diafygi

110 ms·

421.
The new way police are surveilling you: Calculating your threat ‘score’(washingtonpost.com)
7 points by diafygi 11y ago|1 comments
422.
by diafygi 11y ago
> Mark Carney, Governor of the Bank of England, has warned that the stranded-asset problem could threaten global financial stability if the “carbon budgets” implied by global and regional climate deals render worthless fossil-fuel reser
423.
by diafygi 11y ago
Are their any small form factor smart card like devices that are immune from side channel attacks like these? It seems like using constant power without much hardware to buffer stuff out is very difficult.
424.
by diafygi 11y ago
Lawyers aren't free. If you haven't already, I highly recommend signing up for a monthly donation to the EFF. https://eff.org/donate Recommended amount: $19.84/mo
425.
by diafygi 11y ago
> You should already have those links, because in your grandparent post you're arguing... Hmm, can't seem to find any. My opinions are mostly speculation, and I'm happy to be proven wrong as long as I learn something. Care
426.
by diafygi 11y ago
Of course, oil is used for many other things, but a whopping 85% of oil is burned[1]. What happens when that 85% decreases? Grow plastic and fertilizer production by 6x to make up for it? As far as growth rate of alternatives, it's a c
427.
by diafygi 11y ago
Hence the "call me crazy" :) However, I feel like all the chatter about Saudi behavior is short term (<5 years). Where are the articles discussing the 10-30 year outlook? It just seems like the oil industry is blissfully ignori
428.
by diafygi 11y ago
An alternative for transportation is actually starting to happen: self-driving vehicles. Recharging times don't matter when you have a fleet of self-driving electric Uber cars that can phase vehicles in and out of service automatically
429.
by diafygi 11y ago
Call me crazy, but I think there's something else going on here. What if Saudi Arabia is having a fire sale? There's a ton of science that says that we can only pull up half of our current oil reserves to cap climate change at 3 d
430.
by diafygi 11y ago
Thanks for the writeup! Two points: 1. letsencrypt-nosudo isn't deprecated. I still will make updates to it as needed. 2. You can add a "|| exit" after the "> signed.crt" in acme-tiny to prevent overwriting chain
431.
Can Tech Solve Climate Change?(techcrunch.com)
1 points by diafygi 11y ago|0 comments
432.
by diafygi 11y ago
No, thank you for using https!
433.
by diafygi 11y ago
Indeed. However, it's important to note that even if someone does MITM letsencrypt.org, they only see your public key and CSR. The private keys never get sent over the wire, so you don't risk leaking your private keys. However, a
434.
by diafygi 11y ago
This uses the default ssl verification in whatever version of python you have. Even though all API requests use public key signing (so nothing really private is ever sent), if you're worried about someone MITM the API requests to letse
435.
by diafygi 11y ago
Come visit!
436.
by diafygi 11y ago
Would love for feedback on how to make this script python 2.6 compatible! https://github.com/diafygi/acme-tiny/issues/9
437.
by diafygi 11y ago
Yep, I wrote both. The difference is that letsencrypt-nosudo doesn't have access to your private user account key, so you need to manually sign the requests. Acme-tiny does have access to your private user account key, so it signs the
438.
by diafygi 11y ago
Fun fact. There's really nothing stopping you from using a PGP/smartcard/HSM keypairs for the ACME account key. Would love to see someone adapt this or another client to use a yubikey or other hardware key.
439.
Show HN: Acme-tiny, a tiny 200-line Let's Encrypt client(github.com)
280 points by diafygi 11y ago|51 comments
440.
by diafygi 11y ago
Thanks for the error report! I've updated the site to fix the arraybuffer error handling.
441.
by diafygi 11y ago
This website is agnostic to the server setup. All it does is ask you to host a file at a specific endpoint on your domain on port 80. It has examples of how to do this with python or file-based on nginx and apache, but there's nothing
442.
by diafygi 11y ago
Sorry for the error! Do you have the full error message? Can you please file an issue? https://github.com/diafygi/gethttpsforfree
443.
by diafygi 11y ago
Luckily, it's less than 200 lines and open source! Please feel free to fork it and modify for your needs :)
444.
Show HN: GetHTTPSforFree.com, a no-install browers-based Let's Encrypt client(gethttpsforfree.com)
18 points by diafygi 11y ago|4 comments
445.
by diafygi 11y ago
FYI, if you don't want to install anything to try it out, you can use https://gethttpsforfree.com which is a browser-based ACME client. It doesn't ask for private keys, so you don't need to trust it.
446.
by diafygi 11y ago
No worries! Every time I see a Let's Encrypt thread on HN, there's always complaining about having to trust the official client with root access, webserver configs, dependencies, or whatever. So I made my clients (letsencrypt-nosu
447.
by diafygi 11y ago
The certificates that Let's Encrypt issues are cross-signed by IdenTrust (a real CA) so browsers should trust the certificate you get from Let's Encrypt. NOTE: just like with other TLS certs, you will need to include the Let'
448.
by diafygi 11y ago
FYI, if you don't want to install all the dependencies of the official letsencrypt client, I made a <200 line python script that automates issuing and renewing certificates. Love the Let's Encrypt project, but really don't
449.
by diafygi 11y ago
Eh, ACME isn't that complex. I wrote a fully automated client in less than 200 lines of python. https://github.com/diafygi/acme-tiny
450.
by diafygi 11y ago
FYI, when Let's Encrypt goes public in a week, you'll be able to get free certs without having to install anything by using https://gethttpsforfree.com Fun fact, the website is just a reverse proxied github static page

More ›