#arpnetworks 2015-05-15,Fri

brycec

probably because there have been a handful of villains named "venom"

phlux

ARPNetworks: Now 100% VENOM-free!

brycec

My favourite is Spiderman's Venom

http://img.phluxbox.com/screenshots/sher2E.png

up_the_irons

brycec: thanks for the rebootless patch info. I would almost use it, but i think there may even be other kernel patches that _should_ probably go in with the venom fix. and since everyone else is experiencing downtime and reboots at this point (like, at other providers), seems like a good time to bounce everything.

[18:20]

brycec

heh np - just passing it along off the venom website

[18:21]

phlux

[18:21]

brycec

mercutio: a cursory glance of the source looks like it could allow access to 2,147,483,647 (INT_MAX)
mercutio: you can see that fdctrl->fifo[] is addressed by an int (presumably 32-bit, could be larger, prior to the patch) https://github.com/qemu/qemu/commit/e907746266721f305d67bc0718795fedee2e824c#diff-516dcbd6a7e99f71c8340895ff28816bL2007

[18:28]

BryceBot

Github Commit: "fdc: force the fifo access to be in bounds of the allocated buffer by Petr Matousek"

[18:30]

up_the_irons

phlux: LOL
well, guys, i'm not done YET
still got a lot of hosts to go...

[18:35]

brycec

like kvr18

[18:36]

phlux

so I think VirtualBox > qemu as far as running X goes
also, up_the_irons: do you like Megadeth?

[18:38]

RandalSchwartz

I know that my server hasn't been rebooted yet
I presume you're gonna eventually reboot every one

[18:39]

up_the_irons

RandalSchwartz: i think your VM is on an old host (the bad: it's old, the good: no new VMs get provisioned there, so over time you get more of the machine to yourself ;)

[18:40]

brycec

(the bad: You don't actually get control of the host still, or more RAM/HDD provisioned :P)
lol "pfSense® VMware® Ready Virtual Firewall Appliance"

[18:40]

up_the_irons

RandalSchwartz: those hosts will probably not be patched at this time, instead they'll be upgraded fully to Ubuntu 14.04. Upgrades like this generally have a 1.5 hour maintenance window (downtime).

[18:41]

brycec

up_the_irons++
brycec thinks VMWare-certified appliances is sorta silly for most things

[18:41]

up_the_irons

yeah

[18:43]

RandalSchwartz

well - other than chris0 going silent, none of neil's hosts have been reset either.
So I presume more things will happen soon
wait - prior to patching, I *can* get full control of the host!
RandalSchwartz downloads Venom RootKit {grin}

[18:44]

brycec

lol RandalSchwartz no you only get access to as much as the qemu process has access to, which isn't much because it's walled

[18:45]

phlux

uh oh
rip arpnetworks
RandalSchwartz is going to take over the host and destroy the business
nice knowing you all

[18:45]

RandalSchwartz

heh

[18:47]

up_the_irons

phlux: LOL

[18:55]

mercutio

randal is going to take over the hosts and replace all the linux with freebsd.
replace all the guests linux that is

[19:04]

RandalSchwartz

"we've secretly replaced this client's linux with an actual unix distro..."
"let's see if he notices..."

up_the_irons

mercutio: lol

RandalSchwartz

"wait... what... where are my 45 options for ls?"

up_the_irons

haha

mercutio

gnu ls comes with freebsd doesn't it?

RandalSchwartz

it can be installed

mercutio

RandalSchwartz

the default ls is the *real* ls

mercutio

it comes with solaris
ahh cool

brycec

lolol RandalSchwartz

RandalSchwartz

not the gnu monstrosity

mercutio

yeah i'm pretty anti gnu

RandalSchwartz

and in the latest freebsd, gcc is now no longer the default

mercutio

yeah that's cool

RandalSchwartz

or so I'm led to believe

brycec

I wonder if you could get away with replacing bash with another bourne shell, if "anyone" would notice...

mercutio

clang is on par with gcc for performance in my basic experiments

RandalSchwartz

yeah

mercutio

and it has nicer error messages.

