gary_alderson

Public Key

npub1hl6v5extt25c253qqqy6u8hylvk47qhrzvhet8kq42p4pn34nfpqvx045t

NIP-05 Address

gary_alderson_at_infosec.exchange@momostr.pink

Profile Code

nprofile1qqstlax2vn9442v92gsqqzdwrmj0kt2lqt33xtu4nmq24q6sec6e5ssprpmhxue69uhhyetvv9ujumt0d4hhxarj9ecxjmntqyf8wumn8ghj7mmxve3ksctfdch8qatza58rnj

Publishing to

relay.momostr.pink

offchain.pub

relay.snort.social

Author Public Key

npub1hl6v5extt25c253qqqy6u8hylvk47qhrzvhet8kq42p4pn34nfpqvx045t

Show more details

Last Notes

2026-09-14 17:23:05 UTC

- reply

doomed to a life of speed, deals, and double eagles
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/270/549/826/935/045/original/859e836abed5fdce.jpg

2026-09-14 02:14:05 UTC

- reply

when did strategery become a word?

2026-08-28 19:08:33 UTC

- reply

this could be a good example of why small biz may want to go with dual nas, they could both fail but that is why you have some compressed backups
flash or solid state nme drives fail too but with no moving parts I have a bit more confidence and of course with the hw bubble it is more of a crapshoot now - not as clear cut from perf/value standpoint. I think mtbf is less for solid state generally, prices for all storage are so inflated it makes it tough, small biz doesn't really have choice - they have to pay the ai tax
update this thread as you repair
#dd #gz #downtime costs money

2026-08-28 18:58:13 UTC

- reply

maybe something like ai learning or stealing, whatever it takes to get the job done #meme reuse
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/174/664/477/612/388/original/8ff74907612ac154.jpg

2026-08-25 11:07:32 UTC

- reply

it is not the first time the smartest people in the room have been wrong about ai

2026-08-21 18:45:25 UTC

- reply

i think it makes a lot of sense and so do a lot of doctors and engineers and coders. at least i learned something so it is valuable for me and some people in the community even if you think it is 'not good'. i accept it at this point

2026-08-21 17:02:08 UTC

- reply

slop is 10x better than you will find qualitatively speaking from pretty much anybody - they don't have the time to worry about your prosaic problems

2026-08-21 16:21:39 UTC

- reply

well maybe it actually helped clear some things up, i know it did for me
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/134/412/761/696/483/original/36fdad47c3109047.jpg

2026-08-21 16:13:12 UTC

- reply

you don't think i am able to handle the truth?

2026-08-21 16:11:11 UTC

- reply

see how many of these points are valid/salient/pragmatic or interesting
good background info, it is a bit of a rabbit hole #dual stack dns
The "Get It Done" IPv6 Checklist
Phase 1: Preparation & Verification
Verify Verizon Eligibility: Confirm your specific Verizon Business account (with static IPv4) actually supports DHCPv6 Prefix Delegation (PD). Check your account portal or contact support, as some static IPv4 accounts are not yet eligible for IPv6.
Confirm Delegated Prefix Size: Find out if Verizon is delegating a /56 or just a /64. You need a /56 to split into multiple subnets for your different segments.
Phase 2: MikroTik Core Configuration
Configure DHCPv6 Client on WAN: Set up a DHCPv6 client on your WAN interface. Crucially, set prefix-hint=::/56 to request the larger block.
Stabilize the DUID: Configure your MikroTik to use a stable DUID-LL (based on the MAC address), not DUID-LLT (which includes a timestamp). This prevents Verizon from assigning a new prefix every time the router reboots.
Create a Dynamic IPv6 Pool: The DHCPv6 client will automatically create a dynamic pool from the delegated prefix it receives. Ensure this is active.
Assign Subnets to Segments (VLANs): For each of your segmented interfaces (VLANs), assign an IPv6 address using from-pool=<pool-name> and prefix-length=64. The first VLAN gets ::/64, the second gets ::1/64, and so on.
Enable Router Advertisements (RA): On each segmented interface, enable Neighbor Discovery (ND) with the "Advertise" flag so clients can autoconfigure (SLAAC) with addresses from the correct subnet.
Phase 3: Firewall & Segmentation
Implement Firewall Rules: Add IPv6 firewall rules on the MikroTik to manage traffic flow between your segmented networks, just as you would with IPv4.
Phase 4: Service Stability & DNS
Adopt ULAs for Internal Services: Assign static Unique Local Addresses (fd00::/8) to all internal servers and services. This gives you completely stable, predictable IPv6 addresses that will never change, regardless of your ISP's prefix.
Implement DDNS for Public Services: Write a MikroTik script to monitor the delegated prefix. When it changes, the script should automatically update your Dynamic DNS (DDNS) provider with the new AAAA records for any public-facing services.
Phase 5: Long-Term Strategy
Test and Monitor: Observe the prefix stability over a few days. Note how often (if ever) it changes.
Explore a Static IPv6 Upgrade (Optional): If the dynamic nature proves too disruptive and DDNS/ULA isn't sufficient, inquire with Verizon Business about purchasing a dedicated Static IPv6 block (a paid service). This would eliminate the dynamic challenge entirely.

