ayushnix

8 ms·

31.
Eliminating Layout Shift Using scrollbar-gutter(microblog.ayushnix.com)
1 points by ayushnix 4y ago|0 comments
32.
by ayushnix 4y ago
I was considering subscribing to Kagi but $10/month is almost as expensive as my fiber broadband connection and I don't think I can justify this expense. I would likely subscribe if it was $5/month.
33.
by ayushnix 4y ago
You'll find devs who would be okay with a 720p screen just because "muh battery life". Sure, I mean, go ahead with that but at least provide an option for others who need a highdpi 2x integer scaled display. I refuse to use a
34.
by ayushnix 4y ago
I stopped using Code-OSS and Vscodium after this bug. For the longest time, the "solutions" suggested in that issue tracker were disabling CORS validation. https://github.com/eclipse/openvsx/issues/3
35.
by ayushnix 4y ago
So in both cases, it's just poor web design. This is disappointing. I could maybe forgive the use icon fonts (Google websites end up breaking the most, android's documentation website for example) but it's unforgivable to wri
36.
by ayushnix 4y ago
> ① Use Firefox. Other browsers may have something similar; dunno; but Firefox is good anyway. ② Settings (about:preferences) → Fonts → Advanced → untick “Allow pages to choose their own fonts, instead of your selections above”. I'v
37.
by ayushnix 4y ago
> The issue with colors is that there's a slight variation for everyone. No one sees all colors exactly the same. The best thing to do is make this configurable for people who have serious issues with certain colors. Of course, good
38.
The Problem with Dark Mode(microblog.ayushnix.com)
2 points by ayushnix 4y ago|2 comments
39.
Kangae – a microblog theme for zola static site generator(github.com)
1 points by ayushnix 4y ago|0 comments
40.
Pass-coffin: password store extension to hide data(github.com)
2 points by ayushnix 4y ago|1 comments
41.
by ayushnix 4y ago
> 2- Isn't it better to use a login manager that is 1- graphical and 2- uses the same GUI tech as your DE You're assuming everyone using Linux uses a DE.
42.
by ayushnix 4y ago
> A gentle reminder that every retina MacBook has been shipping with fractional scaling as default for years now (and it's not even 1.5). You're saying MacOS deliberately uses fractional scaling by default on the 14 inch and
43.
by ayushnix 4y ago
It's safe to say that never again will I buy a laptop with a display which can't scale properly to integers (2 or higher). If it's a 15 inch laptop, 4K is the absolute minimum resolution I'm going for. Even after using a
44.
by ayushnix 4y ago
> Why exactly? I honestly do not understand HN fascination with Firefox. Well, for starters, uBlock Origin works as intended on Firefox as opposed to Chromium and this will become more apparent with manifest v3. I don't know about o
45.
by ayushnix 4y ago
I installed helix a few days ago and I realised that I've been using my neovim setup with much higher input latency than I'd like. I'm not sure which plugin is responsible for the increased typing latency or if there's a
46.
by ayushnix 5y ago
Not really, I haven't used Windows in a long time so I won't comment on it but on Linux, it's your choice. I've chosen to use a Raspberry Pi for my DNS but it's certainly not necessary. Before I had the RPi, I was u
47.
by ayushnix 5y ago
If it helps, I've installed AdGuard Home on a Raspberry Pi 4 and I've configured my router to make my devices use the RPi for DNS queries. This would ensure devices with DNS management services (Android) use the DNS I want. For de
48.
by ayushnix 5y ago
> You've never had something like NetworkManager undo your edits to /etc/resolv.conf within microseconds? I've never really used NetworkManager on my personal setup but if you're using it, you are willingly giv
49.
by ayushnix 5y ago
> Debian based systems will change some config files on updates; I had a systemd customization that was overwritten out from under me, and I evntually found there was one place for apt to manage and a different for me to manage. The only
50.
by ayushnix 5y ago
> Downloading and executing an MSI does not seem to be a meaningfully different operation than writing the apt-get command If nothing else, unlike downloading and executing a MSI, apt will download the package, verify its checksum, and v
51.
by ayushnix 5y ago
> in a /etc/config file that is silently changed by services? I'm not really invested in the Windows vs Linux thing but config files in /etc never get silently changed or removed. If they are, it's a critical bug
52.
by ayushnix 5y ago
Oh, I didn't realize you were talking about not using your SSH keypair as the SSH CA keypair. Well, that's kinda expected. The SSH CA keypair is the single point of failure in this case, which sounds worse than it is but it's
53.
by ayushnix 5y ago
> One of the first things the article mentions is rekeying. Since the step utility does in fact regenerate keys when obtaining certificates, it actually does have a lifespan. I went through the article again. Essentially, rekeying makes
54.
by ayushnix 5y ago
> This is also true for X.509, there is exactly zero reason to generate new key (if it was not compromised) or even new CSR for certificate renewal. It might make sense to regenerate the private key on each certificate renewal if the pri
55.
by ayushnix 5y ago
> The certificate would just be another layer of indirection. I fail to see how that would be a meaningful change. That certificate would only be issued after you've gone through SSO or some other certificate management process and
56.
by ayushnix 5y ago
> If you are constantly regenerating uncompromised SSH keys, you are probably doing something wrong. Yup, there's no real reason to generate a new SSH key pair each and every time you want to get a short lived certificate. The SSO o
57.
by ayushnix 5y ago
I doubt we're getting rid of traditional long lasting keys anytime soon. They do have their uses and it'd be a waste not to use them. > Signing certificates with your existing keys kind of make the whole point moot. You mean ge
58.
by ayushnix 5y ago
Which is why I installed openssh-server on my OpenWrt hosts. However, due to a bug [0] in openssh-server package in the latest 21.02.2 release of OpenWrt, OpenSSH doesn't allow you to login in failsafe mode on an OpenWrt host. Because
59.
by ayushnix 5y ago
I'm using SSH certificates to manage a few nodes in my homelab and it's a pleasure to not have to deal with managing the known_hosts file on my clients and authorized_keys file on my servers. There's only 1 line in my known_h
60.
by ayushnix 5y ago
Umm, please correct me if I'm wrong but I think you're confusing SSH keys with SSH certificates. A SSH client key can be reused to create short lived SSH client certificates. You can keep using that SSH client key to encrypt data,

More ›