

They were proper 384bit certs, just the upper 376 bits were 0 in all the listed certs. So it’s different to setting the key size in OpenSSL, and they were most likely rolling their own crypto.


They were proper 384bit certs, just the upper 376 bits were 0 in all the listed certs. So it’s different to setting the key size in OpenSSL, and they were most likely rolling their own crypto.


If you don’t mind using alternative DNS servers, meaning this won’t be accessible to the average person, you could try OpenNIC.
Unless there are vents underneath, you might also want to flip that power supply around, so the fan’s on top.


So it seems I was wrong about Cloudflare having seperate prefixes for WAF and workers. And these are all WAF/workers IPs (but not warp). My guess is that someone’s made themselves a http proxy worker, and are using that to proxy their bot’s requests.


What’s the IPv4? I believe Cloudflare has different prefixes for WAF, warp, and workers.
2a06:98c0:3600::103 is definitely a Cloudflare WAF IP, so my guess is someone using either warp or workers is sending requests and added that IP to X-Forwarded-For as a red herring.
This probably isn’t too useful for you as they only have 24v and 54v models, but Ubiquiti used to make EdgePower UPSes. They have a http management interface that lets you monitor the power usage or power cycle the router if a ping stops responding, and etc. I installed one recently for a POE switch of mine.


Regarding Google Coral, from the docs: https://docs.frigate.video/frigate/hardware
The Coral is no longer recommended for new Frigate installations, except in deployments with particularly low power requirements or hardware incapable of utilizing alternative AI accelerators for object detection. Instead, we suggest using one of the numerous other supported object detectors. Frigate will continue to provide support for the Coral TPU for as long as practicably possible given its still one of the most power-efficient devices for executing object detection models.
Personally, I’d recommend OpenVINO. It works on iGPUs, and if that’s not possible it’s quite performant on CPUs. I currently run a Google Coral and the Linux driver is no longer officially maintained meaning it breaks every now and then after a kernel update, next time it breaks I’m going with OpenVINO.
Also, I’d install Docker in an LXC for Frigate, it makes passing the iGPU through to it a lot easier.


Can confirm it does:
OrgAbuseHandle: ABUSE9107-ARIN
OrgAbuseName: ABUSE
OrgAbusePhone: +1-313-516-8908
OrgAbuseEmail: abuse@hostodo.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE9107-ARIN


I believe OP would require an authoritative DNS server, which AFAIK Quad9 is not. desec.io would be my recommendation though.
I can dig it…but surely the simple option is to have the PC wake up on power restoration, right?
After the PC shuts down, the UPS runtime will increase by a lot. So the power might come back before the UPS turns off, so as far as the PC can see, the power was never lost.
Edit: Also I assumed you meant restore on after AC loss, and not the last state.


Sure screw Microsoft, but inpout is dead and blocked by the vulnerable driver blacklist, so it’s crazy that official RGB software is still using it.
If you’re looking for alternatives but stuck on Windows: OpenRGB doesn’t use inpout since 0.9 or even winring0 since 1.0rc2, and works on Linux if you ever plan on switching.


Not to wreck your joke, but certificates have a starting date on them too, so the epoch also won’t work.


There’s a few websites now that support WebAuthn which Windows Hello (requiring a TPM) should support.
For example, the Australian passports.gov.au defaults to “passkeys” and makes it clear they’re “recommend”, my.gov.au also supports passkeys but prefers their mobile app. I just use a Yubikey (+ Linux) though, and it’s always optional anyway. Though I also don’t know of any banks using WebAuthn.


Possibly mTLS, which you’d configure in your reverse proxy. You could email them the certificate and instructions on installing it. I believe for Chromium browsers on Windows you basically just double click the cert and click through the wizard. Firefox I know has a thing in the settings for importing the cert. Android you just tap on the cert and make sure it opens with ‘Certificate Installer’ if it gives you the option.
IKEA’s seem okay too, they’re just not the brightest around. The older models are ZigBee, the newer ones are Matter over Thread (although I’ve heard some will also work with ZigBee).
Some servers do publically list their PHP version, and as an example there are currently ~23,000 that list PHP 8.5.11: https://www.shodan.io/search?query=PHP%2F8.5.11
Sure these could be a manually patched version of 8.5.11, but I find that pretty unlikely.