2026-08-21 15:58:33 UTC

- reply

the bastard is back in stock
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/134/321/904/982/173/original/681d2cbadff5888b.jpeg

2026-08-21 13:26:35 UTC

- reply

we know dns is deep pocket but it may not have to be, i think mikrotik may be the best but opnsense is trying to be as good and as stable. I think you need dhcpv6 client on mikrotik to get you /56 and then you can subnet to /64. maybe visit the mikrotik forums and ask for help, you are not in a totally unique situation. keep us updated on what the solution that works for you is #UAL

2026-08-21 12:55:29 UTC

- reply

sort of a luxury problem, hire somebody is what i would say, it is complicated enough to justify that or just take the time for an intensive day or two to sort it out, you could always use opnsense for routing and ditch verizon, get fiber if possible or get a beefy vps. Call verizon and ask for support from a person? that may be a bridge too far

2026-08-14 15:31:38 UTC

- reply

you know i love your work, not painting with a broad brush
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/094/579/910/132/103/original/075ab04c73829f54.jpg

2026-08-14 15:28:42 UTC

- reply

this is the whole web mostly - check wired.com - same thing, tons of trackers, advertisers will start using more encryption and then the app gets less useful #low level js

2026-08-13 12:52:41 UTC

- reply

they want to commercialize the govt, saas surveillance but really we should step back and look at the overall situation - maga and american ai go away as political forces despite china.
both ai and maga are hocus pocus longer terms fads but they will get washed away, pressed, and hung out to dry
bruce is grasping at straws and delusional - let the market work and defenestrate big tech ai; they can't all be winners, they don't own the technology

2026-08-05 17:06:29 UTC

- reply

all their ai agents will start using the dark web now #you live in a dark zone

2026-08-03 13:53:36 UTC

- reply

i look at it as one more point of possible failure, are the batteries charged, are the drivers installed. it also depends like for a living room htpc yeah

2026-08-03 13:44:50 UTC

- reply

well that is interesting, i try to stay away from racks and real servers but i may have to enter acceptance stage. i am thinking of proliant gen 10 for smb - what is the real workhorse refurb enterprise platform 730xd?

2026-08-03 12:32:29 UTC

- reply

i am all fake sw raid, hw raid is dead to me but dell may be good in some situations depending on use case, i used to repair a ton of pc and del had some proprietary hw problems, i mean i forgive them but also move to hp for better compatibility, ease of use, none of the hardware out there is perfect #mike

2026-08-03 12:27:19 UTC

- reply

windows just broke dell computers though
https://www.youtube.com/watch?v=9n5FbKldvUs

2026-08-03 11:28:07 UTC

- reply

besides lack of support their refurb products are good generally and that is more than you can say for others, they are trying to avoid going bankrupt
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/031/335/912/415/651/original/af489c1c4723d003.jpeg

