feld

10 ms·

61.
by feld 9y ago
in reality that's covered by the price gouging and the hospital getting to write it off
62.
by feld 9y ago
well, end to end crypto for one
63.
by feld 9y ago
Except the increased risk of heart attack and the damage to kidneys and bowels...
64.
by feld 9y ago
Netflix gives back major fixes and performance improvements to the community because maintaining their own fork of the OS permanently is a nightmare.
65.
by feld 9y ago
My friend put 100,000 miles on his Tesla in a year and was never stranded. He drove 30,000 miles on a known faulty motor. It's not more unreliable than an ICE vehicle. It's significantly more simple in design and for repair. These
66.
by feld 9y ago
FreeBSD, OpenSSH, Apache mod_kerb2 (and mod_auth_ldap for authorization), Active Directory. 1. install server 2. msktutil tool joins machine to domain (simple tool; no dependencies) and now you have /etc/krb5.keytab file 3. minor
67.
by feld 9y ago
Clever. Thanks for sharing.
68.
by feld 9y ago
DNSSEC is dead and useless unless every application is written to understand the error messages and every device runs its own DNS resolver (not forwarding, because it's not really validating then and the responses could be spoofed). We
69.
by feld 9y ago
This has nothing to do with this conversation. DNS recursors are not being discussed. This is strictly about DNS resolvers.
70.
by feld 9y ago
Reader view on iOS Safari makes the web usable on mobile.
71.
by feld 9y ago
All of our linux/freebsd boxes on our network at work must be hooked up to kerberos. most of the day I don't have to type my password for anything HTTP/SSH unless it's for sudo.
72.
by feld 9y ago
User privacy is literally their business model. You pay Apple up front and they never expose your private information to third parties for any reason whatsoever and try to make sure your devices stay private. The cost of your privacy and fu
73.
by feld 9y ago
RIPE is one of the internet registries.
74.
by feld 9y ago
PlexPass server features are generally just beta release features and not locked to your user account. If you had the URL to the installer for the PlexPass version (which requires no authentication to download), you could have access to thi
75.
by feld 9y ago
You have to admit he has better release management than 99% of the open source projects out there right now.
76.
by feld 9y ago
With Sprint gone #4 will be US Cellular which isn't exactly nationwide, but they're growing leaps and bounds.
77.
by feld 9y ago
I did not evade the point. You are choosing to to ignore it. This comment is well within HN guidelines.
78.
by feld 9y ago
Alright let me replay this conversation: Post: > the free market is broken. I have a choice between two providers but one is a slight inconvenience for me to have installed so I refuse to use it. YC Approved© Reply: > the free market
79.
by feld 9y ago
It wasn't a personal jeer. I was commenting on his behavior/attitude, not calling him names. There's a big difference. alternately: > You're just being (a prick | stubborn | bullheaded | rigid | perverse | unrea
80.
by feld 9y ago
OpenBSD's pf doesn't handle layer2. (imo) Nothing beats FreeBSD's IPFW when it comes to features, but OpenBSD is still king of syntax/usability.
81.
by feld 9y ago
I think their website is on github, so open a pull request
82.
by feld 9y ago
Not currently in the plans because the support window for LibreSSL is significantly shorter than a FreeBSD release support cycle.
83.
by feld 9y ago
Bernstein v. United States
84.
by feld 9y ago
“I don’t think Congress intended that distinction but what it does do us is in our most important investigations it requires us that if we want to find out the subscriber info to a particular email to go and get an order from a federal judg
85.
by feld 9y ago
They certainly seem to have a marketable product for easy ssh key management. They'll make buckets of money on this I bet.
86.
by feld 9y ago
What is your definition of cheap? Don't rule out ARM based solutions.
87.
by feld 9y ago
Well, if you care about security AES-NI allegedly prevents a side channel attack.
88.
by feld 9y ago
X Forwarding and TCP Forwarding is also insecure. Not everyone has the same threat model, but for the average person it's a bad idea to do agent Forwarding unless they fully understand the consequences. This doesn't mean the OpenS
89.
by feld 9y ago
Bad security is bad. Nobody should leave ssh open to the internet at large at this point.
90.
by feld 9y ago
But how do you get "accustomed" to it when every OS Cisco has looks the same but is different enough to drive a man insane?

More ›