Edward Snowden Leaks: 10 Years Later

It’s interesting how fast time flies. I remember the 16-year-old me thinking “a government backdoor is hacker’s backdoor” when reading criticism of OpenBSD, and the next day Edward Snowden’s first NSA leaks hit the media, that with my mom subsequently defending the surveillance programs. Since then, we’ve all seen things change. Many of NSA’s programs were ruled unconstitutional, we took a big leap on privacy and security in some places (e. [Read More]

The Decline of Net Neutrality Activism

For many years, telecom and Net Neutrality-related policies have been a hot-button political issue for me, to the extent that I, an ordinary software engineer at Microsoft have been blocked on Twitter by former FCC chairman Ajit Pai because I tweeted support for Net Neutrality publicly. I also noticed that Net Neutrality is less of a hot-button topic than it was, presumably because of a deadlocked FCC that couldn’t pass anything. [Read More]

Bypassing Gmail's spam filters with ChatGPT

If you haven’t been living under a rock, you probably already know what ChatGPT is. I am an operator of high bandwidth Tor exit relays, and with that, I get a lot of abuse complaints. Combined with the fact that I have ai lease on a “/24” of IPv4 space, basically a block of 256 IP addresses, I have the IP space’s contact to my LLC’s email address. What does this have to do with ChatGPT, you may ask? [Read More]

How to clone your Calix GPON ONT (Optical Network Terminal)

UPDATE: I now live with my brother in Stamford, CT while my family renovates a NYC townhouse/brownstone and right now I’ll be using Frontier FiberOptic until the new home is ready. Frontier here uses a Nokia ONT and since it’s an ex-AT&T area standard GPON uses 802.1X. I’m currently “bypassed” to my MikroTik box, the older AT&T Fiber bypass method works here also. Also, Lumen/CenturyLink/Quantum Fiber now uses Smart NIDs (basically an ONT plus a wired router) instead of Calix ONTs. [Read More]

Setting up Login for Windows Server/Samba Active Directory on FreeBSD

Disclaimer: I work at Microsoft, but not on Windows Server or Active Directory. Recently, in my homelab, I decided to enable a single sign-on using Active Directory on my two servers. Despite my employment, my homelab is very FreeBSD-centric, due to me having used it for 9+ years versus 2+ at my current job. While I could use OpenLDAP which is technically more Unix-centered than Windows-centered, I hate OpenLDAP. I find it easier to use Active Directory, whether Windows or Samba, as I am currently using a Samba 4. [Read More]

Optimizing FreeBSD Power Consumption on Modern Intel Laptops

My current FreeBSD laptop is a 2020 14" HP Spectre x360, which uses Intel’s 11th Gen CPU and “Evo” platform, although I previously also had the 13" 2020 version with a similar setup (but lacked working audio on non-Windows). This article isn’t specific to HP: your shiny-new Lenovo ThinkPad, Dell XPS, or Framework Laptop can also apply. One thing with FreeBSD is that unlike Windows or desktop Linux, the default configuration is poorly optimized for laptops that are newer than your ancient ThinkPad T420, or maybe a T460s. [Read More]

FreeBSD (or pfSense/OPNsense) on the HP t740 Thin Client

While expensive and hard to find on eBay (thanks, ServeTheHome), the HP t740 “Thin Client” is a great pfSense box if you want more power, or a compact home server. While I could get away with a t730 or t620 Plus, but I have CenturyLink Fiber and PPPoE is more computationally intensive versus pure DHCP. That running a Tor relay, so I’d like some headroom and upgrade path to 10 Gigabits. [Read More]

Tuning Power Consumption on FreeBSD Laptops and Intel Speed Shift (6th Gen and Later)

When running FreeBSD on laptops with a 6th Gen (Skylake) or later Intel CPU, for me these are HP Spectre x360s (sorry, I’m not a ThinkPad fan), one annoyance with the out of the box FreeBSD configuration is the fact that the fan is running most of the time. In comparison, a HP Envy with an AMD Ryzen does not have this issue with an out-of-the-box FreeBSD. One thing that Intel has done with these modern CPUs is include a technology called Speed Shift. [Read More]

Setting up a Signal Proxy using FreeBSD

With the events that the private messaging app Signal has been blocked in Iran, Signal has come up with an “proxy” solution akin to Tor’s Bridges, and have given instructions on how to do it. For people who prefer FreeBSD over Linux like myself, we obviously can’t run Docker, which is what Signal’s instructions focus on. Fortunately, the Docker image is just a fancy wrapper around nginx, and the configs can be ported to any OS. [Read More]

FreeBSD 13: Fixing the installer "Failed to configure bootloader" error with Manual Partitioning and UEFI

On my laptop (HP Spectre x360 2018), I decided to install a second FreeBSD install, this time on the Intel Optane drive. When I proceeded to install, I chose manual partitioning, and while it finished extraction, it proceeded me to this error: This happened to me on a recent 13-CURRENT. I don’t believe it happened on earlier snapshots or 12.x. I had this issue with both UFS and ZFS partitioning. [Read More]