

The message is clear; that many things need to be done to fix the mess that is the internet, that there is no silver bullet, and that old solutions may not lend themselves well to new iterations of the same challenges.

The OTF also helps fund Localization Lab, who drive a lot of translation work for many open source tools, including OnionShare. Their team and volunteers are incredible. They’ve even taught me to write English in a way that is less ambiguous to translate.

Please sign this petition https://saveinternetfreedom.tech

I wrote the Stem implementation for the ONION_CLIENT_AUTH control port commands, if anyone wants to help test: https://github.com/torproject/stem/pull/67 #tor

Oups, https://mastodon.tetaneutral.net SSL cert expired.

HTTP Basic Auth alternative with Nginx auth_request and a custom auth form

https://mig5.net/blog/http-basic-auth-alternative-with-nginx-auth_request-and-a-custom-auth-form/

#migsuglyhacks

Simple Nagios config management with #Ansible https://mig5.net/blog/simple-nagios-config-management-with-ansible/ #sysadmin

TIL: #Tor added Control Port support for adding Client Auth in v3 onions, but only for the ‘client’ side (e.g TBB).

There is, as yet, no way to add the onion service side’s Client Auth settings via the Control Port.

In other words, Client Auth can’t be used with v3 *ephemeral* onions. (so not with #OnionShare, or even via Stem’s create_ephemeral_hidden_service())

https://lists.torproject.org/pipermail/tor-dev/2020-June/014375.html

Rebuilt my website in Lektor https://mig5.net/blog/this-site-is-now-built-with-lektor/

Just stating for the record that I stepped down from the role of sysadmin at Whonix, this week.

Just deployed a new #Tor relay with the excellent #Ansible playbook by @nusenu https://github.com/nusenu/ansible-relayor

@nusenu I’m new to your OrNetStats (thanks for providing). Is this current status typical of the ubiquitous nifty family (that I seem to see in almost every circuit :( )? Seems pretty bad? https://nusenu.github.io/OrNetStats/endtoend-correlation-groups

US police assaulting Australian journalists during #BlackLivesMatter protests

https://www.abc.net.au/news/2020-06-02/channel-7-journalists-assaulted-police-george-floyd-protesters/12312056

What can be done about all these nifty servers :/ https://nusenu.github.io/OrNetStats/endtoend-correlation-groups I don’t think I’ve seen entry/exit nodes match up with them (at least when I’ve been looking), but I don’t like seeing so many nifty relays across all my circuits, as in once per *every* circuit almost all the time.

That’s what you want... at least 4 Tor circuits all with an exit node in the same /24 and similar nickname 😵 #nifty