RandalSchwartz

clang that's it

brycec

Much nicer :)

mercutio

ooh and way faster compiles.
less memory uusage when compiling too

RandalSchwartz

is it compatible?
can I introduce it incrementally?

mercutio

brycec: ksh!

brycec

I think that might be a bit too different from bash... who knows

mercutio

i think it's easy to notice shell replacements cos tehy all act slightly different
i've got this long standing issue with bash ... it seems to somehow randomly lose history lines
so you upress up arrow and it's not there!
err it seems to be when i cut and paste things in usually

[19:09]

brycec

How odd. I can see that happening with separate bash shells because they handle history files "weird" (one usually prepends its entire active history to the other). But in the same shell instance, not a clue

[19:10]

mercutio

this is with a single
i'm always remote logged in
i never use bash locally :)
but i've had it happen on more than one different system

[19:10]

brycec

brycec uses zsh in 9/10 of where he logs in
(okay that's closer to 8/10 I think)

[19:11]

mercutio

but yeah there is the multi shell history thing that makes me want to use zsh too

[19:11]

brycec

It's really handy
up-arrow and complete for a command I just ran in a different window

[19:11]

RandalSchwartz

I don't chsh, but I do set tmux default shell to zsh

brycec

(well I ^R more)

mercutio

i chsh

RandalSchwartz

that way, if zsh ever breaks, I can still ssh and fix things

mercutio

even on openbsd root shell

RandalSchwartz

wow... trusting

brycec

mercutio

and then i find that all packages stop working with update :)

brycec

Yeah no kidding.
root's shell is *always* something from base (as in, always ksh)

mercutio

that bit me with the reinstall all packages openbsd thing

brycec

brycec points, laughs

[19:13]

RandalSchwartz

yeah

[19:13]

mercutio

it wasn't too bad to fix

[19:14]

staticsafe

http://paste.ee/p/KPlaq#385gqSTRyEF59W1HJlGFS16tTxnR627h interesting route selection there (VIBE Communications lg)

[19:21]

mercutio

god that's long
what's interesting about it?

[19:22]

brycec

god that's long
twss

[19:22]

BryceBot

Okay! twss! 'god that's long'

[19:22]

staticsafe

mercutio: its picking the route via Portlane instead of the ARP Networks one

[19:23]

mercutio

45177 45177 45177 45177 42708 6.733 i
that's what i see through vibe
becuase i have upstream with vibe
but it's picking 17746 4610 4826 25795 6.733 i
vibe are on any2ix though

[19:23]

staticsafe

staticsafe nods

mercutio

and the slightly shorter route is hitting any2ix

staticsafe

i see the community tags for any2ix

mercutio

i thought it was taking a different path before
i mean the any2ix path
202.49.71.24 is an ip that should come back via any2ix/vibe
static: what made you check vibe for lg?

staticsafe

i've been checking LGs all over the place to see how routes are

[19:26]

mercutio

ahh
oh vibe is screwy
they're on linx

[19:26]

staticsafe

been troubleshooting a v6 routing issue with Portlane atm, it dies inside their network for some reason

[19:27]

mercutio

and they don't seem to add hops for it
but it looks like they're peering directly with portlane, or linx doesn't add their asn in
they're also peering directly with arp though..

[19:27]

RandalSchwartz

is portlane... portland++ :)

[19:28]

staticsafe

BGP Peers Observed (v4): 1,080 - portlane peers with a lot of folks

mercutio

portlane is some sweden provider i think

brycec

(lol RandalSchwartz )

staticsafe

RandalSchwartz: heh, wrong side of the world
yeah its a Swedish company

brycec

Same as C++ != D

RandalSchwartz

perl -le '$x = "portland"; $x++; print $x'

mercutio

heh

brycec

@py "portland" + 1

BryceBot

TypeError: cannot concatenate 'str' and 'int' objects

brycec

bah

RandalSchwartz

python is so weak

brycec

BryceBot: WHO CARES ABOUT PROPER LANGUAGE GRAMMAR

RandalSchwartz

or sigils... think of the sigils!
... http://en.wikipedia.org/wiki/Sigil_(computer_programming)

