HNHacker News
TopNewBestAskShowJobs

deknos

587 karma · joined March 31, 2017

submissionscomments
deknos··on Microsoft steals access data: Beware of the new Outlook
that would be even worse as it would by default also read mails.
deknos··on Gittuf – a security layer for Git
Hey, this is interesting, some questions:

1. does it also filter/escape ANSI Sequences in messages and author names? 2. does it block garbage collection? 3. how do you ensure that the developers are really the developers and there's no spoofing?

deknos··on OpenTF announces fork of Terraform
so, will OpenTF also care about Vagrant and Packer? That would be nice.
deknos··on OpenTF announces fork of Terraform
Well, do they also care about vault, vagrant and packer?
deknos··on Git-appraise – Distributed Code Review for Git
please make a pull request to add this to awesome git lists, like https://github.com/stevemao/awesome-git-addons for example! this is so cool
deknos··on JMAP – a modern email open standard
Does thunderbird and evolution support this nowadays?
deknos··on How to own your own Docker Registry address
Yeah, i kinda hoped someone would start building building something which would be automatic paying with a blockchain. Like when you upload a docker image, that will automatically pay a few cent or dollar for that storage which will be active as long as the money does not dry up.

Sadly that ship has sailed, until a dollar/government backed blockchain which allows to do such things will pop up. Which won't happen i think

deknos··on Show HN: Learn Python with Minecraft
lua! great! There's also blockly (which is a free version of scratch, the visual programming language), but i wanna have a real language! thanks!
deknos··on Show HN: Enc – A modern and friendly CLI alternative to GnuPG
> I don't understand why this would be called "rotting". Sure, it's old, but it's actively maintained by its original author, a Gmbh has been established around its maintenance and it retains a few developers for the purpose.

It is called rotting, because quite a few times critical vulnerabilities were found, but even former members of the GnuPG project could not convince Werner Koch to fix it before publication. Werner Koch also withholds updating the OpenPGP standard to make it up2date for current threatmodels. He's basically holding GnuPG hostage at that point and that threatens security. Sequoia tries to fix this, but Werner Koch does not want to change anything apparently.

> This is to say nothing of geopolitics. It's difficult for Europe to trust anything made in America. It was for this reason that Richard Stallman encouraged Germans to make encryption software, the import of which America allowed but the import of American encryption software in the Germany was illegal. This is why Werner Koch started gpg. Sequoia seems to be made by a foundation based in America. I doubt a significant following in Europe will pick it up.

Neither the NLlabs or the p=p foundation are set in america. Both are european efforts and in part paid by the european council. This is just FUD what you are telling here.

> Using the original gpg is a great way to show more international unity, but we all know that's a secondary reason to use software. The primary reason is that it's a quality piece of work that will be very difficult to reproduce.

Well, that is the same with sequoia which is basically made mostly by europeans which make much less money than all the consultants which produce daily cloudstuff which does not generate any value for society than taxes. to be honest, you should get your facts straight before telling FUD about seqouia.

deknos··on Nix and NixOS: a retrospective
i seriously doubt some of ops data regarding packages, it says that opensuse has much less packages than nixos. when you look on software.opensuse.org/build.opensuse.org that is much more.

https://en.opensuse.org/openSUSE:OpenSUSE_and_other_distribu... talks about over 120k packages and that page is from 2017...

deknos··on Help seed Z-Library on IPFS
did you also TEST it? last time i did this, it never really connected to the IPFS network. also it was marked as experimental
deknos··on Help seed Z-Library on IPFS
You mean, i can do a Hidden Service from behind NAT and connect that to IPFS via onion URL?

Let me see if i can figure this out :D

deknos··on Help seed Z-Library on IPFS
Well.. do you have Money for moving and paying subscription? :D
deknos··on Help seed Z-Library on IPFS
how? i am behind NAT for example, i tried doing it. it did not work.

Is there a way for people who have just 20 mbit/s up/downstream and do not have an stable IP addres from home behind NAT?

I would run a server for long for seeding if it would be over TOR.

deknos··on Sapling: A new source control system with Git-compatible client
before building a new git, there just could be a new git command, i do not know like, undo for example.

just they build one for switch.

i hope they build a migrate one, where you can switch to new/other hashing standards.

deknos··on Against DNSSEC (2015)
a question on this actually: can i pin for a certain domain a key or a key at a specific date (and all successfull rollovers) in /etc/resolv.conf or with one of the popular caching dnsserver software?
deknos··on Show HN: Chitchatter – P2P chat app that is serverless, decentralized, ephemeral
i just wish, magic wormhole also would adopt open stun/turn relays like this :(
deknos··on NIST Digital Library of Mathematical Functions
well, but not only for integer, but also for rational and real numbers (and there also the error margin)
deknos··on NIST Digital Library of Mathematical Functions
I wish there was not only a library, but also like a table for this functions, where the value and the bitlength of input and output was written.

So that we have a clear table of functions where implementations could test against.

deknos··on After self-hosting my email for twenty-three years I have thrown in the towel
actually something similar was proposed by djb with email2000.

sadly it got never picked up.

deknos··on After self-hosting my email for twenty-three years I have thrown in the towel
I already wrote this also in another thread. Which was not also only was suggested by me:

* implement and publish policies which emails you accept (regex/strings on domains, emails, headers, signatures and so on)

* found a association where all use this strict (which shall potentially be stricter than gmail and so on) settings and if gmail does not accept these emails, sue them for discrimination.

deknos··on Falsehoods programmers believe about email
i am more and more convinced that there should be standards and implementations where emailservices publish what they accept.

like, black/whitelist of regexes of emails-strings they just drop or domains they accept from, or headers they drop, or that they only accept mails which are signed by key x,y,z.

with that at least we could formalize that problem and services know what to expect.

deknos··on “Science must respect the dignity and rights of all humans”
funny why do we do no experiments on humans and try to minimize experiments on animals and control it with an ethicsboard if it has no overlap?
deknos··on Email Is Async
Email is run by a lot more people than those who want it dead.

also: they may want it dead, but still they use it for verification... so.. even they cannot kill the infrastructure apparently.

deknos··on Email Is Async
I just wish, people would work on open email features and fix things...

email can still be fixed, at least for semi-open systems. but noooo instead we build a myriad of other things.

Things to be fixed/extended:

* MIME * Support for SMIME/OpenPG Encryption with IMAP (like, when emails come into a imap inbox they are encrypted with a certain public key and signed with another, or when a email has to be saved, there's a standard, that emails can be saved encrypted in the inbox) * quite a few sieve extensions for more filtering/action possibilities * Publishing of Mailservers from whom they will/won't accept emails (or attachments) * better support of markdownn (markup/mime) type in emailreaders, there's even an rfc for it!

deknos··on Achieving an open-source implementation of Apple Code Signing and notarization
is there a public format for Code or Keysigning Servers? Like SCEP/EST, but for other stuff?
deknos··on Excel never dies (2021)
LibreOffice does have an solver. but i have no idea how it compares to others.
deknos··on Pirate Library Mirror: Preserving 7TB of books (that are not in Libgen)
is there actually a command line tool which can bulkdownload according to filters from libgen/mirrors? i do not care about speed, rate limiting would be totally okay, but i do not see such tools, which iteratively go over each mirror and check for content in a service friendly way
deknos··on Exploiting a heap overflow in the FreeBSD wi-fi stack
is that so. freebsd and linux share the same zfs code and linux also has btrfs.

like... where is linux behind?

deknos··on Show HN: Browser extension that spoofs your location data to match your VPN
out of the interest... are there any firefox derivations with which still the classic addons work?
← PreviousPage 6 of 11Next →