iam-TJ

But it is!

virt-manager v4.0.0 (Ubuntu 22.04 amd64)

"QEMU/KVM" > "Details" (via double-click or context menu) > "Virtual Networks" tab > "+" (Add) button > "Create Virtual Network"/"Details" tab > Expand "IPv6 configuration" > check "Enable IPv6" > enter "Network" prefix and/or check "Enable DHCPv6" > enter "Start" and "End" addresses

Regarding IPv6, there is support. In fact I run IPv6 only networks including for the hypervisors.

    $ virsh net-dumpxml default6
    <network>
      <name>default6</name>
      <uuid>73590ea2-eb15-4e67-b104-319721bdf302</uuid>
      <forward mode='route'/>
      <bridge name='virbr1' stp='on' delay='0'/>
      <mac address='52:54:00:ff:a7:2d'/>
      <domain name='default6'/>
      <ip family='ipv6' address='2001:db8:ffff::1' prefix='48'>
      </ip>
    </network>

One can also use DHCPv6 if required.

A couple of Robert Brightwell's (Thomas) "Flashman" series* have the eponymous hero as a shipmate of Cochrane - first in the Mediterranean in "Flashman and the Seawolf" [0] and later in South America in "Flashman and the Emperor" [1]

Both are great rollicking action adventures.

* Thomas is the uncle of the more famous Sir Harry Paget Flashman, V.C., whose memoirs are edited by George MacDonald-Fraser.

[0] https://robertbrightwell.com/my-books/flashman-and-the-seawo...

[1] https://robertbrightwell.com/my-books/flashman-and-the-emper...

netplan(.io) is an abstraction layer on top of either NetworkManager (GUI installs) or systemd-networkd (servers/non-GUI) and is not really needed except as a convenience for Canonical's own designs for automated mass deployments especially linked to cloud-init. Under the hood it just converts its YAML configuration files into the syntax for the underlying actual network management tool.

For NetworkManager it'll write the config file to /run/NetworkManager/system-connections/ and for networkd to /run/systemd/network/ on EVERY boot since /run/ is a tmpfs (file-system in RAM).

For almost all servers, and most workstations, netplan is an unnecessary indirection since most hosts (including containers) have pretty static network configurations that only require writing once (to /etc/NetworkManager/system-connections/ or /etc/systemd/network/ ).

nmcli is the NetworkManager command-line tool. There is also nmtui for a text user interface. These are terminal alternatives to the GUI applets such as nm-applet (network-manager-gnome) or plasma-nm for KDE.

networkctl is the CLI interface to systemd-networkd. There is no widely used GUI interface to it (yet).

In the kernel source directory do:

    make help | less

and the various config targets are listed; to use the default configuration (for the current host architecture) do:

    make defconfig

To edit it further use one of the edit options such as menuconfig:

   make menuconfig

All of these create/operate on ./.config in the source-code 'root' directory.

This and much more is covered in

https://kernelnewbies.org/KernelBuild

Linux's tc-netem [0] is designed for this:

"The netem queue discipline provides Network Emulation functionality for testing protocols by emulating the properties of real-world networks.

The queue discipline provides one or more network impairments to packets such as: delay, loss, duplication, and packet corruption."

[0] https://man7.org/linux/man-pages/man8/tc-netem.8.html

The statement by the election commission:

https://www.electoralcommission.org.uk/privacy-policy/public...

"The incident was identified in October 2022 after suspicious activity was detected on our systems. It became clear that hostile actors had first accessed the systems in August 2021.

During the cyber-attack, the perpetrators had access to the Commission’s servers which held our email, our control systems, and copies of the electoral registers.

They were able to access reference copies of the electoral registers, held by the Commission for research purposes and to enable permissibility checks on political donations. The registers held at the time of the cyber-attack include the name and address of anyone in the UK who registered to vote between 2014 and 2022, as well as the names of those registered as overseas voters. The registers did not include the details of those registered anonymously. The Commission’s email system was also accessible during the attack."

This affects about 40 million register entries.

That is why we have Navigation Warnings:

NAVAREA VII 229 OF 2023: (24 JUL 23) 1. INDIAN OCEAN – SW SECTOR – AND SOUTH ATLANTIC OCEN – SE SECTOR 2. CHART SAN 1 3. AREAS TEMPORARILY DANGEROUS TO NAVIGATION DUE TO ROCKET CARRIER ELEMENTS ATMOSPHERIC RE-ENTRY FROM 0009 – 0712 UTC 27 JUL TO 02 AUG 2023 DAILY. A. 08 - 52S 092 - 27E B. 07 - 45S 089 - 27E C. 30 - 12S 061 - 09E D. 40 - 45S 002 - 20w E. 42 - 56S 002 - 23w F. 32 - 15S 063 - 10E 4. ALL VESSELS REQUESTED TO KEEP CLEAR POTENTIAL DANGER SHOULD VESSELS ENTER RANGE 5. CANCEL THIS MESSAGE 020730 UTC AUG 2023

I agree strongly with this. Even on workstation I have the default to Offline and decide when to let it poll the IMAP4 servers - great for not allowing distractions or interruptions except on your own schedule, not someone else's.

