Hacker News Reader

fensipenson TunSafe WireGuard Client for OS X

You are not alone, see the following exchange on LKML, where Donenfeld immediately "disciplines" another subscriber for asking some minor question that was not 100% on topic:

https://lkml.org/lkml/2017/12/7/1745

Follow-up by David Miller:

https://lkml.org/lkml/2017/12/8/533

That said, I like the idea of WG like I liked the idea of systemd.. but Donenfeld just seems to be another Poettering in the making.

fensipenson NYPD is canceling its Palantir contract

> Big data helped New York's cops bust Bobby Shmurda

So glad Palantir helped getting Bobby Shmurda (best known for Shmoney Dance) off the streets.

fensipenson Carl Bildt: The truth about refugees in Sweden

The new ones are always "completely different" from the old ones.. until someone digs up old articles that say the same thing about the old ones.

fensipenson Native virtualization for macOS

I never tried VMF so it may be faster, sure. The thing about VBox is, like I wrote, features. VBox is basically a full-featured Virtualization-Suite, has multiple UIs and an API. It is also available on Win7,8,10/macOS/Linux and Solaris.

You may add: excellent documentation and friendly support (board, irc, list).

If I'll ever have to switch, I'd first need feature-parity.

fensipenson Native virtualization for macOS

better than Virtualbox

Just take a look at VBoxManage --help for a crazy list of settings and features that VBox has accumulated during the past ~10 years.

It even supports ATA TRIM so your fs-driver can discard blocks and keep the VDI-file deflated at all times.

Performance-wise: Compiling stuff within VBox on an i7 quad-core (-j5) is almost as fast as native. X on Linux-VMs feels native too, especially when running in fullscreen.

fensipenson Native virtualization for macOS

Bridging to a wireless interface is done differently from bridging to a wired interface, because most wireless adapters do not support promiscuous mode. All traffic has to use the MAC address of the host's wireless adapter, and therefore VirtualBox needs to replace the source MAC address in the Ethernet header of an outgoing packet to make sure the reply will be sent to the host interface. When VirtualBox sees an incoming packet with a destination IP address that belongs to one of the virtual machine adapters it replaces the destination MAC address in the Ethernet header with the VM adapter's MAC address and passes it on. VirtualBox examines ARP and DHCP packets in order to learn the IP addresses of virtual machines.

https://www.virtualbox.org/manual/ch06.html#network_bridged

fensipenson How I wrote and published my novel using only open source tools

> Ex Google Zürich

Badge of Honor

fensipenson Reflections: The ecosystem is moving

So what? Many standards originated from some particular need of one or two companies popular at that time. Look at the current IETF WGs and the authors of the drafts they produce.

fensipenson Reflections: The ecosystem is moving

what Facebook did with email

What did Facebook do with email?

fensipenson Farewell, App Academy. Hello, Airbnb – Part 2

130K + something that at some point may be sold for a currently unknown value.

fensipenson Farewell, App Academy. Hello, Airbnb – Part 2

> close-minded and pessimistic attitude

I would call it healthy skepticism.

fensipenson Another Vietnam – Unseen images of the war from the winning side

You are trying too hard and thanks to your recent comparison with the capital of a country that has been / is currently governed by military dictatorship, I really can no longer take you seriously.

fensipenson Another Vietnam – Unseen images of the war from the winning side

the US was maintaining a kill ratio of 134:1

This ratio makes no sense and would imply almost 8 million dead NVA/Vietcong combatants by the end of the war.

fensipenson Another Vietnam – Unseen images of the war from the winning side

but the only commentary it seems to offer is by Vietcong themselves

Yeah, nobody cares about the point of view of a 60kg Vietcong soldier. They are not supposed to have a face and keep quiet beneath that 2+ million bodycount. The brave war stories are reserved for the american GIs.. and hollywood.

fensipenson Cloudflare Introduces Universal DNSSEC: Secure DNS for Your Domain

> This is the fourth time in the last 30 days I have seen some blog post about DNSSEC on the front page. Three overtly pushing Cloudflare DNSSEC and one about email and DNSSEC written by a Cloudflare employee.

