HNHacker News
TopNewBestAskShowJobs

nixcraft

6,718 karma · joined November 22, 2012

Long time Linux/Unix/FreeBSD/OpenBSD user, a seasoned sysadmin, blogger and a trainer for the Linux operating system/Unix shell scripting. Contact me via my blog:

Creator: https://www.cyberciti.biz/

Twitter: @nixcraft

submissionscomments
nixcraft··on Tell HN: A disabled 40-year-old person founded a startup and makes a living
I would say reading your post brightened my day. Thank you for sharing it. Cheers.
nixcraft··on Recon and Attack Vectors from My Logs
And this is a good reason why most HTTP servers need a web application firewall. Either try mod_security or use reverse cloud proxy like Cloudflare, AWS, etc. Of course, writing clean and secure code should not be ignored even if you use WAF. At least read owasp https://owasp.org/www-community/attacks/ It saved me so much time :)
nixcraft··on Seer – a GUI front end to GDB for Linux
Here's a partial list of front ends using GDB https://sourceware.org/gdb/wiki/GDB%20Front%20Ends
nixcraft··on KeePassXC: Beware of unofficial Microsoft Store listing
Yes, I am 100% happy with this app on my Ubuntu Linux desktop. I don't want cloud hosting for my password.
nixcraft··on WhatsApp Remote Code Execution in Video Call
>now use only the browser version.

That is a great idea. But can you delete the app from your phone once connected to the web browser?

nixcraft··on WhatsApp Remote Code Execution in Video Call
Off topic: Why does WhatsApp don't give the option to block all calls and texts by default? That way, I can only talk with folks I want. The signal app has that option. Random businesses can send you texts to promote their shity services (typically, your number is grabbed from data brokers or leaks). Of course, you can block and report such spam, but there is no DnD option right now.

Alt url as nvd is under load: Critical WhatsApp vulnerabilities patched https://www.malwarebytes.com/blog/news/2022/09/critical-what...

Edit: I forgot to mention almost all spam is from verified whatapps business accounts. So I believe they/FB are selling data directly under their updated TOS.

nixcraft··on Show HN: Get conversational practice in over 20 languages by talking to an AI
This looks so nice.

On a side note, I used Duolingo for about 7 or 8 months (I spent like 15-20 minutes) and learned a little Japanese and Portuguese (European). I think Duolingo is an enjoyable app. Then I lost interest :( I started again. Let us hope this time I will finish all levels.

Any chance of getting Japanese and Portuguese (European)?

nixcraft··on Ask HN: Companies of one, what is your tech stack?
OS: Ubuntu or Alpine Linux

Web Server: Nginx

Container: LXD or Docker

Backup: FreeBSD with zfs

Server-side: PHP and Python

CMS/Web framework: WordPress, MediaWiki and Django

Database: Postgresql and MySQL/MariaDB

Cloud: Linode and AWS

Currently learning: Dart and Flutter to build a cross-platform app for my next idea.

nixcraft··on Gnome 43, “Guadalajara”
Is it disabled on your system? You can enable it https://help.gnome.org/users/gnome-help/stable/nautilus-prev...
nixcraft··on The $300B Google-Meta advertising duopoly is under attack
Is it just me, or do major tech companies turn into advertising businesses even for paid products like Windows OS[1] or iPhone/iOS[2]?

[1] https://www.makeuseof.com/windows-11-remove-ads/

[2] https://www.bloomberg.com/news/newsletters/2022-08-14/apple-...

