WSL'de pyenv-win Çakışması ve PATH Kaosu Çözümü
WSL içinde birdenbire beliren 'bad interpreter: /bin/sh^M' hatasıyla Python ortamı bozulanlar için arka plandaki Windows PATH sızıntısını (Interop) masaya yatırdım. /etc/wsl.conf üzerinden interop ve appendWindowsPath ayarlarını kapatarak WSL'i Windows'tan tamamen izole etmeyi, sistemi kararlı ve temiz bir Linux geliştirme ortamına dönüştürmeyi adım adım anlattım.
#Ubuntu still doesn't have a patch or even a security notice for #sshkeysignpwn ...
How is this everyone else has been patched for days!
#Debian had a fix Friday morning...#DomumSocial is running on Debian, but in my day job I'm stuck with Ubuntu.
If you're also stuck with Ubuntu there is a mitigation:
`sudo sysctl -w kernel.yama.ptrace_scope=3`
I've tested this against the know exploit code at https://github.com/0xdeadbeefnetwork/ssh-keysign-pwn
This will disable the vulnerable ptrace call until the next reboot
Seeking confirmation of my theory I was able to find:
https://almalinux.org/blog/2026-05-15-ssh-keysign-pwn-cve-2026-46333/
you can also set "yama.ptrace_scope" to "2" which will only allow root to use ptrace (and will also allow resetting it w/o reboot). The link above has more explanations and directions for setting it persistently across reboot for now.
This will break `strace` and `gdb`!
Steal SSH host private keys and /etc/shadow via the ptrace_may_access mm-NULL bypass + pidfd_getfd. Pre-31e62c2ebbfd kernels. - 0xdeadbeefnetwork/ssh-keysign-pwn
Just released net-benchmark v0.5.0 — started as a DNS benchmarking CLI with 14,000+ installs across 100+ countries, now includes a full HTTP suite.
Per request: DNS → TCP → TLS → TTFB → TTLB breakdown, security header audit, CDN fingerprinting, redirect chain timing, HTTP/2 downgrade detection.
SSL certificate checking coming in v0.6.0.
pip install net-benchmark
github.com/net-benchmark/net-benchmark
#python #openSource #dns #cli #devops #networking #selfhosted #sysadmin
Someone: "Life is easier without the monolithic systemd."
Linux kernel enters the chat.
Linux kernel: "What do you mean? I am a monolith as well."
Me: Oh, if we use "monolith," "monolith," "other software of different principles," "on top of others," that means we are still following the UNIX philosophy, regardless of the monolith parts' presence.
Thoughts? Feel free to comment.
#Linux #Systemd #UnixPhilosophy #Monolith #Kernel #OpenSource #SysAdmin #FOSS #TechHumour #OperatingSystems #LinuxKernel #SoftwareArchitecture #CodingLife #TechThoughts #GeekLife
VMware Workstation Pro 26H1 aggiorna la piattaforma di virtualizzazione con supporto ARM, nuove distro Linux e versione Windows completamente a 64 bit 🚀
#VMware #Linux #Virtualizzazione #Ubuntu #Fedora #OpenSource #SysAdmin
I've witnessed that Fediverse servers have shut down... Some have returned online...
#Fediverse #Mastodon #ServerDown #Decentralised #FOSS #SelfHosted #TechCommunity #DigitalResilience #Hosting #OpenSource #Federation #Instance #SysAdmin #NetworkOutage #OnlineCommunities #WebHosting
My brain at 2 AM:
[ ] Sleep
[ ] Write documentation
[x] Over-optimize a working bash script to save 0.002 seconds
Efficiency is a lifestyle. 🐧⚡️
Stop losing time over messy data. Let #Keepita handle the heavy lifting.
#Keepita #Linux #BashScript #TechHumor #DevLife #SysAdmin #OpenSource #FOSS #BuildInPublic #IndieDev
Webmin is hardened & clustered w/ three total nodes, ns1, ns2, and ns3 etc. I will eventually add clustered nodes on two other locations so records are still served when one cluster's host is down.
https://tech.haacksnetworking.org/2025/12/29/authoritative-dns-w-bind-9/ feedback welcome.
Added larger tmp directory & source-IPd vhost so webmin won't lock. Obv, make sure you use static, dedicated, & fully hardened external IPs for permitted list.
#selfhosted #homelab #sysadmin #linux #dns #webmin #opensource #freesoftware #networking
🚀 New Webinoly Release!
We’re fast-tracking this update to fix critical issues:
🛠️ PHP PPA Fix: New resilient socket management to solve breaking changes in Ondřej Surý’s repo.
📦 Rclone Integration: We’ve replaced Duplicity/Duply with #Rclone for faster, more robust backups. Time to migrate!
🐍 Certbot via PIP: No more Snap! PIP is now the default for Ubuntu 26.04 (Snap remains optional).
Yücel
Jon
frankovo
Kalvin Carefour Johnny
Linux Easy
Keepita 
anarcat
Haack’s Networking
Webinoly