00:03:35 | | Sanqui quits [Ping timeout: 276 seconds] |
00:13:59 | | Umbire quits [Ping timeout: 276 seconds] |
00:26:54 | | Sanqui joins |
00:26:59 | | Sanqui is now authenticated as Sanqui |
00:26:59 | | Sanqui quits [Changing host] |
00:26:59 | | Sanqui (Sanqui) joins |
00:26:59 | | @ChanServ sets mode: +o Sanqui |
00:29:53 | <BlankEclair> | > [27/06/2025 09:01] <JAA> But cloudflare-ech.com is a thing. |
00:30:00 | <BlankEclair> | ah whoops, yeah, it's cloudflare-ech.com when i double checked |
00:31:57 | <@JAA> | Bleh |
00:33:15 | <BlankEclair> | bleh indeed |
00:33:22 | <BlankEclair> | btw, dns is unfiltered |
00:33:25 | <BlankEclair> | ...even the HTTPS records |
00:33:38 | <BlankEclair> | so that's fun |
00:42:55 | <@JAA> | lol |
00:55:48 | | etnguyen03 quits [Client Quit] |
01:01:58 | | etnguyen03 (etnguyen03) joins |
01:03:53 | <nulldata> | https://www.theverge.com/news/693566/bbc-online-tv-content-paywall-subscription-us |
01:06:44 | | glassy quits [Ping timeout: 260 seconds] |
01:11:00 | | glassy joins |
01:41:59 | | LunarianBunny1147 quits [Quit: WeeChat 4.6.3] |
01:46:15 | | LunarianBunny1147 (LunarianBunny1147) joins |
02:30:54 | <steering> | I'm really glad I graduated high school when I did, because they actually figured out how to block things pretty much immediately afterwards :P |
02:31:58 | <@JAA> | `net send * lol` |
02:32:29 | <steering> | ah they blocked that one when i was in middle school or so |
02:33:00 | <steering> | (unsure exactly, it worked when I was in summer school after 7th grade, but not when I returned to public schools in 10th grade) |
02:33:04 | <@JAA> | They eventually figured out how to block it after I and a few others allegedly abused it too much. |
02:33:10 | <steering> | but they pretty much only filtered HTTPS |
02:33:12 | <steering> | err |
02:33:15 | <steering> | s/S$// |
02:34:00 | <steering> | a few sites were blocked at IP/DNS level, like maybe Facebook or whatever, but almost everything was only blocked by a transparent HTTP-only content filter |
02:34:21 | <@JAA> | I don't recall content filters. |
02:34:35 | <@JAA> | And security in general was very lax. It was trivial to get admin access and install stuff. |
02:34:45 | <steering> | my last year they finally started blocking HTTPS (presumably with a internal CA, I never really inspected it) |
02:35:52 | <@JAA> | I installed Firefox on a bunch of machines, for a start. |
02:35:53 | <steering> | you couldn't f.e. download EXEs or anything, and C: was hidden (so you couldn't access it in explorer.exe, but you could still open any application that was in the start menu - MS Word was a favorite - and use the Open dialog to do it)... |
02:36:04 | <steering> | but you could just bring in EXEs on a usb drive or a cd or whatever |
02:36:21 | <@JAA> | Yeah, I think I had to switch to that eventually. |
02:36:41 | <steering> | no disk encryption of course and they didn't bother with bios passwords or anything (not that it would've helped) so you could ntpasswd it if you wanted or whatever |
02:36:48 | <steering> | I found an IT staffer's password at one point |
02:37:03 | <steering> | something like C:\Other\Keys\AutoAdmin Logon\AutoAdmin Logon (1).bat |
02:37:10 | <steering> | or .reg or who knows |
02:37:33 | <steering> | thank you for "meirei" mr e803870 (dont worry it's long since stopped working :P) |
02:38:07 | <steering> | not only did he have admin he could also see lots of the shared drives |
02:38:34 | <steering> | and *every* computer had a C:\Other\Keys\AutoAdmin Logon\AutoAdmin Logon.bat or whatever with its .\Administrator password in it |
02:39:00 | <steering> | (some of them even had proper permissions set so i couldn't read it but that was rare) |
02:40:28 | <steering> | anyway I just brought in putty.exe and FirefoxPortable.exe on a USB stick and copied them over to my shared drive. the year after I left, they started blocking outbound traffic (not just over port 22, didnt work on 443 or 2222 either as i recall) |
02:40:43 | <steering> | told my friend who was using it "welp sorry lol" |
02:49:38 | <@JAA> | Aw |
03:26:10 | | etnguyen03 quits [Remote host closed the connection] |
03:49:01 | | nine quits [Quit: See ya!] |
03:49:14 | | nine joins |
03:49:14 | | nine is now authenticated as nine |