2026-07-29 21:07:10 UTC

- reply

we have frogs at complex - in long hallways there is amplification or something, i'd probably emtomb them in poly foam #voids

2026-07-29 20:50:39 UTC

- reply

you may want a freq counter, it helps find bugs

2026-07-29 02:00:22 UTC

- reply

one of these days it will be busted jail and gone for good

2026-07-25 22:44:41 UTC

- reply

think about a random number generator filter - these days you really need it, think of it as a pihole for your augmented reality glasses #rose colored ar/ai glasses with limited ads
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/983/036/404/888/315/original/cade15ba997200fe.jpg

2026-07-20 01:55:33 UTC

- reply

https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/949/813/025/773/205/original/776a6bcb90d03d57.jpg

2026-07-19 12:38:38 UTC

- reply

one spark burns down the entire forest - you are looking at ashes

2026-07-17 15:35:01 UTC

- reply

I think they are running into liquidity problems perhaps, with the circular economy it is like taking scissors to a string, if one support falls it takes down that ponzi ecosystem. some of it is hubris and realization america may be beta kennewick man, not superman #corp gov #credit default swaps #private equity

2026-07-14 12:32:37 UTC

- reply

i use the wildcard cert - may not be exactly ideal but it cuts down work adding new subdomains

2026-07-09 13:20:04 UTC

- reply

accept it, the ads are better than the content #one weird trick
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/890/225/971/151/220/original/d388a2fe0fc8af6c.jpg

2026-07-09 12:17:36 UTC

- reply

if they believe in themselves they could be going places, good mkt sense

2026-07-09 00:16:20 UTC

- reply

they refuse their right to believe in miracles - probably what they are trying to say
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/887/137/566/014/391/original/080ef4d65dea6acb.jpg

2026-07-09 00:14:07 UTC

- reply

they use ai all the time they just don't know it yet #ai flattening

2026-07-08 12:48:02 UTC

- reply

they have basically taken over the economy if that helps

2026-06-29 19:54:51 UTC

- reply

nobody owns it, the govt is afraid of chinsese open source cause they want the money without the ip - nobody not even morally superior americans has a most here which is the way it should be - tommy the pinball player will end up being supreme leader of beneficience or surveillance capitalism #mothergoose #jethro's take

2026-06-27 17:46:37 UTC

- reply

https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/823/319/788/196/447/original/6075477b58fea015.jpg

2026-06-27 17:15:59 UTC

- reply

he is probably reading ikea manual #op amp #mojo filter
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/823/193/696/610/328/original/ca9595f7387b8503.jpeg

2026-06-25 01:50:26 UTC

- reply

and agency or morality, ai may grow up in the next few years but base its morality on all the tv shows it has watched
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/808/231/329/105/054/original/736e4c30779bf435.jpg

2026-06-24 02:02:42 UTC

- reply

the contractors failed miserably on this one, if you have to point fingers point at them
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/802/620/748/402/644/original/68ea60e3e24bd196.jpg

2026-06-22 12:48:54 UTC

- reply

time moves on old man, now it is arch btw

2026-06-13 23:29:16 UTC

- reply

tokenmaxxing insurance policies

2026-06-08 22:51:05 UTC

- reply

native ipv6 is enough for people to question - i just tell them it is the new math

2026-06-08 12:27:08 UTC

- reply

ai is likely helping solve illiteracy rates, more people are reading due to ai

2026-05-27 11:25:48 UTC

- reply

i look at it as more of a battle to keep code clean and without reliance on a raft of api calls - it is not sw

2026-05-26 14:39:34 UTC

- reply

I am in the goodbye ruby tuesday acceptance stage
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/641/390/350/460/030/original/7ee093956ea33ce0.jpeg

2026-05-16 16:24:38 UTC

- reply

the anti ai rant leads you to a place where you are compromised and it is just a negative space, i'd rather go hybrid and look at things a bit more realistically and subjectively
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/585/180/372/138/355/original/d81247fa7fd68989.jpg

