October 2023 updates
Updates on some of the things I've been up to during October 2023.
What happens when a Matrix server disappears?
Ever since I started using Matrix, I always wondered what would happen if a Matrix homeserver got deleted and then recreated, without any data on the database. Would the federated servers complain a lot about it? Would federated rooms work once the server was recreated and started federating again? I never had the chance or time to properly investigate this.
Well, that is until the hardware node that hosted my Matrix database died.
Introduction to Reticulum
In my last two posts [1, 2] about Meshtastic, I mentioned how I wanted to experiment with Reticulum. Now, I'm excited to share my experience and provide an introduction to the project!
More notes on Meshtastic and its v2.0 update
In a previous post I documented my experience with the Meshtastic project and one of the TTGO T-Beam boards. Since then, I've experimented more with meshtastic and its capabilities, while the new version 2.0 of the project got released, so some updated notes are in order!
Meshtastic: Quick review and some notes
A friend recently introduced me to the Meshtastic project, an open source "platform" for creating long range, off-grid, mesh networks for short messages based on LoRa. After playing with the hardware and the software for a few days, here are my thoughts on it and notes on how it works.
What a malicious matrix homeserver admin can do
I run my own Matrix homeserver that I share with friends and family. Ever since I started working for Element back in February of 2020, I've learned a lot more about the Matrix protocol and what's possible to do with it. During a conversation with a few privacy minded friends that use my HS (HomeServer), I pointed out that the admin of a homeserver has a lot of power over their accounts and that they as users explicitly trust the admin. In this post, I want to explore and document the ways a malicious admin can mess with the privacy of a Matrix account. Note: malicious admin in this case can also mean a hacked admin.
Notes on my DIY modular synth journey
I want to build a DIY modular synthesizer. A lot of the music I enjoy listening comes from synthesizers, so I want to experiment with it. Moreover, I haven't done any analog electronics work in a long time, so I see it as a creative way to get back into analog hardware.
I have no experience with modular synths, so I'll be documenting my work and research here, with links and resources I found useful.
LS32 LCD name badge + Rust
During 36c3 last year the FOSSASIA assembly was selling some cheap bluetooth LCD name badges and I got one as to have something to fiddle with during the night at the hotel. There were a couple of demo units in the assembly and the people selling the badges encouraged everyone to try pairing their phones (via bluetooth) to the demo units before purchasing, as some phones weren't able to pair with the badges. When I was next in line to purchase one, I was asked if I wanted to try one of the demo units in case it doesn't work and I replied something along the line "If it doesn't work, I'll make it work", which made people in the line laugh. As it turns out, neither of the two phones I had access to paired with the badge, so it came down to figuring out how this thing worked and what other ways there were to program it.
Infrastructure as Code without using the cloud
One of my favorite conversations I had with a colleague back in early 2015 was about Ansible, the future of provisioning VMs, pets vs cattles, Infrastructure as Code and the ways an organization can make sure that an administrator isn't leaving behind a backdoor when they leave the organization. We had that discussion on the day they gave their one month notice and announced their resignation.
Plotting room temperature and humidity using Prometheus, Grafana and a DHT11 sensor
Last week we installed an airconditioning unit in our house and yesterday a DHT11 humidity and temperature sensor arrived that I had ordered in the past from ebay and had totally forgotten about it. So, I got the idea to monitor the temperature and humidity in the room, to see how well the airconditioning unit works.
What better way to do this than use Prometheus, Grafana and a spare Raspverry Pi Zero W I had lying around.
Cryptopals Set 1 reading list (spoilers ahead)
I've decided to Go through (this will make sense in a bit) the Cryptopals Challenges in order to get more familiar with crypto related concepts and Golang (^_^), which I'm using to solve the problems. The code I've written for solving the challenges is published in this git repo and I'll be documenting any helpful resources on this blog.
How I do my Computing
This is a long time coming post that I've kept postponing (pun intended) for ages.
I enjoy browsing The Setup and I always longed for an easy way to share the way I do my computing with friends, besides linking them my dotfiles. This blog post is supposed to fill that void. A lot of this info is already documented in my private Emacs wiki, this is a more lengthy representation of it.
Migrating to Hugo
A bit over two years ago I blogged about migrating to Octopress from Wordpress, this time I'll blog about migrating to Hugo from Octopress.
I started messing around with Hugo because I was experimenting with Go and wanted to take a look at a simple and complete Go project. I ended up liking the simplicity of setting up a new site and decided to try porting my blog to it.
