HNHacker News
TopNewBestAskShowJobs

cuillevel3

308 karma · joined April 6, 2013

submissionscomments
cuillevel3··on THW: Germany′s army of volunteers for disaster relief
> Firefighters are the most and they are almost always volunteers, the so called "Freiwillige Feuerwehr". As a member of the Freiwillige Feuerwehr you'll have some kind of pager or app to alarm you and people will then leave work and rush to the fire department and man the trucks. Only large cities (> 100k residents, I think) need to have paid firefighters.

Germany has three kinds of firefighters: volunteer, fulltime and conscripted.

I've never heard of conscripted firefighters ("Pflichtfeuerwehr"), but apparently it's possible to call upon able persons, i.e. if the village is to small and not enough volunteers exist.

cuillevel3··on German region to fine Tesla for illegal construction
The picture in the article faces away from the factory?

https://www.rbb24.de/content/dam/rbb/rbb/rbb24/2021/2021_07/...

cuillevel3··on Mozilla rolls out DoH to Canadian users of Firefox
Oops, I meant this one: https://www.bentasker.co.uk/documentation/linux/407-building...
cuillevel3··on Mozilla rolls out DoH to Canadian users of Firefox
You could try to run an IPv6 only DNS server, harder to find.
cuillevel3··on Mozilla rolls out DoH to Canadian users of Firefox
Here's a blog post from someone who uses nginx 'doh-to-dns' to connect their DoH clients to Pi-hole.

So, yes you can blacklist domains, as long as you can configure the DoH servers that the client uses.

cuillevel3··on Mozilla rolls out DoH to Canadian users of Firefox
Easy: https://dnsprivacy.org/wiki/display/DP/DNS+Privacy+Clients#D...

I want to add, that you can't run your own public DNS server nowadays, because it can be misused for DOS and hosting providers scan for open DNS servers.

So if you want your own public DNS resolver, DOH is much easier.

cuillevel3··on Tips to prevent adoption of your API
Depends on the API and how much testing you need. You want to test your code, not the API's availability or correctness.

But it can be as easy as using a fake http library and mocking the responses, or using a httptest server: https://onsi.github.io/gomega/#ghttp-testing-http-clients

If the API is complicated and you have to write your own fake server, that might not make sense for small projects.

cuillevel3··on Germany bans Facebook from handling WhatsApp data over privacy concerns
Whatsapp already had a separate privacy policy for the European region (https://www.whatsapp.com/legal/updates/privacy-policy-eea?la...)

Apparently that was too permissive. I guess they had to try?

cuillevel3··on Will Linux phones stay around this time?
Right, I meant ".. in most Linux distributions".

The kernel is Linux and the most important userland parts are from GNU. Therefore they are really GNU/Linux distributions.

The GNU project has more to offer than coreutils, like Hurd.

cuillevel3··on Will Linux phones stay around this time?
Wow. So normally we say: Linux is the kernel and GNU is the userland. (Remember GNU/Hurd?)

So, what is Android? Does Linux run the Android userspace, or does Android run the Linux kernel...

cuillevel3··on Apple is sued for telling you that you're “buying” movies
It's heartbreaking to see Nintendo Switch consoles on ebay with hundreds of dollars worth of eshops games. At that point you're selling an email address.
cuillevel3··on Signal Adds Cryptocurrency Support
I started with PGP in the Nineties, under DOS. Back then it made sense. Though, it certainly was not for everybody. And despite all the crypto parties and what not, it's still not mainstream.

And yes it's great that some tools manage to hide PGP, it's not easy to do.

The problem, maybe it's not us, maybe it's PGP?

cuillevel3··on What have we lost? [video]
Most mirrors are in Germany: https://cdn.media.ccc.de/events/rc3/h264-hd/rc3-r3s-20-eng-W...
cuillevel3··on Signal Adds Cryptocurrency Support
Sounds interesting. Signal already has the roster and all. I'm happy this won't be another app, that no one will use.

