elesiuta

10 ms·

1. 61.▲
   by elesiuta 4y ago

   Another similar discussion last year where Miller was mentioned: New(ish) command line tools https://news.ycombinator.com/item?id=31009313
2. 62.▲
   by elesiuta 4y ago

   Thank you! That list is perfect since I don't use these tools often enough to remember them and some are hard to find again without knowing exactly what to search for. I also discovered pawk on it which looks interesting, I made a some
3. 63.▲
   by elesiuta 4y ago

   Exactly, ironically I was finally just starting to get comfortable enough with Stadia being around long enough to buy a few games on it, literally weeks before the shutdown was announced. Specifically I re-bought the Jackbox games which wer
4. 64.▲
   by elesiuta 4y ago

   This sounded like it'd be fun to implement so I took a quick stab at it, it supports unpacking tuples to any number of _ in any position, including with kwargs. class Placeholder: def __init__(self) -> None: pass
5. 65.▲
   by elesiuta 4y ago

   Thank you for the kind words and your offer! I did run into some new issues so I'll be taking you up on it shortly.
6. 66.▲
   by elesiuta 4y ago

   Thanks! I didn't know about wrapProgram, that sounds exactly like what I need.
7. 67.▲
   by elesiuta 4y ago

   It's picosnitch, if you know what I'm doing wrong/how to fix it that'd be great! It depends on bcc and psutil, and I am able to build and run it from a .nix file using python3.pkgs.fetchPypi with nix-build -E 'w
8. 68.▲
   by elesiuta 4y ago

   I have had a similar experience packaging a simple python program, coming from zero packaging experience. PKGBUILD was the first I did and by far the easiest, deb was about 3x more time and effort, and rpm was a bit more time and effort sti
9. 69.▲
   by elesiuta 4y ago

   > It would be fun to work out mathematically how much they're limiting the password space with these rules. Alright, you nerd sniped me, but I'm lazy so I just simulated it, this cuts down the password space by ~35%. I didn&#x2
10. 70.▲
    by elesiuta 4y ago

    > Indeed. The proper thing (also read as: the friendliest way for distro packagers) is for software projects to generate and publish a tarball themselves as part of their tag+release process. And this is easy enough to do automatically w
11. 71.▲
    by elesiuta 4y ago

    I always anticipated something like this could happen and it bothered me enough to create my own workflow [1] to archive, hash, and attach it to each release automatically for my AUR package. I can see how most people wouldn't notice&#
12. 72.▲
    by elesiuta 4y ago

    I've been using SikuliX [1] instead of AHK for a while now, only downside is that it uses jython so it's stuck on 2.7, but I don't use it for anything complicated enough that it really matters. Also I mainly use it for long r
13. 73.▲
    by elesiuta 4y ago

    I made a somewhat related program called pyxargs[1] which may help with what you're looking for. The command for your example would be pyxargs --py "print('{}') if os.path.ismount('{}') else ''&qu
14. 74.▲
    by elesiuta 4y ago

    I briefly experimented with using such an agent to communicate with a separate hardware firewall and found it was not worth the effort for myself and a better solution was just sandboxing anything I don't trust in a VM, since escaping
15. 75.▲
    by elesiuta 4y ago

    The slowdowns are because it still has to hold every connection until it can check which program it is coming from and whether that program is trusted or not, even when the same program creates multiple connections. To get around the slowdo
16. 76.▲
    by elesiuta 4y ago

    I use HomeBank [1] because I find the UI a lot simpler than GnuCash and importing mostly just works, with pretty good automatic category assignment that lets you use regular expressions. The only quirk is that one of my accounts uses a non-
17. 77.▲
    by elesiuta 4y ago

    I made my own with search and autocomplete, it works for me and I have it on GitHub, but it's pretty specific to my workflow and there are so many different options in this thread (a lot of which are probably better). I also liked the
18. 78.▲
    by elesiuta 4y ago

    Thanks! Also I used lost_cb [0] to detect if a packet or connection (with security_socket_connect) was missed between the BPF and Python parts, but is it possible for the BPF program to miss either entirely without triggering that callback?
19. 79.▲
    by elesiuta 4y ago

    I've kinda been keeping an eye on firewalla [0] since it looks pretty simple and probably good enough for home use? If anyone has any experience with it, or has looked into how good/useful the security of it is I'd love to he
20. 80.▲
    by elesiuta 4y ago

    > for a firewall, that’s potentially bad I wasn't talking about using it as a firewall, just a connection/bandwidth monitor that correlates traffic with a particular app.
21. 81.▲
    by elesiuta 4y ago

    > Linux is still dicey to correlate traffic with a particular app, especially if the connection is/was shortlived. This is has become a lot easier and more reliable to do now with BPF [0]. I also used the same approach to create a s
22. 82.▲
    by elesiuta 4y ago

    And it isn't too difficult for something to elevate itself to root anyways. It could just include a basic key-logger which would work on most systems and wait for your password. Unless you're on Wayland, you can see for yourself b
23. 83.▲
    by elesiuta 4y ago

    > In particular I'm not sure how to really tell ffmpeg to handle multiple audio/sub streams without programmatic interaction - you kinda need to know there are 2 audio streams and 4 sub streams, because you need to tell it what
24. 84.▲
    by elesiuta 4y ago

    Thanks, and AFAIK this should be the most reliable tool of its type on Linux, and the only one that also hashes executables which makes it a lot harder to bypass. I mentioned some caveats under the limitations section of the readme such as
25. 85.▲
    by elesiuta 4y ago

    I submitted this a few months ago and has undergone some major changes since then, adding: - bandwidth monitoring - a dashboard for showing plots - support for storing logs off-system to mitigate some forms of tampering, and dependi
26. 86.▲
    Show HN: A reasonably reliable traffic per application monitor using BPF(github.com)

    23 points by elesiuta 4y ago|3 comments
27. 87.▲
    by elesiuta 4y ago

    Something like fsverity could be a decent half solution. https://fedoraproject.org/wiki/Changes/FsVerityRPM Of course you won't have that layer of isolation if something becomes compromised, but it should mak
28. 88.▲
    by elesiuta 4y ago

    There's a name for this type of thinking https://en.wikipedia.org/wiki/Appeal_to_nature which I find a little ironic since a natural nuclear fission reactor has actually been discovered.
29. 89.▲
    by elesiuta 5y ago

    Even if/when the world does get the hint, there will still be https://xkcd.com/1053/ (although most people probably won't find this as exciting)
30. 90.▲
    by elesiuta 5y ago

    I agree with the snake oil sentiment, and wanting a tool to monitor connections on a per application basis but being dissatisfied with everything I found, I wrote my own ( https://elesiuta.github.io/picosnitch/ ). Only t