dvzk

9 ms·

1.
by dvzk 2y ago
Same. I learned Tcl recently for /usr/bin/expect. I wasn't happy to be forced into using yet another esoteric language, but Tcl itself is strangely fun: it's like a more expressive and functional Lua.
2.
by dvzk 2y ago
WireGuard is extremely easy to setup. It's difficult to manage if you have hundreds of nodes or dynamic endpoints: that's what Tailscale and Netmaker helps with. OpenBSD's wg documentation is straightforward. It maps onto wir
3.
by dvzk 2y ago
You would also be locked out if you ran OpenSSH on Tailscale's autoconfigured WG interface. Setup WireGuard manually, or enable serial console login, or make sure your servers are dispensible. Tailscale (and Nebula) mostly alleviate th
4.
by dvzk 2y ago
I wore mine while riding a hardtail XC mountain bike (on safeish trail segments) and the transparency mode failed after 7 months. After that, the non-ANCed speaker and microphone worked fine. Weirdly durable for nonathletic purposed hardwar
5.
by dvzk 2y ago
I'm more tempted to stop running again. I am less skilled at mountain biking today since I moved to a 1:3 weekly schedule (4h running and 6-16 hours riding). Our insane single friend who XCs from summit to summit 7-14 days straight 3mo
6.
by dvzk 2y ago
I don't think that's reasonable at all. I ride and trail run regularly, and the amount of time that it subtracts from my nerd hobbies is *immense*. Other poster is right, the 99th percentile regular non-professional shredded athle
7.
by dvzk 2y ago
Common gear ratios for MTB (and gravel) do favor steep inclines much more. It doesn't matter how exhausted you are, if you have a granny gear 46-52t cassette and 30-36t chainring setup, you're solid.
8.
by dvzk 2y ago
Nice! I didn't know about miniroot*.img. It's actually just bsd.rd, boot, MBR+PBR, and bootx64.efi. Nothing that can't be safely overwritten while the ramdisk kernel is running.
9.
by dvzk 2y ago
QEMU most likely is not required. OpenBSD's installer is inside a single 4.5 MiB [1] ramdisk kernel image. Chainload or netboot it, or download the ramdisk to ffs on sd0 and run installboot [2]. Once the ramdisk kernel is loaded you ca
10.
by dvzk 2y ago
There are extended stay hotels with stovetops and ovens (and outdoor grills) with low-grade used (ugh!) cookware included. It's usually not much more expensive than regular midtier hotels: possibly cheaper, if you can negotiate a longe
11.
by dvzk 2y ago
The last occasions that I stayed at $200/night hotels, someone triggered the building fire alarms at 2:00 and 4:30 AM. Everyone was forced to evacuate until the fire department arrived (the alarm sirens were agonizingly loud). Still, I
12.
by dvzk 2y ago
> CF says they now no longer allow previously used nameservers to be used again. The only problem with this is if someone swaps CF accounts hundreds/thousands of times and "runs out" of custom names. It’s not necessary for
13.
by dvzk 2y ago
I might misunderstand something here, but essentially, the authoritative DNS provider should only need to: (1) check for existing NS records upon registration, (2) never reassign a name server matching #1, and (3) refuse to serve DNS respon
14.
by dvzk 2y ago
It doesn't. It could hypothetically cost PIR $0. 501(c) organizations are not prohibited from collecting and spending profits, they are prohibited from unreasonably distributing such earnings to private shareholders and individuals (se
15.
by dvzk 2y ago
In theory, S/MIME and SMIMEA. In reality, normal users demand account data recovery in cases of lost encryption keys and passwords. So key escrow is required, which isn't E2EE. ProtonMail tells forgetful users to shove it, which l
16.
by dvzk 2y ago
Zero cost TLS certificates might be what Let's Encrypt is known for, but it wasn't the first entity to offer them. LE also disrupted the CA market because of IdenTrust's initial cross-signing, and ACME's development and
17.
by dvzk 2y ago
The entire consumer registrar industry is untrustworthy. I can't think of a worse category of online services, ranked by security and sleazebaggery, with the possible exception of the VPN market.
18.
by dvzk 2y ago
Sadly there's tons of code-based Java build tools, but possibly zero concise (toml/yaml- like) declarative build tools. If you're currently using Groovy or Kotlin scripts for building Java projects however, then Java build sc
19.
by dvzk 2y ago
If a single remote service can lock you out of your 2FA accounts then you failed with your backup policy. I don't use it, but Apple Passwords makes TOTP secret backups possible, via bulk export and initial key setup.
20.
by dvzk 2y ago
For athletes and co., sustainability isn't even an idea thought about. Like, I've built quite a few bikes and I've rode with some of the world's best MTBers/cyclists: not once has someone proposed, "How can we
21.
by dvzk 2y ago
SMS 2FA is one thing. Bad, but ineffective. SMS-based account recovery is far worse. Every time a major website asks me for a phone number "in case you lose access to your email account" I freak out internally before ensuring I
22.
by dvzk 2y ago
I didn't say I never use it, just that it's not always the core feature. This will depend heavily on your field, but in my past work, the features that were way more essential are: scripting (+ IR lifting), xrefs, CFGs, labels&#x2
23.
by dvzk 2y ago
Decompilation is often the least important (and least reliable) part of IDA/Ghidra, so comparing the two is unfair. That said, the scene is perpetually starved for good C decompilers, so more attempts are always exciting.
24.
by dvzk 3y ago
Sure, to be clear, I also think Valve's response was over the top. Conspiring to extradite a foreigner, as a private corporation, is straight out of cyberpunk fiction. Axel's a very lucky person, all things considered. If he had b
25.
by dvzk 3y ago
Yes. HL2 is how Axel became known to gamers, but it's nearly irrelevant. He also created the most popular open source malware framework (Agobot) in existence at the time. Millions of systems were enlisted in botnets based on variants o
26.
by dvzk 3y ago
I mean, I didn't originally want to call out the insane claim that everyone should try to personally verify all truth propositions. I guess you truly are the ultimate skeptic, or you have infinite time to throw away. Fortunately, for a
27.
by dvzk 3y ago
>>> You trust a system of checks and balances precisely because of this. >> I think trusting in our system of checks and balances > No. A thousand times no. No damn way. Which one is it? I paraphrased you, and you contradi
28.
by dvzk 3y ago
Sure, but the same people who frequently say this also cite the CIA's declassified MK-ULTRA documents as if they are unimpeachable fact (and not possibly falsehood or strategic disinformation). At the end of the day, the average forum
29.
by dvzk 3y ago
Yes. I've never seen anyone question the accuracy of the Church Committee's disclosures. People who talk about such things are normally eager to say that the US Congress and the CIA can't be trusted. It's just selective
30.
by dvzk 3y ago
/private and /private/tmp are shared between all users (including non-login users). $TMPDIR is safer for sensitive files, but it lacks the macOS sandboxing protection on ~/Downloads.

More ›