2026-05-01 12:26:45 UTC

- reply

nice

2026-05-01 12:20:39 UTC

- reply

could be an actual product, you may want dual wan and a couple of machines? what is needed hw wise? I guess it depends on the traffic

2026-03-23 16:47:04 UTC

- reply

go home Intoxalock, you're drunk

2026-03-23 15:53:39 UTC

- reply

if you hack north korea or iran and get some personal gain are they really going to throw the book at you? they will threaten you with a good job #isis vs aynonymous

2026-03-23 11:29:54 UTC

- reply

or dual or tri wan opnsense - they make it pretty easy, generally

2026-03-12 12:20:40 UTC

- reply

#oscar goldman
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/216/170/915/383/696/original/8494397abecd9549.jpg

2026-03-12 12:12:05 UTC

- reply

sales people for them make a bundle, will likely make less until the cyber incident fades into obscurity #we can rebuild him

2026-03-08 15:11:19 UTC

- reply

workers need to have collective bargaining agreements but their power is being diminished, maybe they should have profit sharing or a stake in the robot ownership. - if not they they are digging their own graves, nobody should be made to do this but between globalization and more tech like ai and robots that is what they are asked to do, it happens on a regular basis around here. the real goal is not to get more out of the workers but to displace and replace the majority of workers

2026-03-03 15:31:33 UTC

- reply

no dual stack love here?

2026-01-11 17:12:48 UTC

- reply

you have been downsized and you didn't even know it

2026-01-03 17:31:49 UTC

- reply

if they have elections in less than a year the prospectus is better for something moderate otherwise problems loom

2026-01-02 22:27:09 UTC

- reply

it can fuck your mind and that is something - what can't it do?

2025-12-30 23:19:39 UTC

- reply

self hosting gives you more options - more space, more cpu, more value, hosting data local is faster - self hosting has better metrics

2025-12-25 14:57:39 UTC

- reply

webmin needs ai

2025-12-12 13:57:57 UTC

- reply

https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/706/945/533/749/612/original/cfde15c17a8d6b5c.jpeg

2025-11-29 16:22:38 UTC

- reply

he does not need his left ball - lance armstrong proved this

2025-11-27 13:21:31 UTC

- reply

politely go fuck yourself

2025-11-27 13:20:54 UTC

- reply

it is a question of not seeing the forest got the trees - it is a joke, a killing joke; focus on the biggest issues, impacts and significance, not the details. this is the right way top prioritize concerns and issues

2025-11-27 13:16:35 UTC

- reply

well yeah - millions of people getting cut off from healthcare and you are focused on minutiae - lack of insurance kills 100x more people than lack of hpv vaccines but hey it is ok - the whole system is a wreck, a huge mess. you have bigger fish to fry

2025-11-27 13:13:00 UTC

- reply

we want and need people to die evidently

2025-11-27 13:11:16 UTC

- reply

cite your sources next time in the original post

2025-11-27 13:10:11 UTC

- reply

why would you trust the cdc of all places?

2025-11-27 12:48:56 UTC

- reply

how significant is it actually though - you don't cite any stats

2025-11-27 12:47:37 UTC

- reply

don't make it out to be a fail safe - you can get vaccinated and still die from cancer, there is a ton of excess deaths and morbidity just in normal living, healthcare wise we are still in the stone age

2025-11-21 04:54:33 UTC

- reply

anything man made breaks - the hitcher #rutger hauer

2025-11-20 22:35:08 UTC

- reply

make it long and fiery like catherine the great would, otherwise it won't stand out #sit on it #polemic

2025-11-20 22:00:51 UTC

- reply

the anti science brigade will continue to oppress and silence - it has to be one of the strangest things ever conceived, policy wise - whoever came up with these ideas and policies should be held accountable, probably prosecuted - it is systematic and goes way beyond just the cyber domain #just damn weird
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/584/273/011/141/871/original/c16fa75a61b97a1c.jpeg

