Hacker News Reader

Seems wrong that this post is flagged.

commandersakion An update on leaving Gmail for Fastmail

Most providers from my understanding don't handle aliases well.

I have a catchall *@domain.tld and Fastmail when it receives an email on an alias, responds correctly with the proper alias.

Also when I compose, it let's me write in a custom alias for the From sender.

Other providers and email clients seem to want you to create an identity for each alias which is a huge burden.

commandersakion Nintendo announces new product revisions in Europe with replaceable batteries

I recently changed the USB port of my Fairphone 4 and it was just unscrewing and screwing.

why are you changing a USB port on a phone?

commandersakion OpenWrt One – Open Hardware Router

Yeah, Linksys made a killing from this and the WRT54GS 2.0 because of OpenWRT.

commandersakion NSA tries to weaken mlkem standardisation?

Reminds me of the time when Joseph Touch (I think his name was) proposed the NULL cipher in TLS. "It's just a proposal."

commandersakion Completing a computer science degree on Coursera

Any suggestions for online program / distance learning (I'm in Australia)? I want a proper challenge not a walk in the park.

commandersakion OpenWiki: CLI that writes and maintains agent documentation for your codebase

Is this the tool that blasted away all the wiki pages for Azure in the repos?

commandersakion Show HN: Bramble – Local-first password manager

Ah just realised no iOS release, that's a non-starter.

commandersakion CarPlay Is Additive

Let me put it this way: using my car's console controls are more distracting than using CarPlay with siri/voice control. If I'm uncomfortable though I would be in a worse shape driving, hence there's a need to set climate.

commandersakion Show HN: Bramble – Local-first password manager

How does it handle browser autofill. What if you have to fill in a box that has a non-standard label? These are things I rely on with 1Password.

commandersakion CarPlay Is Additive

I don't know about Rivian, but I'm generally less distracted on the road with CarPlay due to Siri & Voice Control. I wish I could extend it to my native car controls such as climate control etc.

commandersakion Anonymous GitHub account mass-dropping undisclosed 0-days

If said videos or media are doing that, there would be a corpus of samples by now. I'm very sceptical of this.

commandersakion Anonymous GitHub account mass-dropping undisclosed 0-days

I'm guessing none to be honest. It sounds plausible but in practice it's probably too difficult to do anything useful compared to other tried and true vectors.

Everyone goes to the extremes when it comes to these theories and throws out all aspects of pragmatism.

commandersakion Anonymous GitHub account mass-dropping undisclosed 0-days

How many victims are known to be exploited by video codecs? Compare that with the wider landscape of how victims are being exploited.

commandersakion Librepods: AirPods liberated from Apple's ecosystem

Looking at the comments from the previous thread at least on Android looks like you need to root the device. I'm not sure that is still required.

commandersakion LastPass notifies users of yet another data breach

E2EE done properly is why. See 1Password security whitepaper for how.

commandersakion Google Hits 50% IPv6

OP was making the case that CGNAT adds to the latency in some significant way. Yes it adds latency, but it is of negligible concern.

commandersakion Google Hits 50% IPv6

You do realise that mobile usage is a subset of the Internet and the Internet is not just about end user connectivity.

But you still haven't addressed my original point, how has IPv6 averted the impending (at the time) IP exhaustion problem? As I remember it, we were running out of IP addresses, then we did run out, and CGNAT helped extend the life of the Internet for people on IP, while v6 still remains an island that is optional and doesn't help alleviate any of the pain.

TL;DR: v6 is not fit for purpose.

commandersakion Google Hits 50% IPv6

20 years too late.

commandersakion Google Hits 50% IPv6

NAT / CGNAT has been doing the heavy lifting extending the life of the Internet; ipv6 has done jack shit. If v6 was useful and actually averted v4 exhaustion we'd all be accessing v6 sites/addresses at this point.

Put another way, we can drop v6 completely and the Internet will still work. Obviously wouldn't work the other way around.

As for telco addressing handsets, they could use any addressing scheme to be honest. When people talk about averting address exhaustion, they're not talking about internal addressing of networks, different problem altogether.

commandersakion Google Hits 50% IPv6

It was also predicted that the address exhaustion problem would be averted, in fact that was the purpose of v6. It failed to deliver.

commandersakion Google Hits 50% IPv6

Considerably simpler? There's two ways (maybe more?) to autoconfigure v6 addresses on a host, I'll never know or remember which to use. In v4 there's DHCP, that's all you need to know (nobody uses BOOTP). These endless choices go on and on with v6 with umpteen transition technologies to work with v4.

commandersakion Google Hits 50% IPv6

Which is which?

commandersakion Google Hits 50% IPv6

We are still talking a fraction of a millisecond, a few hundred microseconds at most. People are blowing out of proportion latency saved with v6, it's negligible at best, or at worst let's not forget IPv6 is two separate island because two tier-1 carriers refuse to peer (Cogent & HE).

commandersakion Google Hits 50% IPv6

Sparing a few hundred microseconds of latency is tangibly a better experience?

commandersakion Google Hits 50% IPv6

Still not fit for purpose.

commandersakion Stdx, Rust's extended standard library

With crypto publicly available tests come in form of KATs (Known Answer Tests), it ensures that the implementation works for certain inputs and thus it'll probably work for the whole domain, but it does not protect from subtle forms of weaknesses such as side channels.

The short version is that absolutely no-one should ever use this.

Ditto.

commandersakion Iroh 1.0

So what has the reception been like with IETF?

commandersakion Encrypted Spaces: An architecture for collaborative applications

I'm sceptical of verifying or generating ZKPs due to the cost of running a RISC-V program. But I guess if we have LLM inference in protocols, this might be acceptable. I'm not sure how it's fully used in the protocol and whether it sits on a critical path.

commandersakion Swift at Apple: Migrating the TrueType hinting interpreter

I know internally they use an IPsec implementation written by Rust (I think in the iCloud infra). Heard this from an ex-Apple engineer Ben (forgot his last name) that did a wonderful presentation of Rust from first principles. He said that it was hard to get people in on Rust when most would argue for Swift.

Edit: This is the guy: https://rustcurious.com/course/