HNHacker News
TopNewBestAskShowJobs

wildylion

166 karma · joined March 29, 2019

[ my public key: https://keybase.io/wildylion; my proof: https://keybase.io/wildylion/sigs/7HVwwf_UYtRUlU6b1Wwg2VMQI819qh5QV5tjN6VyNNY ] $argon2id$v=19$m=64,t=512,p=2$PDRS49iwZlECo9tAguq+FA$tcFu4rius8ZFCN2rEdcX0g
submissionscomments
wildylion··on deSEC – Free Secure DNS
Exactly. And now there's <https://datatracker.ietf.org/doc/html/rfc9539> that allows encrypted DNS between authoritative and recursive servers as well.
wildylion··on CVE-2026-55200: libssh2 memory corruption with possible RCE
libssh2 through 1.11.1, fixed in commit 7acf3df contains an out-of-bounds write vulnerability in ssh2_transport_read() that fails to enforce upper bounds on packet_length field. Remote attackers can send crafted SSH packets with excessively large packet_length values to corrupt heap memory and achieve remote code execution. References

    https://nvd.nist.gov/vuln/detail/CVE-2026-55200
    libssh2/libssh2#2052
    libssh2/libssh2@97acf3d
    https://www.vulncheck.com/advisories/libssh2-out-of-bounds-write-via-unchecked-packet-length-in-transport-c
    https://github.com/bikini/exploitarium/tree/main/libssh2-cve-2026-55200-poc
    https://web.archive.org/web/20260623211210/https://github.com/bikini/exploitarium/tree/main/libssh2-cve-2026-55200-poc
wildylion··on Ultrasound imaging of the brain
Who could've thought that injecting SF6 into blood vessels is actually safe enough to be FDA-approved... interesting.
wildylion··on Googlebook
You can say whatever, but I'll be calling this a 'slop-down menu' from now on.
wildylion··on DNSSEC disruption affecting .de domains – Resolved
.ru [had this](https://habr.com/ru/news/790214/) in 2024. On the other hand, the russian government in itself had been doing a stellar job at breaking the internet.

(I hope I'll live to see them all sentenced to life without parole)

wildylion··on Treetops glowing during storms captured on film for first time
Storm troopers, but not the kind you'd expect.
wildylion··on IPv6 traffic crosses the 50% mark
Only if it's Australia.
wildylion··on Traffic from Russia to Cloudflare is 60% down from last year
Try to get a middle hop somewhere at a russian datacenter. Sometimes these have DPI censorship boxes disabled (?) -- I know one that lets me forward simple Wireguard from mobile routers to a EU server with a few SNAT/DNAT rules, even though ordinarily that would get blocked at first sight.

(Sadly, it's just Mikrotik gear that can't use any fancy censorship evasion protocols).

wildylion··on Traffic from Russia to Cloudflare is 60% down from last year
That'll eventually get detected and put a massive target on the back of anybody dumb enough to use it. Sorry to burst your bubble.
wildylion··on Traffic from Russia to Cloudflare is 60% down from last year
This is the literal job of state security. Besides, most of those $#@$###s get in not by pretending they've been persecuted, but simply because they already have deep cover and hold passports of other countries.

And I sincerely hope that you will never have to know what it's like to flee your own country, first hand. Peace.

wildylion··on Traffic from Russia to Cloudflare is 60% down from last year
Fuck you. I have many people here (many of them queer) who had to leave everything and become forced emigres or asylum seekers.

Have a bit of compassion, would ya?

My childhood crush is in Ukraine (I mean, he's Ukrainian), my dear friend (Ukrainian) had to leave everything and seek refuge in NL. My friends (Russian) are under a constant threat of getting imprisoned for 10+ years because they still help support queer and trans people in Russia.

Compared to them I feel very privileged, because I was able to GTFO on my own. But if you think that all Russian citizens must be deported, you're either a troll or a madman. Besides, this is exactly what, for example, Stalin did to Chechens, or think about what the USA did to the Japanese.

Did it help someone? No. Did it ruin millions of lives? You fucking guess.

upd: made it all clearer, and sorry for all the profanity

wildylion··on Traffic from Russia to Cloudflare is 60% down from last year
I'm considering even creating a dial-up (yes, V.34 modem!) line somewhere near to Russia, to offer a side channel with text browsing, news, IRC and email. For when things get really, really bad (they will ...)

Before you ask: yes, dialup works on modern networks if the codec is G.711 (uncompressed). Most public phone network is this way because fax is a thing, but some bulk carriers or some enterprises use compressed codecs.

wildylion··on Tell HN: MitID, Denmark's digital ID, was down
Side question, but what happens if there's a technical error with the service provider that leads to double spending?

Example: we bought tickets worth 300 EUR from Deutsche Bahn, they were hit by a DDoS and couldn't complete the transaction.

We got charged *twice* (i.e. 600 EUR and not refunded yet. AND no tickets!!!

Now they claim all they can do is to give us 600 EUR in vouchers (that are not even transferrable).

Would a Chargeback work in this case?

And my friend (who's ordered the tickets) has a very traditional bank that only gives a statement monthly, and probably accepts claims on every 29 of February, between 7 and 8 AM and only by fax (IYKYK those German companies...)

wildylion··on My smart sleep mask broadcasts users' brainwaves to an open MQTT broker
> and send them electric impulses in their sleep. So, it's like Lovense, but for dreams?