[19:31]

BryceBot

Sigil (computer programming) :: In computer programming, a sigil (/ˈsɪdʒəl/ or /ˈsɪɡəl/; plural sigilia or sigils) is a symbol attached to a variable name, showing the variable's datatype or scope, usually a prefix, as in $foo, where $ is the sigil. Sigil, from the Latin sigillum, meaning a "little sign", means a sign or image supposedly having magical power. In 1999 Philip Gwyn adopted the term "to mean the funny character at the front

[19:34]

staticsafe

mercutio: Portlane's promoscuous peering seems to result in some interesting routes

[19:34]

RandalSchwartz

portlane's promiscuious peering... PPP!

[19:35]

staticsafe

hah
BryceBot: time in Sweden
aw

[19:35]

brycec

@wa time in sweden

BryceBot

current time in Sweden;4:36:43 am CEST -> Saturday, May 16, 2015;Stockholm, Sweden, , 4:36:43 am CEST, Saturday, May 16;2:36:43 am GMT -> Saturday May 16, 2015

staticsafe

ahh

brycec

protip: You can't just invent syntax.
@protip

BryceBot

Protip #4: Packup a 40GB ISO of data, then have up_the_irons attach that to your VPS. Voila, free read-only storage!

brycec

lololol

RandalSchwartz

@wa where am i

[19:39]

BryceBot

current geoIP location;IPv4 address->107.178.195.232, IPv6->::ffff:6bb2:c3e8, (as seen by Wolfram|Alpha)

RandalSchwartz

what address is that? :)

brycec

Google
The WA API endpoint logic runs on a Google Cloud thinger

RandalSchwartz

@wa next solar eclipse visible from north america

BryceBot

Error fetching URI.

RandalSchwartz

oops :)

brycec

(That's the exact error back from said WA API thinger)

RandalSchwartz

@wa 300 USD to MXN

BryceBot

Error fetching URI.

RandalSchwartz

oops

brycec

(If I were in control, it would be a much more useful API)

RandalSchwartz

rate-limit?

brycec

@exch 300 USD MXN

BryceBot

300 USD -> 4506.933 MXN (as of Fri, 15 May 2015 19:01:08 -0700)

brycec

^ different API at least

RandalSchwartz

oooh. that was 4666 two weeks ago
highest I've ever seen it

brycec

@exch 300 USD MXN 2015-05-01

[19:42]

BryceBot

300 USD -> 4651.335 MXN (as of Fri, 01 May 2015 16:00:00 -0700)

[19:42]

RandalSchwartz

I should have gone long

[19:42]

mkb

mkb wonders when he's going to get rebooted

[19:43]

phlux

I wonder what $1 in Prussian Franks is now

[19:44]

RandalSchwartz

I have some venezuelan money from before the re-evaluation
something like a 20,000 note
which was about $10 or so
... The government announced on 7 March 2007 that the bolívar would be revalued at a ratio of 1 to 1000 on 1 January 2008
so these were from before 2008
@exch 1 USD VEF

[19:45]

BryceBot

1 USD -> 6.318536 VEF (as of Fri, 15 May 2015 19:01:08 -0700)

RandalSchwartz

@exch 1 USD VEF 2000-01-01

BryceBot

RandalSchwartz, I didn't recognize 'VEF'.

RandalSchwartz

oops

brycec

Yeah I think BryceBot only recognizes current currencies
or dates
or something

RandalSchwartz

@exch 1 USD MXP 1990-01-01

BryceBot

I'm sorry, I couldn't fetch the data: historical/1990-01-01

RandalSchwartz

ahh

....... (idle for 32mn)

brycec

@twitter -r 599413951554723840

[20:22]

BryceBot

brycec: Successfully retweeted __briancallahan (599414076582670337): Just submitted a #vBSDcon 2015 talk proposal with @brycied00d (Sat May 16 03:19:57 +0000 2015, retweeted 2 times)

