@kemona_halftau It seems to be different every time it's requested rather than different per instance (I don't have a media proxy so it's getting requested from the original server every time)

@ariadne @ignaloidas MAP_NORESERVE is ignored if vm.overcommit_memory=2: https://docs.kernel.org/mm/overcommit-accounting.html. Unfortunately I don't think there's a way to opt in to overcommit for specific allocations if it is disabled.

fox (different per instance):

@ariadne @ska @navi @dakkar How do I actually achieve this using netfilter or eBPF?

nftables's skuid/skgid matching only works on output rules: I can easily prevent specific users from connecting to certain ports, but I'm not sure how this can be used to prevent specific users from listening on certain ports.

eBPF I don't know that much about but I'd be interested in how I can do this with it.

game over!
score: 98
││
││
││
││
││
││
││
││
││
││

I hope all those devs who went “I don’t need to optimize, there’s plenty of RAM” are going to get slapped with complaints about bad performance because the software runs like shit on new computers whose RAM size traveled back to 2015

@catsalad @binsk @us3r1d @alice Unfortunately not. I can view the text of the post but still not the image: lgbtqia.space geoblocks the UK and my method of bypassing it (specific routes for the IP address through a VPN interface) works for lgbtqia.space itself but not the CDN used for images (which uses GeoDNS so I'd need to use a DNS server hosted elsewhere to bypass it). I plan to set that up but I haven't done so yet.

@catsalad @us3r1d @binsk I clicked on it but that domain resolves to 127.0.0.1 (I'm GeoDNS-blocked)

@dpk I just tested now with mpv --term-status-msg='${audio-bitrate}' proxying via a server in Germany and it’s definitely 320 kbps

@dpk @mossfet

there was never access to 320 kbps feeds outside the UK

This isn’t true. When I was in Norway in July I was using the 320kbps worldwide HLS streams. I use this script for listening to BBC radio stations: https://paste.sr.ht/~noisytoot/baadc025381a8083b7d01822a7d58b8c3e465913

@ariadne @dakkar @ska @navi what’s stupid about CAP_NET_BIND_SERVICE? services like ident should be restricted to root and it makes sense for there to be a capability to allow not actually running them all as root

@catsalad Guix would be a gnu, for obvious reasons

blob cat
cross ing
|
|
|

@catsalad ISPs often helpfully publish lists of websites that they've blocked, like this one: https://www.virginmedia.com/help/list-of-court-orders

@steph I wish I had a dishwasher (I hate washing the dishes, it takes way too long because I do it very thoroughly, the gloves feel weird (but not immediately for some reason), and standing still for so long is uncomfortable)

@dpk Emacs?

@astraleureka why would anyone ever do that!? I can't believe they don't know about printf