Alex

Security Engineer. I mostly post about IPv6 and pictures of my cats.

I help run Tor relays for AS 396507 (npub1xsw…yq8t).

Also trying to bring more chaos to the UK with Ministry of Chaos (npub1g27…kxux).

:rainbow_heart: :trans_heart:

Pronouns: he/him
Locale: en_GB
Blog: https://blog.infected.systems
GitHub: https://github.com/alexhaydock
AS: https://as215768.net

Public Key

npub1z6665pquqptjptt5gm2cpv8h9vr3dm5m5mpm6wq0m6ctr87sz7zqt055h8

NIP-05 Address

alexhaydock_at_infosec.exchange@momostr.pink

Profile Code

nprofile1qqspddd2qswqq4eq446yd4vqkrmjkpcka6d6dsaa8q8aav93nlgp0pqppamhxue69uhkummnw3ezumt0d5q3gamnwvaz7tmjv4kxz7fwv3sk6atn9e5k7rhsdmt

Publishing to

nostr.mom

relay.damus.io

nos.lol

Author Public Key

npub1z6665pquqptjptt5gm2cpv8h9vr3dm5m5mpm6wq0m6ctr87sz7zqt055h8

Show more details

Last Notes

2026-10-21 10:46:26 UTC

Trying to read the CA cert inclusion policy because of Today's Massive Security Problem #1 but the site is offline due to Today's Massive Security Problem #2 :blobcat_thisisfine:
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/478/487/914/446/621/original/c059abac07128b78.png

2026-10-06 14:26:29 UTC

No NAT November shaping up nicely this year :neocat_laptop:
On a fresh out of the box install of Win 11 it only takes one command and a reboot to enable WinCLAT:
```
netsh.exe interface clat set global permit=enabled
```
#ipv6 #ipv6only
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/394/425/809/636/295/original/bf6248b98dd2914e.png

2026-07-17 11:51:24 UTC

This blog is hosted on a Nintendo Wii... in a field
https://blog.infected.systems/posts/2026-07-17-this-blog-is-hosted-on-a-nintendo-wii-in-a-field/
#emfcamp
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/935/161/218/169/916/original/32b1c2b892bcd484.jpg

2026-07-17 10:18:49 UTC

- reply

Chaos achieved #emfcamp
https://blog.infected.systems
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/934/801/345/527/942/original/276329aeaf279135.jpeg

2026-07-17 09:38:43 UTC

:neocat_evil_3c:
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/934/645/187/822/096/original/c0587098306b379f.jpeg

2026-06-30 22:36:46 UTC

- reply

I moved my blog to a Wii one rainy weekend as a joke, but then people liked it so much I’m still running it like that over a year later…
https://blog.infected.systems/posts/2025-04-21-this-blog-is-hosted-on-a-nintendo-wii/

2026-03-13 10:29:02 UTC

Things we know:
* Valve have been working on an unknown project called” HLX”
* Valve promised an updated version of the Half-Life 2 “Raising the Bar” book in 2025, but missed the deadline for unknown reasons
* Valve’s new hardware launch has been delayed by the RAM crisis
…there is a non-zero chance that Sam Altman has delayed Half-Life 3

2026-01-12 19:48:41 UTC

you may not like it, but this is what peak comfort looks like
#catsofmastodon
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/883/851/672/107/968/original/df7bb12ad2e794b5.jpeg

2025-11-28 12:49:59 UTC

- reply

https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/627/403/139/098/810/original/c29ab94ad9400c47.jpeg

2025-11-28 12:47:38 UTC

ffs :blobcatnotlikethis:
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/627/391/988/725/038/original/d21013323eaab26a.png

2025-11-18 17:52:56 UTC

Oooh the CLAT for Windows is in Private Preview :neocat_laptop_owo:
They made it in time for No NAT November!
https://techcommunity.microsoft.com/blog/NetworkingBlog/windows-clat-enters-private-preview-a-milestone-for-ipv6-adoption/4459534
#ipv6

2025-11-13 20:29:28 UTC

average cat bed purchasing experience
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/544/274/107/974/368/original/0419b482587b7440.jpeg

2025-09-15 12:07:35 UTC

- reply

In 'Hardware > Memory' is the Ballooning Device disabled? Without this, Proxmox's view of RAM usage is a lot less accurate.
Other possible factors would be if it's a BSD guest instead of Linux, or where you've got any kind of PCI passthrough enabled.

2025-09-15 11:50:16 UTC

- reply

Out of interest, how does the difference in OpenReach and CityFibre's FTTP approaches slot in here?
Seems like CF can deploy symmetric gigabit while OR's down:up ratio is closer to 10:1 at that speed.

2025-09-08 12:03:46 UTC

- reply

> compelling platforms to use cutting-edge technology to actively seek out and eliminate this content before it can reach users
Yikes.

