aborsy

15 ms·

241.
by aborsy 2y ago
This falls under the case “unless the bash script is simple “. If you consider more complex tasks, bash quickly gets unwieldy, and the situation is reversed. Pythons has a lot of advantages, including full flexibility, error handling etc.
242.
by aborsy 2y ago
Isn’t it better to replace bash scripting with Python or similar, unless the script is simple?
243.
by aborsy 2y ago
There is no American brain drain, unlike claimed in leftist media. It’s the opposite.
244.
by aborsy 2y ago
Yeah. Public transport works in major metropolitan cities. It doesn’t work outside that.
245.
by aborsy 2y ago
Nonsense. First, the money is pretaken from your salary under several categories (taxes, social changes, public transportation tax, and occasional taxes for specific lines). Then, a metro monthly pass is around $100 in Paris and $130 in NYC
246.
by aborsy 2y ago
Because you can’t have America and France at the same time! You can’t have 300k salaries (you gotta cut it by 90% for taxes), small government, small regulations, limits on other public services that follow suit, low energy prices … You can
247.
by aborsy 2y ago
Tailscale deserves it. They have produced excellent software.
248.
by aborsy 2y ago
This is not correct. Wireguard establishes a tunnel between peer A and B, and its simplicity stops there. Tailscale does tons of complex networking, filtering, nat traversal, DNS, file sharing, etc. Wireguard is a small part of the codebase
249.
by aborsy 2y ago
It feels like getting a job gets harder and harder over time. Wouldn’t starting a startup or business be actually easier in this environment?
250.
by aborsy 2y ago
If MIT graduates don’t get jobs, who else is getting them?
251.
by aborsy 2y ago
The certificate contains email address as ID, and email is verified automatically or by an initial email verification (TOFU trust model). If Google, Microsoft and Apple offer E2EE similar to Proton, the majority of email will be encrypted,
252.
by aborsy 2y ago
It’s a disaster because email providers don’t want to offer E2EE or make it easy. Is it that hard to generate a certificate for each email address client side and store that, and the private key encrypted with the user’s password, on the pr
253.
by aborsy 2y ago
How much is the risk of my devices being compromised if Tailscale coordination server is compromised, and tailnet lock is enabled?
254.
by aborsy 2y ago
The concern is zero days. There are probably lots of easy zero days, patched across a host of software, once discovered in one. The solution is a secure software in front. It could be Wireguard, but sometimes you don’t know your users or th
255.
by aborsy 2y ago
I can self host many applications, but their security must be outsourced to a company. I don’t have time to keep on top of vulnerabilities. Cloudflare Tunnels is a step in the right direction, but it’s not end to end encrypted. The question
256.
by aborsy 2y ago
ZFS works on Ubuntu top to the bottom too. It’s installed with a command.
257.
by aborsy 2y ago
In that case , there are a dozen or other products, and you will switch to one of them. Could be done quickly. The issue, what happens if Tailscale is compromised?
258.
by aborsy 2y ago
I already provided an example with UK, which is terrible. UK is racing ahead of other countries requiring backdoors. France has had similar proposals floating in their parliament. The latest iteration has been rejected https://ww
259.
by aborsy 2y ago
The only reason you may use these EU version of services is that you are in Europe. Otherwise EU is worse in terms of privacy. UK (while not officially in Europe) goes even beyond, requiring backdooor to iCloud and non-eu providers.
260.
by aborsy 2y ago
I’m not sure if I follow. It’s been 3 years and Ukraine, with the support of US and EU, has lost significant territory. If US withdraws, EU/Ukraine will clearly be in a very bad situation. EU currently doesn’t have proper air defense,
261.
by aborsy 2y ago
This is such a shallow comment. EU is in fact defenseless (at least til the next 5 years), and terrified of US leaving the Europe. It can’t hold back Russia, a country far smaller than EU in population and GDP. Canada could have trade agr
262.
by aborsy 2y ago
Loosing everything if you don’t have a key is part of the appeal.
263.
by aborsy 2y ago
1password is a good choice.
264.
by aborsy 2y ago
This is for ssh. You mean you automate ssh port forwarding to access https and other services?
265.
by aborsy 2y ago
If the Wireguard server is run on VPS, the encryption is not end to end from the client in public internet to your home. It’s encrypted from client to VPS, then from VPS to home. The VPS sees the traffic inside of tunnel. That’s the first p
266.
by aborsy 2y ago
This is false information. Even if an attacker such as the government runs the coordination and relay servers, and the IdP, they will not be able to decrypt any traffic in tailnet. The secret keys remain on device, and traffic is end to end
267.
by aborsy 2y ago
First of all, a node added to tailnet doesn’t not have the ability to decrypt the traffic in tailnet. All it can do to contact other nodes, decrypt traffic users sent to that hidden node, or modify settings in admin console. Furthermore, wi
268.
by aborsy 2y ago
Cloudflare Access is a reverse proxy: you encrypt to Cloudflare, Cloudflare decrypts and scans the traffic, Cloudflare re encrypts to the origin server. So, traffic is not end to end encrypted (Cloudflare man in the middles the traffic). Th
269.
by aborsy 2y ago
Tailscale is not just a wrapper around Wireguard, as some people imply in the comments. The codebase is far bigger, and it does far more. They are different products. What Tailscale does is difficult to do with Wireguard: Easy VPN, SSO with
270.
by aborsy 2y ago
How is this a good solution, when traffic is decrypted in the cloud, all traffic goes through one node, there is no ACL, key distribution, static IP, …? Tailscale addressed those issues.

More ›