HNHacker News
TopNewBestAskShowJobs

papascrubs

135 karma · joined June 20, 2021

https://keybase.io/nathansubra

nate(at)natesubra.com @natesubra@infosec.exchange natesubra @ twitter

submissionscomments
papascrubs··on My Own DNS Server at Home – Part 1: IPv4
Sure!

Technitium is a full fledged authoritative recursive DNS resolver with adblock, whereas pihole is more focused solely on the adblock experience. Technitium supports full zone management, DNSSEC, and all DNS record types. Pihole is limited to a handful of types and can't do custom zones and the management is somewhat clunky IMO. Technitium has full DNS logging, statistics, conditional forwarding, and a full rest API for management.

I think Pihole is a great project, but Technitium caters better to power users and people that want/need more complex control over their internal DNS infrastructure (while still remaining relatively simple from a management perspective).

Simply put, Pihole is adblock with some DNS sprinkled in, Technitium is a DNS server first with adblock support. I don't think you can go wrong either way, but if you're going to need more advanced DNS capabilities at home, roll Technitium to save yourself a migration down the line.

papascrubs··on My Own DNS Server at Home – Part 1: IPv4
I run Technitium DNS server at home in a container. It supports DoH, DoT, multiple upstream resolvers (and multiple upstream queries, adblock support and a sleep of other goodies (API). If you're self hosting an internal resolver I highly recommend checking it out. I prefer it to pihole.

https://technitium.com/dns/

papascrubs··on I ditched Docker for Podman
Swarm syntax is much better than the YAML sprawl of k8s. That said the underlying engine was pretty buggy and lack of customization for lower level components was a pain. Their whole plugin system was a great idea, but actual plugins developed by vendors ended up being very brittle. That said, yeah I'd prefer that timeline
papascrubs··on Evidence that AI is destroying jobs for young people
The year is 2030: The junior engineers of the Adeptus Mechanicus stand in a circle around the holy monitor, chanting prayers to the Omnissiah. Their arcane books and lore guide the machine spirit, ensuring the correct holy words of blessing are entered into the holy prompt. Petitioning the machine spirit for its most truthful, secure holy answers.

Oh wait, wrong distopian future.

papascrubs··on CEO pay and stock buybacks have soared at the largest low-wage corporations
Shouldn't it be distributed to just the employees of those companies? Why are we including every citizen. That seems to dilute that overall picture.
papascrubs··on Why I'm Leaving NixOS After a Year?
Better fix your about page ;)

I've dabbled in NixOS and come to many of the same conclusions. The learning and troubleshooting overhead just isn't there yet (for me). I appreciate the concept and I do think declarative configurations do have a place in the near future, especially in corporate environments. I'll probably give it another go in a year or so to see if it's gained any more polish.

papascrubs··on Using Windows 10 past EOL (via LTSC supported to 2032)
Massgrave ISOs actually download from Microsoft. It's just a small wrapper app that links you to the correct version. Microsoft also provides hashes, so it's pretty easy to validate that you're getting a legitimate ISO.

No comment on the other scripts. Although the source is available...

papascrubs··on Trump thinks Americans consume too much. He has a point
https://archive.is/LQfXa
papascrubs··on Excitable cells
I have the same condition. I was diagnosed at a very younger age with Wolff-Parkinson-White syndrome. It might be worth looking into.

https://www.mayoclinic.org/diseases-conditions/wolff-parkins...

papascrubs··on Excitable cells
I have a similar condition. Mine is:

https://www.mayoclinic.org/diseases-conditions/wolff-parkins...

I have the same bouts of tachycardia. They are very intermittent, no real cause. And the same breath holding technique works for me. Very interesting stuff!

papascrubs··on Firefox 136 Desktop gets Vertical Tabs
Per their FAQ, usually within 72 hours. That said it appears to be out now although the setting for vertical tabs is somewhat hidden (right click on the bookmark bar)
papascrubs··on An update on Mozilla's terms of use for Firefox
Built on top of chrome (electron actually). Same issues as every other chrome form. Also, doesn't support extensions.
papascrubs··on Microplastics are accumulating in human brains, study shows
https://archive.is/qMP4W
papascrubs··on How to Learn Nix
So many footguns... I get the idea behind a declarative OS like this. But the actual implementation seems to be very lacking. I understand there will always be overhead with new paradigms. But I don't see myself or any of the teams I work with implementing Nix when there is this much overhead to it.
papascrubs··on Llama 3.2: Revolutionizing edge AI and vision with open, customizable models
https://get.big-agi.com/
papascrubs··on Debian Developers Figuring Out Plan for Removing More Unmaintained Packages
I think there's probably a good middle ground that could be found. Maybe an "unmaintained" repo that can be activated or called ala backports. I definitely don't think things should be fully removed if working. But some sort of indicator or opt-in based on the status makes sense.