[20:22]

mercutio

staticsafe: apparently vibe use community 30301 to mark linx traffic, and that's why i had so many prepends
so yeah they're not repeating their own asn in the path..
the whole thing about dealing with bgp communities to get good paths is kind of annoying.
it means you end up having to special case stuff, but at least when you know that linx is "ages away" and can prepend it's not so bad.
well assume you have multiple paths

[20:28]

........... (idle for 50mn)

mercutio got email from arp :)

[21:21]

mnathani_

up_the_irons: got the email regarding reboots. Much appreciated

[21:21]

brycec

brycec did not, feels un-special

mercutio

it'd be nice if it knew who was on what host
oh maybe it does know
or brycec has laggy email

brycec

(then again it's probably only for those to be affected0

mercutio

it says "if" you have host on one of four machines

mnathani_

brycec: lol on that 40gb free read-only storage

mercutio

9, 14, 15, 16
i'm on 15

mnathani_

as long as the iso is a wget'able URL

brycec

Don't think that was "my" protip but thanks mnathani_

mnathani_

I actually got 2 emails

mercutio

i only got one

mnathani_

one for my vps another for my customers vps

mercutio

oh right

brycec

Hm no reboot for 18 then?
I wonder if 18 is one of those "older" hosts

[21:27]

mercutio

maybe not yet
or maye it's been
or maybe it's older
ok :)

[21:27]

brycec

18 hasn't been rebooted yet. "12:26AM up 3 days, 12:15, 0 users, load averages: 1.19, 1.06, 1.00"

mercutio

i'm surprised it's happening so late

brycec

late in what respect?

mercutio

5:30 am or something isn't it
5 to 5:30

brycec

currently 9:30pm in ARP Daylight Time
(well 21:27)

mercutio

yeah i know

brycec

Oh up_the_irons specified 5am?

mercutio

yes

brycec

(Not receiving the email, I don't know what was said :p)

mercutio

i mean why 5 am and not 3 am?
so i dunno if there's another window for other hosts.

brycec

Because that's when up_the_irons is up?

mercutio

heh
he's up at 3 too then :)

brycec

He rebooted this vm's host around 6am

mercutio

yeah
it's hard to know what a good time is really
so 6 am PST is 9 am on eastern time?

brycec

yes
is 1pm GMT I believe

[21:32]

BryceBot

That's what she said!!

mercutio

and it would have been friday

brycec

BryceBot: no

BryceBot

Oh, okay... I'm sorry. 'is 1pm GMT I believe'

mercutio

so normally i'd say that earlier is probably better
for US centric
but tbh, to my mind it's better to be quick than get the time right :)

........................ (idle for 1h55mn)

RandalSchwartz

there's no PST right now
not until november
so mercutio... wrong. :)

[23:29]

brycec

technically there still *IS* PST, it's just not accurate :P

RandalSchwartz

No... there's no place that is observing PST at all

brycec

This feels like a "if a tree falls in a forest" joke now

RandalSchwartz

whatever.
timezones are important to me.

brycec

Sure, nobody is observing it. Doesn't stop it from existing. PST = GMT-8, always.
They are to me as well, and I didn't catch mercutio's slip and I feel bad :(

RandalSchwartz

sure, but it doesn't actually exist for half the year

[23:32]

brycec

brycec contends that it still exists, but nobody [should] care about it until November
brycec goes back to upgrading OpenBSD boxes

[23:33]

mercutio

brycec: i used pst as per the email

[23:46]

brycec

shame on up_the_irons then

[23:48]

mercutio

well in the end it doesn't really matter.
do you call it PT as a standard

https://www.youtube.com/watch?v=aFwcBBmgOe0 ?

brycec

BryceBot

YouTube video: "Bohemian Rhapsody - Queen" by Carla Pax

mercutio

is it EST for east coast?

brycec

mercutio: PST/PDT
EST/EDT

mercutio

i suppose if you used PST and EST, it wouldn't be ambiguous

brycec

MST/MDT
CST/CDT

mercutio

M is mainland?

brycec

Mountain