00:03:35Sanqui quits [Ping timeout: 276 seconds]
00:13:59Umbire quits [Ping timeout: 276 seconds]
00:26:54Sanqui joins
00:26:59Sanqui quits [Changing host]
00:26:59Sanqui (Sanqui) joins
00:26:59@ChanServ sets mode: +o Sanqui
00:29:53<BlankEclair>> [27/06/2025 09:01] <JAA> But cloudflare-ech.com is a thing.
00:30:00<BlankEclair>ah whoops, yeah, it's cloudflare-ech.com when i double checked
00:31:57<@JAA>Bleh
00:33:15<BlankEclair>bleh indeed
00:33:22<BlankEclair>btw, dns is unfiltered
00:33:25<BlankEclair>...even the HTTPS records
00:33:38<BlankEclair>so that's fun
00:42:55<@JAA>lol
00:55:48etnguyen03 quits [Client Quit]
01:01:58etnguyen03 (etnguyen03) joins
01:03:53<nulldata>https://www.theverge.com/news/693566/bbc-online-tv-content-paywall-subscription-us
01:06:44glassy quits [Ping timeout: 260 seconds]
01:11:00glassy joins
01:41:59LunarianBunny1147 quits [Quit: WeeChat 4.6.3]
01:46:15LunarianBunny1147 (LunarianBunny1147) joins
02:30:54<steering>I'm really glad I graduated high school when I did, because they actually figured out how to block things pretty much immediately afterwards :P
02:31:58<@JAA>`net send * lol`
02:32:29<steering>ah they blocked that one when i was in middle school or so
02:33:00<steering>(unsure exactly, it worked when I was in summer school after 7th grade, but not when I returned to public schools in 10th grade)
02:33:04<@JAA>They eventually figured out how to block it after I and a few others allegedly abused it too much.
02:33:10<steering>but they pretty much only filtered HTTPS
02:33:12<steering>err
02:33:15<steering>s/S$//
02:34:00<steering>a few sites were blocked at IP/DNS level, like maybe Facebook or whatever, but almost everything was only blocked by a transparent HTTP-only content filter
02:34:21<@JAA>I don't recall content filters.
02:34:35<@JAA>And security in general was very lax. It was trivial to get admin access and install stuff.
02:34:45<steering>my last year they finally started blocking HTTPS (presumably with a internal CA, I never really inspected it)
02:35:52<@JAA>I installed Firefox on a bunch of machines, for a start.
02:35:53<steering>you couldn't f.e. download EXEs or anything, and C: was hidden (so you couldn't access it in explorer.exe, but you could still open any application that was in the start menu - MS Word was a favorite - and use the Open dialog to do it)...
02:36:04<steering>but you could just bring in EXEs on a usb drive or a cd or whatever
02:36:21<@JAA>Yeah, I think I had to switch to that eventually.
02:36:41<steering>no disk encryption of course and they didn't bother with bios passwords or anything (not that it would've helped) so you could ntpasswd it if you wanted or whatever
02:36:48<steering>I found an IT staffer's password at one point
02:37:03<steering>something like C:\Other\Keys\AutoAdmin Logon\AutoAdmin Logon (1).bat
02:37:10<steering>or .reg or who knows
02:37:33<steering>thank you for "meirei" mr e803870 (dont worry it's long since stopped working :P)
02:38:07<steering>not only did he have admin he could also see lots of the shared drives
02:38:34<steering>and *every* computer had a C:\Other\Keys\AutoAdmin Logon\AutoAdmin Logon.bat or whatever with its .\Administrator password in it
02:39:00<steering>(some of them even had proper permissions set so i couldn't read it but that was rare)
02:40:28<steering>anyway I just brought in putty.exe and FirefoxPortable.exe on a USB stick and copied them over to my shared drive. the year after I left, they started blocking outbound traffic (not just over port 22, didnt work on 443 or 2222 either as i recall)
02:40:43<steering>told my friend who was using it "welp sorry lol"
02:49:38<@JAA>Aw
03:26:10etnguyen03 quits [Remote host closed the connection]
03:49:01nine quits [Quit: See ya!]
