Die wunderbare Welt von Isotopp

Under the sea...

Avatar of @isotopp@infosec.exchange Kristian Köhntopp - February 21, 2020

Welcome to the Netherlands. I am living at the bottom of a lake, 3.50 meters below the sea level, and there are sea shells in my garden.

When I dig in my garden, it looks like this.

The Netherlands (low lands) or Holland (hollow lands) are formed in large part by the Rhine Delta . This is an estuary delta (tidal delta), which means it is formed as much by erosion as it is formed by sedimentation.

How to build a cycling environment

Avatar of @isotopp@infosec.exchange Kristian Köhntopp - February 19, 2020

Welcome to the Netherlands. We’re building roads differently. They are better, safer and less stressful for cyclists, and that also makes them better, safer and less stressful for motorists. Here is how it works:

(based on a Twitter Thread )

What does it look like?

I am living in a village. That means a speed limit of 30 km/h inside the city limits, and that is being enforced by the design of the road.

Mein Sohn sitzt vor dem Computer

Avatar of @isotopp@infosec.exchange Kristian Köhntopp - January 28, 2020

Oliver Rautenberg berichtet auf Twitter von “Elternvereinbarungen zur Smartphone- und Mediennutzung” an Waldorfschulen in Deutschland.

»Medienvertrag einer “Freien Schule” der Waldorfpädagogik. Ist diese Einmischung noch vertretbar? Keine Handys in der Schule, ok. Aber auch zuhause will die Schule Handys, Computer, Filme und sogar Hörspiele vertraglich verbieten. “Risiken und Gefahren” drohen!«

Dies ist meine persönliche Erfahrung, also eine Studie mit einer Sample-Gruppe von n=1. Keine Ahnung, und mir egal wie Ihr Dinge bei Euch in der Familie regelt, aber vielleicht ist das ja dennoch für irgendwen nützlich.

Some rules for primary keys

Avatar of @isotopp@infosec.exchange Kristian Köhntopp - January 28, 2020

On Twitter, @CaptainEyesight asked a question:

»Database architecture question: For deleting records, instead of a DELETE, UPDATE the id to the negative (i.e. 1 becomes -1) and then add AND id > 0 to every query. Great idea? or Greatest idea?«

I was honestly a bit confused, because this idea is so weird that I took this question for a joke. But then I decided that this is a case for XKCD 1053 : »You are one of today’s lucky 10.000.« So let’s do this properly.

Mailbox.org, Google, OAuth und Less Secure Applications

Avatar of @isotopp@infosec.exchange Kristian Köhntopp - January 17, 2020

Heise schreibt in Mailbox.org: Google sperrt “unsichere” Dritte vom Kalender aus über Anwendungen von Dritten und den Zugriff auf Google Kalender, Google Mail und andere Dienste, die mit GSuite interagieren. Der Artikel wirft leider eine Reihe von Dingen durcheinander, was schade ist, weil er einen wichtigen Punkt machen will.

OAuth2 vs. LSA

Im Artikel geht es um OAuth2 . OAuth2 ist kein neues Verfahren. Es handelt sich um einen Standard, bei dem ein Dienstleister Drittanwendungen den Zugriff auf Dienste erlaubt, indem er der Drittanwendung relativ automatisch ein Logintoken zuteilt, das

Rolling back a rollout

Avatar of @isotopp@infosec.exchange Kristian Köhntopp - January 17, 2020

Florian Haas asks on Twitter :

“How do you solve reliable rollback. The definition of a reliable rollback being: ‘get reset –hard ’, ‘git push -f’ and then magic happening that returns your infra to the exact state it was at .”

The problem is relatively easy to solve with modern infrastructure-as-code for anything that is stateless. It becomes a bit more involved when you are dealing with things with state, such as database instances or Zookeepers or similar things.

Disable Saitek X.52 pro Clutch Mode

Avatar of @isotopp@infosec.exchange Kristian Köhntopp - January 15, 2020

This post is a memo to self, and describes how to disable the X.52 clutch mode. I am flying with a Saitek/Logitech X.52 pro HOTAS , and this stick has a ‘clutch button’ (labelled “i”) in the thumb position of the throttle (image: clutch highlighed in red)

“Clutch mode” for this button means that it is usable as a modfier for the other buttons, when pressed together with a second button. Alone, it does nothing. For me, that is useless.

Sonos Recycle Mode

Avatar of @isotopp@infosec.exchange Kristian Köhntopp - December 30, 2019

Sonos is a company that makes Wi-Fi Connected speakers. They offer acceptable sound quality and an excellent user experience. They also so far have never canceled support for any of their speakers.

Hardware Lineup and Timeline

Some of their speakers are now qualified for a Trade-Up program, in particular their

  • Play:5 (1st generation) speaker,
  • the Connect:Amp and
  • the Connect.

The latter two (the Connect products) are somewhat obsolete as they were necessary when normal Wi-Fi was usually not able to carry sound data at the required reliability. Sonos’ speakers built their own Wi-Fi Mesh network separately from the usual home Wi-Fi, with the Connect as a base station. With newer Wi-Fi standards and recently also 5 Ghz this was no longer necessary.

Streaming and Energy

Avatar of @isotopp@infosec.exchange Kristian Köhntopp - December 28, 2019

A bunch of boomers in Germany is running a distraction campaign on the energy use of data centers and streaming. Example articles in german language can be found in Zeit and Bento , but there is a larger series of articles acrooss multiple newspapers.

A better structured reasoning can be found in SRF (German), and it highlights how arbitrary and wrong the energy numbers in the former articles are. But even this article ignores the facts that the energy consumption in a typical cloud data center is most likely carbon neutral, because the power used is likely to be completely green. How green exactly is depending on the cloud operator and the location of the data center - I have written a much more detailed overview elsewhere in this blog.

Trying lvmraid for real

Avatar of @isotopp@infosec.exchange Kristian Köhntopp - December 3, 2019

So after testing LVM Raid in princple, I have been trying it on some real hardware to see what happens. The idea was to estimate if it scales and if not, how it doesn’t. I was expecting to run into all kinds of obscure problems in my testing, but in fact, it was a quick and short death.

Here is my box: QuantaGrid D42A-2U with an AMD EPYC 7551P CPU (32C, HT off), 1024 GB of memory, a boot disk and 12x Micron_9200_MTFDHAL11TATCW (PDF ) for 120TB of disk storage.