c0l0

8 ms·

61.
by c0l0 1y ago
Well, concerning technical risks, DNS Cache Poisoning[0] is a thing - but I keep the software implementing my recursive DNS service up to date very eagerly, so I guess the risk of falling victim to such an attack is rather low. [0]: https:
62.
by c0l0 1y ago
I also run my own recursive DNS server on a VPS I rent, but I freely share it with other users of the Internet. This causes my "personal" signal of queries to authoritative servers to effectively disappear, and I also (marginally)
63.
by c0l0 1y ago
I've been doing this for years, and my shell history is usually only a few lines/commands long when I start a new session. I like it that way. My browser's roughly the same - I always start firefox in "private browsing m
64.
by c0l0 1y ago
Wow... reading this article in full really made me lose hope in OpenSSL, the project and the library. I was well aware of the expected inconveniences any new major OpenSSL release would trigger (esp. older, less actively maintained applicat
65.
by c0l0 1y ago
This is one of the best introductions to what programming a computer is about that I know. I highly recommend checking it out, even if Pascal-like languages are not your cup of tea.
66.
by c0l0 1y ago
I contributed a minor (but imho still neat :p) improvement to Redis under its original license, and personally moved to using redict when the unexpected license change to SSPL was announced - and I was feeling betrayed as a contributor to a
67.
by c0l0 2y ago
To achieve that it is enough to hash inputs, and cache resulting outputs. Repeating a build from scratch with an emtpy cache would not necessarily have to yield the same hashes all they way down to the last artifact, but that's actuall
68.
by c0l0 2y ago
I never really understood the hype around reproducible builds. It seems to mostly be a vehicle to enable tivoization[0] while keeping users sufficiently calm. With reproducible buiilds, a vendor can prove to users that they did build $binar
69.
by c0l0 2y ago
Yes.
70.
by c0l0 2y ago
I use Quad9 (the winner in this benchmark for me, personally) as a fallback resolver, in case the one I operate and use primarily ( https://resolv.us.to ) happens to break. I created my own (very simple - there's no global un
71.
by c0l0 2y ago
Even if WWIII is not a consequence of all this senseless and reckless militarization, each and every penny spent on it will end up missing dearly for fighting human civilization's real fight of this century: combatting climate change.
72.
by c0l0 2y ago
IPv6 has not "failed". I use it daily to do my networking, both at home and on the public Internet. The author's take is weird at best.
73.
by c0l0 2y ago
Growing up in the German-speaking part of Europe, it was impossible to not know them if you were a nerd kid in the 90s - back when you could buy retail software (not only computer games) packaged in huge, shiny cardboard boxes and delivered
74.
by c0l0 2y ago
"No better place to leave for" seems an apt way to put it. I think/fear that in the long run, there will be fewer and fewer ways to participate in activities and communities on the web on your own terms, as only a vetted, all
75.
SSH Rate Limiting with Pam and Nftables(johannes.truschnigg.info)
4 points by c0l0 2y ago|0 comments
76.
by c0l0 2y ago
Dammit, my clipboard manager messed up the link I was about to post, and now it's too late to edit :/ For posterity: https://bford.info/cachedir/ is what I was meant to link to above. Sorry for the inconvenie
77.
by c0l0 2y ago
XDG_CACHE_HOME, as mentioned by numerous other posters, is a good remedy to deal with this kind of cached-artifacts-sprawl - but it does need a will to cooperate and care from the original software developer in the first place, which ain&#x
78.
by c0l0 2y ago
And what is it that makes the *inside* of all (read: almost all) these nice and working Docker/container images tick? Distributions using a "model of global shared libraries".
79.
by c0l0 2y ago
In my spare time, I am trying to port OpenBMC[0] to the BMC of the Gigabyte MC12-LE0[1], a cheap, workstation/server-class mainboard for AMD's AM4 platform. Unfortunately, Gigabyte denied my requests to provide me with any details
80.
by c0l0 2y ago
So the next cool "security"-branded thingie that will be used to enforce increasingly draconian DRM schemes upon the masses. I am not surprised any more - just wonder how long it will take for these virtuous technologies to also b
81.
by c0l0 2y ago
There is, unfortunately, no directory of services like this that I am aware of. If you have a local hackerspace, asking specific questions there would probably give you answers quickly, I imagine :)
82.
by c0l0 2y ago
I faced the same problem, until I found a non-profit community-operated housing provider (a registered computer club/society that has been operating since at least the early 2000 who is also a LIR ( https://en.wikipedia.org&
83.
by c0l0 2y ago
> if you can share anything related to your sweetspot For Broadwell in particular, it is enough to avoid power states lower than C1E, in my experience. And no, MTU plays no part in the degraded IPv6 performance. I think it's rooted
84.
by c0l0 2y ago
There's a number of "special" Ethernet addresses that a proper Ethernet bridge must never forward. The Linux bridge implements a mechanism to ignore _some_ of these constraints, but not all of them. If you ned that, you can a
85.
by c0l0 2y ago
To "fix" performance (i.e., increase throughput by close to 35%) one has to mess with the "energy performance bias" on the (Broadwell) platform, e. g. using x86_energy_perf_policy[0] or cpupower[1]. Otherwise, the CPUs&#
86.
by c0l0 2y ago
No, I actually just booted with 'mitigations=off' and called it a day. We will employ Zen4 cores on the pre-prod setup soon enough, and I'll be looking into the benefit (if any) of disabling mitigations in a more fine-grained
87.
by c0l0 2y ago
As I had posted a few weeks ago ( https://news.ycombinator.com/item?id=41085314 ), I recently implemented a very similar thing myself. My solution ended up using tc's mirred[0] action for implementing a fully L2-transpar
88.
by c0l0 2y ago
The German military seems to have a thing for Star Wars-related themes: https://www.youtube.com/watch?v=xzsxN4HNrNw (... and yes, they ACTUALLY do have a "Weltraumkommando"!) I find it kinda funny that they appare
89.
Quantifying the AVX-512 Performance Impact with AMD Zen 5(phoronix.com)
4 points by c0l0 2y ago|0 comments
90.
by c0l0 2y ago
Yeah, I was expecting the same kind of argument from the author, not what he actually talked about (STEM workers have to commit to life-long learning, work long hours during crunch time, feel like on a treadmill because there's always

More ›