likeabatterycar

That may be true, but what matters is perception. It doesn't take very much of the perception of insane to push the winner over the edge. Elections have been known to be decided over single issues. To take a position of "I can't possibly see anything wrong with any of our policies" after a resounding defeat is not very self-reflective.

What prevents Wireguard from moving to GitHub or why is bare metal hosting needed?

The code is small and integrated into the kernel at this point.

Aren't your needs primarily for distributing Windows/Mac packages at this point?

If you are incapable of identifying some of the insane positions that clearly lost them the 2024 election, I'm afraid you may be in a bubble and no amount of someone explaining it is going to help.

"Uhm acksually, it was only 10 square blocks"

I know what I saw, it was repugnant behaviour, don't try and split hairs. The fact that the madness was contained to only 10 blocks is, on the whole, irrelevant.

Good luck with your future riots.

The Floyd riots in Portland a few years ago which got memory holed.

Rioters were shining high power military-grade lasers at peace officers, assaulting cops. They sieged government buildings and destroyed and burned much of their own city. Nothing happened to most of them.

A young boy was shot and killed in Seattle (where a few blocks of the city 'seceded' from the US) and I watched some LARPing teenager dressed like a dollar-store ninja hit a cop in the head with a baseball bat (the ninja turned out to be a local politician's son so I can imagine the punishment levied). The mayor went on TV and described all this madness as a "summer of love".

The behaviour I observed was abhorrent and eclipsed anything that transpired on Jan 6.

Yet it was all conveniently forgotten.

Smashing some doors and windows was child's play in comparison, and the melodrama surrounding 1/6 was over the top. I actually heard someone describe it as "worse than 9/11". They were serious, too.

And you want me to believe the guy on 1/6 with the buffalo horns is somehow comparable to the cowards blinding people with industrial lasers? The Portland riots to this day is some of the most insane footage I've ever seen and the lack of punishment and length of time it was allowed to go on is unbelievable.

Most of the Portland rioters should still be in jail but most got off with a slap on the wrist if they got any punishment at all.

It's an inconvenient truth for some because I remember even middle aged Google engineers were arrested for acting like fools. You would think educated people would know better.

There is a 100% chance some posters on this very website were at the Portland or Seattle riots and somehow have justified that their participation was righteous.

I imagine the 1/6 folks felt the same way.

No I don't know, tell us.

> This is his MO, to claim as victory something that would have happened without him opening his mouth in the first place

We used to call this confirmation bias....

Nice truncating the title and removing context.

If you got fired from literally any private sector company and refused to leave your office, security would escort you out immediately.

Everyone acts as if Silicon Valley isn't run off of the same stimulant abuse. But because it's snorting crushed pills off a keyboard wrist rest in a cubicle at 3am to get that project over the line, and not described as "banging 7 gram rocks" it's somehow socially acceptable.

> GNU/Linux was created as a rewrite of Unix

GNU is a bunch of utilities no different than various terminal programs. The attempt at the "GNU OS" failed because the Hurd was never really usable.

> It is only your opinion that it is better to have "buggy" networking than to have "not buggy" networking that you think is difficult to configure. That is the exact opposite of "objectively."

I never said this.

Fix the bugs. Don't fill the well with yet another equally shite solution.

> Systemd is the last init linux will have, and increases the barrier to port software to other unix-likes.

Why would you write portable software that has a dependency on an init system?

> systemd-networkd is one of the most common causes of failure for my desktop

What is objectively worse than buggy networking in systemd is having 26 different incompatible ways to configure networking in Linux.

It is easier to settle on one method (like literally every other OS) and fix the bugs than continually come up with newer, equally buggy and broken, ways of doing it.

systemd already has encrypted boot support. I suppose when you rip something out you have to reinvent all its functions. At that point, any rational person would question the reasons for doing so.

Like removing the transmission from a car out of spite then realizing you need a way to switch gears.

Why do people insist on living in the 1980s? systemd has enabled so much missing and previously convoluted functionality. There is a small but vocal coalition of admins that refuse to learn new skills. As if we didn't have enough "systemd free" novelty distros.

If you want to live in the past, go run SunOS. You might need a dusty old tape drive, though.

Most Chinese open source code I've seen is written in English, with English variable names, but comments in Chinese Unicode glyphs (in between all the buffer overflows and other general carelessness).

Don't forget Shenzhen is a stone's throw away from Hong Kong where English is widely spoken.

Steve also thought he could beat cancer with diet and supplements.

