yegle

40 ms·

481.
by yegle 7y ago
I'm actually using the HP Z420 (the one mentioned in the article) at work. Pretty quiet IMO. Note the Z420 is a workstation not a server. Buying an old server is completely different.
482.
by yegle 7y ago
*if you are using plaintext DNS query. Both Google DNS and Cloudflare DNS support encrypted DNS query over TLS and HTTPS.
483.
by yegle 7y ago
You don't need to run pihole and VPN from your router. With port forwarding you can use your home lab to do both.
484.
by yegle 7y ago
Wait a minute... First Google DNS provide both DNS-over-HTTPS and DNS-over-TLS, second Pihole (or should I say dnsmasq, or FTL the name of their dnsmasq fork) does not support forwarding DNS query request to upstream using neither DNS-over-
485.
by yegle 7y ago
There was an effort https://en.m.wikipedia.org/wiki/Google_Contributor which worked very well: you set a monthly budget just like advertisers, and you participate in the bidding of ads on the website you are visiting.
486.
by yegle 7y ago
Have being using my own DNS server with pihole, couldn't be happier. https://githuh.com/yegle/your-dns
487.
by yegle 7y ago
Depending on your goal: I really don't like the idea all the ISPs can track what websites I visited (Verizon, ATT, and ISPs behind public WiFi). To me, my setup is a huge improvement to the status quo.
488.
by yegle 7y ago
Hey, I've updated the README and the instruction should be straight forward. Docker compose file makes everything easily reproducible and I've included working example configs. Not sure how I can further simplify the setup but ope
489.
by yegle 7y ago
This. I'm happily using JuiceSSH in Android Q beta even though it was last updated in 2017 and was targeting Android L. Android maintained reasonably good backward compatibility just like Windows did. So many iOS app developers would u
490.
by yegle 7y ago
Debian 10 Buster already install Stubby DNS by default as your caching DNS server.
491.
by yegle 7y ago
Disclaimer: I work at Google. I know our internal policy regarding PII information and the tooling around it to protect PII information, so individual employees cannot easily violate my privacy. And I know people work there are generally ve
492.
by yegle 7y ago
A self-host solution by its nature requires some investment in the techniques and would take greater effort (that's how most open source projects make money). Look, I'm not trying to sell my solution here. This is Hacker News, I&#
493.
by yegle 7y ago
Not saying my setup has lower reliability than the hosted service (did nextdns.io promise any SLA?). For the added privacy, the potential lower reliability is a risk that I'm willing to take. Even with this setup there are ways to incr
494.
by yegle 7y ago
Depending on your goal. If you just want to have an ad blocking DNS server then nextdns.io is fine. But if you also want to have some control over the privacy issue involved in using a public DNS server, you should seriously consider hostin
495.
by yegle 7y ago
I just posted it https://github.com/yegle/your-dns .
496.
by yegle 7y ago
I don't understand why any privacy conscious person would choose a hosted service instead of self-hosting your own solution. Implementing the whole thing (modulo the anycast IP, which is the only thing I did not use) is easy. I have a
497.
by yegle 7y ago
NPM introduced a new type of code injection.
498.
by yegle 7y ago
A short video on Phage from Motherboard: https://youtu.be/aVTOr7Nq2SM
499.
by yegle 7y ago
I think you are referring to OpenSSL 1.1.1. OpenSSL 1.1.0 doesn't support TLS 1.3 (Debian Stretch ships with OpenSSL 1.1.0)
500.
by yegle 7y ago
There are two basic flavors of distroless image, one is base, the other one is static. The `static` image is very bare minimal and only contains things like nsswitch.conf and ca certificates. This is the recommended base image for staticall
501.
by yegle 7y ago
For almost any serious job running in production, you might need CA certificates and openssl.
502.
by yegle 7y ago
Why is that a bad thing? Binaries are binaries, whether you copied from a deb package or completely built from source code (assuming reproducible build, which Debian supports), they are the same.
503.
by yegle 7y ago
For anyone who want a small image but with glibc, https://github.com/GoogleContainerTools/distroless is a good choice, especially if you are writing in static linked language e.g. Go and Rust.
504.
by yegle 7y ago
Not entirely due to the acquisition. The migration repo started back in Dec 1, 2017: https://gitlab.com/gitlab-com/migration/commit/ab5bf6b03ffc0...
505.
by yegle 7y ago
Huawei
506.
by yegle 7y ago
You are describing modifying someone else's unrelated code will cause the rebuild of your code right? This looks like your targets unintentionally depend on the other code. To find out how/where the dependency was introduced, you
507.
by yegle 7y ago
Wait what? As long as the build process is reproducible, why do you care if it's incremental or not? If you don't trust bazel, people have been using distcc+ccache since forever.
508.
by yegle 7y ago
The Atom C3000 series is a beast with 10G Ethernet, up to 16C and support for ECC DDR4.
509.
by yegle 8y ago
What's the easiest way to get access to the basic HTML view? I used to be able to switch to basic HTML following the link in the footer, but it's gone now.
510.
by yegle 8y ago
Mis-configuration can also cause security issue.

More ›