nixcraft··on Linux command line for you and me
We can use the `compgen -b` (`help cd` to get short help or `man bash-builtins` to read man pages) to list all internal bash commands. For example, we can use the `type -a cmd1` or `command -V cmd1` to see if `cmd1` is built-in or external binary.
nixcraft··on Ask HN: How do I write a Linux driver for my 15 year old photo printer?
RMS started open source because of printer driver issues (he wanted the source code but wasn't allowed it and thought it as a betrayal of the hacker culture). This post is like history repeating itself.
nixcraft··on Ask HN: Those making $500/month on side projects in 2022 – Show and tell
Out of curiosity, what stocks would you (or anyone reading my comment) recommend for someone in their late 40s? TIA.
nixcraft··on Old school Linux administration – my next homelab generation
Once you work in enterprise IDC, setting up home labs is nothing but a liability. Unwanted stuff like UPS, cooling and more bills. I have one Intel NUC running FreeBSD 13 (dual SSD with 32 GB ram and Intel i7 CPU 8th GEN) with one jail and VM. It acts as a backup server for my Ubuntu laptop and MacBook pro. Nightly I dump data to cloud providers for offsite reasons. Finally, I set LXD, Docker and KVM on my Ubuntu dev laptop for testing. That is all. No more FreeNAS or 3 more servers including 2 RPis. I made this change during the first lockdown. They (I mean fun and excitements) went away once I handled all those expensive IT equipment/servers/firewalls/routers/WAFs funded employer ;)
nixcraft··on YouTube-dl has an interpreter for a subset of JavaScript in 870 lines of Python
This. Whenever I post a comic and something funny comic on Twitter/FB (i put credit: URL their home page or IG), but on Reddit, there is no such thing. Most Reddit admins also ban direct linking to sources due to spam or remote server overloading. So instead, you need to use Imgur or Reddit's hosting. So I write a comment saying credit which often gets enough upvotes to push at the top of the thread. I think those content creators deserve traffic and recognition too. It is good karma for everyone.
nixcraft··on Evaluation of TikTok vs. Instagram Reels
Now ask the same question for YouTube shorts ;) Hah. Google is pushing shorts hard these days. Honestly, they need to give an option not to show shorts. In most cases, shorts are either from TikTok from the same content creator or re-uploaded by some random person. Even if I liked topic X on shorts, it never suggests similar shorts. It is hard to believe that Google cannot crack the correct algo to show interesting related shorts. I think YouTube doesn't have enough original shorts content creators, and like many of Google's side projects, it will go to /dev/null someday.
nixcraft··on GoDaddy Statement on Eth.link Domain Registration
It was expired and registered again?

`whois eth.link | grep -iE 'Updated|Expiry|Creation'`

Updated Date: 2022-08-25T23:18:22.578Z

Creation Date: 2017-07-26T19:31:41.508Z

Registry Expiry Date: 2023-07-26T19:31:41.508Z

nixcraft··on Debian General Resolution: non-free firmware
This is true. Debian Linux currently doesn't load non-free firmware ("blobs") for your system GPU, WiFi and other devices. Other popular distros like Ubuntu and co does it by default at installation time. The current method is to enable non-free repo in `vim /etc/apt/sources.list` and then run `apt-get update && apt install firmware-${name-here}`. I hope this proposal gets approved. So that new users find it easy to load those "blobs" for their devices at install or run time via teh TUI/GUI/CLI option.
nixcraft··on Advanced Bash-Scripting Guide (2014)
I also like, BASH Frequently Asked Questions https://mywiki.wooledge.org/BashFAQ and linter https://github.com/koalaman/shellcheck
nixcraft··on More content by people, for people in Search
>Better ranking of original, quality content

Hah. Just another day, someone sent me this link[1] which took images and text from my page[2] for the Google query "linux check disk space". Here is the thing my page doesn't even appear on Google. The ripped page points to the source[2] and has a link back to the original images. These scammers know how to game Google with their AI-driven sites, and they adopt it faster than Google rolling out new changes. I hope Google fix this issue.

[1] Spam/scam page - http://blog.imm.cnr.it/content/linux-check-disk-space-comman...

[2] Original my page published on 2016-01-23 - https://www.cyberciti.biz/faq/linux-check-disk-space-command...

