apenwarr

11 ms·

61.
by apenwarr 7y ago
Do you have wireguard installed on the same machine, by any chance? We currently have a conflicting version of wintun that might create problems.
62.
by apenwarr 7y ago
(I'm from Tailscale) A few people have reported a failure for the Windows service to start, usually related to registry lockdowns. You can try running "start /w tailscale-ipn.exe /server" in a "admin mode comma
63.
by apenwarr 7y ago
Sorry you didn't like the article :) We posted another one this past weekend called "How Tailscale works" that this crowd seems to enjoy more, at least based on upvotes: https://news.ycombinator.com/item?id=22
64.
by apenwarr 7y ago
(Article author here.) Yes, this is what DERP is for. Nowadays automatically designating nodes as supernodes doesn’t work as well as it used to, since many devices are battery constrained and cloud devices tend to have metered bandwidth. We
65.
by apenwarr 7y ago
I’m also a tailscale founder so perhaps I’m biased :) but I think you are both kinda right. I see zero trust and microsegmentation as two different axes. Zero trust proxies are a way to establish and authenticate an encrypted stream; micros
66.
by apenwarr 7y ago
As far as I know, the person who took over maintaining sshuttle does a pretty good job - it still works well today on more platforms than ever. However, I've been thinking that the sshuttle model doesn't completely keep up with th
67.
by apenwarr 7y ago
A few people have been asking about Raspberry Pi support. We don't exactly "support" it yet but we can send an armv7 binary for you to play with if you ask after signing up. I'm told it works for, say, streaming a home w
68.
by apenwarr 7y ago
We're getting an influx of new waitlist subscriptions right now (most likely due to this post trending on HN). I have a feeling mailchimp has noticed something's up and thinks it's a DoS attack. Oops.
69.
by apenwarr 7y ago
Yes, it uses point-to-point connections and there's no VPN server to install. We're still figuring our pricing, but for now you can try it out for free if you put your name on the waiting list. -- a person who did not expect our s
70.
by apenwarr 7y ago
More precisely, git-subtree can extract subdirectories into their own repo, and merge repos into subdirectories. What someone might want to try is extracting a subdirectory using git-subtree, and then importing it elsewhere using git-subtra
71.
by apenwarr 7y ago
[author here] Hey sorry, git-subtrac is new and I didn't know what to put in the docs. To quickly answer your questions: 1. You should run it every time you make a change in a submodule. 2. You commit inside the subrepo, then run &#x27
72.
by apenwarr 7y ago
That's a very old article you're reading, so it's a bit out of date. Here are some more recent redo docs, including how to use it to build containers: https://redo.readthedocs.io/en/latest/cookbook&#
73.
by apenwarr 7y ago
I’ve noticed a pattern where crypto people don’t seem to understand the edge cases of tcp congestion control, so I agree that this workaround is suspicious. Of course, it’s better than no VPN if your UDP is blocked. I like sshuttle’s way be
74.
by apenwarr 8y ago
He definitely doesn't have podcasts (though there are a few recorded talks). His blog posts seem popular though. :)
75.
by apenwarr 8y ago
To my knowledge the network and the bank take roughly a 50/50 split of the transaction fee. Visa and Mastercard are the ones with market control, so you wouldn't expect them to get only a tiny slice.
76.
by apenwarr 8y ago
Some of the openwrt people believe they can write an open source replacement firmware for the ath10k-based devices. Someone should fund them. Writing new firmware would be a lot easier than designing a new chipset.
77.
by apenwarr 8y ago
Chips are better than magstripes. PINs versus signatures is orthogonal. From the original article: "Even ancient magstripe credit cards share most of these advantages. Their main weakness is that a physical attacker can clone rather
78.
by apenwarr 8y ago
The standard allows for both options (and that switchability has led to security holes in the past[1]). Nowadays I think most of them validate the PIN on the server side rather than on the chip, which is better in some ways. [1] https:&#x
79.
by apenwarr 8y ago
You're welcome :) The zsync docs clearly talk about "gzip --rsync", which I guess must have been an earlier version of "gzip --rsyncable".
80.
by apenwarr 8y ago
I'm the author of the article in question. I didn't know about zsync! Thanks, I'll link to it from the footnote. Flipping quickly through the zsync docs, it looks very well done. I'm not sure if the way they adapted rs
81.
by apenwarr 8y ago
As far as I know, it does this by having a base file and a bunch of delta files alongside it on the server. Applying these deltas is time consuming, you have to choose how many levels of delta to keep around, and you end up downloading a l
82.
by apenwarr 8y ago
> Escape is though - and has proven to be quite > an important control character too Making the ASCII escape character the same as the keyboard escape key is one of the most annoying things in the history of terminals. It m
83.
by apenwarr 8y ago
Perhaps unsurprisingly, djb seems to have pioneered this with his Makefiles, which generally produce, then depend on and run, a 'compile' script that contains the flags.
84.
by apenwarr 8y ago
This reminds me, I should study ninja's binary format and maybe borrow it :) The sqlite3 database used in redo was just something I threw together in the first few minutes. sqlite was always massive overkill for the problem space, but
85.
by apenwarr 8y ago
doubles have ~15 decimal digits of granularity. $ python Python 2.7.13 (default, Sep 26 2018, 18:42:22) [GCC 6.3.0 20170516] on linux2 >>> 4e9 + 0.000001 4000000000.000001 In any case, I did my testing for
86.
by apenwarr 8y ago
Most systems will jump the clock once at startup. This is sometimes implemented as a jump during the ntp startup script, which may also be run by the admin at any time. The whole article is about edge cases. It doesn’t really matter if they
87.
by apenwarr 8y ago
In any case, my system was installed from scratch quite recently using native ext4. As others have pointed out and as I linked in the article, it’s likely a kernel issue. I assume many people have the same thing.
88.
by apenwarr 8y ago
Wow, those are quite fascinating use cases I hadn't considered. I'm actually curious about things like ansible; what exactly does it do that you couldn't just do with a bunch of redo scripts? Or alternatively, what if you i
89.
by apenwarr 8y ago
That is a good article, but it doesn’t seem to address several of the concerns raised in my redo article. In particular, it looks like the final output is still in a nondeterministic order, it doesn’t print output from a given target increm
90.
by apenwarr 8y ago
I enjoy the idea that we can feel safe from attackers because we caught an attacker once, that time back in 2003.

More ›