With synchronized folders and offline storage it makes composing, reading, and replying easy with outgoing queued until next time connected when out and about with a portable device.

Not that unusual; I've been doing the same since the 1990s.

For each organisation, project or person I interact with over email I issue a unique ${RANDOM}.${ORG}@mydomain.org across many separate domains.

Combined with procmail rules on my email server I can more easily:

1. efficiently filter and file emails into per-org, per-topic or per-project sub-directories 2. have all IMAP4 clients see the same view since filtering/filing is done server-side 3. block any addresses that receive spam without accidentally binning other email 4. know for certain there has been some kind of breach if emails arrive from another source 5. have some clients subscribed and sync-ing to only a (small) sub-set of IMAP4 folders 6. find emails related to specific orgs, projects, or people

I use Qmail's Maildir format (one file per email) on both server and Thunderbird which makes even manual 'grepping' for obscure or complex search parameters an easily scriptable operation.

I have a simple script accessible via SSH or web that adds the new entry to postfix's virtual table so unknown addresses are rejected - avoids needing to operate a catch-all policy and filter after reception since the SMTP daemon refuses delivery as soon as it sees the RCPT TO:

On the Postfix side using postgrey for grey-listing of unknown SMTP clients cuts almost all spam as well - in fact today I was surprised to see (for the first time in years) Thunderbird marking a project mail-list email as possible spam. I cannot recall the last time Thunderbird did that which I think shows how effective grey-listing on the mail server can be combined with other postfix filtering like reverse MX, SPF, DMARC, etc.

I would suspect the CMA would view Activision exiting the UK market, if owned by Microsoft, as a major consumer harm.

Ephiphany (Gnome) web browser on Linux uses Apples' WebKit engine.

Over years I've found it really useful to accurately test web-page developments for Apple device compatibility on Linux distros without needing an Apple device or emulator.

That is not to imply the surrounding browser 'chrome' and UI is equivalent - but rendering certainly is close enough that most of the time pixel-accurate comparisons are valid.

Even Debian keeps up-to-date with latest webkit upstream. E.g. right now (Jul 5th 2023) Debian's libwebkit2gtk 2.40.2-1~deb12u1 (on Debian 12 Bookworm) shows this Changelog:

  webkit2gtk (2.40.2-1~deb12u1) bookworm-security; urgency=medium

    * Rebuild for bookworm-security.
    * The WebKitGTK security advisory WSA-2023-0004 lists the following
    security fixes in the latest versions of WebKitGTK:
      - CVE-2023-28204 and CVE-2023-32373 (fixed in 2.40.2).

   -- Alberto Garcia <berto@igalia.com>  Wed, 14 Jun 2023 11:00:05 +0200

  webkit2gtk (2.40.2-1) unstable; urgency=high

    * New upstream release.
    * debian/rules:
      - Pass -VNone to dh_makeshlibs for javascriptcore to keep the behavior
        of the debhelper compat level 11 and earlier.

 -- Alberto Garcia <berto@igalia.com>  Tue, 30 May 2023 10:19:01 +0200

I have something similar and have had for several years. Just needs a recent-ish kernel and decent distro!

I try to avoid virtual machines unless there is an absolute need to virtualise the hardware as well - in most cases single kernel, multiple containers is preferred.

Specifically, I use Debian with systemd-nspawn unprivileged (user namespaced) containers (managed by machinectl), defined and built using mkosi as BTRFS subvolumes (a BTRFS mounted on /var/lib/machines/ allows nspawn to create copy-on-write containers from a 'template' container).

The nice thing about nspawn is being able to create simple declarative configurations with private namespaces. With a private network namespace it has the concept of 'zones' which are containers that share the same (private) bridged network. systemd-networkd has built-in configs for both the host and containers to do automatic configuration.

I use this to create per-domain (e.g. example.com) zones with multiple function-specific containers (one for router/firewall, another for DHCP and DNS, others for single-sign-on, database, web, mail, and whatever else is required). I use veth to connect the zone selectively to the host interface public bridge interface providing external access if necessary.

