AAISP offer an interesting product that, for £10/mo, you can give yourself a _real_ IP address on the internet.
Recent Updates
Encrypted git diff
There’s a pattern that I sometimes use, to store encrypted text files in git.
That doesn’t mean that you need to lose git’s power behind the encryption.
RFC2136 and nsupdate
Say we have a bind9 server, and wish to update some DNS records remotely, without restarting the server.
RFC2136 defines a protocol and tooling to do it in a reasonably standard way.
Encrypting files to ssh hosts
This is probably a bad idea for forward secrecy reasons. But, did you know what every SSH server tells you how you can encrypt data for it?
qemu-efi
#!/bin/bash
exec qemu-system-x86_64 \
-m 1G -smp 2 -enable-kvm \
-drive file=/usr/share/edk2-ovmf/OVMF_CODE.fd,if=pflash,format=raw,unit=0,readonly=on \
$@
ping.sql
\set PROMPT1 = '%`date` %n@%m:%/%R%# ' \timing SELECT 1;
cropdetect
ffmpeg -i "${INPUT_VIDEO}" -vf cropdetect -f null -
fail2ban with opensmtpd
opensmtpd is a tricky service to create fail2ban rules for. For starters, the IP address to match is logged to a different line to the authentication state.
g_serial
Serial on a Raspberry Pi Zero (or any one with an OTG USB port) can be used without
adding the GPIO headers by sending the console down the USB cable itself.
This will present as ttyGS0 on the pi, and ttyACM0 on the host.
Audioless
Here’s an ffmpeg command to strip audio and downscale video for social media posts that don’t need full fidelity.