herczegzsolt

7 ms·

31.
by herczegzsolt 2y ago
Often the fix is trivial once the issue is troubleshooted properly. You may still wish to not fix it for various reasons.
32.
by herczegzsolt 2y ago
I think one of the reasons it is hard to use, is that support is almost, but not quite there. What I did not have time to write-up is the bootload of vendor-specific bugs, that are also firmware version dependent. Those are often easy-enoug
33.
Soho IPv6 in 2025 still dicey(herczegzsolt.hu)
4 points by herczegzsolt 2y ago|4 comments
34.
by herczegzsolt 2y ago
Seems like most IPv6 for home use is still misconfigured, and Happy Eyeballs is the ducktape holding it together.
35.
by herczegzsolt 2y ago
When I learned assembly at university, we were required to learn Intel 8086. I remember hating every second of it, because it was so useless. Around the same timey I had to learn AVR8 family assembly (for ATMega328P) which was a joy in comp
36.
by herczegzsolt 2y ago
When I am traveling, i most likely use my mobile data. That data is tunneled to my mobile provider, exiting to the public internet at exactly the same server. In my case, Cloudflare will identify me as BUD even when i'm roaming at a di
37.
by herczegzsolt 2y ago
The accuracy of this geolocalization depends very much on peering agreements. I don't know about the UD bit this will not be very accurate within the EU. As an example: In Hungary, there's pretty much only one peering hub (bix) an
38.
by herczegzsolt 2y ago
I'm sure this is what's happening long-term, but would this have any effect within a single day?
39.
by herczegzsolt 2y ago
I find that energy drinks help me sleep better. If I have some strong in the morning despite not at all needing one, I'll be more tired and ready to sleep that evening. It probably has not-healthy side effects so I'd not recommend
40.
by herczegzsolt 2y ago
As for the Markdown-based blog: Use GitHub pages + Hugo (or Jekyll if you don't hate javascript) For the newletter, i have no idea. Mass-email is hard to get right.
41.
by herczegzsolt 2y ago
For example a call to the registered owner or contact person of the organizaton (not the user). Any out-of-band communication should work which checks for the legal entity, not just something that eventually relies on DNS. Alternatively, yo
42.
by herczegzsolt 2y ago
In my opponion, all of those cases very well justify a manual check, or some sort of extended identification before the user is let in. It indicates a deeper cultural issue of "convenience/profit over security" if those are s
43.
by herczegzsolt 2y ago
Taxes may be part of a solution, but don't expect them to solve this problem alone. In most EU states you pay taxes to provide medical care to employees. If an employee gets sick or otherwise unable to work, you are usually required to
44.
by herczegzsolt 2y ago
I never understood why computers in financial systems require human-like sleep cycles, while others are just fine operating 24/7. Their union must be damn powerful.
45.
by herczegzsolt 2y ago
I think the magnet reference is just a misleading mixup on the dealers side who was probably not familiar with iButton specifically. Very old immobiliser systems used simple reed switches and magnets - basically just pure security by obscur
46.
by herczegzsolt 2y ago
More than likely an iButton reader to identify the user and a business/personal use switch. The switch basically does nothing, but tha state of it is logged in the tracking system along with the routes the car takes. In many EU countri
47.
by herczegzsolt 2y ago
The argument is, that in case of sudo, the caller (potential attacker) controls the environment. In many cases, software or libraries are not made with a hostile environment in mind. Think of LD_PRELOAD or PATH ... When there's a daemo
48.
by herczegzsolt 3y ago
https://lore.kernel.org/lkml/2024021314-unwelcome-shrill-690... > Note, due to the layer at which the Linux kernel is in a system, almost any bug might be exploitable to compromise the security of the kernel, but th
49.
by herczegzsolt 3y ago
> to create a rule that all (...) require unanimous consent? What you describe is pretty much what has happened and still is happening in Hungary. The conclusion here is that even if the majority agrees that these rules are against the s
50.
by herczegzsolt 3y ago
I've used libvips a couple of years ago from golang via cgo. It was a bit rough to get started with it, but impressive once working. It was quick enough to convert full-page pdf documents to black and white thermal printers (with scali
51.
by herczegzsolt 3y ago
The public suffix list servers the purpose to only separate (sub)domains that are reasonably expected to be controlled by different owners. Many systems - ex: rate limits, malware domain lists - would be very easily and cheaply gambled if d
52.
by herczegzsolt 3y ago
A good 2FA setup is important for modern security. Knowing many sortware developers, a suprisingly large percentage of them still think about security as annoyance. This is especially problematic, as they tend to have a larger attack surfac
53.
by herczegzsolt 3y ago
Mortgage is not a cost accounting wise. Interest is a cost, but capital repayment is already "profit" which the landlord will keep at the end of the loan. Let's say rent is mortgage + 30%. If we assume all the risks and costs
54.
by herczegzsolt 3y ago
I sort of understand that Mozilla wants to care for the concept of an open internet which requires a lot more than just software development. I don't particularly understand or like the exact things they finance, but politics is a comp
55.
by herczegzsolt 4y ago
Very interesting, but $10/month is steeep pricing. I hope you get to profitability and will be able to offer something more affordable for me (and my team).
56.
by herczegzsolt 4y ago
What is the main use-case for such custom isos? I assume that nobody would use installers from an unknown source. What benefit do you see in creating a custom iso over just customzinig after install (possibly scripted)?
57.
by herczegzsolt 4y ago
To some extent I agree, but I see a major difference in whether you have the ability to control it or not. With GitHub actions, you have to trust the platform or migrate away, there are no other options. With many more open alternatives, yo
58.
by herczegzsolt 4y ago
That is subjective and region dependent. $5 buys you a decent mobile subscription in Hungary (for this use-case). Setting up Automate is just graph editing. It is not much easier to add apps to Slack itself. Wish you the best of luck with t
59.
by herczegzsolt 4y ago
There's very little guarantee to where the GitHub-provided runners are executed. There's very little guarantee as to what the auto-updating self-hosted runner binary does. There's very little guarantee as to what the GitHub-p
60.
by herczegzsolt 4y ago
Done this many years ago via Automate ( https://play.google.com/store/apps/details?id=com.llamalab.a... ) and an Android phone left alone in the office. Also useful as an internal pager via call redirects.

More ›