Can we really trust the official Docker images?
Yeap, this is another rant on the security practices of Docker users. Like we didn't have enough of those already.
Using msmtp to handle mail delivery
Following the example of GKH and others, I've added one more piece of software on my email setup and workflow. That piece is msmtp, a very simple and lightweight SMTP client, that integrates really well with the rest of my setup.
On proper git commit messages and frequent git pushes
Edit: This post was written many years ago. Back then I was a lot more
strict on how other people did things and I now understand this was a mistake.
I'm leaving this post here as a reminder of past mistakes.
Note: this is a rant on how people use git.
When I was introduced to git, I was told I should read this great post on git commit messages by Tim Pope. Ever since, I've been trying to follow that system in all of my commits across all projects.
NotMuch is awesome
In one of my previous posts, I explained my email setup in detail. Since then I've added one more piece of software on the "stack". It's called NotMuch and it's an email indexer.
My email Server Setup
Wanting to have more control over my email, I decided to setup my own mail server. I thought I had a pretty good understanding of how mail works, considering my mutt/offlineimap/imapfilter setup, but I must say I was pleasantly surprised while setting everything up.
My mail setup using Mutt/OfflineIMAP/imapfilter
Update 17/03/2015: I'm also using NotMuch now, for more info check
out this post.
Update 2/6/2015: I've added msmtp to the mix, check out my new post
about it.
This is part of a series of posts where I describe my workflow and OS setup.
Kippo findings round two
It's been over a month since I set up twelve Kippo hosts using my Ansible playbook, time to get some stats.
Deploying Kippo with Ansible
I've been running some instances of Kippo for quite some while now with great results. I recently wrote an Ansible playbook to automate the process of deploying Kippo hosts and also make it scalable. You can find the playbook on my GitHub page, specifically here.
My tmux config and a small tmux primer
It's been a little over a month since I started using tmux. Below,
I'll try to explain most of my .tmux.conf, a bit of my current
workflow using awesome + tmux and various cool stuff you can do with
tmux. My latest .tmux.conf can be found on my dotfiles repo on
GitHub.
Updating tmux without killing active sessions
I've been using tmux for a while, and even though I didn't like it at first, now I'm in love with it. I'm mostly using it as a GNU Screen alternative, but I don't use some of its fancy features like tabs, mainly because my window manager takes care of multiple terminal windows for me.
Making a RS-232/UART adaptor
A couple of months ago I wanted to experiment with the serial console
of an old router I had laying around. Not wanting to buy a UART to
RS-232 adaptor, I decided to make one myself. After all, I had some
spare MAX3232 left over from a previous project (for which I still
haven't blogged).
Octropress here I come!
I decided to port my blog to Octopress and move away from Wordpress after all these years. The reason for this is twofold:
- I've really gotten used to working with vim, git, github and the surrounding workflow.
- Static site generators are all the rage currently, so who am I to miss out?
Why Octopress and not something based on Python like Pelican or Nikola? I simply decided to do something that will get me out of my comfort zone and also teach me something new. I already know how to use venv, let's see what RVM has to offer.
Raspi + SDR + ADS-B = awesome
A lot of people have combined a RasPi and a SDR dongle to get a low power consumption ADS-B tracker. Tomasz Miklas has created an image for the Raspberry Pi, that has everything that is needed to run your own aircraft tracking "service" already set up. I've finally had a chance to experiment with it and this will be my short review.
An intro to SDR
For the past two months I've been reading about SDR and everything related to radio telecommunications. For those that don't know what SDR is (and are too bored to click the previous link), Software Defined Radio is a system that implements hardware subsystems of a typical radio in software. People have been designing their own SDRs with FPGAs for quite some time now, but in the last year there has been a huge "revolution". It turns out that a lot of cheap USB digital TV tuners based on the Realtek RTL2832U chip can be tuned at a wide range of frequencies.
My Kippo findings after three months
Three months ago I installed Kippo in a low end VPS of mine. About a month after that, I got bored of manually checking kippo everyday so I made a small script to automate the process. Fast forward another two months and here we're.
Making an ugly Ethernet tap
A long time ago, I saw this in the Hak5 store. After reading about it in mossmann's blog, I found somewhat interesting that using this easily built device you can HACK THE PLANET.
An ethernet tap is a passive device used to monitor traffic between two hosts using a third one. For more info on network taps read here.
Arp spoofing with Python
I decided to reinvent the wheel by making an ARP spoofer in python using raw packets, thinking it would be a nice practice.
