Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
pcpuser
searching Neon…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
5 ms
·
1.
▲
by
pcpuser
2mo ago
I live in a major Indian city and 1 gig fiber up and down is $30. We've also got really good 4G/5G in most places. Also in the super remote areas WiMAX is (still) an option.
2.
▲
by
pcpuser
5mo ago
true dat
3.
▲
Show HN: Cutout is an email alias proxy built on Cloudflare Workers
(ananthb.github.io)
2 points
by
pcpuser
5mo ago
|
2 comments
4.
▲
Show HN: Starla – Unofficial Ripe Atlas Software Probe
(github.com)
1 points
by
pcpuser
5mo ago
|
0 comments
5.
▲
by
pcpuser
7mo ago
Literally the first thing I though of.
6.
▲
by
pcpuser
11mo ago
Just want to be the nth person to chime in and say the Google doc variant is the better read.
7.
▲
by
pcpuser
1y ago
Ths only issue that non-human readable log storage has caused is the endless nagging on forums. Literally never been an issue besides.
8.
▲
by
pcpuser
1y ago
What does "shopped around" mean? That's not a common or accepted idiom for code. Or not one I've come across anyway. Also show me evidence of them "shopping around" code. I'll wait.
9.
▲
by
pcpuser
1y ago
Care to share any evidence to back up the tall claim that systemd authors forced their code on anyone?
10.
▲
by
pcpuser
1y ago
There's so much I disagree with in the beginning but the ending is what actually grinds my gears. You make it sound like systemd manufactured this monoculture somehow. This is also the point I've seen people throw in a comparison
11.
▲
by
pcpuser
1y ago
Times change too. Microsoft does a ton of open source. They maintain an excellent immutable Linux distro. As always the true enemy is dogma and a cult-like adherence to it.
12.
▲
by
pcpuser
1y ago
Agreed. I wonder how many people in this thread hating on systemd have actually tried to work with upstream. They are an extremely pleasant and welcoming community who are willing to work with you on the most trivial stuff.
13.
▲
by
pcpuser
1y ago
Nah man you don't get it. They were "monetizing" Wayland. Whatever that means. It's certainly not because X is an insanely old and difficult to maintain codebase with questionable design decisions.
14.
▲
Show HN: Expose any web application to your Tailscale Tailnet
(github.com)
3 points
by
pcpuser
1y ago
|
0 comments
15.
▲
by
pcpuser
1y ago
Google auth but you can run your OIDC provider if you're into that: https://tailscale.com/kb/1240/sso-custom-oidc .
16.
▲
by
pcpuser
1y ago
So Tailscale has "extra dependencies" on Tailscale. Gotcha.
17.
▲
by
pcpuser
1y ago
NAT busting, and no key management. What extra dependencies does Tailscale have?
18.
▲
Show HN: DHCP Option 121 Calculator
(dhcp-121.devhuman.net)
2 points
by
pcpuser
1y ago
|
0 comments
19.
▲
by
pcpuser
2y ago
That's definitely a limitation of your network. I don't see how ipv6 can shoulder any responsibility here.
20.
▲
by
pcpuser
2y ago
You might find mitmproxy useful.
21.
▲
by
pcpuser
2y ago
Except for the fact that chromium is a feeder project for a proprietary closed source work and so often bends to the will of that project. Morally there's no equivalence here.
22.
▲
by
pcpuser
2y ago
> 3) The overreliance on dbus turns the “the unix philosophy” ;) away. Text as a universal communication medium, everything is a file, etc I prefer an introspectable, typed, and efficient communication protocol over streaming text becaus
23.
▲
by
pcpuser
2y ago
Without replying to specific parts, I'd like to point out that you and others bring up parallels between Systemd and closed source proprietary software shops like Apple and Windows. I view this as bad faith because Systemd should be af
24.
▲
by
pcpuser
2y ago
So close once more lol > 2. The CertificationRequestInfo value is signed with the subject entity's private key. (See Section 4.2.) I wonder what this means? Hmm...
25.
▲
by
pcpuser
2y ago
Please read this section carefully: https://datatracker.ietf.org/doc/html/rfc2986#section-3 The CSR contains the digital signature of the public key that is requesting the certificate. So you absolutely need the p
26.
▲
by
pcpuser
2y ago
Again, completely off the mark here. To create any CSR, bifrost or not, you need the private key that the CSR represents. > Creating a CSR creats my private key for the CSR... Not really sure what's going on here tbh.
27.
▲
by
pcpuser
2y ago
The UUID is "sent" to the server in the signed certificate. Not in the clear or over an app protocol like HTTP. There's no way to fake this UUID.
28.
▲
by
pcpuser
2y ago
The HTTP header comparison at the end is so close but so far. The auth in the server is basically your tsv file. You can't fake the UUID in mTLS because you need the actual private key to be present with the client when it makes a conn
29.
▲
by
pcpuser
2y ago
Which server is running plain HTTP? What credentials are transmitted over plaintext? I'd suggest reading up a bit more about X.509 CSRs and Certificates before assuming that private credentials are being transmitted in the clear. I app
30.
▲
by
pcpuser
2y ago
Yeah that part about deploying could use a lot more context. The idea is that any client can go and get itself a certificate and talk to your application server. All clients start off "un-verified" or "deactivated", unti
More ›