03:49:14 | | nine quits [Changing host] |
03:49:14 | | nine (nine) joins |
04:04:03 | | pabs remembers fondly the days of installing Cygwin on university library computers :) |
04:04:41 | <pabs> | and avoiding network quotas in the squid proxy by requesting URLs twice |
04:15:26 | | DogsRNice quits [Read error: Connection reset by peer] |
04:51:47 | <pabs> | https://community.letsencrypt.org/t/getting-ready-to-issue-ip-address-certificates/238777 |
04:55:25 | <@JAA> | Nice |
04:57:12 | <@JAA> | I wonder why DNS-01 is excluded. Couldn't that be done via the reverse zones? Or can you not create TXT records on those? |
05:35:42 | | Guest58 joins |
05:39:42 | | HackMii quits [Remote host closed the connection] |
05:40:01 | | HackMii (hacktheplanet) joins |
05:43:01 | | HackMii quits [Remote host closed the connection] |
05:43:18 | | HackMii (hacktheplanet) joins |
05:46:29 | | arch_ (arch) joins |
05:47:19 | | arch quits [Ping timeout: 260 seconds] |
05:47:19 | | arch_ is now known as arch |
06:02:14 | | sec^nd quits [Remote host closed the connection] |
06:02:26 | | sec^nd (second) joins |
06:04:15 | | Guest58 quits [Client Quit] |
06:04:36 | | Guest58 joins |
06:56:35 | | qxtal quits [Read error: Connection reset by peer] |
06:56:45 | | qxtal (qxtal) joins |
06:56:53 | | IDK quits [Read error: Connection reset by peer] |
06:56:54 | | mgrandi quits [Read error: Connection reset by peer] |
06:57:27 | | mgrandi (mgrandi) joins |
06:58:11 | | IDK (IDK) joins |
07:07:59 | | pnJay quits [Read error: Connection reset by peer] |
07:08:18 | | pnJay joins |
07:08:43 | | todb quits [Read error: Connection reset by peer] |
07:08:52 | | todb joins |
08:21:58 | | HackMii quits [Ping timeout: 264 seconds] |
08:23:20 | | HackMii (hacktheplanet) joins |
08:26:56 | <murb> | JAA: you can of course. |
08:27:07 | <murb> | but i'd guess no so many people have access to them. |
08:29:21 | <murb> | typically the people with control of the reverse zone will be some kind of service provider, sure they could also intercept HTTP requests but still. |
08:49:39 | | Umbire (Umbire) joins |
09:32:58 | | Guest58 quits [Quit: My Mac has gone to sleep. ZZZzzz…] |
10:02:16 | | Lunarian1 (LunarianBunny1147) joins |
10:04:43 | | Dada joins |
10:05:29 | | LunarianBunny1147 quits [Ping timeout: 276 seconds] |
11:00:02 | | Bleo182600722719623455222 quits [Quit: The Lounge - https://thelounge.chat] |
11:02:55 | | Bleo182600722719623455222 joins |
11:08:49 | | Guest58 joins |
11:56:34 | | midou quits [Ping timeout: 260 seconds] |
12:05:15 | | midou joins |
12:23:53 | | HackMii quits [Remote host closed the connection] |
12:24:18 | | HackMii (hacktheplanet) joins |
12:28:04 | | Umbire quits [Ping timeout: 260 seconds] |
12:31:00 | | HackMii quits [Remote host closed the connection] |
12:31:20 | | HackMii (hacktheplanet) joins |
12:35:42 | | Umbire (Umbire) joins |
12:35:49 | | Umbire quits [Remote host closed the connection] |
12:36:16 | | Umbire (Umbire) joins |
12:47:16 | | Dada quits [Remote host closed the connection] |
12:48:33 | | Dada joins |
12:55:13 | | xarph_ joins |
12:55:43 | | xarph quits [Read error: Connection reset by peer] |
13:09:17 | | nine quits [Quit: See ya!] |
13:09:29 | | nine joins |
13:09:29 | | nine is now authenticated as nine |
13:09:29 | | nine quits [Changing host] |
13:09:29 | | nine (nine) joins |
13:21:13 | | HackMii quits [Remote host closed the connection] |
13:21:41 | | HackMii (hacktheplanet) joins |
13:22:30 | | icedice (icedice) joins |
13:25:54 | | HackMii quits [Remote host closed the connection] |
13:26:24 | | HackMii (hacktheplanet) joins |
13:26:36 | | icedice quits [Client Quit] |
15:23:11 | | BornOn420 quits [Remote host closed the connection] |
15:23:46 | | BornOn420 (BornOn420) joins |
15:29:46 | | grill (grill) joins |
15:40:11 | | @imer quits [Killed (NickServ (GHOST command used by imer9))] |
15:40:29 | | imer (imer) joins |
15:40:29 | | @ChanServ sets mode: +o imer |
15:49:22 | | @imer quits [Client Quit] |
15:49:42 | | imer (imer) joins |
15:49:42 | | @ChanServ sets mode: +o imer |
16:01:39 | | FiTheArchiver joins |
16:10:02 | | FiTheArchiver quits [Client Quit] |
16:10:08 | | grill quits [Ping timeout: 276 seconds] |
16:11:21 | | grill (grill) joins |
16:14:08 | | lemuria_ (lemuria) joins |
