gnyman

16 ms·

121.
by gnyman 5y ago
Hey, I usually upvote anything that tries to be a lightweight alternative. But I don't think it's a good idea for anyone to enter any real slack credentials here unless you know the OP personally. The hn account is 11 months old a
122.
by gnyman 5y ago
Nice concept, going to leave it on the phone with the other weather apps and see if I use it. I guess you tried having just one clock and showing just the coming 12 hours? I'd think they might be even more intuitive for a first display
123.
by gnyman 5y ago
Thanks the answer and letting me know what it’s called. I’ll keep an eye out for that blog post, it sounds like there are some interesting challenges with using it.
124.
by gnyman 5y ago
I love the UI! It's so simple and clean. I can't really put my finger on why I like it, maybe it's because it uses depth which in todays flat world feels really refreshing. I'd love to know more about how you ended up wi
125.
by gnyman 5y ago
I definitely agree bots are underserved, I have a few things I do to keep them entertained, ssh bots are tar-pitted to keep them connected but busy, my hope is that I occupy at least one thread of not the whole process. For wp-login bots I
126.
by gnyman 5y ago
Okay, makes sense, neither Shodan nor Cencys are very easy to work with. Both have a learning curve to figure out all the ssl: asn: filters to find everything from an org. Making things more easily discoverable will be a benefit to everyo
127.
by gnyman 5y ago
Congrats on launching. I looked trough the site and tried a few searches (which returned nothing I guess the scanning is maybe in in it's infancy?) From what I gathered, it seems to be a similar to services like Shodan and Censys, is t
128.
by gnyman 5y ago
Yes, although so far I have not run in to being flagged for fraud, some have been very confused by it. So I have started doing short variations of it to make it less obvious, so The Tracor Supply Company would be something like trasu@s.doma
129.
by gnyman 5y ago
+1 on the above This looks super interesting, but before I understand exactly what this is I'm not ready to give it access to my twitter, so maybe allow the modal to be closed so I can check the webpage :-) I have been thinking about w
130.
by gnyman 5y ago
According to comparitech[1] it is Yet Another Elastic database exposed. I do wonder a bit how the people at Elastic continues to defend not having authentication enforced by default. As of today, going to https://www.elastic.co&#
131.
by gnyman 5y ago
I guess they mean something like this, which I find useful at quickly iterating over jq fzf --print-query --preview-window wrap --no-clear --preview 'cat file.json | jq {q}' you can also pipe a curl in the above, but that w
132.
by gnyman 5y ago
out of curiosity, why do you maintain a catch all? would it not be easier (and less of a privacy issue) to just reject them outright?
133.
by gnyman 5y ago
I recently came across XP4Q ( https://xpq4.sourceforge.io ) when I was looking for a long-term stable desktop with traditional look. Tried it out on an old MacBook and the look was great, but then I got bogged down in the standa
134.
by gnyman 5y ago
Yes you are 100 correct, I mixed up port and agent forwarding, I’ve needed both at different times and last time it was agent forwarding so got confused. There is another issue for port forwarding https://github.com/mobile-s
135.
by gnyman 5y ago
there is a fork with port forwarding support https://github.com/rinne/mosh and a PR with a long discussion https://github.com/mobile-shell/mosh/pull/696 on why it's not merged you c
136.
by gnyman 5y ago
Pet theory (disclaimer that I know very little about SEO) would be that the website with the cloned content loads fast and does not load 4 MiB of javascript, thus beating the original content in ranking mostly because of the speed, which is
137.
by gnyman 5y ago
I’d go as far as to say it’s very useful :-) I don’t know how many times I’ve sat trying to skip trough a video to find a certain phrase or fact. Also the name is great and easy to remember, definitely committing that to my memory. I am cur
138.
by gnyman 5y ago
I am definitely not arguing users should not be responsible for what they do. My point is that companies (especially billion dollar companies) can, and should be (more) secure by default. I am also making the observation that this does not
139.
by gnyman 5y ago
I agree, there is a huge difference what one should expect from a early OS project and what one should be able to expect from billion dollar companies. But it seems that without external pressure (regulatory?), it's not getting fixed a
140.
by gnyman 5y ago
Yes if you publish a known insecure service like mongodb, on the standard port, on a well known VPS provider you can expect it to be automatically compromised within hours if not minutes. As others commented, scanning the whole Internet is
141.
by gnyman 5y ago
Glad someone else highlighted this old ticket. I bet this, in combination with the extremely irresponsible solution to ship mongodb without auth as default has caused countless of data leaks and destruction events. We just haven't hear
142.
by gnyman 5y ago
And if you don't want to or can't install noscript, you can use my little hack https://noscript.it/ to view a page without javascript. Note that it is a hack/poc and does not always work, especially the x-fra
143.
by gnyman 5y ago
Thank you, jq is always driving me crazy. If I have to get used to lisp syntax to get away from it, then so be it :-) Also.. the fzf --preview tip you had. Thank you, it's going to save so much time next time I need to iterate trough s
144.
by gnyman 5y ago
I'm not site how a router would identify "mindless browsing", but turning off Internet at certain times is a feature many routers have built in, usually under parental control. Worth a look if you haven't checked. Person
145.
by gnyman 5y ago
At the bottom of the article (I think added later but not sure) there is a part about being able to get signed originals. It looks like they are (as of right now) still available as that part is yet to be stricken trough.
146.
by gnyman 6y ago
Adding my thoughts from being a Turris Omnia user since the release (2016). I think it's one of the better standalone WiFi router/AP's out there. If you want a long term supported open source/openwrt one it might be the
147.
by gnyman 6y ago
Everyone has different priorities of course. But note that as long as you use a modern client TLS_FALLBACK_SCSV will ensure you won't be at risk of downgrade attacks or similar. Without that I also don't think I would run it.
148.
by gnyman 6y ago
I recently did the opposite and re-enabled 1.0 and 1.1 Wrote some thoughts on why here https://blog.nyman.re/2021/02/07/usability-security.html but in short, it's several magnitudes more likely someone w
149.
by gnyman 6y ago
I had a great experience with https://q4os.org/ (and its Windows skin). It's feels like a modern Windows XP. But I must admit I have not used it for much work, but the feeling of playing around with it was great.
150.
by gnyman 6y ago
Or the server only accepts modern ciphers or TLS. I took a deep dive into this after I was unable to access my blog on my iOS 6 device. I concluded that I don't really need a ssllab's A. It is much more likely someone will try vis

More ›