dgl

7 ms·

61.
by dgl 2y ago
Strangely not including the scheme doesn't seem to consistently work on an iPhone when in uppercase, a string like "FOO.COM/BAR" does open as a URL, but a string like "FOO.UK/BAR" does a search. I think it
62.
by dgl 2y ago
Some discussion happened here about that when it was in draft: https://news.ycombinator.com/item?id=27628178 tl;dr: It is sadly not the most efficient encoding (and they missed an opportunity to make it actually base41, whi
63.
by dgl 2y ago
This won't work in most cases inside a Kubernetes pod, as the default seccomp policies don't allow creating namespaces within them. You can obviously relax the seccomp policies, but at that point you can also just give yourself th
64.
by dgl 2y ago
It is quite simple to use eBPF with uprobes to hook library calls, for example: https://github.com/iovisor/bcc/blob/master/tools/sslsniff.py The downside is this doesn't work with anything not
65.
by dgl 2y ago
One name for it is PESOS[1] ("Publish Elsewhere, Syndicate (to your) Own Site"), although that doesn't necessitate it be static, but requiring it be static is mixing the implementation with the user experience anyway. [1]: h
66.
by dgl 2y ago
There definitely have been CVEs in Terminal.app, over many years: - https://www.cve.org/CVERecord?id=CVE-2008-0042 - https://www.cve.org/CVERecord?id=CVE-2002-1898 - https://infocon.org/cons
67.
Déjà vu: Ghostly CVEs in my terminal title(dgl.cx)
208 points by dgl 2y ago|55 comments
68.
by dgl 2y ago
To me this is actually one of the attractive aspects of Wireguard compared to some other VPNs, it doesn't try to manage everything within the tool and delegates to the host's normal routing mechanisms. However it still by default
69.
by dgl 2y ago
I made a similar thing: https://waste.st/waste.1 If you run curl waste.st you also get the “manpage” The goal was to make it do uploads without a ton of frameworks. The front page is around one request under 20K. It also ha
70.
by dgl 2y ago
What's old is new again. Emacs has long done snapshots a bit like this, albeit in a hacky way[1][2] [1]: https://lwn.net/Articles/673724/ (2016) [2]: https://lwn.net/Articles/707615/
71.
by dgl 2y ago
I wrote something similar that uses Redis pubsub, so you can run the script somewhere to connect and then write simple clients just using Redis: https://github.com/dgl/redis-irc-bot The neat thing about this is you can
72.
by dgl 2y ago
The most important bit of this is in the conclusion: Before we conclude anything, we should remind ourselves of its limitations. The tests run were on completely random data. Truly random data seldom occurs in real life. Linus famous
73.
by dgl 2y ago
Maybe the AI can work it out? More seriously usually issues where the observed behaviour is "the system is slow" are harder to root cause than complete outages. It depends partly how good your capacity planning is obviously, but m
74.
by dgl 2y ago
Not sure whether there's lots of people trying out commands right now (is it backed by a real k8s cluster?), but some commands are taking over 10 seconds to run. Not really a fair "benchmark" when the system's speed is v
75.
by dgl 2y ago
> There's something nice about being anonymous behind a communal v4 gateway. IPv6 lets you do this -- nearly every client will use privacy addressing, so your (default) source address rotates daily. However you can still connect to
76.
by dgl 2y ago
While the example here is broken, http://find.me.uk still works: $ dig loc SW1A1AA.find.me.uk ; <<>> DiG 9.10.6 <<>> loc SW1A1AA.find.me.uk ;; global options: +cmd ;; Got answer: ;; ->&g
77.
by dgl 2y ago
Mostly historical interest; User Mode Linux (UML) was one of the first more performant options for virtualisation of Linux. This let you play with a network lab based on UML or other technologies without needing to set up a physical network
78.
by dgl 2y ago
I wonder what compression gains, are you serving the gziped version directly based on Accept-Encoding headers to avoid a decompression and compression? If not it would be possible to just use Store[1] to use the zip as a container format bu
79.
Waste.st a.k.a. .st – A tiny waste^W pastebin(xn--108h.st)
2 points by dgl 2y ago|1 comments
80.
by dgl 2y ago
This is also available at https://[Wastebasket emoji].st but unfortunately hacker news seems to double encode the emoji.
81.
by dgl 2y ago
I find the premise of the paper strange -- if the router is untrusted it can do many things, not just statistical traffic analysis at a high level (e.g. DNS/HTTP may give away apps downloading a list of VPN endpoints). In 2024 IPv6 isn
82.
by dgl 3y ago
While the serving code still works the code to download Wikipedia dumps and summarise them has bitrotted. The database is circa 2013, so you’re exploring a nearly 11 year old summary of Wikipedia!
83.
by dgl 3y ago
This iTerm2 specific escape sequence[1] has the benefit it works over SSH. You can however use "osascript" to generate the notification directly, see https://apple.stackexchange.com/questions/57412/how-ca
84.
by dgl 3y ago
Doing multiple PSK / PPSK is not compatible with WPA3 (at least as supported by most APs today*, as WPA3 requires management frame encryption), so you limit to WPA2 only, therefore you're better off just having multiple SSIDs with
85.
by dgl 3y ago
Ping and traceroute really shouldn’t need setuid on Linux anymore. tracepath uses an option to set the TTL and works without setuid (although options like TCP tracerouting aren’t possible with that, but as mentioned that can use CAP_NET_RAW
86.
by dgl 3y ago
> While good luck doing that on a laptop that is only ever used to establish an SSH session. [...] > Set that up about ten months ago now (don't remember exactly). It's working flawlessly. Not a single issue. So now your lap
87.
by dgl 3y ago
You're looking for DNS rebinding protection, many DNS servers support it. However there are some cases where things do use private IPs in DNS records outside of the local domain, one example is Plex (e.g. https://support.ple
88.
by dgl 3y ago
Note very few terminals implement UTF-8 and C1 controls and in particular xterm (which is kind of the defacto standard) doesn't because of the issues you outline. My opinion is they should just die as a legacy thing. No programs depend
89.
by dgl 3y ago
Depending what NAS you’re using maybe it supports iSCSI? It can be a better option for things where you need to make sure only one system accesses the data at a time.
90.
by dgl 3y ago
The big one with the N100 is it either comes from random sellers on AliExpress, or you get something like the ASRock ITX motherboard with one on. Those motherboards alone cost the same price as an eBay system with an 6500t. If the goal is t

More ›