HNHacker News
TopNewBestAskShowJobs

j3th9n

651 karma · joined September 9, 2011

submissionscomments
j3th9n··on WhatsApp threatened to leave the Netherlands due to controversial backdoor law
Meanwhile Grapperhaus didn't want to appoint an independent team of researchers to investigate child sex abuse in connection with members of his own justice department.
j3th9n··on WhatsApp threatened to leave the Netherlands due to controversial backdoor law
Meanwhile Grapperhaus didn't want to appoint an independent team of researchers to investigate child sex abuse in connection with members of his own justice department.
j3th9n··on Innate immune suppression by SARS-CoV-2 mRNA vaccinations
You expected a science article like this coming from scientists paid by governments and the pharma industry?
j3th9n··on Ask HN: Am I going insane or is there genuinely no value in blockchain tech?
If you have 15 minutes to spare: https://www.youtube.com/watch?v=o73fWsqJDdY
j3th9n··on Ask HN: Am I going insane or is there genuinely no value in blockchain tech?
It's programmable and trustless allowing worldwide instant micro-payments with very low fees enabling the automation of machine 2 machine payments, or something like that.
j3th9n··on Ask HN: Am I going insane or is there genuinely no value in blockchain tech?
Machine 2 machine payments are a massive problem you can solve with a blockchain. Which can solve a whole lot of other problems, like automation. Which can solve another set of problems.
j3th9n··on I can't let go of “The Dunning-Kruger Effect is Autocorrelation”
Scientific facts do not exist, scientific observations do.
j3th9n··on In defense of swap: common misconceptions (2018)
I will look into that, thanks!
j3th9n··on In defense of swap: common misconceptions (2018)
4GB swap on a 4GB RAM VPS allows me to do an occasional yarn build, which would otherwise crash the server and who doesn’t need 8GB RAM the rest of the time.
j3th9n··on Send your email right to the other person's spam
Doesn't work, instead of ending in the spam folder it is instantly dropped, by my own mailserver at least: The response from the remote server was: 550 High scoring spam message has been dropped
j3th9n··on See how DMARC, SPF, and DKIM work interactively
I use https://github.com/domainaware/parsedmarc
j3th9n··on My Path to Financial Independence as a Software Engineer
People can still follow some of his advice, maybe end up with less money, but there's still some good advice.
j3th9n··on Running your own email is increasingly an artisanal choice, not a practical one
Things to get right and you're good to go:

- Reverse DNS

- SPF record

- DKIM record

- DMARC record

- limit outbound number of emails to catch possible spamscripts

j3th9n··on An interview that disappeared – FIFA World Cup Qatar 2022
When there's big money to be made there is corruption, take a look at for example the pharmaceutical industry.
j3th9n··on Ask HN: Freelancer? Seeking freelancer? (December 2021)
SEEKING FREELANCE WORK | System Engineer | Software Engineer

Location: The Netherlands/Spain

Remote: Yes, remote only

Willing to relocate: No

Technologies: 15+ years server administrator experience in Linux and Windows Server environments with a multitude of different technologies and applications.

6+ years software development experience in Objective-C, Java, Laravel PHP, Python, C, NodeJS, Swift, Shell scripting, Javascript.

I have built and run a webhosting and a VPN service. My experience helps me to connect the dots quickly and implement new technologies fast.

Résumé/CV: https://joosthoogendoorn.com

Email: Please see my website for contact information

j3th9n··on Ask HN: Who wants to be hired? (December 2021)
Location: The Netherlands/Spain

Remote: Yes, remote only

Willing to relocate: No

Technologies: 15+ years server administrator experience in Linux and Windows Server environments with a multitude of different technologies and applications.

6+ years software development experience in Objective-C, Java, Laravel PHP, Python, C, NodeJS, Swift, Shell scripting, Javascript.

I have built and run a webhosting and a VPN service. My experience helps me to connect the dots quickly and implement new technologies fast.

