akerl_

46 ms·

691.
by akerl_ 1y ago
How does this square with the fact that the tech savvy person in the post was phished despite using a password manager.
692.
by akerl_ 1y ago
What’s the solution for preventing this kind of phishing attack?
693.
by akerl_ 1y ago
Maybe stop digging here and just let it be fun for the author?
694.
by akerl_ 1y ago
Ungoogled Chromium is still free software even if every second website rejects it. Free software does not have a de facto right to interoperate, and does not become less free or structurally impossible because other entities don't inte
695.
by akerl_ 1y ago
It feels like this comment was almost a purely additive anecdote of your own experience with a similar kind of issue, but you've spoiled it by deciding to tell the author that they're incorrect about how they felt during the proce
696.
by akerl_ 1y ago
I think we’re just speaking different languages here. Free software does not mandate service operators to interoperate between their own infrastructure and custom or modified software you possess. You are not somehow guaranteed access to so
697.
by akerl_ 1y ago
Passkeys can’t be accidentally hand-copied into a phishing page.
698.
by akerl_ 1y ago
Service operators being required to allow users to use whatever software the user wants to interact with the operator’s system is not in fact a principle of Free Software. You’re welcome to want service operators to do that, but not doing i
699.
by akerl_ 1y ago
This is why knowing what technical terms mean matters. What they’re saying is: the FIDO spec allows website operators to specify which passkey implementations they trust for authentication to their site. If your passkey implementation does
700.
by akerl_ 1y ago
That's because for the average user of most popular websites, user account takeover via weak passwords and phishing are massive risks. These sites are funneling their users hard towards passkeys because they're a huge step forward
701.
by akerl_ 1y ago
This whole post just reads like somebody trying to axiomatically derive what passkeys are and how they work by hopping between fragments of blog posts, github issues, and other random docs. Sentences like this really drive that home: > I
702.
by akerl_ 1y ago
To put my cards on the table: RubyGems.org seems plenty trustworthy to me. They seem to be shitty at communication, but locking down production access to systems in light of the state of supply chain attacks in 2025 is the kind of thing tha
703.
by akerl_ 1y ago
Is it? Anybody could publish to Rubygems. Baring obviously malicious packages that happened to get noticed by a researcher, what trust were folks placing in Rubygems?
704.
by akerl_ 1y ago
Target date funds are no different than any other fund. The fund holds a given allocation; shareholders of the fund hold shares of the fund overall. There's no concept of individual fund participants having different allocations.
705.
by akerl_ 1y ago
https://news.ycombinator.com/item?id=45475552
706.
by akerl_ 1y ago
I don’t think you’re quite grokking the problem space here. The goal is “I want my phone to always connect to a given hostname. When I’m on my home WiFi, that connection should be direct. When I’m not, that connection needs to bounce throug
707.
by akerl_ 1y ago
Not really? That would rely on my local devices sharing a subnet with my phone/laptop, and would also blow up in fun ways if I ever got on a hotel wifi that used similar subnets to my home network.
708.
by akerl_ 1y ago
I use https://github.com/go-acme/lego and DNS validation. I'm not sure what DNS provider you're using, but a ton of them have robust APIs. In my case, I'm using Route53 which is notable in that I can gen
709.
by akerl_ 1y ago
As a random aside: in a past life, I was helping somebody with a project where we needed a VPN connecting two locations. We were working with OpenVPN, and the nodes we had to handle the connection were beefy with large uplinks but we were h
710.
by akerl_ 1y ago
I run a similar setup. I didn't end up going for a full router-side hub inside the LAN, to avoid extra hops for things when they're inside the network. Some of my notes: * I have multiple servers outside the LAN that have WG conne
711.
by akerl_ 1y ago
As somebody with a very similar setup, all the things I'm making accessible over the Wireguard network are HTTPS, SSH, etc. The handful of things that couldn't do native TLS (or were irritating to get configured with automated TLS
712.
by akerl_ 1y ago
Are OpenVPN and Wireguard really comparable? Wireguard is creating a series of point-to-point links with crypto that's basically impossible to mess up. OpenVPN sets up a hub and spokes and has far more baggage carried around with it.
713.
by akerl_ 1y ago
This comment has peak "old man yells at cloud" energy.
714.
by akerl_ 1y ago
I hate to ruin the magic for you, but HN has been part of marketing plans long before AI.
715.
by akerl_ 1y ago
Does the UK actually have a mandated deadline for any kind of infosec disclosure?
716.
by akerl_ 1y ago
A video game and a social network are pretty massively different things.
717.
by akerl_ 1y ago
Sure, but if you’re on a downward trend for growth and don’t have viable paths to change that, runway is just stopping distance.
718.
by akerl_ 1y ago
I was publishing public containers on Docker Hub, and I'm publishing public containers on GHCR.
719.
by akerl_ 1y ago
Basically all my Docker images were being built from Github repos anyways, so I just switched to Github's container registry.
720.
by akerl_ 1y ago
Isn’t this just a Jitterbug?

More ›