Current probe locations are listed below. They are also listed in this handy text file and can be accessed via DNS query to probes.nodeping.com for automating your firewall rules if needed.
This is a simple Apache setup to fight excessive bot traffic. The idea is simple: if a request is made without a proper cookie, present a simple page with a button. When the button is clicked, the cookie is set and future requests are allowed through. Legitimate users will click the button, while most bots will not.
Unlike other, similar solutions this one is designed to be easy to deploy and setup with an existing Apache server without the need of a reverse proxy or complex dependencies. Also unlike many other solutions it also optionally works with JavaScript disabled.
The handling is mostly done by mod_rewrite and a small Go helper program that performs fast lookups against multiple allow lists.
So taking a page out of Anubis' book, I went and implemented my own little bot blocker. The idea is pretty simple. Each request gets checked for the presence of a cookie. If the cookie is set, the request is served as usual. If the cookie is missing, a simple HTML page with a button is shown. Real users are asked to click the button, get a cookie valid for 30 days and the page reloads, this time serving the original request. From then on they can browse the site as usual. But since bots don't click buttons (yet), they are stuck at the button page forever.
I was able to implement this whole mechanism with Apache's mod_rewrite module, which means no additional service (like Anubis) is needed. Each request is checked by Apache and since the bot check page is static, nearly no resources are needed.
It works really well. Can you spot when the system went online in the graph below?
After my last post about fighting bots, I received several questions asking whether my solution would also work for simple web hosting setups. Unfortunately, that’s not the case. Even though most hosters use Apache and allow the use of mod_rewrite, they typically only permit configuration through .htaccess files. The problem is that the RewriteMap configuration my solution relies on cannot be defined there.
So I started thinking: what if we use PHP instead?
Ideally, we wouldn’t want bots to reach the PHP interpreter at all. But if we have no other choice, we can still make this fairly efficient by blocking bots very early—before the DokuWiki core is even initialized.
This is where the new Bot Check plugin comes in.
The idea is simple: the plugin generates a small, dependency-free PHP script that implements the bot checks. This script is then loaded via DokuWiki’s inc/preload.php mechanism, ensuring it runs as early as possible in the request lifecycle.
For end users, the experience is the same as for my previous solution. A quick button click sets a cookie and let's them access your wiki for 30 days.
his is a somewhat recycled version of a forum post that I have to lookup again and again, because the same similar questions keep popping up:
How can I install DokuWiki on a shared drive?
How to run DokuWiki out of Dropbox and share it with multiple users?
How to sync DokuWiki between different computers?
These questions mostly come from users who made their first steps in DokuWiki using the "DokuWiki on a Stick" version. To novice users, the stick version feels like a traditional desktop application: you double click the run.cmd and DokuWiki starts.
But what is really starting is a local web server and a browser pointing to said web server.
Anubis is a Web AI Firewall Utility that weighs the soul of your connection using one or more challenges in order to protect upstream resources from scraper bots.
This program is designed to help protect the small internet from the endless storm of requests that flood in from AI companies. Anubis is as lightweight as possible to ensure that everyone can afford to protect the communities closest to them.
Anubis is a bit of a nuclear response. This will result in your website being blocked from smaller scrapers and may inhibit "good bots" like the Internet Archive. You can configure bot policy definitions to explicitly allowlist them and we are working on a curated set of "known good" bots to allow for a compromise between discoverability and uptime.
In most cases, you should not need this and can probably get by using Cloudflare to protect a given origin. However, for circumstances where you can't or won't use Cloudflare, Anubis is there for you.
One of my latest projects is the Baochip-1x, a mostly-open, full-custom silicon chip fabricated in TSMC 22nm, targeted at high assurance applications. It’s a security chip, but far more open than any other security chip; it’s also a general purpose microcontroller that fills a gap in between the Raspberry Pi RP2350 (found on the Pi Pico2) and the NXP iMXRT1062 (found on the Teensy 4.1).
It’s the latest step in the Betrusted initiative, spurred by work I did with Ed Snowden 8 years ago trying to answer the question of “can we trust hardware to not betray us?” in the context of mass surveillance by state-level adversaries.
Whenever you end-up with a large number of banned IP's in fail2ban you might want to know if there are multiple IP's banned from the same subnet. This scripts groups all banned IP's into /24 subnets.
