Hacker News Reader

tmerseon CISA Director on Log4j Vulnerability

One of Sovereigntechfunds goal is to support maintainers of critical open source infrastructure with public money. https://sovereigntechfund.de/en

Germany for now, but plans are to expand "up" to Europe as far as I know (we are all in the same boat, aren't we)

tmerseon Terraform vs. AWS CloudFormation

Both CDK and TF are really bad dealing with several apps spread over different repos that share resources (e.g.: ECS Clusters, VPCs, etc...).

I had good experience by going a submodule route. One multirepo containing a CDK infra submodule and multiple repositories as submodules which each output resources (lambda code, etc.) which in turn can be imported more easily by cdk.

tmerseon Unix Shell Programming: The Next 50 Years [pdf]

I'd like most programs to implement a JSON interface, given right flags. Or maybe the existence of some env var like $DEFAULT_OUTPUT=JSON

I like this approach:

https://github.com/kellyjonbrazil/jc

> CLI tool and python library that converts the output of popular command-line tools and file-types to JSON or Dictionaries. This allows piping of output to tools like jq and simplifying automation scripts

tmerseon WhatsApp delays privacy changes following backlash

WhatsApp used to have paying customers.

tmerseon Behind Pfizer's vaccine, an understated husband-and-wife “dream team”

I'd rather keep this to the theranos type of companies.

tmerseon Stator: A full-stack boilerplate – releases, deployments, enforced conventions

Cool project! I like the building block approach.

Is optional graphQL support on your mind? I have seen working examples using typeorm models and some glue code/libraries.

tmerseon KDE Plasma 5.20

I can recommend krohnkite which can be found under Kwin scripts -> install additional. Can also be extended via js

tmerseon Simple Personal Finance Tracking with GnuCash

The last time I used GnuCash, it was not able to import it's own export. Does anyone know if this has been fixed?

tmerseon React Native for Windows and Mac

This describes what I am currently missing the most in the node ecosystem. Deno is a good approach but it will take some time to see how adoption goes. I would prefer some fine grained capability-based solution. Approaches similar to this have often been articulated [1]. Many of my concerns are best described here [2]. There even was an article from someone who would have been able to overtake many high profile npm accounts with very little effort some time ago (cannot find it anymore).

With tighter snyk integration into npm and the acquisition of npm through ms one could argue that security bar may have risen/will rise but I (speaking as a js/ts dev) am still sceptical. I haven't really looked to deep into stuff like selinux/apparmor/firejail [3] maybe someone can give an opinion on this. I'd wish for something that would be codeified on package level to make review easier and give me some peace of mind.

For now my plan is to dockerize most of my projects and it's dependencies. It should give a little more protection against malicious postinstall scripts.

Unfortunately, I depend more and more on npm modules outside of projects (coc-vim comes to mind/for others it may be vscode etc.).

[1] https://medium.com/hackernoon/npm-package-permissions-an-ide... (2018) [2] https://medium.com/hackernoon/im-harvesting-credit-card-numb... (2018) [3] https://github.com/netblue30/firejail/blob/master/README.md

tmerseon Ask HN: Has any progress been made on large format E-ink displays?

My (meanwhile modest) hopes are with clearink [1]. Let's hope they don't go full mirasol.

1: https://youtu.be/zjJ2-cdhwMQ

tmerseon Relationship between the ABO Blood Group and the Covid-19 Susceptibility

I think you mean local maxima as opposed to "best possible .. designs"/global maxima

tmerseon The melting pot of JavaScript (2017)

You should have a look at typeorm [1]. Typescript ORM with decorator support.

1: http://typeorm.io/

tmerseon Slack closes account of an Iranian user living in Canada

Switzerland

tmerseon New tools for open source maintainers

Maybe it is in order to prevent something like domainsquatting – just for usernames.

tmerseon Show HN: A CSS Keylogger

It may be easier to XSS CSS than JS.

tmerseon Burger King launches WhopperCoin crypto-cash in Russia

I bet you will love KFC's newest VR-endeavour [0].

[0] https://www.youtube.com/watch?v=J3PJQ_E7Se0

tmerseon Security Keys

Here is an overview of current 2FA support of service providers:

https://twofactorauth.org/

To apply some pressure, there are handy "public shaming" twitter-shortcuts.

tmerseon Dasung Paperlike Pro: E-Ink Monitor with HDMI connector [video]

Have a look at this: https://www.youtube.com/embed/ni2czAM2NDU?feature=oembed

tmerseon Mutt 1.7.0 released

For some HTML mails, it is sufficient to use a mailcap file in combination with lynx or w3m:

  # ~/.mutt/mailcap
  text/html; w3m -I %{charset} -T text/html; copiousoutput;

  # ~/.muttrc
  alternative_order text/plain text/enriched text/html  # save html for last
  auto_view text/html

If you want the full HTML experience, you can use this script [1], which uses python (there also is an older bash version) to convert the mail into standalone html to be viewed inside a browser.

  # ~/.muttrc
  macro index,pager M "<enter-command>unset resolve<enter><clear-flag>N<enter-command>set resolve<enter><pipe-message>viewhtmlmail\n" "View HTML in browser"

1: https://github.com/akkana/scripts/blob/master/viewhtmlmail

tmerseon Mutt 1.7.0 released

Here is what I use.

  # convert markdown to html via pandoc
  # https://unix.stackexchange.com/questions/108485/send-    email-written-in-markdown-using-mutt
  macro compose \e5 "F pandoc -s -f markdown -t html \ny^T^Utext/html; charset='utf-8'\n"