"Here be dragons"

papascrubs··on GPT-4o vs. Claude 3.5 Sonnet for coding
I use Sonnet and sometimes Opus via Phind. They also offer their own 70b model. Phind replaced my chatgpt and claude pro subscriptions. The VSCode addon works decently well and the training/data sharing opt outs are clear and easy to enable and see the status of.
papascrubs··on How de-Googled is Lineage OS?
Rooted? Mainly just curious
papascrubs··on Linux: We need tiling desktop environments
This.

I run PowerToys Fancyzones with the following options:

- Disable the shift modifier so that the zones highlight when dragging any window by default - Enable the second mouse button as a modifier (so you can disable snapping when using the mouse by tapping the right mouse button as you drag the window) - Enable the option to allow for win+arrow keys to move windows between configured zones vs the default snapping options

Using this config, plus leveraging the default config which allows you to merge zones by holding the middle mouse button is hands down one of the best workflows I've found. It's one of the biggest things holding me back from migrating to Linux full time (outside of some special development workloads that make it easier to run windows + wsl than Linux + a Windows VM).

I run a 40" 4k with two 30" vertically oriented side screens. My side monitors are split into 1/3rds. My main monitor is split into 6 zones. Three of the zones are simply quarters (approximately 1080p per window). The top left I have split into two zones, but using the middle mouse trick I can quickly merge them into a "normal" quarter zone.

I think mouse centric and keyboard centric WMs both kind of suck. What I like about my setup is that it works with either option and works well

papascrubs··on I prefer rST to Markdown
Right? So many features, and much easier to write than RST in my opinion. You can do things like dynamically reference other files to build tables:

  [%header,format=csv]
  |===
  include::tracks.csv[]
  |===
What about only including specific lines? Say from a log file or a separate piece of code? You can do that!

  [source,python]
  |===
  include::example.py[lines="1..10,15..20"]
  |===
Asciidoc solves nearly every problem I've ever run into with markdown and RST. I really wish it were more widely adopted.
papascrubs··on Cloudflare 1.1.1.1 incident on June 27, 2024
Did 1.0.0.1 not work? Do people not use the backup resolvers that providers offer? I didn't even know that there was an outage. Cloudflare is much faster than quad9, at least for my connection. Talking like sub 10ms response vs 30+ for other providers.

I use Technitium and legacy DNS on my internal network. I have Technitium setup to use DoH to cloudflare for all the requests it makes. Best of both worlds IMO

papascrubs··on Xzbot: Notes, honeypot, and exploit demo for the xz backdoor
Plot twist:

It was a psyop to increase the scrutiny around OSS components.

Kidding. Mostly...

But given the amount of scrutiny folks are going to start putting into some supply chains... Probably cheaper to execute than most company's annual security awareness budgets cost.

papascrubs··on Linux Firmware DB (Lfwdb.com)
Linux-firmware is a git repository full of proprietary binary files used for component firmware. These blobs are loaded onto component internal RAM at operating system boot and serve to configure the runtime behavior of the component. There is little to no visibility in terms of what these blobs do. I’m not opposed to proprietary software; it has it’s place. However, with the emphasis on open source in the Linux project, the proprietary nature of linux-firmware makes it stand out to me.

The Linux Firmware Database aims to shine light on this unknown territory.

papascrubs··on UniFi Express
Went from unifi to Omada here as well. The APs have better specs for half the price. UI is comparable (at least for wireless, can't comment on their edge stuff but if you're familiar with the standard unifi controller setup you'll be comfortable with Omada).
papascrubs··on Tinc, a GPLv2 mesh routing VPN
Zerotier can do L2 with some of the same limitations (userspace, perf)
papascrubs··on U.S. government to backstop mortgages above $1M
I'd like to know too. Full disclosure, I live in IA (DSM). I've seen my neighborhood go up 30-40%. Houses that were ~180k are now pushing 300k.

Now, I think the market will normalize a bit but still. There is no such thing as a starter house unless you're willing to give up a good education for your kids, live in bumfuck nowhere (and that's coming from someone who lives in Des Moines, IA-- which many people would consider nowhere).

Move rural? Good luck. Small towns are drying up for any/all services. Amazon and co are pushing out anything local for shopping. Cost of living for stuff not related to housing is just as high or HIGHER due to lack of infrastructure, plus the lack of meaningful choices (small town stores have higher prices due to lack of purchasing power and limited suppliers).

