HNHacker News
TopNewBestAskShowJobs

john37386

442 karma · joined November 22, 2017

submissionscomments
john37386··on How I made a profitable Vim course
Very nice story. :)

How did you build vim.so? Is it a framework or purely coded in vim?

john37386··on Cool data embedded in the Bitcoin blockchain
It's very interesting and funny in a way. What is more interesting though is the website of the OP. Wow! It's the perfect marriage between old school and new. I'm amazed!
john37386··on Terraform 0.15 General Availability
I had the same question or concern. I also realized too late that 0.12 is a bigger one than first thought. I was not severely impacted in the end, but boy it was a long time that I didn't experience such a tough upgrade. Happy to know that the hardest is behind and looking forward to try 0.15. Thanks
john37386··on Security Breach at US Universities
At first, I thought accellion is a software for managing students programs, schedules, courses, etc.

I decided to check their website and was stunned to learned that it's: an Enterprise Content Firewall that prevent breaches and compliance violations from risky 3rd party communications.

I guess they will need to review some of their core business model because they failed to fulfill their promises to their clients and customers.

john37386··on Richard Stallman FSF support/remove letter signature counts
Why is this post not flagged vs this one? https://news.ycombinator.com/item?id=26646048

What is the reasoning at HN for allowing one side of the story and censuring the other side. Very disappointed at HN moderators...

john37386··on Libreboot – Defend Richard Stallman
What is the reason for flagging this post?
john37386··on Ifconfig.co – Hacker-friendly “What is my IP address”
I always like to learn new trick. I'm definitely adding this nslookup trick to my IT swiss army knife kit. Thanks
john37386··on Full System Control with New SolarWinds Orion and Serv-U FTP Vulnerabilities
You can maybe ask shodan? https://www.shodan.io/search?query=serv-u
john37386··on Full System Control with New SolarWinds Orion and Serv-U FTP Vulnerabilities
There is a deterrent disclaimer https://dvsfileshare.dominionvoting.com/

Access to this site is for authorized users only! All unauthorized use and access will be prosecuted to the fullest extent of the law.

I'd be carefull before trying anything on that server.

-edit: Added italic on the disclaimer

john37386··on The Dunant subsea cable
T1 maximum speed 1.544 Mbps T3 is about ~45 Mbps

Reference: https://en.wikipedia.org/wiki/T-carrier

john37386··on U.S. technology company Clearview AI violated Canadian privacy law: report
To opt out, I need to send a picture of myself with a valid email address. The bait is hiding the hook very well.
john37386··on U.S. technology company Clearview AI violated Canadian privacy law: report
$25M fined is on the radar. Will it work?
john37386··on VideoLAN is 20 years old today
It's really an awesome software. It just works! I heard back in the days that they got some sponsors to improve security. Since it's running on so many computers, I was wondering if anyone is aware of any security issues. On my side, I didn't heard of any, but I also didn't really look deep into it.

Anyone has thought on the security side of VLC?

john37386··on Google Cloud SQL Incident
Thanks for the info. It must be a coincidence then. The timing looked like there was a possibility
john37386··on Sudo buffer overflow explained, and how to patch (WSL and Linux) [video]
Google Cloud SQL is suffering degraded service. Hopefully they patched their servers against that vulnerability.

Discussed here https://news.ycombinator.com/item?id=25962057

john37386··on Google Cloud SQL Experiencing Issues
Could it be related to CVE-2021-3156 the 10 years old vulnerability in sudo?
john37386··on Google Cloud SQL Incident
Can it be link to CVE-2021-3156 ?

10 years old sudo vulnerability.

john37386··on The unreasonable effectiveness of simple HTML
Excellent story. It's true that sometimes we should go back to the origin of the web, when it was mostly grey. I miss that web. I feel that it was an art to make it that ugly, but for me it was beautiful to the eyes.
john37386··on Tailscale on NixOS: A New Minecraft Server in Ten Minutes
So the main reason is mostly NAT is difficult to configure for home user and it also sometimes break gaming experience in some weird CGNAT setup? I like the anser and thanks for the info.

