HNHacker News
TopNewBestAskShowJobs

raphinou

1,175 karma · joined January 25, 2010

contact: my HN username at gmail.com

Open source multisig signoff solution: https://asfaload.com

submissionscomments
raphinou··on Microsoft killed FoxPro in 2007. Anyway, here's FoxPro revived
Asfaload takes different technical decisions:

- multisig approach: you can require multiple signers to sign a release for it to be accepted by downloaders. Protects against account compromise. Sigstore relies on OIDC, but this makes it often reliant on megacorps (and harder to self host, see next point)

- very easy to self host. You can deploy it internally without any problem, eg in an airgapped environment where you want to distribute signed artifact. This is impossible with Sigstore.

- accountless: the key is the identity. The multisig approach diminishes the problems that long-lived keys might bring. And you don't rely on an external OIDC provider to be able to sign.

- Air-gapped signers: it is possible to have air-gapped signers, as signing does not rely on an online service to verify an identity.

- easy for downloader: the use only has to provide the download url, and this is sufficient to authenticate the download.

- easy to audit: the backend data is stored in a git, that will be mirrored in different places, and anyone can mirror it for themselves.

You might agree or not with these choices, but there are enough differences to say that it doesn't reinvent the wheel, it's providing another approach which I think has its advantages.

raphinou··on Microsoft killed FoxPro in 2007. Anyway, here's FoxPro revived
The solution I'm working on is https://www.asfaload.com. To get a quick idea, see the videos, incl. demos, at https://www.asfaload.com/videos/. The code is at https://github.com/asfaload/asfaload. There's no binary executable published yet, so you'd need to compile. However, I'm very interested to help you on the setup and get your feedback. Don't hesitate to contact me by mail on the address found in my profile ( ${my_hn_username} gmail address) and I'll be happy to help!
raphinou··on Microsoft killed FoxPro in 2007. Anyway, here's FoxPro revived
Just mentioning because you explicitly said builds are unsigned: I'm working on a (open source) signing solution supporting GitHub releases that is easy to use for both signers and downloaders. Let me know if this would interest you (not immediately putting link to avoid spamming).
raphinou··on iPhone Duo
Doesn't make it less ridiculous, and that price for the other brands isn't less ridiculous either.
raphinou··on Asahi Linux on M3
You describe an exhaustive documention, but some documentation would already be better than none. Perfect is enemy of good, as your comment illustrates.
raphinou··on Google has stopped pushing Git tags for some Android source code
But why? What can be the internal justification? What do they think they win by doing this?
raphinou··on Scientists stunned by children's lung recovery in ultra low emission zone
Any advice on in and outdoor detectors os small particles for home use?
raphinou··on US oil reserves are so low, the caverns holding them could be damaged
This is probably a naive question, but I'm wondering: isn't the usefulness of a reserve seriously diminished if using it prevents refilling it afterwards? What was the use case covered by this huge reserve if only a small part can be used before geopardising its future?
raphinou··on Iceberg Collapses and Flips over in Ilulissat, Greenland (July 25, 2026) [video]
I would have thought it would generate enormous wave, but that's clearly not the case. I think some of the biggest waves was generated by a mountain sliding or collapsing in the sea. I expected something similar here. Anyone know why not?
raphinou··on US strikes $1.2B deal to pay German firm to halt offshore wind projects
Was it a book you read? In interested.
raphinou··on Wind and solar overtake fossil fuels in Germany for the first time
so all such 'energy' storage are to be used as heat and no other form of energy? The name energy storage is somewhat confusing then, even if not incorrect? Heat storage would be more accurate iiuc.
raphinou··on Wind and solar overtake fossil fuels in Germany for the first time
But all the examples you give have a heat source of high temperature and dense energy, and a lot of energy is lost in it's transformation, as illustrated by the combustion engine. How can heat be a good energy storage if so much is lost when you want to use it?
raphinou··on Wind and solar overtake fossil fuels in Germany for the first time
I think I have read that heat is hard to convert to useful energy. Can someone confirm? But the, if that's true, why use heat as energy storage?
raphinou··on Why Book Corners won't sync contributions back to OpenStreetMap
Maybe an alternate process could use streetcomplete? Make the imported data available in streetcomplete for validation, then include it only after x validations?
raphinou··on Bonsai: Janestreet's UI Library
Such attempts are quite common. Some I remember:

https://ocsigen.org/ in Ocaml too

https://websharper.com/ for fsharp and csharp. Really good when I used in in fsharp