[3] Google search query - https://www.google.com/search?q=linux+check+disk+space

nixcraft··on Ask HN: Is there a spiritual successor to del.icio.us?
This might be an unpopular opinion, but I stopped using many online cloud services because they get shut down or acquired by a big fish. Instead, I am using buku[1], a command-line utility to store, tag, search and organize bookmarks on a Linux desktop. But, it should work on any OS due to Python. All I have to do is backup a single ~/.local/share/buku/bookmarks.db SQLite file.

[1] https://github.com/jarun/buku

nixcraft··on Welcome back “Google set a timer for X minutes.”
FYI, Google timer is gone https://news.ycombinator.com/item?id=32295674 (17 days ago).
nixcraft··on Hacker News moved off AWS again at 10:17 PM PST
Nothing is wrong with hosting on bare metal. However, this site doesn't host images or videos, tracking for Internet ads, etc. Instead, it is a text-driven old-school site (I believe hosted on FreeBSD). Must be light on resources. It is super fast. I am sure they have some caching in place too. HN's business model is different from typical websites. They are part of YC, which is how it can sustain itself.
nixcraft··on Mexican Loan Apps, Extortion, and the Google Play Store
The servers for these apps are in China, but the owners are in other countries, Mexico, India, China etc. So it is hard for police to get a warrant to shut down servers when crossborder issues are involved. I am not an expert in such crimes, but they make it hard for local police to shut them down.
nixcraft··on Mexican Loan Apps, Extortion, and the Google Play Store
These scams are going on in India too. Typically they offer $100-$200 loans, and there is no legal framework. Victims are afraid to go to the police. Even if someone goes to the police, these apps are all running from China, and they can't do much about it. From the BBC article: "The people running the apps gained access to all the contacts on his phone and his pictures, and have threated to send nude pictures of his wife to everyone on his phone."[1] It is a horrible system, and Google doesn't care about poor people getting scammed. Some victims even committed suicide because of the threat of releasing their private data.

[1]https://www.bbc.com/news/business-61564038

nixcraft··on Ask HN: Any way to ban GPT-4 and others from harvesting my content and data?
Use nginx anti-bot[1] or product such as Fastly or Cloudflare anti-bot feature, which blocks content scrapping and only allows specific bots using rules or AI. Another option is to block VPN, cloud and hosting companies' ASNs. There is no benefit for you allowing someone to scrap your content apart from Bing and Google. The rest of the bots can die, or you will lose your content to scrappers. So finally, put it behind a paywall if possible. Of course, the paywall only works if you have good content or buying ads to promote it. Good luck, mate.

[1]https://github.com/mitchellkrogza/nginx-ultimate-bad-bot-blo...

nixcraft··on Windows10Debloater: Script to remove Windows 10 bloatware (2021)
No. That was removed a long time ago https://launchpad.net/ubuntu/+source/ubuntu-meta/1.443

Edit: Ubuntu version 18.04.xx (point release) or 20.04.xx and above does not contain the Amazon web app.

nixcraft··on Tutors / tips to change your English accent
Just out of curiosity, how much does such service cost hourly? So I did A quick google search returned group training begins at about $40 an hour per person, and individual training at $100 an hour, with additional fees for materials.[1]

[1] https://www.nytimes.com/2007/06/05/business/worldbusiness/05...

nixcraft··on Google Trying to Solve a UUID
Tested with a few UUIDs:

$ uuidgen

2b2ec13b-a1a4-49da-938a-50b24a1e416a

Google - https://www.google.com/search?q=2b2ec13b-a1a4-49da-938a-50b2...

$ uuidgen --sha1 --namespace @dns --name "www.google.com"

488416f4-fcaf-5027-8c63-0105cfa213ea

Google - https://www.google.com/search?q=488416f4-fcaf-5027-8c63-0105...

Nothing. Maybe it is a bug?

nixcraft··on DreamWorks Animation to release MoonRay as open source
From download page https://openmoonray.org/download :

"We are currently preparing the packages for public release, and MoonRay will be available for download from Github soon."

← PreviousPage 4 of 6Next →