HNHacker News
TopNewBestAskShowJobs

chaz6

1,023 karma · joined November 3, 2015

submissionscomments
chaz6··on Building a certificate authority for the whole Internet
The article contains conflicting statements:

> anyone already pointed at any existing free CA can move to us by changing a directory URL, with no new tooling and nothing to re-architect.

> We will only issue to clients that support ACME Renewal Information (ARI), standardized in RFC 9773.

I do not think both can be true.

chaz6··on Analysis: EVs are now nine times cheaper than petrol or diesel to drive in UK
There are a lot of places in the UK where you do not have the facility to charge your car at home (terraced houses, apartment buildings with no parking spaces). Running cables to buildings is risky. Even where there are houses that have a road in front of the front door, there is no guarantee that the owner is able to park in front.
chaz6··on ReBarUEFI: Resizable BAR for almost any UEFI system
Can anyone verify if this works on a Lenovo Thinkpad? I checked the List of Working Motherboards [1]. They often have Thunderbolt but no way to enable ReBAR.

[1] https://github.com/xCuri0/ReBarUEFI/issues/11

chaz6··on Reversing Factorio's RNG
I read another mention of Factorio today

https://devblogs.microsoft.com/cppblog/bringing-correctly-ro...

It mentions how they had to use a custom math library to differences in results on different platforms causing multiplayer sync issues.

chaz6··on Apple Reference Image: A New Approach for Verified Photography
I feel like for verified photography to be useful, it really needs a depth sensor so you can tell the difference between an actual scene and a photo of a photo. Granted, you could 3d print a scene from a photo, but at least for now it should be pretty obvious to tell the difference.
chaz6··on How the Disaster of "Forever Chemicals" Was Kept Secret
Crimes on this scale warrant capital punishment.
chaz6··on deSEC – Free Secure DNS
I was pleased to discover that a Terraform/OpenTofu provider is available.

https://registry.terraform.io/providers/Valodim/desec/latest

https://search.opentofu.org/provider/valodim/desec/latest

chaz6··on I accidentally logged hundreds of thousands of phone calls to military bases
It is a shame they did not actually set up a SIP server and see if any of those requests turned into actual call terminations.

There is another schema called TRIP [1] - telephony routing over ip that uses a number format "1234*1455" designed to be entered on a standard phone keypad. When I registered my ITAD (internet telephony administrative domain, the RHS of a TRIP number) I was lucky enough to get one that matches my local dialling code!

https://tripresurgence.org/trip/history/ [1]

chaz6··on Timeline of the OpenAI accidental attack against Hugging Face
When I read this I hear the voices of Tachikoma in my head.

https://ghostintheshell.fandom.com/wiki/Tachikoma

chaz6··on Show HN: We Fixed UniFi's Slow PPPoE Performance with PPPoE Half-Bridge
A lot of people dunk on PPPoE, but it does have one redeeming feature: failover is a lot easier and faster compared to IPoE. With IPoE you often rely on vendor-proprietary mechanisms. The closest thing to a common standard is packet-triggered sessions. Normally, BNG's set up sessions using DHCP but you can rig it to do a RADIUS request for a non-DHCP packet without a known session. In this case, it will send the source IP as the radius username, rather than the configured value (this usually comes from dhcp option 82 which includes the customer-id and circuit-id). In an access network, the source address is usually untrusted so instead you would want to have your BNG attach the NAS-Port-Id to the request (which usually contains the SVLAN and CVLAN).
chaz6··on Harvesting SSH Credentials: Insights from My Honeypot Network
The most common things I observe:-

- Installing a cryptominer or persistence tool

- Sending spam (smtp)

- Using pre-obtained credentials to log into various ecommerce/social media sites

chaz6··on June in Servo: real world compat, media queries, SharedWorker, and more
The very first link in the post is broken. The correct link is:-

https://github.com/servo/servo/releases/tag/0.4.0

Prior releases included a preceding 'v' in the version but not this one for some reason.

chaz6··on US citizen charged after GrapheneOS phone wipes during airport search
Perhaps a defence to this is ensure that a copy of the encryption key exists in a location outside the jurisdiction of the state.
chaz6··on Humans haven't stopped evolving
Does anybody think that evolution just stops? A species only stops evolving when it is wiped out.
chaz6··on Stinkpot: SQLite-backed shell history
Perfect! I wanted this without all the extras of atuin that I never use.
chaz6··on DskDitto: Ultra-fast, parallel duplicate-file detector
Here's a tip, if you are making regular compressed backups of the configuration of your network devices, if you use gzip, make sure to set the mtime to 0 when writing the file as this can throw off deduplication. This also applies to the name field.

https://docs.python.org/3/library/gzip.html#gzip.GzipFile.mt...

chaz6··on BGP ORIGIN attribute manipulation and its impact on the Internet
These days for an eyeball network only ~5% traffic is received from transit which makes me sad. The vast majority comes from a few asn's which you connect to via pni or at an ix.
chaz6··on Firefox 153 available with support for Vulkan video decoding, JPEG-XL
Hopefully this will be supported on Intel Arc cards that have hardware encoding and decoding.
chaz6··on Less Is More: Why Audio on SoundCloud Looks Different
As the years go by I get more and more annoyed by the fact you cannot sort results by upload-time on Soundcloud. Your only time-related option is a filter which makes no guarantee about the order of results.
chaz6··on Lobste.rs is now running on SQLite
Is that solved with wal2 mode?
chaz6··on I'm a USB-C Maximalist
It is not ideal, but you can buy C-to-C adapters with the resistors to force the charger to supply 5V.

https://www.aliexpress.com/item/1005012247371267.html

chaz6··on We’re making Bunny DNS free
You are missing the point. I do not want delegate the root of my domain. I want to delegate a subdomain, which is not possible without a paid account. Not to be confused with the registrar.
chaz6··on Show HN: Chiptune Radio
I browsed the website but I could not find a simple url I can put into my radio player. It appears the only way to listen is either on the website or twitch[.].tv which seems to defeat the point of a radio stream.
chaz6··on Why Switzerland has 25 gbit internet and America doesn't
On a similar note, there is 50G internet available in the UK, but there is only a single customer to my knowledge (on the Youfibre/Netomnia network). Another difference is that I believe Switzerland is using 25GBASE-X as the transport, whereas in the UK it is 50G-PON (alongside the regular XGS-PON service which most customers have).
chaz6··on We're making Bunny DNS free: because a faster internet won't build itself
I wanted to give Cloudflare a go, but I did not want to move my whole domain. Unfortunately you can only host a subdomain with a paid account.
chaz6··on We’re making Bunny DNS free
This is good news! For anybody wondering, there is a terraform provider available.

https://registry.terraform.io/providers/BunnyWay/bunnynet/la...

chaz6··on How many of the 170k English words do you know?
I know at least five.
chaz6··on Windows 11 users are tired of MS account requirements creeping into everything
When an SSD fails it often reverts to read-only mode. The manufacturers may require you to return the drive to receive a replacement or refund. By which point it is too late. You now have the choice of potentially risking the disclosure of your personal data to a third-party (and your shipment could end up on a lost-parcel auction of it did not get delivered) or missing out on your warranty.
chaz6··on Curl will not accept vulnerability reports during July 2026
I wonder if the likes of Red Hat, SuSE and Canonical have a support contract as they are commercial redistributors.
chaz6··on Show HN: Gitdot – A better GitHub. Open-source, written in Rust
Nice job! Please consider providing an oci (docker/etc) container image (or if you do already, make it easier to find!)
Page 1 of 16Next →