Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
rkeene2
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
86 ms
·
841.
▲
by
rkeene2
11y ago
WebPass ( https://webpass.rkeene.org/ ) does a very similar thing.
842.
▲
by
rkeene2
11y ago
My URL shortener makes the user come up with their own short URL so they can decide how long to make it. http://oc9.org/<insertYourShortURLHere>
843.
▲
by
rkeene2
11y ago
ZFS supports being case-insensitive.
844.
▲
by
rkeene2
11y ago
AppFS ( http://appfs.rkeene.org/ ) aims to solve the packaging problem in a way that is very similar to this line of thinking. Software is just files on disk, rather than statically linking (and this duplicating) to librari
845.
▲
by
rkeene2
11y ago
AppFS ( http://appfs.rkeene.org/ ) is exactly a decentralized package manager, except it uses HTTP as a transport and does end to end verification (i.e. not like HTTPS where only the transport is verified) of all data using
846.
▲
by
rkeene2
11y ago
I wonder if Python can't support something like starkits/starpacks from the Tcl world ? There's a somewhat similar Perl implementation but it extracts files to the real filesystem and executes them rather than just reading fr
847.
▲
by
rkeene2
11y ago
hunter2 ( https://chiselapp.com/user/rkeene/repository/hunter2/ ) does not rely on (or even directly support) GPG. It's written in mostly Tcl with some C glue to call any PKCS#11 module. I tend to
848.
▲
by
rkeene2
11y ago
Seems to be http://scoop.sh/ not https://scoop.sh
849.
▲
by
rkeene2
11y ago
It's definitely not equivalent to "apt-get" -- I tried it out recently and it's a scripted installer for many things, but lacks a functional package manager backend like apt-get requires (dpkg, rpm for apt-rpm, etc). Fur
850.
▲
by
rkeene2
11y ago
I don't use GPG keys but instead a smartcard with RSA key pairs (stored as an RSA private key that I cannot access and an X.509v3 certificate which has my public key embedded in it). I access my smartcard via a PKCS#11 module. "
851.
▲
by
rkeene2
11y ago
What ? The CA AppFS trusts has never been compromised and you are free to replace it. It sounds like you think SSL/TLS is being used or something or that many certificate authorities are trusted.
852.
▲
Did HP Patent Linux bonding mode balance-tlb
(google.com)
2 points
by
rkeene2
11y ago
|
0 comments
853.
▲
by
rkeene2
11y ago
OpenSSL 1.0.x will likely remain supported (by someone, perhaps if not OpenSSL) for a long time due to this decision.
854.
▲
by
rkeene2
11y ago
S/MIME and X.509 is a lot more common than PGP signatures -- support for it is built in to most MUAs. Also, typically the keys are on smartcards rather than USB devices where the private key could be accessed.
855.
▲
by
rkeene2
11y ago
My web server, filed ( http://filed.rkeene.org/ ), is faster than nginx for serving static content by doing two things: 1. Only handling static files 2. Being extremely optimized for serving static content I
856.
▲
by
rkeene2
11y ago
There's always http://oc9.org/yourShortURLHere but I always get complaints that it's not obvious what it does or how to use it
857.
▲
by
rkeene2
11y ago
LibreSSL can't be used everywhere OpenSSL is currently used. Notably (and intentionally) missing is FIPS 140-2 support, which most (almost all?) commercial product that uses OpenSSL will rely upon for selling a FIPS 140-2 compliant or
858.
▲
by
rkeene2
11y ago
AppFS ( http://appfs.rkeene.org/ ) solves this (and all other packaging and distribution problems) by dividing the namespace along DNS lines. That is you can run both: /opt/appfs/linuxmint.com/mdm
859.
▲
by
rkeene2
11y ago
It's the same as any other package repository being compromised. There's currently no key revokation, like most package systems but being based on X.509 it certainly supports it. Additionally the only part of AppFS that runs as a
860.
▲
by
rkeene2
11y ago
It is very similar with some small (but significant) differences: 1. It doesn't require a huge manifest per site, instead the manifests are broken down into: list-of-packages-per-site and list-of-files-per-package 2. There are no s
861.
▲
by
rkeene2
11y ago
The backend actually doesn't care about the protocol used and indeed any protocol could be transparently substituted in using the config file... However there is nothing that makes 9P better suited in this particular case since the res
862.
▲
by
rkeene2
11y ago
AppFS is built on FUSE just like SSHFS, it just uses a different transport protocol, doesn't support pushing writes back the origin server, does heavy caching, safely supports multiple users (including writes), can safely connect to un
863.
▲
by
rkeene2
11y ago
Dependency resolution is implicit to the design -- the entire global namespace is available on every system so any dependencies are resolved as they are requested. That is, if you have an executable such as "ls" that relies upon t
864.
▲
AppFS, a FUSE filesystem via HTTP for running software without installing it
(appfs.rkeene.org)
38 points
by
rkeene2
11y ago
|
15 comments
865.
▲
by
rkeene2
11y ago
I currently operate this service, let me know if there's any questions about it!
866.
▲
by
rkeene2
11y ago
Consider adding "filed" ( http://filed.rkeene.org/ ). It is a small static-only HTTP server that is as fast as I can make it. Faster than any other web server I've been able to find. I wrote it to solve a
867.
▲
by
rkeene2
11y ago
One feature of the old Sourceforge that I found helpful was the "compile farm" - not so much for the "compile" part (cross-compilers are nice), but to test the newly compiled code.
868.
▲
by
rkeene2
11y ago
For what it's worth, most smartcard applets don't typically store GPG objects but RSA keys (and also usually X.509 certificate objects that go along with them, as well as less-used RSA public key objects). I use PIV (NIST SP 800-7
869.
▲
by
rkeene2
11y ago
AppFS ( http://appfs.rkeene.org/ ) solves a similar problem and several other related problems: updates, dependencies, configuration files, transport mechanism, package signatures
870.
▲
by
rkeene2
11y ago
Using any sort of hardware security module, such as a smartcard (which some YubiKey devices can operate as) will not allow your private key to be compromised because you have no access to your private key -- it's on a whole separate co
More ›