Hacker News Reader

hexa-on NixOS moderation team resigns in protest of Steering Committee interference

Hi, I'm hexa (from the mentioned page), and this so-called context is irrelevant in this matter. This is also hosted on an unofficial community wiki, if anyone wonders.

Instead, the moderation team is complaining about undue interference in their work by the elected governance body of the NixOS community.

hexa-on Python 3.x: RCE in Python applications that accept floats as untrusted input

Why can't the base image receive those patches as well?

hexa-on Python 3.x: RCE in Python applications that accept floats as untrusted input

Distros are backporting security patches into their releases, so no harm done. If you rely on the python.org releases and don't build from source, then yes, that is a bit sad.

Case in point: The Debian security tracker, see their notes section referencing each commit.

https://security-tracker.debian.org/tracker/CVE-2021-3177

hexa-on Decentralized network 42: a big dynamic VPN

Those come from a WHOIS daemon that is reachable in the network as whois.dn42. There's also an authoritative DNS system for the .dn42 TLD with anycasted resolvers

    % dig whois.dn42 @resolver.nic.dn42 any +short
    172.22.0.43
    fd42:d42:d42:43::

as well as some ACME implementation with a CA that is constrained to the .dn42 domain and the allocated IP space.

   % openssl x509 -in /etc/ssl/certs/dn42_Root_Authority_CA.pem -noout -text
    [...]
                X509v3 Name Constraints:
                    Permitted:
                      DNS:.dn42
                      IP:172.20.0.0/255.252.0.0
                      IP:FD42:0:0:0:0:0:0:0/FFFF:0:0:0:0:0:0:0
    [...]

So there's quite some stuff to do and learn about.

hexa-on Decentralized network 42: a big dynamic VPN

DN42 is very easy to get into, if you have some networking knowledge. If you're familiar with Linux I'd recommend Bird as a BGP speaker and using Wireguard for L3 tunneling.

Either way, get started here: https://dn42.net/howto/Getting-started

hexa-on Python moved to GitHub

I was recently hit by an IPv4 routing outtage and had only IPv6 available to connect to the internet.

I was therefore unable to connect to github.com, as there is no IPv6 support available:

% host github.com github.com has address 192.30.253.112 github.com has address 192.30.253.113

hexa-on Screenshot Saturday

This looks nice. Any chance this is going to be open source?

hexa-on Tor: Directly connecting users from Turkey

There already exists a mirror list at https://www.torproject.org/getinvolved/mirrors.html.en. Of course this is hard to come by, when the whole torproject website is being censored.