Anyone else have other reasons in minds why it's useful?

john37386··on Tailscale on NixOS: A New Minecraft Server in Ten Minutes
Why behind a vpn? It sounds painful to manage. What is the reason to not deploy this setup directly on internet with let's say a firewall or other security mechanisms?

- edit: Is it because it's not possible to have a good Minecraft gaming experience without it? I am really curious to understand why would people need that extra layer zero config vpn?

john37386··on What end-to-end encryption should look like
Shouldn't they inspire the end to end encryption from openSSH. As far as I know it's used by many worldwide and it seems fairly secure. Maybe I am missing something though.
john37386··on GhostBSD 20.01
Native full encryption through zfs. That was my main reason. Zfs is well integrated in BSD. Something that will not happen soon in linux based on Linus latest comments that zfs has legal issue with linux
john37386··on GhostBSD 20.01
I used FreeBSD on my last laptop.

Here are the things I liked: - all applications that I needed to do my work on windows or mac or linux were available. - native encryption of all the file systems even /boot and even /root and even / through geli on top of zfs. This is super easy to deploy through the installer. Seriously. - it also offer native compression of file systems through zfs. /var/log, /home, etc - there are tons of stuff like easy to compile custom kernels, rebuild the world, etc, but this is just me being a geek.

What I didn't like: - there is just one thing that really turned me off. I was never able to properly configure a wireless interface with also the ethernet connection. What I'd like is that if both are connected that it prefers ethernet then switches to wifi if I disconnect. This should be done by default without fiddling around. I had to use some hacks and it turned me off.

I'm very tempted to try ghostbsd, but before I do so, I'd like to know whether it's possible to have dual network connections: ethernet + wifi with preference with ethernet and smooth transition when I unplug network.

Can anyone confirm whether dual network is flawless in ghostbsd?

john37386··on _NSAKEY
Does it have anything to do with today's Windows update and this cryptic rumbling ahead of time?

https://krebsonsecurity.com/2020/01/cryptic-rumblings-ahead-...

john37386··on The Status of HTTP/3
Totally agree with you. Many big corporations totally block UDP at ISP level because there is no easy/magic solutions against amplified DDoS. They usually use some internal backend for DNS, Ntp, routed through other ISP.

I am afraid that businesses that will host HTTP/3 will be less secure in terms of availavility.

john37386··on Privacy analysis of Tiktok’s app and website
The other day I saw my young nephew on Tiktok. There is this thing that happens once in a while when you see two pictures of fashion and the child has to point with its finger which one they prefer. This thing goes on for a while. I found it weird and was wondering if other also noticed this?
john37386··on BorgBackup: Deduplicating Archiver
I'm using borg and I honestly like it. Not ready to only rely on it. I try to use the 3-2-1 principle of backup strategy and borg is really a space and bandwidth saver! My collection grew from few Gb to some Tb. It's already more than a year old and I was wondering whether it's better to start a fresh new repo every year or to let grow the original one until it reaches a certain size? Any recommendations from ppl that used it for +2 years?
john37386··on Adam Neumann and the Art of Failing Up
Then, I guess I quit at the right time. I would definitely not pay more than what I was paying at the time. Thanks for bringing up this point
john37386··on Adam Neumann and the Art of Failing Up
I'm a consultant and I rented some space at WeWork Montreal.

When I visit my clients in their office, which are not IT related, I often notice how grey or dark brown'ish are the walls. The vibe is kind of depressing in some old style offices in Montreal.

I must say that I really enjoyed going back to my shared office at WeWork. The light was nice, the vibe and I was connecting with people with similar mindset. I can't vouch for M. neumann, but I can say that my time at WeWork was really awesome. I would often invite my clients to WeWork so that we don't need to meet in their super depressive dark'ish offices. My clients were always amazed and impress by the WeWork offices in Mtl.

I quit, not because of the latest issue, but for personnal reason.

I miss WeWork and I will definitely renew my subscription later if they still offer thata amazing experience.

john37386··on AMD lands Google, Twitter as customers with newest server chip
Maybe it has something to do with all the recent speculative side channel attacks. Intel seems to have more hardware vulnerabilities than AMD.
← PreviousPage 3 of 4Next →