I'm not saying it's impossible, live off the grid and have your own farm. But doing that with a family, while working 60+ hours a week just to pay your rent, unless you're an SWE. The crunch is REAL for most people.

papascrubs··on For some with ADHD, the low rumble of brown noise quiets the brain
Diagnosed at 32.

I knew beforehand even (guessed at least), but I put off doing anything about it. I didn't realize how much it was affecting me. And how many unhealthy coping mechanisms I had built up in my life.

papascrubs··on What You (Want to)* Want
> Rarely do I get any agreement on these ideas, so many thanks for that. > Unsurprisingly, I am interested in some clarification:

>> If I put a disclaimer in front of everything I state (when I perceive the I talk about to always be some form of a hypothesis based on the data that I currently have), it tends to slow down discourse and get very messy.

> The domain of science typically involves overwhelming (in a text conversation scenario) amounts of complexity as well....but they realized the problem, found a way to manage it, and went on to produce amazing results. Unfortunately, science does not have mastery over all of reality (confident claims and perceptions to the contrary notwithstanding). Perhaps something similar could be done in other domains.

I think using science here was an exceptional example. It's good to note that the scientific process itself has evolved over time. I don't have all the answers, but I'm happy to re-analyze and adjust my processes given new data

> As it is, it seems to me that thinking on top of approximations of reality that are perceived as reality itself is sub-optimal, and dangerous. I think most people could appreciate this in the case of science, but in other domains it is very often considered absurd.

I can agree with that in part. Ideas must come from somewhere though. Sometimes that source is abstract and we don't understand all of the various linkages/connections; sometimes it's a known source and we understand in part all the things they are connected to. I think it's important to enable discourse and "thinking out loud" by labelling/tagging things as such.

>> In my mind, because I've already accepted the potential for bad data-- that's how I approach others works/papers.

>"In my mind" - watch out! :)

I'm comfortable with having my ideas challenged because I'm open to revising them. I should probably change this to 'my methodology is' or something more distinct. Merely attempting to convey here that I (try) to use a conscious approach when approaching others works. And I attempt to challenge myself regarding my own ideas on a regular basis.

> Disagree - if one has decent skills in set theory, abstraction/decomposition, and tautological framing of ideas, it is not difficult at all to achieve absolute (but vague/non-comprehensive) truth. That's not the finish line, but you can get WAY further down the track than someone who does not have such abilities.

I would argue that's not an absolute ;) But instead, I think both of our points, the important thing to identify is that it's not the finish line. It can be modified or adjusted or simply re-analyzed given new data.

Society seems to tend to think of ideas as a binary when there are often various levels of maturity involved. What's important to me in this instance is that the product isn't labelled as final. Change is a constant, even if things don't change directly, our information about them and perception of them do, which requires re-evaluating things often. Science is great at doing this, people (in general) are not. I think that many people would benefit from approaching things in a more scientific and/or philosophical fashion.

> I understand your concerns around this (and at least from my current understanding of our social/political issues) and I agree. It is extremely dangerous and detrimental to hold beliefs like that.

> And as far as I can tell: this is the methodology of the vast majority (90%+++) of people....and some of these are The Literal Experts, or people who believe they know The Way humanity needs to go to solve climate change. What could go wrong!!??

Expert is a dangerous word. An expert to me is someone that can adapt a methodology/approach. Not dogmatic follow something. I'd argue that for someone to be an expert in their field, they need to be able to understand and account for incoming data. I'd agree with you on that point. Many experts spout dogma, sometimes we're just lucky/unlucky that they aren't spouting the dogma we agree with.

I appreciate the discourse!

papascrubs··on What You (Want to)* Want
I can understand that. And I appreciate you sharing your opinion and thoughts on it. I'm not familiar with the Illusory truth effect but will get some reading into today (thanks for the link!)

In speaking. I try to approach things as always mutable. If I put a disclaimer in front of everything I state (when I perceive the I talk about to always be some form of a hypothesis based on the data that I currently have), it tends to slow down discourse and get very messy. In my mind, because I've already accepted the potential for bad data-- that's how I approach others works/papers. There are no absolute truths in anyone's words (or very likely period).

I understand your concerns around this (and at least from my current understanding of our social/political issues) and I agree. It is extremely dangerous and detrimental to hold beliefs like that. However, one could argue that a substantial portion of our society already holds those beliefs. They ignore the free will that they have and operate inside of the system that they perceive.

No real arguments/points here. Just chewing on things/"thinking out-loud". I think it's equally important for people to be able to share thoughts in an unformed state (in the right environment).

papascrubs··on What You (Want to)* Want
I was gonna say. This is very much discourse. It's someone's musings. What's so cringy about this? It never claims to be scientific; it never attempts to persuade or even really argue.

100% your twitter reference.

← PreviousPage 2 of 3Next →