03:49:14nine joins
03:49:14nine quits [Changing host]
03:49:14nine (nine) joins
04:04:03pabs remembers fondly the days of installing Cygwin on university library computers :)
04:04:41<pabs>and avoiding network quotas in the squid proxy by requesting URLs twice
04:15:26DogsRNice quits [Read error: Connection reset by peer]
04:51:47<pabs>https://community.letsencrypt.org/t/getting-ready-to-issue-ip-address-certificates/238777
04:55:25<@JAA>Nice
04:57:12<@JAA>I wonder why DNS-01 is excluded. Couldn't that be done via the reverse zones? Or can you not create TXT records on those?
05:35:42Guest58 joins
05:39:42HackMii quits [Remote host closed the connection]
05:40:01HackMii (hacktheplanet) joins
05:43:01HackMii quits [Remote host closed the connection]
05:43:18HackMii (hacktheplanet) joins
05:46:29arch_ (arch) joins
05:47:19arch quits [Ping timeout: 260 seconds]
05:47:19arch_ is now known as arch
06:02:14sec^nd quits [Remote host closed the connection]
06:02:26sec^nd (second) joins
06:04:15Guest58 quits [Client Quit]
06:04:36Guest58 joins
06:56:35qxtal quits [Read error: Connection reset by peer]
06:56:45qxtal (qxtal) joins
06:56:53IDK quits [Read error: Connection reset by peer]
06:56:54mgrandi quits [Read error: Connection reset by peer]
06:57:27mgrandi (mgrandi) joins
06:58:11IDK (IDK) joins
07:07:59pnJay quits [Read error: Connection reset by peer]
07:08:18pnJay joins
07:08:43todb quits [Read error: Connection reset by peer]
07:08:52todb joins
08:21:58HackMii quits [Ping timeout: 264 seconds]
08:23:20HackMii (hacktheplanet) joins
08:26:56<murb>JAA: you can of course.
08:27:07<murb>but i'd guess no so many people have access to them.
08:29:21<murb>typically the people with control of the reverse zone will be some kind of service provider, sure they could also intercept HTTP requests but still.
08:49:39Umbire (Umbire) joins
09:32:58Guest58 quits [Quit: My Mac has gone to sleep. ZZZzzz…]
10:02:16Lunarian1 (LunarianBunny1147) joins
10:04:43Dada joins
10:05:29LunarianBunny1147 quits [Ping timeout: 276 seconds]
11:00:02Bleo182600722719623455222 quits [Quit: The Lounge - https://thelounge.chat]
11:02:55Bleo182600722719623455222 joins
11:08:49Guest58 joins
11:56:34midou quits [Ping timeout: 260 seconds]
12:05:15midou joins
12:23:53HackMii quits [Remote host closed the connection]
12:24:18HackMii (hacktheplanet) joins
12:28:04Umbire quits [Ping timeout: 260 seconds]
12:31:00HackMii quits [Remote host closed the connection]
12:31:20HackMii (hacktheplanet) joins
12:35:42Umbire (Umbire) joins
12:35:49Umbire quits [Remote host closed the connection]
12:36:16Umbire (Umbire) joins
12:47:16Dada quits [Remote host closed the connection]
12:48:33Dada joins
12:55:13xarph_ joins
12:55:43xarph quits [Read error: Connection reset by peer]
13:09:17nine quits [Quit: See ya!]
13:09:29nine joins
13:09:29nine quits [Changing host]
13:09:29nine (nine) joins
13:21:13HackMii quits [Remote host closed the connection]
13:21:41HackMii (hacktheplanet) joins
13:22:30icedice (icedice) joins
13:25:54HackMii quits [Remote host closed the connection]
13:26:24HackMii (hacktheplanet) joins
13:26:36icedice quits [Client Quit]
15:23:11BornOn420 quits [Remote host closed the connection]
15:23:46BornOn420 (BornOn420) joins
15:29:46grill (grill) joins
15:40:11@imer quits [Killed (NickServ (GHOST command used by imer9))]
15:40:29imer (imer) joins
15:40:29@ChanServ sets mode: +o imer
15:49:22@imer quits [Client Quit]
15:49:42imer (imer) joins
15:49:42@ChanServ sets mode: +o imer
16:01:39FiTheArchiver joins
16:10:02FiTheArchiver quits [Client Quit]
16:10:08grill quits [Ping timeout: 276 seconds]
16:11:21grill (grill) joins
16:14:08lemuria_ (lemuria) joins
16:17:21lemuria_ quits [Read error: Connection reset by peer]
16:47:50grill quits [Ping timeout: 276 seconds]
16:53:18driib9 (driib) joins
16:56:59steering quits [Ping timeout: 260 seconds]
16:57:12steering (steering) joins
17:01:31<steering>pabs: wat @ avoiding quotas???