16:17:21 | | lemuria_ quits [Read error: Connection reset by peer] |
16:47:50 | | grill quits [Ping timeout: 276 seconds] |
16:53:18 | | driib9 (driib) joins |
16:56:59 | | steering quits [Ping timeout: 260 seconds] |
16:57:12 | | steering (steering) joins |
17:01:31 | <steering> | pabs: wat @ avoiding quotas??? |
17:02:21 | <steering> | I wnet to a private school as well which just had a squid-based content filter, it wasn't actually enforced anywhere but the secondary computer lab though. (I'm the one who set up that firewall rule for them. They didn't know it but I also knew the root password so I could turn it off any time I felt like.) |
17:02:56 | <steering> | that was literally over half my lifetime ago, sheesh |
17:03:14 | <steering> | also OOOOOOOH heck yeah IP certs |
17:05:12 | <steering> | lol @ https://bugzilla.mozilla.org/show_bug.cgi?id=1973855 firefox just assumes there's a double-colon somewhere in the IPv6 address |
17:06:19 | <steering> | oh no, just a bad regex that takes :0001 as == ::1 |
17:11:28 | <steering> | murb: DNS-01 already often involves "some kind of service provider" and an API |
17:22:45 | <murb> | hosting forward zones yourself is rather more common. |
17:28:14 | <@JAA> | Hmm yeah, unless you own your IP space, I guess you wouldn't usually get a delegation of the reverse zone, and your provider might not want to let you set anything but PTR. |
17:28:33 | <@JAA> | Still a silly restriction for the case where you do have control of it. |
17:42:23 | <nicolas17> | https://1.6.0.0.8.0.0.b.e.d.0.a.2.ip6.arpa/@domi/statuses/01JJS6BMXVDJTQFTRVX4ZKR2GW |
17:42:37 | <nicolas17> | "According to all known laws of DNS, there is no way a fedi instance could be hosted on an .ARPA domain. Even if you get ahold of a domain like this, it should only be used for PTR records - right? The instance, of course, federates anyway - because DNS doesn't care what humans think is impossible" |
17:50:39 | | simon816 quits [Ping timeout: 260 seconds] |
17:51:34 | | simon816 (simon816) joins |
17:53:01 | <murb> | nicolas17: i recall having mx records in a reverse zone ;) |
17:53:48 | <nicolas17> | cursed |
18:01:44 | | arch quits [Read error: Connection reset by peer] |
18:02:10 | | arch (arch) joins |
18:08:24 | <murb> | i still do! |
18:09:39 | <steering> | JAA: its not *that* difficult to find a provider who will install NS records for you. |
18:10:26 | <steering> | murb: HTTP and ALPN are rather more common ;) |
18:12:11 | <@JAA> | steering: Go on... |
18:14:28 | <steering> | IDR who it was, been like a decade now, but there was someone on LEB who was like "sure i'll do that" |
18:18:45 | | Guest58 quits [Quit: My Mac has gone to sleep. ZZZzzz…] |
18:20:33 | <@JAA> | Ah yeah, it is something I'd expect to see on LEB. |
19:03:01 | <steering> | yeah, basically. |
19:03:10 | <steering> | I presume the only reason not to is abuse concerns really |
19:04:08 | <steering> | (Even though I'm sure there are also still plenty of providers who just let you set an arbitrary PTR without checking it) |
19:15:10 | <steering> | TIL backronym for .arpa: Address and Routing Parameter Area |
19:19:08 | <@JAA> | Yep, I've had things like host.invalid in PTR records for years. |
19:44:17 | | driib9 quits [Client Quit] |
19:44:24 | | flotwig quits [Ping timeout: 260 seconds] |
19:46:55 | | driib9 (driib) joins |
20:01:41 | <murb> | oh I still have some rfc2317 foo + zone delegated to me for a place I've not been a customer of for *many* years. |
21:01:57 | | etnguyen03 (etnguyen03) joins |
21:13:54 | | etnguyen03 quits [Client Quit] |
21:19:52 | | nicolas17 quits [Quit: Konversation terminated!] |
21:25:12 | | nicolas17 joins |
21:25:17 | | nicolas17 is now authenticated as nicolas17 |
21:36:05 | | APOLLO03 joins |
21:48:38 | | etnguyen03 (etnguyen03) joins |
22:02:39 | | Dada quits [Remote host closed the connection] |
22:05:41 | | Dango360 quits [Ping timeout: 276 seconds] |
22:07:39 | | Dango360 (Dango360) joins |
22:15:05 | | etnguyen03 quits [Client Quit] |
22:15:51 | | arch quits [Remote host closed the connection] |
22:16:34 | | arch (arch) joins |
22:45:59 | | Umbire quits [Ping timeout: 276 seconds] |
22:54:51 | | Umbire (Umbire) joins |
22:55:03 | | Umbire quits [Remote host closed the connection] |
22:55:30 | | Umbire (Umbire) joins |