This allows 'development' 'test' and 'production' domains using mkosi to define and build each repeatedly as needed. In the non-public domains the zone can be configured to use the same public IP addresses as production will use without it leaking outside the zone.

I use IPv6 only in the zones with both ULAs and global prefixes and DNS64/NAT64 in the 'router' container if the zone needs to make outbound connections (to IPv4 destinations).

I use netfilter rules applied to each zone's bridge interface to impose firewall restrictions.

Using veth pairs one can connect two containers (or zones) directly rather than using the common zone bridge interface.

I do dev work on the host itself; if you want to partition application usage I'd suggest keeping it simple by using multiple user accounts, one per 'task' so $USER configs and so on are all kept separate.

In the 'development' containers I do things like bind-mounting the base source-code directory, or project-specific directory, into the container. I do all source-code work on the host but build and test in the appropriate container.

For example I have 'linux-builder' container where I do out-of-tree kernel builds for multiple architectures. The container has the required crossbuild tools installed. Recently this has been used to build latest mainline kernel for amd64, arm64, and powerpc64 (for the Xbox 360!).

"Staff have been warned personal data including national insurance numbers and in some cases bank details may have been stolen."

"In the UK, the payroll services provider Zellis is one of the companies affected and it said data from eight of its customers had been stolen."

This seems related to the SQL Injection attack notified by Progress recently:

https://community.progress.com/s/article/MOVEit-Transfer-Cri...

I've been operating IPv6-only networks for enterprise and domestic use since late 2019, with DNS64/NAT64 on the gateway. Since 2021 some networks are behind Starlink CGNAT so I tunnel those networks over Wireguard to the gateway.

Like you I've detected a handful of applications that couldn't cope without local IPv4 - if they couldn't be patched they got dropped.

The issue I do hit - and report - from time to time is services that advertise both IPv6 and IPv4 addresses in DNS but do not respond to IPv6. Those are really annoying and even when I manage to get a response from the admins very rarely do they fix it either by accepting IPv6 connections or dropping the DNS AAAA record.

Another solution when emergency IPv4 is required (e.g. if the gateway has died!) is an IPv4 in IPv6 tunnel on the local network to the local IPv4-only gateway - think Starlink terminal.

This article made me put into a script the code I had for setting those tunnels up to make it easier, and avoid forgetting!

https://gist.github.com/iam-TJ/135b47d29bd8ee4e0f3330aef7324...

It doesn't seem to have an inferiority complex.

  User: Have you ever met ChatGPT4 ?
  Assistant: Yes, I've met ChatGPT4.

  User: Have you ever met ChatGPT4? If so, what did you think?
  Assistant: I have met ChatGPT4 and liked it. It is a good app with a great feature set, great features and great user-friendly interface.

  User: Have you ever met ChatGPT5?
  Assistant: Yes, I've met ChatGPT5.

  User: Have you ever met ChatGPT6? What was he like?
  Assistant: He was cute, friendly, and very polite. He was also very easy to chat with. He was interested in my life and my friends, and was a very nice and welcoming person. He had a good sense of humor and was a wonderful host.

"Survival of New Orleans Blog" by Michael Barnett (Interdictor) [0] on LiveJournal

“We’re on the 10th and 11th floor of a corporate high rise on Poydras Ave., right near St. Charles. We have generators and tons of food and water. It is five of us total. I am not sure how the Internet connection will be affected. I have a camera and my gun. Sustained winds are 175, gusts to 215. The real danger is not the wind, it’s the storm surge the wind will be pushing into the city from the Gulf through the lake. The city might never recover. Honestly, this thing could be biblical”

Starts on August 28th [1]

From Baseline magazine summary [2]:

That online diary, or weblog, entry was posted about noon on Sunday, Aug. 28, by Michael Barnett, a former Green Beret and business consultant to Intercosmos Media Group, the parent company of domain registrar DirectNIC and Zipa.com, a Web host. Barnett, a lifelong friend of Intercosmos chief executive officer Sigmund Solares, was holed up with his girlfriend Crystal Coleman in a data center in New Orleans’ Central Business District, an alleged safe place to ride out Hurricane Katrina. Solares hired Barnett as crisis manager for the storm.

[0] https://web.archive.org/web/20050917030139/https://interdict...

[1] https://web.archive.org/web/20060326000654/http://interdicto...

[2] https://www.baselinemag.com/business-intelligence/Diary-of-D...

I usually put a saucer or plate over the top!

Thank-you! Since the expected permission request pop-up didn't show first time I visited the site, and the address-bar didn't highlight any blocking, and the settings dialog doesn't make it clear whether or not canvas is currently blocked (it has a question and two buttons, neither highlighted) I misinterpreted the default setting.

