HNHacker News
TopNewBestAskShowJobs

vbernat

1,948 karma · joined October 18, 2011

Personal blog: https://vincent.bernat.ch/en/blog
submissionscomments
vbernat··on Non-interactive SSH password authentication
Author here. I don't claim sshpass is "broken by design". I claim it is brittle as it relies on the detection of a password prompt. passh author has several examples here: https://github.com/clarkwang/passh/blob/master/sshpass-broke....
vbernat··on Non-interactive SSH password authentication
There are not many network vendors. Check the link in the first footnote for an example how Cisco, the leader in the field, makes it difficult to deploy SSH keys. This is getting better. For example, Juniper (another network vendor) now supports SSH certificates.
vbernat··on SQL as API
I am using a similar approach to filter network flows, but the language is just SQL-like (notably because users may not be familiar with all the quirks of SQL) and gets translated to ClickHouse SQL. The language is exposed to the end user, so there is completion and syntax highlighting. Since the result is open source, you get a complete example (notably to evaluate how complex this is).

See https://vincent.bernat.ch/en/blog/2023-sql-like-language-fil....

vbernat··on Enlightenment 0.26
TWM (87) and FVWM (93) are still maintained today.
vbernat··on New plans for self-hosted Zulip customers
The pricing being the same for Zulip Cloud and just the notification service, this seems a bit unfair.
vbernat··on Inkscape Cloud Architect
As the README mentions "cloud-based" platforms, it should be noted that Diagrams.net (previously Draw.io) is available as an offline application. Inkscape is missing connection points and routing controls to make it easy to do diagrams. Also, Diagrams.net can export to SVG or PNG while keeping the original diagram embedded. I use that instead of the specific format they use.
vbernat··on Usability of Old Computers
Checksums are GPG-signed. This helps because it's easier to be secure (not a protocol) and you can accept third-party mirrors.
vbernat··on XML is better than YAML – Hear me out
This is now part of the cloud images for Debian.
vbernat··on Emacs Bedrock: A minimal Emacs starter kit
I have switched last year from custom configuration to Doom Emacs. I liked the framework, but over time, I think this makes me rely on external people too much and some of the stuff is too overengineered (but the good design makes it easy to tweak). I would prefer to keep things lean and I am pondering using Doom Emacs without any builtin modules as the framework itself is very good.

I have looked at other starter kits to find leaner things, but they don't seem to bring much to seasoned Emacs users like me.

vbernat··on Debian is at the heart of the most successful Linux distros
Many DD are running unstable, so it should be non-breaking enough for most people. The most common breakages are file conflicts. It is a shame we didn't fix such issues yet, as it is a bit difficult to fix the problem, but having testing as an additional source and rolling back the problematic package should fix the issue. I don't remember any other kind of breakages (other than upstream regressions, but this is a rolling release) for the past five years. If you tried unstable 10 years ago, this is now vastly different.

On the other hand, I remember Arch transition from readline 6 to 7 making the system unbootable (2016) if you did upgrade at the wrong moment. I don't know if package containing libraries are now versioned to avoid such issues.

I think the main difference you get by using Arch is AUR (we don't have that in Debian) and, I think, more fresh packages (mainly because it easier to package for Arch than for Debian).

vbernat··on The shell and its crappy handling of whitespace
I don't think there is an exception. Zsh still applies word splitting on process substitution (I suppose this is more natural here).
vbernat··on The shell and its crappy handling of whitespace
Zsh does not split words by default, so you don't need to quote everything. This is the main reason I switch to Zsh instead of Bash when there I need a bit more than the base shell.
vbernat··on OpenSSH has some peculiar handling around command line arguments
It's because SSH sees "localhost" "sh" "-c" "cd /tmp && pwd" and will send "sh -c cd /tmp && pwd", which the remote shell will interpret as executing "sh" "-c" "cd" "/tmp" and executing on success "pwd".
vbernat··on Ask HN: Could you share your personal blog here?
https://vincent.bernat.ch — not as active as I previously was by lack of time, but there are some quite popular articles with an accent on networking stuff, but also some programming.
vbernat··on Linux Namespaces Are a Poor Man's Plan 9 Namespaces
In this case, "find . | grep".
vbernat··on Linux Namespaces Are a Poor Man's Plan 9 Namespaces
Then you can use "find | grep".
vbernat··on Pausing Manifest V2 phase-out changes
Add a dot somewhere in the user part of the address. This looks like a new address but it is not.
vbernat··on Ask HN: What has your personal website/blog done for you?
It looks rad! ;-)
vbernat··on Ask HN: What has your personal website/blog done for you?
Maybe a quasi proportional font like Iosevka Etoile? You can easily hack it to your likings (see https://github.com/vincentbernat/vincent.bernat.ch/blob/feat...)
vbernat··on DDoS detection and remediation with Akvorado and Flowspec
Something like outlined in the article should be doable without too much complexity. However, I also need to be able to use the result for AS12322 and I didn't disclose everything in the article. I need to tinker a bit more.
vbernat··on DDoS detection and remediation with Akvorado and Flowspec
Thanks for the kind words Majek!

We are a Cisco shop and there are a lot of problems on their side too. Initially, there was a paragraph about that, but Cisco is working on these problems, so I didn't want to cause problems yet.

vbernat··on Loxilb: eBPF based cloud-native service load-balancer
The details for the bare metal benchmarks are sparse. I would have expected an eBPF solution to outperform the "aging" IPVS by an important margin. Moreover, the peak performance of IPVS is far better (115 vs 57 reqs/s). It would be interesting to know if it is an outlier. A benchmark with an increasing workload over time would be more precise on how to compare both solutions.
vbernat··on Modern Mono
In the Emacs screenshots, I am curious what "Combined ⤿" means.
vbernat··on A Heisenbug lurking in async Python
The documentation update is quite recent (Python 3.11). It was added after this ticket: https://bugs.python.org/issue44665 (not the first ticket around this problem).
vbernat··on Fast and dynamic encoding of Protocol Buffers in Go
Author here. The tag is shown not encoded as a variable int (I admit this is not super clear). Its encoded version is 0x9a 0x01. I think this is correct. This the result of (19 << 3) + 2 encoded as a varint.
vbernat··on De-Bloated Windows 11 Build Runs on 2GB of RAM
Cloud messaging comes with Google Play Services. That alone could explain the battery difference.
vbernat··on How to improve Python packaging
It depends what you mean by state-of-the-art, but it's possible with dh-virtualenv: https://github.com/vincentbernat/pragmatic-debian-packages/t... (not something that can become an official package as it goes against Debian policies)
vbernat··on Jump Servers
Use of SSH agent forwarding is dangerous as it allows an attacker to gain access to more key materials to access more servers. Using it casually in an article about SSH security is a bit worrying.
vbernat··on Video games made in the USSR (2020)
The Youtube video for Perestroika is missing the sound from the intro because the game was skipping it if the CPU was too fast. I remember hearing it on a "Victor" 286 (16 MHz, but I am not sure). This recording has the sound intro: https://www.youtube.com/watch?v=_IpYuXJ6u6A. This was quite amazing to get something like that out of a PC speaker. I don't think other games of this era was able to do that.
vbernat··on Tell HN: HP printers force you into agreement
I have a HL-4150CDN and that's true it asks for a replacement after a fixed page count but it is easy to workaround this by resetting the page count (https://www.inkowl.com/page/tnreset/). I am still using it after more than 10 years with the half-capacity toners it was shipped with.
← PreviousPage 3 of 16Next →