Absolutely, this is getting out of hand.

Would be easier to just buy HN and replace all top stories with your crappy DNSSEC ads..

fensipenson Your own Debian Mail Server (part II): how to prove you are not a spammer

Again: SPF, DKIM and DMARC are no indicators of spamminess of a source. These systems have a completely different purpose.

fensipenson The Hostile Email Landscape

> this server was configured perfectly: (...) SPF, DKIM and DMARC policies in place

SPF, DKIM and DMARC are no indicators of spamminess of a source. These systems have a completely different purpose.

fensipenson Show HN: Passbox – Another password manager using Bash and GPG

the standard unix password manager

Annoying amount of hubris.

This pile of unattractive bash-snippets is neither unix nor standard. Just call it what it is: A very dependent script that will probably work on most GNU/Linux distributions.

fensipenson OS X Command Line Utilities

say -v cellos "Dum dum dum dum dum dum dum he he he ho ho ho fa lah lah lah lah lah lah fa lah full hoo hoo hoo"

fensipenson How to Get Tenure

Would you consider (after killing what you've been working towards for the last n·10 years) founding and running a 501(c)(3) non-profit like http://NGLY1.org/ a career for you?

Because if you answer yes, you are full of it.

fensipenson For DNSSEC

SSH relies almost exclusively on the first connection to a server being correct and an attacker being unable to perpetuate a MITM attack against a given host.

Do you rely almost exclusively on the first connection to a server being correct? Apparently. Does SSH? No.

fensipenson Debops (2014)

The thing with "rolling-releases" is that updates will bite you in the ass exactly then when you have absolutely no time to deal with them.

So even if the system boots, it doesn't mean anything because booting a system is only one out of 100+ use cases that you will never be able (or willing) to test after each pacman -Syu..

fensipenson Idea of paying citizens a yearly stipend is gaining support in Switzerland

> Urgh really? That is so disingenuous I actually feel a bit dirty after reading it.

Just walk away. Because you won't win any argument with that type. A very convinced yet insecure type.

fensipenson Idea of paying citizens a yearly stipend is gaining support in Switzerland

Swiss people, who have all law-making authority here

Law making is done by the two chambers of parliament, National- and Ständerat. General constitutional amendments as well as particular laws can make their way to the electorate but that does not happen automatically.

Edit: If by "introducing his or her idea to the public voting" you mean constitutional amendments.. they require 100k signatures, not 20k. Why don't you look these things up, patriot?

    > because Swiss people have basic understanding..
    > Many journalists don't understand how Swiss political system works..
    > this otherwise excellent system..

Right.. swiss people are so smart. Like that one time where they didn't have any problems with institutional child-slavery for decades.. and the other time where they started to trample on rights of religious minorities.. I could go on.

fensipenson Cleaning an Arch Linux installation

whenever I try dist-upgrade in Debian et al. I always end up blowing up something.

Back this up with examples, please. I use Debian since potato and can't remember dist-upgrade failing me once.

fensipenson Auditing GitHub users’ SSH key quality

blaming Github for doing crypto right

So github is doing crypto right by unnecessarily exposing data that is _only_ relevant to a) the user and b) his personal access to his repos?

By this logic, why not make crypto even better and add something like github.com/user.address, github.com/user.mail or github.com/user.phone?

fensipenson Auditing GitHub users’ SSH key quality

Let me quote from "PGP & GPG -- EMAIL FOR THE PRACTICAL PARANOID":

You can send someone else’s public key to an old-style keyserver. Although you might think this would be a favor, it’s actually extremely rude. The public key owner might have reasons for not using a keyserver and might prefer to distribute his public key via some other method—or he might not want to publicize the key at all beyond a small group of people.

Never publicize someone else’s key for them!

Now, if your reply reiterates your argument that public keys are public because it's in the name, duh, then I can't help..

fensipenson Auditing GitHub users’ SSH key quality

This is about being able to connect keys to individuals and then searching The Stash for more links that then build a graph.

But it's just metadata, isn't it..