I might be able to put off installing the paypal app forever.

cuillevel3··on Signal Adds Cryptocurrency Support
Ugh, I hate PGP so much. It's keeping people from interacting securely for over two decades The UI is bad, integration is hard, the chain of trust (it never was a web) is broken, the CLI tools are annoying... but hey let's do crypto parties with other nerds and exchange passports.
cuillevel3··on Not the First Time We Tried (FSF, GNU, RMS, etc.)
I'm afraid to sign that, my boss (=the company) signed the petition against him.
cuillevel3··on Was German unification inevitable?
East Germany only had about 15 million people. West Germany 65 million. So yes, it was an increase, but not like Germany doubled in size.

Also noteworthy, the Soviet Union dissolved shortly after, at the end of 1991.

cuillevel3··on When did writing in major newspapers become so bad?
Wikipedia says Project Veritas is a far right activists group, you could have honestly mentioned that.
cuillevel3··on Godot maintainer removes controversial satirical piece from documentation
What? It's really hard to have fun on the Internet.
cuillevel3··on The modern packager’s security nightmare
> Static linking, dependency pinning and bundling are three bad practices that have serious impact on the time and effort needed to eliminate vulnerabilities from production systems.

I'm astonished how different this perspective is. As a developer I see that software is developed faster nowadays. size, library reuse and functionality are increasing.

And distributions are just not able to keep up. I feel like they never did, they just made exceptions for packages that were too important to ignore, like browsers or office suites.

Really, it's not the software. It's the distros.

Not using libraries is not an option, you don't want devs to write their own crypto. Not pinning dependencies is bad, incompatibilities and security issues could make their way into the code. The test surface also gets bigger and it raises the question which combinations are supported.

Update: I think what I want to say is, distributions should accept that they can only provide that level of "stability" for a limited set of applications. The new and shiny stuff will always happen elsewhere.

cuillevel3··on Green hackers around the world, let’s destroy Bitcoin
Scarcity is the important thing here. Making Bitcoin hard to compute increases their scarcity. The amount of work that was put in, does not directly drive the price.

The point of "Marxist" labor theory, is that you shouldn't pay workers less, than the value of what they produce. I don't think Bitcoin miners ever made that claim, unionized and found their class consciousness to get paid the real value...

cuillevel3··on Papercraft Models of Computers
Great idea, I really like to have 3d printed, historic, server models, so I can build model datacenters. Model railways is so last century..
cuillevel3··on Kids find a security flaw in Linux Mint by mashing keys
This bug is not about the Gnome screensaver. This is about Cinnamon, which forked from Gnome 3 in 2013.
cuillevel3··on Kids find a security flaw in Linux Mint by mashing keys
Here is an eight year old presentation on fuzzing X:

https://media.ccc.de/v/30C3_-_5499_-_en_-_saal_1_-_201312291...

cuillevel3··on Kids find a security flaw in Linux Mint by mashing keys
Right ....

Start kiosk mode fullscreen app as a lock screen -> if app exits -> show desktop

cuillevel3··on Software effort estimation is mostly fake research
Right, the estimates are not even in the guide: https://www.scrumguides.org/scrum-guide.html#sprint-planning

Planning poker and such are useful as they encourage the team to discuss differences and help identifying stories which are too large.

cuillevel3··on Linux Hardening Guide
Awww, does anyone remember the Linux Administrator's Security Guide (https://seifried.org/lasg/)?

It was such a valuable resource in 2001.

cuillevel3··on QEMU Advent Calendar 2020
> Tech and science used to be safe spaces free from abusive ideologies

I don't think this is historically accurate. Such a time never existed.

cuillevel3··on Apple Silicon and losing our legacy
I once heard someone joking (?), that Qemu was written to run Macromedia Flash on PowerPC Linux. So, maybe it takes ten years, but why not emulate M1?
cuillevel3··on Mozilla DNS over HTTPS (DoH) and Trusted Recursive Resolver (TRR) Comment Period
Indeed, however there are more use cases for VPNs. You might run a "road warrior"-setup, connecting to the company network for services and accidentally leaking company DNS info to the airports WLAN provider.

DNS setup is messy.

← PreviousPage 2 of 6Next →