17:02:21<steering>I wnet to a private school as well which just had a squid-based content filter, it wasn't actually enforced anywhere but the secondary computer lab though. (I'm the one who set up that firewall rule for them. They didn't know it but I also knew the root password so I could turn it off any time I felt like.)
17:02:56<steering>that was literally over half my lifetime ago, sheesh
17:03:14<steering>also OOOOOOOH heck yeah IP certs
17:05:12<steering>lol @ https://bugzilla.mozilla.org/show_bug.cgi?id=1973855 firefox just assumes there's a double-colon somewhere in the IPv6 address
17:06:19<steering>oh no, just a bad regex that takes :0001 as == ::1
17:11:28<steering>murb: DNS-01 already often involves "some kind of service provider" and an API
17:22:45<murb>hosting forward zones yourself is rather more common.
17:28:14<@JAA>Hmm yeah, unless you own your IP space, I guess you wouldn't usually get a delegation of the reverse zone, and your provider might not want to let you set anything but PTR.
17:28:33<@JAA>Still a silly restriction for the case where you do have control of it.
17:42:23<nicolas17>https://1.6.0.0.8.0.0.b.e.d.0.a.2.ip6.arpa/@domi/statuses/01JJS6BMXVDJTQFTRVX4ZKR2GW
17:42:37<nicolas17>"According to all known laws of DNS, there is no way a fedi instance could be hosted on an .ARPA domain. Even if you get ahold of a domain like this, it should only be used for PTR records - right? The instance, of course, federates anyway - because DNS doesn't care what humans think is impossible"
17:50:39simon816 quits [Ping timeout: 260 seconds]
17:51:34simon816 (simon816) joins
17:53:01<murb>nicolas17: i recall having mx records in a reverse zone ;)
17:53:48<nicolas17>cursed
18:01:44arch quits [Read error: Connection reset by peer]
18:02:10arch (arch) joins
18:08:24<murb>i still do!
18:09:39<steering>JAA: its not *that* difficult to find a provider who will install NS records for you.
18:10:26<steering>murb: HTTP and ALPN are rather more common ;)
18:12:11<@JAA>steering: Go on...
18:14:28<steering>IDR who it was, been like a decade now, but there was someone on LEB who was like "sure i'll do that"
18:18:45Guest58 quits [Quit: My Mac has gone to sleep. ZZZzzz…]
18:20:33<@JAA>Ah yeah, it is something I'd expect to see on LEB.
19:03:01<steering>yeah, basically.
19:03:10<steering>I presume the only reason not to is abuse concerns really
19:04:08<steering>(Even though I'm sure there are also still plenty of providers who just let you set an arbitrary PTR without checking it)
19:15:10<steering>TIL backronym for .arpa: Address and Routing Parameter Area
19:19:08<@JAA>Yep, I've had things like host.invalid in PTR records for years.
19:44:17driib9 quits [Client Quit]
19:44:24flotwig quits [Ping timeout: 260 seconds]
19:46:55driib9 (driib) joins
20:01:41<murb>oh I still have some rfc2317 foo + zone delegated to me for a place I've not been a customer of for *many* years.
21:01:57etnguyen03 (etnguyen03) joins
21:13:54etnguyen03 quits [Client Quit]
21:19:52nicolas17 quits [Quit: Konversation terminated!]
21:25:12nicolas17 joins
21:36:05APOLLO03 joins
21:48:38etnguyen03 (etnguyen03) joins
22:02:39Dada quits [Remote host closed the connection]
22:05:41Dango360 quits [Ping timeout: 276 seconds]
22:07:39Dango360 (Dango360) joins
22:15:05etnguyen03 quits [Client Quit]
22:15:51arch quits [Remote host closed the connection]
22:16:34arch (arch) joins
22:45:59Umbire quits [Ping timeout: 276 seconds]
22:54:51Umbire (Umbire) joins
22:55:03Umbire quits [Remote host closed the connection]
22:55:30Umbire (Umbire) joins