aborsy

32 ms·

511.
by aborsy 3y ago
Enabled by customers who don’t pay or donate.
512.
by aborsy 3y ago
The reverse proxies sometimes support TLS pass through (see Traefik). If the reverse proxy puts an authentication page in front, sure, the TLS pass through may not work. But it could work if all you need from Cloudflare is its firewalls, re
513.
by aborsy 3y ago
Considering that you suggest managed services, what’s a good version of the cloudflare tunnels and access, with the same features except that it does not terminate the TLS?
514.
by aborsy 3y ago
The biggest problems are bad immigration policies, housing crisis, bad job market. It was a decent place 20 years ago. It has declined since significantly.
515.
by aborsy 3y ago
Imagine if they had not reimbursed it!
516.
by aborsy 3y ago
Another way to say it, NASA doesn’t pay, and it’s not attractive, so it can’t keep and hire people, so is unhappy
517.
by aborsy 3y ago
AWS has been blocked for a while. VPN providers are usually, but not always, blocked. Oddly, Firefox sometimes evades the blockage, unlike chrome. Not sure why.
518.
by aborsy 3y ago
It seems to me a scam. Part of it is government abuse of the cheap young talent, and part of it is the individual: the more you stay in academia, the less skills you develop for real world, and the more you are drawn into academia
519.
by aborsy 3y ago
Ubuntu Server is superb! You can install it with one click in AWS Lightsail, configured securely with or without apps, with a public IP.
520.
by aborsy 3y ago
I put together a DIY solution, but I like my synology better.
521.
by aborsy 3y ago
Japan can be rigid, expensive with no work life balance. Not your question, but I wouldn’t move.
522.
by aborsy 3y ago
But they are at higher risk of high blood pressure and other issues. So, I’m not sure this kind of reporting is meaningful.
523.
by aborsy 3y ago
> ChromeOS is the most secure OS, out of the box, making Zero Trust security accessible The most private and secure OS out of box might be Qubes-OS (although it calls itself a reasonably secure OS). You can use disposable VMs, where the
524.
by aborsy 3y ago
I have seen OpenZiti mentioned, and should probably try that and zrok. I think self hosting internet facing servers is not a good idea for most people. That component should be outsourced to specialists, in a product that includes a range o
525.
by aborsy 3y ago
Yes, sorry, I was sloppy in my comment. I meant, say in the case of Cloudflare or Tailscale, I don’t need to open any ports, or operate any server. The server, its firewall and security are outsourced to those companies. They take care of c
526.
by aborsy 3y ago
I still haven’t found an ideal solution, despite a variety of options. Cloudflare tunnels are good, but Cloudflare terminates TLS certificates, and scans the traffic. People host on premise for privacy, which is moot if using Cloudflare. FR
527.
by aborsy 3y ago
Many alternatives: SSH reverse tunnels, Cloudflare tunnels, various reverse proxies like FRP, Tailscale funnel (probably for short lived light connections), ngrok, etc
528.
by aborsy 3y ago
I would get a synology NAS. For offsite, I would use restic to S3 or backblaze.
529.
by aborsy 3y ago
I’m curious why Age is more recommended in HN (despite having 128 bits security in symmetric encryption) compared to Kryptor. Are there advantages in using Age? I see Age has plugins such as a nice one for Yubikey, but I’m not sure that it’
530.
by aborsy 3y ago
Google workspace!
531.
by aborsy 3y ago
By mixing it up with classical encryption algorithms. The implementations don’t use pure post quantum cryptography, see SSH.
532.
by aborsy 3y ago
It’s fine, as long as the suffering part is limited
533.
by aborsy 3y ago
The article is a bit confusing. VPN encrypts traffic between IoT and user’s devices. It doesn’t encrypt traffic between IoT devices and internet. Also, the traffic is usually encrypted with TLS. What the article had to say, IoT devices are
534.
by aborsy 3y ago
Is there a reason for choosing PyTorch over tensorflow?
535.
by aborsy 3y ago
Stanford and MIT are offers that you shouldn’t turn down. You can work on an industrial project, as if you are in a company, and make friends with great people!
536.
by aborsy 3y ago
Although some of the success of the old bell labs was because it was a monopoly, so it could afford long term investment. It’s a different environment now.
537.
by aborsy 3y ago
The term Bell Labs is used today mostly for advertisement. It hasn’t long produced much. It became Alcatel Lucent and now Nokia, not known as a particularly innovative company.
538.
by aborsy 3y ago
It’s definitely meant to be a single user operating system. It does have a VM back up system, and you can back up your home data with the usual third party tools.
539.
by aborsy 3y ago
I sometimes use Qubes and I find it very useful for securing individual workstations. You can run applications such as a browser in disposable VMs. A vulnerability in the application doesn’t compromise most of the system. Different componen
540.
by aborsy 3y ago
Exactly! There are a lot of posts on mesh VPNs on HN. They are useful for startups to control access using ACLs in a granular manner (centralized cloud based firewalls, device context, logging etc). I don’t see the utility in small setups w

More ›