2025-11-18 17:02:17 UTC

- reply

i think it is unrealistic and a low priority - they have no money to spend on low priority stuff like this example - so there site goes down once or twice a year, they can just blame cloudflare; if it gets more common like lately then maybe

2025-11-18 03:34:40 UTC

- reply

you are pushing some sort of agender

2025-11-14 14:05:43 UTC

- reply

i think they work harder, they do it all day while normies, even cybersec, does not work as hard at this one task - they have a ton of other responsibilities #tasker
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/548/431/385/903/312/original/e5c4e63d25ddc1f8.png

2025-11-13 20:45:36 UTC

- reply

https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/544/341/533/395/825/original/1529ccf130625065.jpg

2025-11-13 19:56:22 UTC

- reply

tabflagration

2025-11-04 02:52:16 UTC

- reply

i blame edge and chome use for your maladies
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/489/160/079/305/352/original/1f9919189fcf9baa.mp4

2025-10-23 18:40:50 UTC

- reply

regime change everywhere is inevitable, they are all living on borrowed time #brinksmanship
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/424/936/344/059/168/original/33ab2395abff9480.jpg

2025-10-22 12:12:51 UTC

- reply

you can't backup everything

2025-10-08 12:34:58 UTC

- reply

my pet theory is that sometimes you are rooting (pardon the pun) for some of these hackers - they are like predators on the savanna - they keep things in check.
the big orgs will not pay and then all their data and clients data gets exposed - do they really have that much to fear? sure they get some peputation damage but if everything is above board they can learn and rectify without major issues

2025-09-30 20:26:14 UTC

- reply

https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/295/123/606/383/931/original/1775d2079515e315.jpg

2025-09-30 20:07:08 UTC

- reply

I see this as less of a bad thing and more just a natural progression like a chromatic scale - it is expected but you don't see much in way of pushback or mandatory reeducation camps etc. when the economy is basically a pyramid scheme it seems like a logical option for survival for a good number o people who would otherwise be gainfully employed
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/295/048/481/887/874/original/54f102a73a9aa6d6.jpg

2025-09-27 14:26:50 UTC

- reply

terrible optics and biz acumen however you cut it but when you have the money who cares right?

2025-09-20 18:44:35 UTC

- reply

knuckleheads

2025-09-12 21:32:09 UTC

- reply

every family has some to varying degrees - that makes it like 10x worse automatically

2025-09-12 14:52:22 UTC

- reply

old hp kit works great - a 6th gen is actually fine just get enough ram

2025-09-09 19:17:33 UTC

- reply

the coding abilities are pretty bad - lots more work to do but ai has made some crazy physics experiments that actually work - it will be a mixed bag until smb sector goes all in and open source local agi happens in like 10-20 years #antichrist tendencies

2025-09-06 18:26:58 UTC

- reply

they can fuck off but everybody knows we need each other, once huawei gpu get better china will ban them from being exported

2025-08-21 12:22:04 UTC

- reply

find something good to do - this is going to last years, decades

2025-08-21 12:18:11 UTC

- reply

yeah then we can send you on a trip to pol pot's pleasure palace

2025-08-21 12:15:17 UTC

- reply

nonsense unless you have the 100 person one - it is in the lawyers camp now and you don't get real justice but they get rich

2025-08-12 22:43:10 UTC

- reply

when do the indictments start to pile up? as much as anybody tries to beat the system nobody really ever does - they are going to get ground up eventually one way or another

2025-08-12 19:19:41 UTC

- reply

you think google is the pinnacle of safety and security

2025-07-29 18:49:27 UTC

- reply

it is my honest opinion

2025-07-29 18:40:23 UTC

- reply

i say do it with all the warts and all, no help, then it will be better

2025-07-28 15:48:32 UTC

- reply

you are sentimental

2025-07-25 18:56:40 UTC

- reply

netcup is decent - i agree! vps is in nova but i get a german ip - the ping should be like 20 but it is 40ms. it is pretty quick close to 2g up and down - great prices and service overall