opqpo

5 ms·

1.
by opqpo 6y ago
Those kids should get a prestigious cybersecurity job instead of going to jail. They didn't harm anybody even though they had the power to do that.
2.
by opqpo 6y ago
Literally there is ZERO evidence in the report. It's all pathetic nonsense "ghostwriting" about a few accounts upvoting each other on some blogs. The company and others have every incentive to blame these pathetic "ghost
3.
by opqpo 6y ago
Do you have any evidence that FireEye’s report is accurate and not misleading? they are the ones that claimed it in the first place. Also what do you think is more plausible for a western cybersecurity company's bottomline? make Russia
4.
by opqpo 6y ago
disagreeing is a pretty strong word. Nobody can disagree these days. I was flagged and labeled as a troll within a couple of minutes once I criticized a programming language. 30 years from now, people will remember this pathetic mob tyranny
5.
by opqpo 6y ago
Mediocrity, ugliness and verbosity is more well thought out than engineering.
6.
by opqpo 6y ago
Accessing nil pointers is well thought out. Not enforcing error checking is well thought out. Reflection and code generators instead of generics and traits is well thought out. Lack of conditional compilation is well thought out. No compila
7.
by opqpo 6y ago
I am not against forking or introducing modifications, etc.... You can fork it, change it for your use case as you wish, but just don't bundle my work, rebrand it and sell it as if it were yours. I meant my work to be free and I want t
8.
by opqpo 6y ago
Never understood the obsession of OSI and their insisting to not give any protection for the authors. Authors whether individuals or companies should have the right to prevent their work from being rebranded or sold by others with minor or
9.
by opqpo 6y ago
Kubernetes is a godsend and it solves way more problems than it creates. But I just believe that this simple use case is an overkill. OP just wanted a remote DNS server that is addressable within the VPN. You don't really need Kubernet
10.
by opqpo 6y ago
Never thought of that. But OP maybe liked tinkering with k3s and kilo. But I believe kilo's best use is for cluster to cluster connection. This use case is a bit artificial in my opinion.
11.
by opqpo 6y ago
Yes you can avoid that open source setup for a buggy and even slower userspace wireguard commercial implementation for only 10$/month per user
12.
by opqpo 6y ago
I believe that Kubernetes is artificially injected in your setup. You can just run your DNS server on the server and advertise it on the VPN address. You can still address it from anywhere in the VPN.
13.
by opqpo 6y ago
What does "trojans at ISPs" even mean? TLS works end-to-end and ISPs can do absolutely nothing to see the plaintext. It's unless the CAs at users-side are manually replaced with fake ones nothing can be done. I've never
14.
by opqpo 6y ago
I like how they are shamelessly trying to rebrand Jason Donenfeld's open source work in order to take the credit and the money for features with salesy names like "mobile IP" that were actually built inside WireGuard from day
15.
by opqpo 6y ago
Is there any way to create a bastion or proxy without messing with the client configs? something like a transparent proxy like nginx but talks SSH.
16.
by opqpo 6y ago
It may work for enterprises that want to search the web via an API. But for normal people? I extremely doubt it.
17.
by opqpo 6y ago
The only thing that is out of control is these MSM propagandists.
18.
by opqpo 6y ago
It is NOT. It's a paid commercial software where only the client is open source.
19.
by opqpo 6y ago
*was
20.
by opqpo 6y ago
That's why you should never start the Uber of X and the Amazon of Y. Because if the actual Uber and Amazon see that the market is good they will massacre you unless you're fortunate to get an offer from them.
21.
by opqpo 6y ago
What is their business model?
22.
by opqpo 6y ago
It's worse but still possible to swallow for me.
23.
by opqpo 6y ago
You can use it inside a browser. Look at https://github.com/grpc/grpc-web but I agree that something like playing with curl would be impossible. I once even stumbled upon a golang project that can generates a RESTful A
24.
by opqpo 6y ago
I wish more people try gRPC outside of microservices. It is the perfect solution for building APIs.
25.
by opqpo 6y ago
What's wrong with using vanilla WireGuard? I tried this Tailscale recently and it was a huge mess. It destroyed WireGuard's throughput compared to the kernel implementation and the CPU usage was like I am running a game along with
26.
by opqpo 6y ago
The certificate will still have to be verified at client-side with the CAs. I know my idea will break the entire TLS flow but I am just talking about the validity of it in the first place.
27.
by opqpo 6y ago
If we trust DNS to publish the SNI public keys, why don't we trust it for the website certificate in the first place?