2025-07-07 11:12:01 UTC

LibreOffice adding markdown support :blobcatreading:
This might make for a great companion/alternative to Pandoc if you can write in Markdown and then invoke it from the CLI to spit out templated .docx and PDFs.
https://www.phoronix.com/news/LibreOffice-Markdown-Import

2025-06-22 09:16:50 UTC

If you use Quickemu to spin up QEMU VMs rapidly on Fedora, it’s now packaged in the official repos! :blobcatbirthday:
It’s still in testing for F42 and F41 but you can give it a go with:
```
sudo dnf install --enablerepo=updates-testing --refresh quickemu
```
This is the first package I’ve maintained in Fedora so testing and feedback very welcome if anything isn’t working.
If you’re not already using Quickemu but want a super quick way to spin up graphical VMs with full 3D acceleration and a simple config language, definitely check it out!
https://github.com/quickemu-project/quickemu
#fedora

2025-06-05 15:17:51 UTC

Switch 2 has a working #IPv6 stack it seems, according to Reddit.
I wonder if the days of Nintendo’s “forward all 65535 ports to your Switch” advice are coming to an end…
https://www.reddit.com/r/ipv6/s/cmy7tWkZ18
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/631/414/900/505/491/original/f6853f27d7065eb3.jpeg

2025-05-24 21:52:45 UTC

- reply

👀 interesting. Should be working. The v4 frontend is just a redirect to the v6 backend so if either works then the v6 is working.
Maybe it’s just not routable from your ASN for some reason?

2025-04-21 18:02:01 UTC

Did you leave your Wii at the #EMF2024 Swap Shop?
If so, it's now hosting my blog:
https://blog.infected.systems/posts/2025-04-21-this-blog-is-hosted-on-a-nintendo-wii/
Huge credit to @npub12my…fgmk for the effort porting NetBSD to the Wii!
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/377/256/276/454/931/original/02f6061ea086111e.jpeg

2025-03-01 09:03:01 UTC

My assistant is honestly not being particularly helpful
#caturday
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/086/357/268/994/760/original/dedd9cd73d491525.jpeg
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/086/357/479/717/502/original/e431d206dbdeb020.jpeg
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/086/357/714/018/957/original/a51d14f90c60565f.jpeg

2025-01-16 13:29:50 UTC

- reply

I’m very confused by the unclear guidance on how providers should respond to traffic from VPNs.
3.190 accepts that Ofcom have no power to mandate that providers block traffic from VPNs
But 3.191 seems to contradict this, suggesting (without further explanation) that “providers should ensure they take appropriate steps to mitigate against methods of circumvention that are easily accessible to children or where it is reasonable to assume that they may use them”.
I can’t find much in the other guidance about what these “appropriate steps” are, other than the mandate that providers can’t clearly advertise the fact that a VPN would help circumvent the age verification prompt.

2025-01-05 10:48:14 UTC

An #ageverification story in two parts
https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/775/345/773/850/357/original/6e41173c70d75d79.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/775/346/698/418/006/original/1bb6d9c202f0c1bb.png

2024-12-01 19:20:56 UTC

I took @npub1n4n…6ax6's 'No NAT November' challenge and switched my network to IPv6-only! :blobcat_thisisfine:
New blog post: No NAT November - My Month Without IPv4
https://blog.infected.systems/posts/2024-12-01-no-nat-november/
#ipv6
https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/579/173/198/241/965/original/b339cbe46d5ab0e3.png

2024-11-04 13:24:33 UTC

One for UK cyber folk!
I'm hiring two Cyber Security Operations Engineers to join my team at the National Energy System Operator (NESO).
This would ideally suit folk who are well-versed in infrastructure, CI/CD pipelines, SIEM/security tooling, and who have a good awareness of what a modern SOC needs to function.
This is the first time I've tried reaching out on Mastodon for this kind of thing but there's plenty of skilled folk on here doing all sorts of interesting things so I'm giving it a go!
As I put in the ad, if you're the kind of person who likes building and experimenting, and telling people about your over-engineered homelab setup, you'd probably fit in extremely well.
The role is listed as hybrid, but the on-site component is really only about 1-2 days a month, when interesting things may be happening.
More than willing to chat to anyone at all who might be interested so do feel free to reach out if this appeals to you in any way!
https://jobs.nationalgrid.com/NationalEnergySO/job/Warwick-Senior-Cyber-Security-Operations-Engineer-NESO-CV34-6DA/1229130700/
Boosts very appreciated if you have UK-based followers who might also be interested. Thanks! :blobsmile:
#ukjobs #cyber #cybersecurity #security

2024-10-20 11:32:53 UTC

Ongoing discussion, but it looks like Bitwarden may be starting to make moves towards no longer being open source:
https://github.com/bitwarden/clients/issues/11611
Previous issues opened against the SDK have been met with replies that suggest they have no intention of reconsidering the licensing decision:
https://github.com/bitwarden/sdk/issues/898