> Please respond to the strongest plausible interpretation of what someone says, not a weaker one that's easier to criticize. Assume good faith.

Chicago is an extremely segregated city. In segregated cities, there is a nuanced thought process one must undergo to move into an area where you are considered an outsider. In Seattle for example, the tech community is overall reviled for having gentrified the Central District, where historically black areas were bulldozed to erect overpriced cardboard apartments for tech plebes. This is a legitimate question.

> I live in the Chicago South Side, in a neighborhood that is 99% black. I am not black.

May I ask why? This seems like a deliberate choice. It is, at best, met with suspicion by other residents.

If that was true, we could finally abandon PKI and just use favicons...

Open source doesn't give you carte blanche to leech off someone's infrastructure. Remember when Netgear hard coded someone's NTP server into their routers and all hell broke loose?

Back in the day if you caught someone hot-linking images from your web server it wasn't uncommon for admins to redirect abusive referrers to goatse etc. That usually got them to knock it off real quick.

Just like an adored local restaurant, it went to shit "under new management" when the original owners cashed out and the users moved on. So everything started to suck around the moderation.

I vaguely remember such was their commitment to free speech, if you browsed at -1 they allowed posts to remain up that broke the HTML and page rendering, and refused to take them down on principle, until they could update their filters. Those early days of the web were a wild west.

It wouldn't be HN if it's been six hours without attempting to shame someone with HTTPS demagoguery.

> You still can't exfiltrate the key material

And? What actual problem does this solve or realistic threat does this prevent? They are not decryption keys they are used to digitally sign certificates.

What the DigiNotar hack taught us years ago is if your CA is compromised you are already 0wned doesn't matter if the key is stored in an HSM or not.

All they can do with a stolen key is issue more certificates. Which they can do anyway if they have root access to the CA.

You can put 12 locks on your door but if they're all keyed to the same key you've stored under the plant on the porch, it doesn't really matter.

> The interesting thing about this article is that it adds a few 9's that are covered, and it's both easy and cheap.

Hard to say if those extra 9's need an external RNG for extra entropy.

This is littered with so many missteps I don't know where to start.

-Complete overkill requiring the use of a YubiKey for key storage and external RNG source - what problems does this solve? For a Yubikey to act as a poor man's HSM you have to store the PIN in plaintext on the disk. So if the device is compromised, they can just issue their own certs. If it's to protect against physical theft of the keys, they'll just put the entire Raspberry Pi in their pocket. You could choose to enter the PIN manually but this precludes any automation including CRL generation. It's also a waste of a good YubiKey.

-Creates a two-tier PKI... on the same device. This completely defeats the purpose so you can't revoke anything in case of key compromise. You could make it a 100-tier PKI and it would make no difference if they're on the same device. Though they would need a whole lot of YubiKeys and USB hubs for that.

-They're generating the private key on disk then importing into the YubiKey. Which defeats having an external key storage device because you have left traces of the key on disk.

-All this digital duct taping the windows and doors yet the article instructs you to download and run random binaries off GitHub with no verification whatsoever.

-Why do you need ACME in a homelab and can't just hand issue long lived certificates?

-OpenSC and the crypto libraries are notoriously difficult to set up and working properly. A tiny CA this is not.

An instance of openssl or xca covers 99.9% of "homelab" use cases. This is like using a battery operated drill to open a can of soup.

HN is rife with downvote (and in some cases, flagging) abuse. So the echo chamber is more self-imposed by the brahmins rather than curated.

Slashdot had a superior moderation system whereby the ability to downvote (mod points) was given out selectively and in limited quantity. In all honestly it was years ahead of its time.

Interesting how the concept of blacklisting was so horrifying to people that they immediately changed their vocabulary, code, and even broke APIs (despite the origins predating unrelated current events by hundreds of years) only to immediately turn around and justify the newly christened "blocklist" as a great thing we should all embrace.

Because caring about a stranger's political opinions that much, simply to play pretend activist, is mentally and physically exhausting.

99% of normies don't want to decide what dictatorial fiefdom (server) they wish to belong to.

Cam you detail exactly what conspiracy you are alleging without evidence?

This is the corporate version of "he quit before they could fire him".

The Trans Am also had simple analogue controls - including for the heat & AC - while the new Prius has evidently succumbed to the overcomplicated "let's take away buttons" phenomenon.

Also, you're not getting a bride to leave her husband at the altar if you pull up alongside in a Prius. Just sayin'.