By default the script returns all subnets with 10 or more IP's banned by fail2ban. You can change the group size either by adapting this script or using the --groupsize= parameter.
Example:
sudo ./fail2ban_subnets.sh --groupsize=15I think I have a setting problem with Fail2ban apache-badbot filter because I unfortunately have attacks of this type, and Fail2ban does not ban any IP. //
failregex = ^<HOST> -[^"]*"(?:GET|POST|HEAD) \/.* HTTP\/\d(?:\.\d+)" \d+ \d+ "[^"]*" "[^"]*(?:%(badbots)s|%(badbotscustom)s)[^"]*"$
Fail2ban has a build-in tool for testing the fail2ban filters, called fail2ban-regex, which you can use via command line. Like:
fail2ban-regex /var/www/vhosts/<your domain>/logs/access_ssl_log /etc/fail2ban/filter.d/apache-badbots.confOnce you're happy with the matched results, then use the following (replacing the last value with the name of your jail) to commit the changes without having to restart the Fail2Ban service:
fail2ban-client reload nameofyourjail
But for local audiences here in Aotearoa, no scene comes close to the emotional climax of the film, when a choir of women’s voices starts to ring through outer space with a very familiar melody and lyrics: “Pō atarau / E moea iho nei”.
The song is ‘Pō Atarau’, a te reo Māori wartime anthem penned by composer Emira Maewa Kaihau in 1915. Inspired by Clement Scott’s 1913 ‘Swiss Cradle Song’, Kaihau’s version was used as a farewell to soldiers fighting in the first world war (Kaihau also wrote the lyrics for ‘Now is the Hour,’ which became intertwined with ‘Pō Atarau’ in 1935). Over the 20th century, the song would come to be associated with a range of farewells, including funerals, leaving parties and memorials, and in 2024 it was included in The Aotearoa Songbook, celebrating the legacy of waiata Māori. //
Among this extensive Viking catalogue is the LP Turakina Sings, recorded with the Turakina Māori Girls Choir in 1976. //
While searching for goodbye songs from different cultures, I came across ‘Pō Atarau’ and I knew the song was special because of how it conveyed the sentiment of saying goodbye, even if you didn’t understand the lyrics,” he tells The Spinoff.
Lehman listened to many different recordings of the song, and found that the version sung by the Turakina Māori Girls’ Choir in 1976 “fit perfectly with the tone and pace of the scene” as well as the “vintage quality” of most of the soundtrack. “When I played it for the directors, they got goosebumps and were instantly sold,” he says. “It became a standout moment we kept referring back to throughout the process as the perfect example of what we wanted to achieve with the soundtrack, highlighting the richness of global music and the shared human experience.”
Project Hail Mary is now in theaters, and directors Phil Lord and Chris Miller are no strangers to making stylish movies with great music. Whether they're directing, writing, or producing, their films always have music that is essential to both the aesthetic and the story. Project Hail Mary is no exception. It features both an astounding score and a selection of songs that help to accentuate the mood or story beat.
Ventoy is an open source tool to create bootable USB drive for ISO/WIM/IMG/VHD(x)/EFI files.
With Ventoy, you don't need to format the disk over and over, just drag-and-drop files to the USB drive and boot them directly.
You can copy many files to different folders and Ventoy will give you a boot menu to select them (screenshot).
You can also browse ISO/WIM/IMG/VHD(x)/EFI files in local disks and directly boot them.
x86 Legacy BIOS, IA32 UEFI, x86_64 UEFI, ARM64 UEFI and MIPS64EL UEFI are supported in the same way.
Most types of OS supported
Ventoy is a free and open-source tool that can turn any USB into a multiboot device. Once configured, you can drag and drop ISO files onto the drive, and all of them will be available via a boot menu. More importantly, you can continue to use your USB drive as a regular media storage device.
https://github.com/ventoy/Ventoy
for LMGC install an agent to allow your computer to be remotely controlled by LMGC
A spacecraft fitted with two flexible robotic arms is on the way to geosynchronous orbit after launching earlier this week on a SpaceX Falcon 9 rocket, kicking off a planned decade-long mission to open new frontiers in satellite servicing.
