strenholme

11 ms·

91.
by strenholme 5mo ago
>>>uses dummy accounts to bend the voting and discussion<<< This is a false accusation with no evidence to back it up. Let me state this clearly: I am not using sockpuppet accounts nor am I stacking the vote. Ycombinator
92.
by strenholme 5mo ago
This list is very useful; Vile isn’t quite Vi, but it’s close enough, and it includes a Windows32 binary which works with CP-1252 [1] (albeit in a separate window), and fits in under 700k (7-zip compressed). What I wish existed was a fork o
93.
by strenholme 5mo ago
“The software has to present a worthwhile target (ie have a substantial long term userbase) before anyone will bother to look for exploits” MaraDNS is a worthwhile target; two people have been auditing it this year, in fact: https:/&#
94.
by strenholme 5mo ago
Apologies for being confrontational; accusations of there being security holes are serious accusations in my book, and need to be backed up with solid facts. Yes, that’s how seriously I take security with the software I make available on th
95.
by strenholme 5mo ago
Agreed, it made a lot more sense to write MaraDNS in C in 2001 though. The main advantage of writing in C over Rust here in 2026 is that C has two different Lua interpreters, and there isn’t a port of Lua to Rust yet; [1] yes, there are w
96.
by strenholme 5mo ago
The point of djbdns and qmail was this: It allowed administrators to run a local DNS server securely without needing to constantly patch the code. They were limited in scope, but were perfect for admins who valued security over features. I
97.
by strenholme 5mo ago
>>>The patch landing in 2021, instead of 2014, being one of those concerns.<<< What makes you think I was using Lua in 2014? Seriously, do you even know how to use “git log”? I added Lua to MaraDNS in 2020: https:/&
98.
by strenholme 5mo ago
A lot of security and other audits have been performed against it though; MaraDNS, after all, is notable enough to have a Wikipedia page and hundreds of GitHUB stars. For example, when the Ghost Domain Name DNS vulnerability was discussed,
99.
by strenholme 5mo ago
It’s useful for things like 10.1.2.3.ip4.internal style queries, or having a DNS server that always returns a given IP for any query given to it. More discussion is on the coLunacyDNS overview page: https://samboy.github.io/
100.
by strenholme 5mo ago
DJB is a lot of things, and I have great respect for him, even though I feel he didn’t responsibly maintain Qmail/DJBdns/Publicfile. He made MaraDNS more secure because I carefully read his documentation—I got the idea to have a
101.
by strenholme 5mo ago
You weren’t replying to me. The parent poster made a good point—a vulnerability in Lua doesn’t mean software running Lua can necessarily be exploited—but, more to the point, I do update Lunacy and make sure it’s secure, just as I still tak
102.
by strenholme 5mo ago
I should explain how MaraDNS uses Lua 5.1 (actually, Lunacy, my own fork with security bugs fixed as well as security hardening—including, yes, a patch against CVE-2014-5461), so you can get an idea of its attack surface. MaraDNS has three
103.
by strenholme 5mo ago
Thank you for your concern. I fixed CVE-2014-5461 for Lunacy back in 2021: https://github.com/samboy/lunacy/commit/4de84e044c1219b06744... This is discussed here: https://samboy.github.io/Mara
104.
by strenholme 5mo ago
Yes, I can. https://samboy.github.io/MaraDNS/webpage/DNS.security.compar... Also, my sister post: https://news.ycombinator.com/item?id=48112042
105.
by strenholme 5mo ago
I have far more evidence of a very good security record with MaraDNS than “No bugs in 3 years in this software with a much smaller audience and also look AI audits!” • The software has been around for 25 years • The software is popular enou
106.
by strenholme 5mo ago
DJB, with Qmail and DjbDNS (as well as Publicfile, which didn’t catch on in an era of CGI scripts), showed that one could have (mostly) security bug free software without the scope being “extremely narrow”, and without the claim being “dubi
107.
by strenholme 5mo ago
Shameless plug time: My own MaraDNS has been extensively audited now that we’re in the age of AI-assisted security audits. Not one single serious security bug has been found since 2023. [1] The only bugs auditers have been finding are thing
108.
by strenholme 6mo ago
Maybe they’re trying to block access to this URL: https://ubuntu.com/security/CVE-2026-31431 To address that, here is how to disable that local root access in Ubuntu 24.04: https://news.ycombinator.com/
109.
by strenholme 6mo ago
I can’t comment on the ramifications, except to note that elsewhere in the thread this appears to not break anything (whether it makes userspace crypto a little less safe is academic, but that doesn’t matter if we have an easy local root sh
110.
by strenholme 6mo ago
Also: - https://about.gitea.com/ (F/OSS MIT license self hosting GitHub like instance)
111.
by strenholme 6mo ago
Indeed. I was completely turned off my GitLab when I was updating my SSH keys across multiple accounts: GitHub, Bitbucket, Codeberg, etc. GitLab was really buggy; it is impossible to update the SSH key in GitLab using Firefox, and no obviou
112.
by strenholme 6mo ago
Self-hosting with open source code: - SourceHut: https://sr.ht/~sircmpwn/sourcehut/ - Forgejo (used by Codeberg, etc.): https://forgejo.org/
113.
by strenholme 6mo ago
>>>Dating patterns absolutely changed, women's online culture absolutely affects them. When women choose from men they know, like work colleagues, it works out. But on dating apps, women really are only interested in the top m
114.
by strenholme 6mo ago
github.io doesn’t have an IPv6 address. {name}.github.io does, e.g. mats-winther.github.io resolves to 2606:50c0:8001::153:
115.
by strenholme 6mo ago
The deluge of new security reports is somewhat of a pain in the butt for those of us who have written notable open source software decades ago that is still in use. I recently got about a dozen reports from one reporter, and they look to be
116.
by strenholme 6mo ago
Kinda sorta. github.com doesn’t have an IPv6 address. github.io does have an IPv6 address. Indeed, one workaround for getting rate limited when using a carrier NAT with github.com is to have a github.io page and pull data from github.io i
117.
by strenholme 6mo ago
I think the problem with the free speech ideals is a combination of engagement farms (i.e. a room full of smart phones where people “like” or view particular content so it artificially becomes more popular on social media) and bots (which,
118.
by strenholme 6mo ago
A lot of what happened politically in the late 2010s and hit its peak during COVID was that this meme grew that people were thinking and saying things so offensive, we had to make sure they didn’t have a voice on any viable platform. Oh, ye
119.
by strenholme 10mo ago
Good riddance to bad rubbish (TLDR: Questions are now almost never being asked on Stack overflow). The most annoying example I can think of (but can’t link to, alas) is when I Googled for an answer to a technical question, and got an annoyi
120.
by strenholme 10mo ago
“There is only one 10.0.0.0/8” Also: - There are 16 172.{16-31}.0.0/16s (I used 172.23 because Docker uses one of these) - There are 256 192.168.{0-255}.0/8s And that’s just what RFC1918 gives us. There are other private subn

More ›