Résumé/CV: https://joosthoogendoorn.com

Email: Please see my website for contact information

j3th9n··on New Concerning Variant: B.1.1.529
Read about the differences in mutation for maesles and corona viruses and you'll probably never make this comparison again.
j3th9n··on Austria makes Covid19 vaccination mandatory as of Feb 2022
No they are not, you have a choice. Also in this case you have a choice, take the jab, leave the country or ehhh...get vaccinated forcefully? Commit suicide? Anyway, whatever, there is a choice and they have consequences or something. We live in a democracy you know.
j3th9n··on Spending $5k to learn how database indexes work
Are StackOverflow topics now eligible for HN as soon as you mention the savings? Or is mentioning some numbers about the users enough? Or did I just click on an advertisement? So many questions.
j3th9n··on How Microsoft reduced Windows 11 update size by 40%
Xcode could learn a lot from this.
j3th9n··on Why not “Why not WireGuard?” (2020)
So who is to blame? AT&T for incompetence while implementing the old IKEv1 version, or IPSec/IKEv2 for apparently not being able to be attractive enough for AT&T?
j3th9n··on Why not “Why not WireGuard?” (2020)
Unless there is an alternative it can't be outdated, per definition. WireGuard is not an alternative in many cases. But I get your point, it might have design mistakes (or implementations we would have done different today, while I think you are talking about IKEv1, not IKEv2), but no IPSec/IKEv2 server is left open for scriptkiddies to break, it's receiving updates when bugs are found and in this sense not outdated too. Unless you're using outdated crypto algorithms, but that's up to you. The NSA possibly has capabilities to break IPSec/IKEv2 anytime they want, but that's something we don't know about WireGuard either. If that's the case with WireGuard, it has design flaws too or bugs which aren't found yet. It's better to know about a design flaw and mitigate against it, then not knowing about it and not being able to mitigate against it.
j3th9n··on Why not “Why not WireGuard?” (2020)
Then it's you breaking things because of lack of understanding, not IPSec/IKEv2. The same way no dishwasher is going to break plates, unless you throw them in with force yourself.
j3th9n··on Why not “Why not WireGuard?” (2020)
Yes, I guess the analogy has its limits. (-: The only point I'm trying to make is that no VPN protocol is an out-of-the-box solution. And mind you, I'm talking about the protocol, the out of the box solution "Tailscale" is not a protocol for example, it's an app with WireGuard at its core with added proprietary functionality to make it work out-of-the-box. WireGuard as a protocol is possibly the easiest to setup, IPSec/IKEv2 might be the most challenging to setup. On the other hand WireGuard has limited capabilities, IPSec/IKEv2 has a bit more. More capabilities for IPSec/IKEv2 comes with more study and practice.
j3th9n··on Why not “Why not WireGuard?” (2020)
Ok, you're not the first one blaming me for defending or gatekeeping, even calling me selfish, so I guess I need to clarify myself a bit: I love WireGuard, Tailscale does a great job making it even more "user" friendly and I'm nowhere suggesting to invest in IPSec instead of something "modern" (or do you mean something invented not longer than 3 years ago?). You're missing my point, putting words in my mouth and you seem to not know what you're talking about if you think for example WireGuard is an alternative for IPSec/IKEv2, because in a lot of cases it's not. You're even calling IPSec/IKEv2 outdated. There's a difference between the protocol and the configured crypto algorithms. If the configured algorithm is outdated, configure a modern one. If that's not possible in your device supporting IPSec/IKEv2, vote with your money and don't buy from that manufacturer. Don't blame IPSec/IKEv2 for it.
j3th9n··on Why not “Why not WireGuard?” (2020)
I had other intentions with my comment than what you insinuate.
j3th9n··on Why not “Why not WireGuard?” (2020)
IPSec/IKEv2 is not breaking anything, maybe it just won't setup a tunnel. Maybe a better analogy: We don't say the same thing about for example a piano: "it should only be able to be used correctly". You have to study and practice a bit before you can play a somewhat decent piece, without study no piano play. The same for IPSec/IKEv2, without study no tunnel. Every VPN protocol needs a bit of study, maybe some protocol a bit more than the other. We have a Dutch saying: "Als een boer niet kan zwemmen ligt het aan zijn zwembroek", which translates to something like: "If a farmer can't swim it's because of his swimming trunks". If you want out-of-the-box VPN solutions, you go to a VPN provider and download their apps. ;-o
j3th9n··on Why not “Why not WireGuard?” (2020)
This comment thread is for people who don't think IPSec/IKEv2 is the worst invention on the planet and want to share life saving stories about it. This will inevitably be downvoted, but (almost) everytime I see IPSec/IKEv2 mentioned there's a bunch of people puking all over it. Of course, it has a lot of options and configurations and you can fu*k things up, you have to study it a bit, like a brain surgeon has to read some books and do some practice. But once done that, it is a beautiful piece of protocol, excuse my language. It's fast, stable, it auto-reconnects, not to mention MOBIKE, it is simply state-of-the-art. I guess not everybody can drive the Formula 1 car of the VPN protocols. ;-o
j3th9n··on Full WireGuard Support in ProtonVPN for Android
Well, hit me up if you want a VPS installed with WireGuard with maybe some nice web interface like https://github.com/EmbarkStudios/wg-ui
j3th9n··on Full WireGuard Support in ProtonVPN for Android
Then maybe you need to add the following to the [Interface] section of your wg0.conf on your server or else I don't know ;-) :

PostUp = iptables -A FORWARD -i %i -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

PostDown = iptables -D FORWARD -i %i -j ACCEPT; iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE

← PreviousPage 4 of 7Next →