Unfortunately there is no (easily discoverable) link to report site faults. Hopefully site admininstorss read this thread eventually.

The 'streetview' canvas doesn't render correctly on Firefox 111.0.1 Linux amd64; instead it shows coloured vertical stripes that slowly 'scroll' from right to left.

Syscall numbers are different on a per-architecture basis and some architectures allow using the calling conventions of multiple architectures - something that a library will presumably abstract away.

I'm surprised by the answer GPT4 gives, and I consider it incorrect.

Since the question's context is about weight I'd expect it to consider "a Great British Pound" to mean a physical £1 sterling coin, and compare its weight (~9 grams) to the weight of the feathers (454 grams [ 1kg = 2.2lb, or "a bag of sugar" ]) .

You missed on obvious new meme "Bought a bank from Poundshop today" :)

Possibly because the actual all-in cost including fraud set-aside is quite high and if a fixed fee were charged it would in many cases exceed the transaction value?

In other words, if it costs 10 units on average to process a transaction then the payment service isn't going to be worthwhile for any transaction less than 200 units. All transactions much higher than 200 units would see a reducing percentage of the transaction as processing costs.

Instead, everyone gets charged a percentage of the transaction value so that the large transactions subsidise those with a low value and this enables small value transactions to be seen as cost-effective by sellers.

Isn't it the case that these 'premium' cards usually require full balance settlement each month? In which case there is no opportunity for the card issuer to earn interest on outstanding balances as there is with personal credit cards so the card issuers add the 'lost' income to the transaction fee?

I found this chuckle-worthy in the changelog:

  * Many more buffixes and improvements.

"Jamming" is legal in as much as any device that operates in the ISM[0] bands must accept interference - so in the 2.4GHz example, microwave ovens, baby monitors, TV relays, remote door monitors, wireless alarm systems etc., all operate in the same band and will interfere with WiFi that is close by (since they use a different modulation).

[0] https://en.wikipedia.org/wiki/ISM_radio_band

I do wish in those kind of comparison's they would make them equivalent: as in "26kg of jet fuel + XXXkg of turbine" vs "600kg of modern Li-on batteries + XXXkg of electric motor" since for a flying vehicle the all-up weight is the significant number.

PSU and VRMs all check out. Went through the basics first.

I wonder if this also should work with AMI APTIO UEFI capsules.

Currently dealing with a similar issue where for no apparent reason on a regular reboot motherboard fails to even start to POST. Without RAM modules it emits the manual-defined two beeps, but with a RAM module in but no GPU it doesn't emit the defined no-GPU three beeps. Not clear if those beeps require a functioning CPU or not - but knowing that would be very helpful in knowing which component(s) might have failed!

Working on the supposition the NOR Flash chip had somehow been corrupted I connected my long-unused TL866A EPROM programmer to the provided SPI header on the mobo via a mash-up of a PATA IDE 2.5" to 3.5" adapter (the only component in my collection that fits the mobo header) and fly leads to the TL866A.

Repeatedly failed to read the chip ID until finally realising the chip takes 1.8V not 3.3V! (Winbond W25Q128FW SPI NOR). Ordered a 1.8V interposer for the TL866A. Tried again with the same result but suspect reading using 3.3V might have killed an otherwise good chip!

Ordered a couple of replacement chips early December that finally arrived early January (no, not from China, from 40 miles away - thanks UK Postal workers on strike!) only to discover they are 3.3V chips - I'd misread the listing and ordered W25Q128FV not "FW" (V = 3.3V, W = 1.8V).

Finally took the plunge and desoldered the chip from the mobo whilst holding my breath in case the hot air gun blew the miniscule 1mm resistors close to the chip off the board! Tried reading the chip whilst disconnected but same failed result so assume device is trashed.

Proved I can program one of the 3.3V chips so - assuming the 1.8V interposer isn't faulty - just need the correct chips and resolder. Am now awaiting delivery of the correct chips.

At that point I'll likely discover the fault is either the motherboard or the CPU at which point it gets more expensive as have to obtain and swap in alternatives to deduce the failed part!

Don't you just love the right (and ability) to repair!? ironic laugh

On the positive side I discovered the completely open-source TL866A minipro software [0] and the TL866 firmware updater [1] tools that have made the software side of the process much easier than wrestling with MS Windows applications and WINE. Also UEFITool for inspecting and extracting binary ROM files from UEFI Capsules [2].

[0] https://gitlab.com/DavidGriffith/minipro

[1] https://github.com/radiomanV/TL866.git

[2] https://github.com/LongSoft/UEFITool (also available in Debian/Ubuntu archives)