curben

5 ms·

1.
by curben 3mo ago
acme.sh is maintained by ZeroSSL. https://github.com/acmesh-official/acme.sh#2%EF%B8%8F%E2%83%...
2.
by curben 2y ago
Cloudflare has been offering SSH CA-based authentication for more than 2 years [1], I wrote a guide back in feb '23 [2]. The announcement is more about offering new features, such as more granular user control. [1]: https://w
3.
by curben 2y ago
Image CDN primarily offers image resizing, especially useful for responsive images. It has a sizable market, both Cloudflare and AWS offer image processing service, see also major players like Cloudinary and Cloudimage. Image and general CD
4.
by curben 2y ago
If "orthodox" means "vpn traffic cannot be established through third-party cloud infrastructure", then tailscale and any other cloud-hosted ZTNA solutions wouldn't be accepted in that kind of enterprise.
5.
by curben 2y ago
SSH protocol does not protect against weak configuration, e.g. password authentication without brute force mitigation. Zero-trust can be misconfigured too, so it depends how well either of them is configured.
6.
by curben 2y ago
The manual mentions it includes EasyEUICC hash in an ARA-M slot, so it should work. ARA-M does not apply to OpenEUICC; as a system app, it can work with any esim. https://www.sysmocom.de/manuals/sysmoeuicc-manual.pdf (
7.
by curben 2y ago
JMP SIM Manager is a rebadged version of EasyEUICC available on f-droid. JMP resells eSIM card and usb reader from https://www.estk.me/product/
8.
by curben 3y ago
for anyone new keepassxc, do check out the auto-type feature. you can trigger it (through keyboard shortcut) to type TOTP digits.
9.
by curben 4y ago
On Android, to unlock Keepass database secured with Yubikey, an alternative to Keepass2Android+ykdroid is KeePassDX[1] + Key Driver [2]. Both USB and NFC are supported. [1]: https://f-droid.org/en/packages/com.kunz
10.
by curben 4y ago
I'm using xmlstarlet in Alpine as a bare minimum way to scrap a webpage in CI pipeline.
11.
by curben 4y ago
I'm using these FF addons CanvasBlocker and Spoof Timezone to spoof UA and timezone. I checked vytal.io and it shows those addons can't fully spoof web worker method. I usually use https://browserleaks.com/javascri
12.
by curben 5y ago
I think the most useful feature of modern filesystems (e.g. ZFS & Btrfs) relevant to desktop usage is the ability to create snapshot. Software store can automatically take a snapshot before add/remove/upgrade apps; if an upgra
13.
by curben 5y ago
The diagonal combines light and dark themes' screenshot. Light: https://postimg.cc/BPW3vwJN Dark: https://postimg.cc/dkZvwKcL
14.
by curben 5y ago
AFAIK this is a wrapper of worker_threads API. https://github.com/tuananh/camaro utilises this for multi-threading processing of XML input. Hexo (static site generator) is attempting to utilise this library ( https:&#x
15.
by curben 6y ago
Hetzner managed nextcloud costs $12/month ( https://www.hetzner.com/storage/storage-share?country=us ).
16.
by curben 6y ago
I have a .onion running on ipv6-only host and it's been working fine for the past few months. Relevant torrc configs: HiddenServicePort 80 [::1]:8080 ClientUseIPv4 0 ClientUseIPv6 1 ClientPreferIPv6ORPort 1
17.
by curben 6y ago
I'm using Statically ( https://statically.io/ ) which offers screenshot API so thumbnail can be generated automatically. In my blog template, I use the following snippet: <meta property="og:image" conten
18.
by curben 6y ago
There is an existing f-droid version of Maps.me [1] and this looks like a separate effort. Despite having access to the source code, map hosting is a non-trivial problem [2]. [1]: https://gitlab.com/axet/omim [2]: htt
19.
by curben 6y ago
This project's logo reminds me of Metricon [1], an Australian construction company. https://metricon.azureedge.net/Metricon/media/metricon/about...
20.
by curben 6y ago
[1] generates ico, png and svg. you may want to remove some favicons from the generated HTML snippet; in my brief testing, Firefox loads both png and svg, while Chrome loads ico. [1]: https://realfavicongenerator.net/
21.
by curben 6y ago
> ...email providers to try deploying a key management strategy similar to the one I’ve described in this post. Assuming author meant key rotation, Protonmail[1] offers automatic key rotation by using CNAME that alias to DKIM TXT which i
22.
by curben 6y ago
This reminds me of an article [1] I read a few years back which utilised OpenALPR. [1]: https://www.freecodecamp.org/news/how-i-replicated-an-86-mil...
23.
by curben 6y ago
If credit is not required, looks like a public domain thing. CC0 [1] is one, there are also some other public domain licenses [2]. [1]: https://creativecommons.org/publicdomain/zero/1.0/ [2]: https:/&#x
24.
by curben 7y ago
The decision was made before the release of Blake3. The article did mention the algorithm is no longer hardcoded (hence the ability to support both SHA1 & SHA256). This means it's possible to transition to Blake3 (or any other) in
25.
by curben 7y ago
Startpage shows more relevant local results for me, it's essentially a proxy to Google search. DDG supports redirect to Startpage by using "!s".
26.
by curben 7y ago
I get the error when I search using right-click menu or through an embedded search box. Regular search works fine. The ones not working have Origin request header.
27.
by curben 7y ago
html minifer mostly just remove the whitespaces. Compression (gzip or brotli) preserves the source, i.e. decompressed file is exactly the same as the original's; whereas minifier alters the source.
28.
by curben 7y ago
> claims about LED lifetime costs based on (seemingly false) figures about durability. (E.g. drive around Los Angeles and see the dead/dying LED streetlights all over the place). LED can be made durable if desired. In Detroit's
29.
by curben 7y ago
It has been a core feature since v50, albeit with less feature than the addon. It's still disabled by default, just need to toggle the following configs to enable it: privacy.userContext.enabled;true privacy.userContext.ui.enable