The Mission Robotic Vehicle, owned and built by Northrop Grumman, rocketed into orbit from Cape Canaveral Space Force Station in Florida on Tuesday. Three small propulsion pods, each functioning as standalone spacecraft, accompanied the MRV aboard the Falcon 9 rocket.
The Falcon 9 deployed all four payloads within about an hour of liftoff. It will take about a year for the satellites to maneuver from their initial elliptical drop-off orbit into a circular orbit more than 22,000 miles (nearly 36,000 kilometers) over the equator. At this altitude, the MRV and the three Mission Extension Pods (MEPs) will travel in lockstep with Earth’s rotation, //
Northrop Grumman’s first three Mission Extension Pods launched on the same rocket as the MRV, but they are flying separately up to geosynchronous orbit using electric propulsion. The pods, each about the size of a dishwasher unit, will loiter there for retrieval by the MRV’s robotic arms. After picking up the first pod, the servicing spacecraft will rendezvous with its first client satellite, lining up precisely with the client to install the pod into its engine compartment. The MEP will latch onto the satellite and take over propulsion for up to eight years, acting as a jetpack, or a smaller version of the MEV, to move the client around geosynchronous orbit as needed. //
This isn’t refueling, but the MRV serves the same end. The Space Force has a separate contract with a company named Astroscale to demonstrate refueling in geosynchronous orbit next year, something no US company has done before. The MRV can also do more than life extension. It can inspect, service, upgrade, or repair satellites that were never designed for it. //
“RSGS has full seven-degree-of-freedom robotic arms, heavily instrumented. The ends of the arms can attach multiple tools as hands, and they also have a good deal of autonomous control,” Shoemaker said. “It’s general-purpose, high-dexterity robotics.”
Ground teams could build and launch more jetpacks to meet up with the MRV in geosynchronous orbit after the spacecraft uses the three pods already in space. Future launches could carry new tools, such as a knife, a cutter, or a robotic screwdriver for more invasive servicing or repairs. And the MRV itself is designed to be refueled in orbit. Northrop Grumman doesn’t plan to immediately build a second MRV, but it will continue upgrading and augmenting the vehicle it just launched. //
These companies and more are taking distinct paths toward satellite servicing, orbital refueling, in-space depots, and what the military likes to call dynamic space operations. But the trend is unmistakable: to fully utilize the domain of space, the throwaway mentality must go.
Introduced Monday as H.R. 9780 by Rep. Abe Hamadeh, R-Ariz., the BRRRRT Act (Bolstering Recognition, Resurgence, Retention, and Remembrance of the Thunderbolt) gets its name from the bone-rattling “BRRRRT!” sound the jet’s 30mm Gatling gun makes when fired. //
The current National Defense Authorization Act (NDAA) has some provisions for keeping some A-10s flying as well. But that doesn't sound as cool as the BRRRRT Act.
This bill will probably end up going nowhere, sadly. The A-10s will stick around a little while longer, but the Air Force has stopped training Warthog drivers, and depot maintenance operations on the A-10 are wrapping up. That's too bad. There's still a place in the modern battle space for a dedicated, low-and-slow, dedicated close air-support airplane, and the A-10's a very, very good one.
The minimum lethal dose of undiluted ethylene glycol is 1.4 mL/kg in cats, 4.4–6.6 mL/kg in dogs, 7–8 mL/kg in poultry, 2–10 mL/kg in cattle, 1.6 mL/kg in macaques, and 6.61 mL/kg in guinea pigs. Younger animals may be more susceptible. //
Once absorption has occurred, excretion of ethylene glycol is increased by fluid therapy designed to correct dehydration, increase urine production, and compensate for expected future losses. Fluid rates should be reassessed often to accommodate changes in hydration and status of ongoing losses. //
Cats require a higher (and extra-label) dosage 4-MP than dogs: 125 mg/kg initially, followed by 31.3 mg/kg at 12, 24, and 36 hours after the initial dose. Alternatively, ethanol can be administered, using a bolus protocol of 5 mL of 20% ethanol per kg body wt diluted in IV fluids and administered as a drip over 6 hours for five treatments, and then over 8 hours for four more treatments.
Lastly, for both dogs and cats, 30% ethanol can be administered at 1.3 mL/kg, IV bolus, followed by 0.42 mL/kg per hour constant-rate infusion for 48 hours. This approach may increase ease of monitoring and the maintenance of blood glucose levels. CNS signs may be less likely to wax and wane.