Sorry, I know it's horrible, but I couldn't resist.

wildylion··on Mobile carriers can get your GPS location
There actually should be a push for an EU-wide legislation banning this kind of silent, precise location data collection. If anything, Germany is obsessed with Datenschutz but in many cases it's just laughable security theater.
wildylion··on Deutsche Telekom is throttling the internet
Maybe get some Star link if you can... (Cringe worthy because of some musky husky guy, but at least it works for now).
wildylion··on Doing gigabit Ethernet over my British phone wires
I'm so afraid that my landlord (a big company) will use ANY excuse to rob me of my deposit when I move out... lol, even though I'm a member of Mieterverein.

The same landlord whose workers outright forgot to install the water heater in the kitchen the day I got the flat, and __painted shut__ the bathroom window. LMAO.

Though I can only second this -- use transparent fiber and be creative in where you route it -- and nobody will be able to tell you did something 'naughty' in your rental.

wildylion··on Ask HN: Iran's 120h internet shutdown, phones back. How to stay resilient?
Get a dial up line into Europe. Maybe somebody like MiCT could help with setting up a modem pool.

33kbps is enough to get on IRC and spread the news.

wildylion··on Iran Is Hunting Down Starlink Users to Stop Protest Videos from Going Global
Archive link: https://archive.ph/pTp0A
wildylion··on Iran Is Hunting Down Starlink Users to Stop Protest Videos from Going Global
Learn from the Ukrainians: to avoid jamming, the Dishy can be buried in a narrow trench so that only the sky is visible and it's not radiating outwards.
wildylion··on If a Meta AI model can read a brain-wide signal, why wouldn't the brain?
Then why aren't we totally losing it when immersed in incredibly powerful magnetic fields inside an MRI machine? I'm pretty sure, that 1.5-3T field will totally down ANY useful signal.
wildylion··on Ask HN: Quality of recent gens of Dell/Lenovo laptops worse than 10 years ago?
Fuck yes. Our 2022 Latitude 5420s have the worst lithium ever -- and Dell is actually offering to get you good batteries for twice the price, as an 'extended service life battery'.

This, and literally all of them have paint chipping off the chassis at the slightest provocation. I have like 50 at work.

edit: we have now a mix of MacBook Airs/Pros (most of workforce), Frameworks (specialized tech roles running Linux and resource-intensive software) and HP ProBooks (run-of-the-mill Windows machines, or just where you don't need anything special at all).

wildylion··on India orders smartphone makers to preload state-owned cyber safety app
And these mofos complied to the request to block VPN apps on iPhones in Russia. Think about companies that cooperated with the Nazis.
wildylion··on A worker fell into a nuclear reactor pool
Might be. If the reactor was recently defueled, especially, might there be more junk floating in the water?

If said junk was alpha- or beta-emitting, it could be enough of a danger for cancer.

wildylion··on Starcloud
Oh, cool... I have only one question (that is not cool at all): how are they about to exhaust 5GW of waste heat?
wildylion··on Teardown of Apple 40W dynamic power adapter with 60W max
For me, it triggered the Google Safe Browsing blocklist (I'm using NextDNS).
wildylion··on Ask HN: The government of my country blocked VPN access. What should I use?
As a long-standing supporter of Internet freedoms in Russia, I could advise you to use multiple tools at the same time, to avoid them being blocked.

What would probably work UNLESS they roll out pretty sophisticated DPI that could block by signatures and do active probing:

1. AmneziaVPN (https://amneziavpn.org) - they have the hosted option, or you could run your own on a cheap VPS (preferable). They use Xray/REALITY or a variant of Wireguard with extra padding that confuses DPIs. Should be good enough.

2. Psiphon

3. Lantern

4. Sometimes Tailscale works surprisingly well (even in Russia where they have advanced DPI systems!)

Here's a link to several Tor browser mirrors for you so you could download the VPN software itself:

https://mirror.freedif.org/TorProject/

https://mirrors.mit.edu/torproject/download/

A couple of Tor bridges in case Tor is blocked:

  webtunnel [2001:db8:9947:43ae:8228:97b7:7bd:2c2e]:443 6E6A3FCB09506A05CC8E0D05C7FEA1F5DA803412 url=https://nx2.nexusocean.link ver=0.0.1
  webtunnel [2001:db8:a436:6460:fa7b:318:4e8e:9de3]:443 F76C85011FD8C113AA00960BD9FC7F5B66F726A2 url=https://disobey.net/vM8i19mU4gvHOzRm33DaBNuM ver=0.0.2
wildylion··on One universal antiviral to rule them all?
There's a hypothesis that a viral gene made mammalian placenta possible: [pubmed](https://pubmed.ncbi.nlm.nih.gov/10693809/).

And there's not even the only one (there are other syncitins).

Disclaimer: I'm not a medical professional

wildylion··on Behavioral responses of domestic cats to human odor
Petiquette.
wildylion··on All four major web browsers are about to lose 80% of their funding
Maybe it's time for ISPs to start endorsing small donations to Mozilla and others, for a good cause. But in the jacked up world we're living in, nobody would do this.
Page 1 of 4Next →