DrPhish

22 ms·

1. 211.▲
   Ask HN: Gifts for Maker kids

   2 points by DrPhish 9y ago|3 comments
2. 212.▲
   by DrPhish 9y ago

   Guacamole also supports SSH/telnet, and is very snappy thru html5. I autogenerate a guac config file for all the switches on each site at work, and even on high-latency low-bandwith sites on wireless it still works great. Definitely be
3. 213.▲
   by DrPhish 9y ago

   I used to maintain an ipsec VPN for road warrior type scenarios, but I've found that mostly I just wanted to get a remote desktop on a computer within the network. So I've stopped mucking around with VPN and just published Apache
4. 214.▲
   by DrPhish 9y ago

   I've been using https://www.feednotifier.com/ for a while now. I publish my Caller ID info from my landline to an RSS feed, and Feed Notifier was one of the only ones that would allow me to get updates almost realtime.
5. 215.▲
   by DrPhish 9y ago

   Can you provide a name or a link? I just set up DNSSEC on my personal domains yesterday (got the DS records published), and would like to know what kind of pain I am potentially in for. Personal experience and insight would also be apprecia
6. 216.▲
   by DrPhish 9y ago

   To pick a nit, if there is one type that can be legitimately called "extreme" encryption it would be one-time-pads that were generated from truly random sources and distributed out of band. With other types of encryption the math
7. 217.▲
   by DrPhish 9y ago

   That actually doesn't look too bad. I do wish they'd just adopted the PF syntax tho. It really is the gold standard for stateful firewall definition Was anyone involved in the discussions around the creation of nftables that can c
8. 218.▲
   by DrPhish 9y ago

   Previous Discussion : https://news.ycombinator.com/item?id=15414987
9. 219.▲
   by DrPhish 9y ago

   There is a fascinating writeup on some problems that were caused by autoconf config file mistakes that didn't manifest themselves in gcc but showed up in the switch to clang: https://undeadly.org/cgi?action=article;sid=
10. 220.▲
    by DrPhish 9y ago

    I've been using it as my only firewall OS of choice since the 2.5 release in '99. I have almost always used it as a firewall or networking appliance, and only rarely used it as a desktop OS, and never on my main machine. It has ev
11. 221.▲
    by DrPhish 9y ago

    Printing is enabled by they system generating PDFs that the browser automatically downloads. It actually works pretty slick. File drag-and-drop can be set up via a couple of different mechanisms, and isn't easy to get going, but works
12. 222.▲
    by DrPhish 9y ago

    I take a slightly different approach: I netboot diskless clients with OpenELEC[0] and share my media library via a read only NFS share. It works great, since its hard to find any device (thin or not) that doesn't have enough horsepower
13. 223.▲
    by DrPhish 9y ago

    It actually turns out that you can't. [0] You are able to turn it down to "Basic" using the GUI, and if you are using the enterprise edition thru corporate volume licensing you can turn it down further to "Security"
14. 224.▲
    by DrPhish 9y ago

    IoT (and especially IIoT) devices are special beasts that really don't fit well into the existing network security models. For ones that need cloud access, they really shouldn't be accessible from the rest of the network, let alon
15. 225.▲
    by DrPhish 9y ago

    Previous discussion on lobste.rs: https://lobste.rs/s/qeqqge/moving_https
16. 226.▲
    Do we really want an internet where the use of encryption requires authorization(tedunangst.com)

    1 points by DrPhish 9y ago|1 comments
17. 227.▲
    by DrPhish 9y ago

    I have a long history of having my family use Linux. I'm a Debian guy myself, so I've always either used Ubuntu or basic Debian. I run dwm on any machines that I put X on (very few, honestly). I started my Dad on Ubuntu around 200
18. 228.▲
    by DrPhish 9y ago

    Looking at Netdisco I have 12 VLANs. ISP1, ISP2 (from Dad's house across the valley), OSPF backbone, DMZ, LAN, Guest, Cameras, Servers, Japan, Kids, Management and Test. Everything passes thru PF and only exposes services as required.
19. 229.▲
    by DrPhish 9y ago

    It was cheap to set up, all the cost is in time to learn to implement in a secure and performant fashion Hardware actually cost money. Here's a breakdown: > 4 pcengines alix boxes for openbsd router/firewall appliances These we
20. 230.▲
    by DrPhish 9y ago

    Haha, your're right about that! Even in BC with $0.10/KWh it still adds up, but I write it down to education, privacy and entertainment : D
21. 231.▲
    by DrPhish 9y ago

    I self host everything I can at home, so this list might be a bit too exhaustive, but there wasn't any scope on this ask HN, so... Overall hardware platform: 4 pcengines alix boxes for openbsd router/firewall appliances 3 supermic
22. 232.▲
    by DrPhish 9y ago

    Back between 2000-2002 I decided to acquire all the machines I had drooled over in the 90's, so I purchased Alphaservers, Ultrasparcs, RS/6000s, PA-RISCs, SGIs, and others. I was getting non-trivial configurations, usually quad CP
23. 233.▲
    by DrPhish 9y ago

    Not only is it useless, it can be actively harmful. My wife had her account "suspended" for reporting too many fraudulent cases when she went on a buying spree from Chinese sellers. Normally you lose about a 3rd of the things you
24. 234.▲
    by DrPhish 9y ago

    Hello! This looks like a very slick project, but before going down this particular rabbit hole, I'm wondering if you can tell me if I'm set up for success or frustration: I'm running a Debian based hand-rolled 3 node kvm clus
25. 235.▲
    by DrPhish 9y ago

    The best "app" I've found is a DS game designed for Japanese speakers : https://www.nowpro.co.jp/menu/products/game/kanzen/ Everything is in context, it has a practice portion for things y
26. 236.▲
    by DrPhish 9y ago

    Well, for me it helped me land a gig working for NHK as local staff during one of the Olympic games. I was able to access all venues, make invaluable contacts, interview famous athletes and celebrities, be beyond the front row for events an
27. 237.▲
    by DrPhish 9y ago

    I'm going to make this the "Other awesome snake implementations" sub-conversation Here is a snake in 4k (sn4ke) mapped onto a sphere instead of a 2d playsurface, which is one of my favourites. http://www.pouet.net&
28. 238.▲
    by DrPhish 9y ago

    Proviso : I do Judo, rockclimb and mountain bike, so I have both a large volume of daily work built in to my lifestyle, and a vested interest in maintaining a specific weight (80kg@186cm w/approx 10% BF). I am not elite in any of these
29. 239.▲
    by DrPhish 9y ago

    Here's a nice nostalgia hit to throw on in the background while you're coding: https://archive.org/details/futurecrew-metropolis
30. 240.▲
    by DrPhish 9y ago

    Unfortunately that's a legal minefield. Mantraps have various legal standing around the world, but you are likely to be successfully sued if they result in injury. Seems likely in the case of a panicky criminal who finds themselves sud