THE YEAR WAS 2081, and everybody was finally equal. They weren't only equal before God and the law. They were equal every which way. Nobody was smarter than anybody else. Nobody was better looking than anybody else. Nobody was stronger or quicker than anybody else. All this equality was due to the 211th, 212th, and 213th Amendments to the Constitution, and to the unceasing vigilance of agents of the United States Handicapper General.
The Odyssey—the original poetry and the modern film—is not really about adventure, although it has an abundance of it. It’s also not primarily about virtues in some abstract way, whether the kill-your-enemies or love-your-enemies type. The Odyssey is about home. Odysseus wants to return to his place but comes to see that his obstacle is not merely geographical. He must become a different kind of person, the kind of man who can receive home as gift rather than as trophy. And at almost every step of the path, those who imaginatively walk with him can feel the ache.
Some of us are pulled toward nostalgia, looking to something better in the past. And some of us are pulled toward discontentment, looking to something better in the future. Regardless of where we turn, we all recognize something is missing. And all kinds of people—politicians, marketers, tech lords—are there to say, “You want to get home, and I can get you there.”
But it never works.
That’s because homesickness points in contradictory directions all at once. //
The ancient problem says “I can’t get home.” The modern problem says “I got home—it isn’t home.” One longs for return, and one longs for escape. These are not two problems but one. No matter which way we turn, we don’t know what home is. That’s why Homer still rings true, even in the era of IMAX and SpaceX.
And that’s what makes the Christian story stranger than the pagan ones. Odysseus spends 20 years trying to get back to Ithaca. Jesus has spent 2,000 years (so far) telling us to stop mistaking Ithaca for Eden.
The Bible is full of odysseys: Abraham leaves Ur. The Israelites leave Egypt. The apostles set out to “the ends of the earth” (Acts 13:47). When describing examples of faith, the Book of Hebrews says none of them “received the things promised” (11:13, ESV throughout).
These pilgrimages were not about answering the longing for home with a return to something past. We want a place prepared for us, a place to belong, a place to be known, a place to be loved. But our longing for that can sometimes leave us nostalgic for the wrong thing. The Israelites hungered in the wilderness. They responded to that with nostalgia for slavery: “We remember the fish we ate in Egypt that cost nothing, the cucumbers, the melons, the leeks, the onions, and the garlic” (Num. 11:5).
The longing wasn’t wrong. As a matter of fact, God said the hunger was necessary. The emptiness was in order that “he might make you know that man does not live by bread alone, but man lives by every word that comes from the mouth of the Lord” (Deut. 8:3). As C. S. Lewis reminded us, “Creatures are not born with desires unless satisfaction for those desires exists. A baby feels hunger: well, there is such a thing as food. A duckling wants to swim: well, there is such a thing as water.”
All of that should lead us to ponder: “If I find in myself a desire which no experience in this world can satisfy, the most probable explanation is that I was made for another world.” Identifying the ache is not the end, but it’s a start.
The Odyssey, Homer’s and Nolan’s, assumes the greatest human tragedy is losing the home you once had. The Bible says Abraham was looking for a city he had never seen (Heb. 11:13–14). The Odyssey doesn’t answer the question; it reminds us how to ask it. And that’s not nothing. But once we start asking those questions, we might find a whole Trojan horse full of meanings about which we could never start to ask or even think (Eph. 3:20). Asking those questions just might lead us somewhere else, to a better story than even Homer or Hollywood can tell.
The Genesee Valley Greenway State Park is a 90-mile open space corridor that follows the route of the Genesee Valley Canal (1840-1878) and the Pennsylvania Railroad Rochester Branch (1882-1963) from the Erie Canalway Trail in Rochester's Genesee Valley Park to the Village of Cuba in Allegany County. The Greenway will eventually extend to Hinsdale in Cattaraugus County.
It includes a public, multi-use trail and natural and historic resources. The majority of the trail is an old railway bed that is a straight, level surface consisting of cinders, gravel, and mowed grass. The Greenway passes through woodlands, wetlands, river and stream valleys, rolling farmlands, steep gorges, and historic villages in sixteen towns located in Monroe, Livingston, Wyoming, Allegany, and Cattaraugus counties.