Maybe https://melange.re/v7.0.1/ too? (Not sure)

raphinou··on The Glass Famine
I find it interesting that the book is available about everywhere save for North America according to the author, but the first distances in the text are given in yards, mainly used only in North America. Ok, this is not the exact book text, but still, it looks as a misfit to the audience of the book.
raphinou··on The Cold Email
Things evolve though. Early 2000, I received a lot of reactions to cold emails (eg when organising events), but these days, it's rather rare. Even people I know might ignore my mails! One explanation I got is that there are a lot more phishing mails these days, and people have learnt to be suspicious.
raphinou··on Show HN: Edky, a CLI to convert Ed25519 public keys from one encoding to another
Thanks for the appreciation and the tip! I'll keep an eye on edky!

Asfaload is easy to selfhost, if it is of any interest to you.

raphinou··on Show HN: Edky, a CLI to convert Ed25519 public keys from one encoding to another
Interesting. I'm using ed25519 keys in my open source project [1] to sign GitHub releases (amongst other things) and the encoding question appeared during the development. I settled on supporting reading ssh keys, but saving keys in a specific format. I'll need to have a look to possible revisit my choices as it is developed in rust too.

1: https://www.asfaload.com

Sources at https://github.com/asfaload/asfaload

raphinou··on Incremental – A library for incremental computations
I think websharper's Var are similar to this, and it is really great to develop dynamic web interfaces (in fsharp).
raphinou··on G# – A modern .NET language with Go, Kotlin, and Swift ergonomics
Is the familiar syntax so important? I learnt f# being used to algol syntax, and the syntax was not a hurdle.
raphinou··on Filmgrab: Films A-Z
Wondering if with such shady tactics, they respect the fact that I didn't consent and closed the (private) tab I opened the page in.
raphinou··on Interrail: 6,379Km and 13 Countries over 7 weeks
Did you use some specific tools to collect the data to be displayed on that map?
raphinou··on Interrail: 6,379Km and 13 Countries over 7 weeks
I would love to take an Interrail, eg to visit France, but it's x days in one month (8 days is 292€ per person) and doesn't match my travel habits. I would prefer to make short travels everyday rather than long travels 8 days of the month.

Edit: global passes let you travel everyday of your pass, with passes of up to 3 months: https://www.interrail.com/en/interrail-passes/global-pass

raphinou··on Leanstral 1.5: Proof abundance for all
Can this be useful for someone with no prior knowledge of lean? I'd like to verify a software I'm working on, but I have no experience in formal verification. Can I get useful result with the spec, the code and some (limited) learning time on my side?
raphinou··on The Fall and Rise of Screwworm
I'd expect that if females start to breed more than once it would represent a problem. It's surprising it hasn't happened yet (for the ignorant of the field that I am at least)
raphinou··on PeerTube is a free, decentralized and federated video platform
Thanks for reporting it! I'll have a look
raphinou··on PeerTube is a free, decentralized and federated video platform
I am currently recording tutorial videos for an open source project. It's produced fully with Foss software (on Linux, obs, kdenlive) and about an open source project, so I wanted to host it with peertube (though YouTube might be used later on for its network effect, it was easier to publish with peertube as yt required an video of me and my ID). It's going fine until now. I don't host peertube myself though, I use an existing instance, and embed the videos in the website.

It was a really good experience, so I'll continue that way.

If you want to check out the videos: https://www.asfaload.com/videos/

raphinou··on ZCode – Harness for GLM-5.2
In case anyone is interested, I'm also using bash scripts to run my agents in containers. It's simple, but has only bash and docker as dependency: https://github.com/asfaload/agents_container
raphinou··on Bashblog – a single bash script to create blogs
It probably started as a helper script and grew from there. The script seems quite focused and doesn't grow, so a rewrite might not be warranted.

It also has no other dependency, which is also good. I have written helper script to run coding agents in a container. And you guessed it, it's in bash. For the reasons I just wrote down. Should it have to grow I would rewrite it, but not currently.

Page 1 of 13Next →