rudasn

16 ms·

211.
by rudasn 3y ago
Sorry not at the moment, but is something I can spend some time on if you're willing to walk me through your use cases :) Thanks!
212.
by rudasn 3y ago
So, there was an issue when you added devices to a network and had the Assign to me flag enabled. That's fixed now! Thank you kind strangers for hitting that bug :)
213.
by rudasn 3y ago
It's just a config generator but you can share the configs. You bring your own cloud. Check the generated examples once you log in, but for a hub and spoke network let's say, the idea is this: - Create your network. - Add a device
214.
by rudasn 3y ago
Ah good one! I already support having a single WireGuard interface belong in multiple networks. So you can enable just a single config on your phone and be able to access devices in multiple, unrelated networks.
215.
by rudasn 3y ago
Just a config generator. I don't run any servers. I'm trying to strike a balance between full fledged solutions like tailscale, cloudflare tunnels, et al, and cli or gui based self hosted solutions like wg-easy and subspace. So yo
216.
by rudasn 3y ago
Thanks for looking into it! Yes, I thought/think about security a lot. First, you don't have to share/upload your private keys to WireHub for it to work - the generated configs will only have the public key (which we do store
217.
by rudasn 3y ago
No, just a name conflict.
218.
Show HN: WireHub – easily create and share WireGuard networks(wirehub.org)
312 points by rudasn 3y ago|72 comments
219.
by rudasn 3y ago
Oh wow this looks really useful. I'm looking for a lightweight ansible alternative, not for provisioning servers but for releases and deployments.
220.
by rudasn 3y ago
Nice. I'm working on a side project that's django based and does not require js to work. This will be handy.
221.
Simple task runner for automation pipelines(pypyr.io)
2 points by rudasn 3y ago|0 comments
222.
by rudasn 3y ago
The default settings seem to be at fault here, not the implementation it self. > This is because it both defaults to SHA1, a cryptographic hash algorithm considered insecure since at least 2005, and defaults to one single iteration, a &#
223.
by rudasn 3y ago
And you know its going to be DNS related caused by a bad config push :p
224.
by rudasn 3y ago
Dunno... If I followed you around while in public and recording everything you said and did, in public, is that surveillance?
225.
by rudasn 3y ago
Isn't more important that the known key does not change unless you made the change, than having the "right" key to begin with?
226.
by rudasn 3y ago
He's doing diffs: https://github.com/simonw/simonwillisonblog-backup/commit/82...
227.
by rudasn 3y ago
Yup, still is.
228.
by rudasn 3y ago
> How do you tackle this? Or am I just making a big deal over nothing? I have limited my "pleasure browsing" to very few sites. I don't download apps unless I need to (eg chat). Most importantly, I have Chrome with javascr
229.
by rudasn 3y ago
> Kamal is named after the ancient Arab navigational tool used by sailors to keep course by determining their latitude via the Pole Star. (Kamal was formerly known as MRSK).
230.
by rudasn 3y ago
Check out haml. Quite similar approach I think.
231.
by rudasn 3y ago
(2023) I think for many Europeans the whole concept of capital punishment is surreal, let alone the discussions and details on what it takes to kill someone for killing someone else. What a shit show.
232.
by rudasn 3y ago
Can someone ELI5 how just having network access is enough to do such damage? Were admin interfaces IP whitelisted only (no other auth)?
233.
by rudasn 3y ago
Yeah, but everyone is "special case" in retail.
234.
by rudasn 3y ago
I recently subscribed to debians security updates newsletter and I get about 2-3 emails per week about new exploits and security releases. Not sure your comment applies here.
235.
by rudasn 3y ago
Maybe it's because you have the dns ip on the allowed ips list, causing the dns queries to go through the tunnel? tcpdump or a similar tool may be helpful in this case to see where / how traffic is handled.
236.
by rudasn 3y ago
Yes that's the one.
237.
by rudasn 3y ago
There's a YT link on an earlier submission https://www.genengnews.com/topics/artificial-intelligence/cl...
238.
by rudasn 3y ago
What's your setup right now? A single wg interface/config on your phone, with two peers, one for home wg and one for remote vpn, with AllowedIPs on the home peer as 10.10.0.0/24 and AllowedIPs on the remote vpn peer as 0.0.0
239.
by rudasn 3y ago
Afaik, tailscale recently made changes to their go user space implementation that actually made their version faster than the kernel implementation, at least in some cases. I remember reading a blog post on tailscacles' website about i
240.
by rudasn 3y ago
Oh wow this looks super cool! I'm really surprised that there hasn't been that much research // progesss in this area. > The authors suggest that they have added “another brick in the wall of our understanding of musi

More ›