TimWolla

12 ms·

121.
by TimWolla 6y ago
Probably better source, the blog post at Cloudflare: https://blog.cloudflare.com/oblivious-dns/ See also: https://news.ycombinator.com/item?id=25344220
122.
by TimWolla 6y ago
> So I cannot access the box anymore at all? My understanding is that you can access it directly. But you can't embed e.g. images or JavaScript from that server within a website running on a public IP address. I consider that a good
123.
by TimWolla 6y ago
You need to store some kind of state if you want to protect the form from CSRF attacks. You usually want to protect the form.
124.
HAProxy 2.3(haproxy.com)
3 points by TimWolla 6y ago|0 comments
125.
by TimWolla 6y ago
> The original author moved to gitlab and started GPG signing commits with his real GPG key. Signed commits from them go back at least 1 year. So its not "started", but rather "continued" signing.
126.
by TimWolla 6y ago
PHP follows a consistent philosophy as well. The PHP functions are usually named after the C functions they wrap. And in fact: The MySQL C client library contains a function called mysql_real_escape_string. see: https://dev.mysql
127.
by TimWolla 6y ago
> I'm curious if that copied the text or the placeholders. It copied the text.
128.
by TimWolla 6y ago
A hidden service uses 6 middle nodes, 3 for the server, 3 for the client.
129.
by TimWolla 6y ago
Monthly typically (and when important security updates are released): https://github.com/docker-library/official-images/pulls?q=is...
130.
by TimWolla 6y ago
According to https://en.wikipedia.org/wiki/Modulo_operation#In_programmin... : - JavaScript is consistent with Java, PHP. - Older C may behave as either Python or JavaScript. - Modern C behaves like JavaScript. So basic
131.
by TimWolla 6y ago
Is it planned to move issue tracking to Salsa? I enjoy filing bugs via email, because that does not require me to create an account and I need email notifications to become aware of updates anyway.
132.
Debian 10.6(debian.org)
143 points by TimWolla 6y ago|52 comments
133.
by TimWolla 6y ago
Yes, you are correct. The script ends no later than 2:30 and then there's a delay of up to 1 hour.
134.
by TimWolla 6y ago
This works, but compared to using systemd it has the drawback that the range of possible times is anchored to the configured time in cron. The systemd timer example I gave causes the next cycle to start when the previous job finished. So if
135.
by TimWolla 6y ago
It possibly makes the process unnecessarily slow. People tend to choose “round” numbers for their cronjobs. Probably most commonly minute 0 of a given hour for an hourly or daily job. Thus on e.g. 0:00 UTC there might be hundreds of clients
136.
by TimWolla 6y ago
I never used rclone, but I can tell you that a borg repository basically is a number of encrypted blobs of up to 500 MB size that are never going to be modified again (only created and deleted) + a few small metadata files. It rsync s quit
137.
by TimWolla 6y ago
> Why is that the case [...]? This is explained in the "Encryption" section: https://borgbackup.readthedocs.io/en/stable/internals/securi... The important part is the part about avoiding re-use o
138.
by TimWolla 6y ago
The author uses a systemd timer to schedule their backups. For backups going to a remote host I prefer adding a little bit of variance to the execution time to avoid consistently hitting some hotspot. From the timer I use to backup my serve
139.
by TimWolla 6y ago
I previously used Tarsnap, but I moved to using Borg on rsync.net. Borg can do all the stuff Tarsnap can do and comes with 'borg prune' included. In fact for Tarsnap I would have needed to write a custom script to perform regular
140.
by TimWolla 6y ago
> and it’s a small but growing segment They could have grandfathered the existing accounts into the 2000 minutes. Then the segment would no longer be growing and stay small, no?
141.
by TimWolla 6y ago
The SMTPUTF8 RFC to support non-ASCII local parts is from February 2012 and thus fairly new [1]. Postfix supports it since July 2014 [2] and to the best of my knowledge Dovecot still does not yet support SMTPUTF8 for LMTP. Personally I did
142.
Updated Debian 10: 10.5 released(debian.org)
2 points by TimWolla 6y ago|0 comments
143.
by TimWolla 6y ago
They are not based on X.509. I recommend taking a look at the CERTIFICATES section of the ssh-keygen man page, because I am unable to find a good reference on the web right now.
144.
by TimWolla 6y ago
I gave my reasoning back on the HAProxy 2.0 announcement: https://news.ycombinator.com/item?id=20198232
145.
by TimWolla 6y ago
Oh hi! That was me [1]. I'm a community contributor, but I'm equally impressed by the speed patches get merged on the mailing list. [1] https://github.com/haproxy/haproxy/issues/123#issuecomment-5...
146.
by TimWolla 6y ago
And the best thing is Cyril Bonté’s configuration.txt to HTML converter: http://cbonte.github.io/haproxy-dconv/
147.
by TimWolla 6y ago
In fact AppArmor was only "recently" enabled by default in Debian starting with Debian Buster: https://www.debian.org/releases/stable/amd64/release-notes/c...
148.
by TimWolla 6y ago
> huh how well does that work with individual downloaded *.deb packages? You can `apt` to install `.deb` files on the local file system using: apt install ./path_to_the.deb
149.
by TimWolla 7y ago
Duplicate of this: https://news.ycombinator.com/item?id=22366280
150.
by TimWolla 7y ago
They appear to have change something in the past few minutes. When I first opened this HN thread it showed me Google's homepage. Now I'm also seeing that redirect.

More ›