HNHacker News
TopNewBestAskShowJobs

PureParadigm

670 karma · joined April 29, 2019

submissionscomments
PureParadigm··on PHP-FPM remote code execution bug exploited in the wild
I've transitioned all my self-hosted services to behind a Wireguard VPN. This even includes SSH, so there are no ports exposed except the UDP port for Wireguard.
PureParadigm··on Public keys are not enough for SSH security
As an alternative solution to the SSH key security concerns raised here, I use a Yubikey as a smart card for my SSH access. This way, even if my laptop is compromised, an attacker has to physically steal my Yubikey (and know the PIN on it).

If interested, I followed this guide to set it up: https://github.com/drduh/YubiKey-Guide/blob/master/README.md

PureParadigm··on Google clamps down on free storage
You can buy your own domain. Then when you switch email providers you'd just change your domain's mail records to point to the new provider. You can even transfer your domain between registrars if you decide you don't like your current one.
PureParadigm··on OnionShare makes it easy to publish anonymous, uncensorable websites
From what I can tell, one of the main goals of IPFS is decentralization. Anyone can be hosting the file you want and it will download from any of the peers. Does OnionShare do this?

As you mentioned, I've also found IPFS to be fragile, particularly in that it is unlikely for stuff to stay up reliably, as ironic as that is. If I'm trying to host a website with not too much traffic (nobody else replicating), I have to keep my computer online or it will become inaccessible.

PureParadigm··on CVE-2019-14287: Sudo Bug Allows Restricted Users to Run Commands as Root
In high performance computing, the supercomputing cluster is usually a shared Linux environment. Each user gets a home directory and groups are used for projects. As an intern working on one, they gave me limited sudo access to run a few commands but not everything (stuff like reading logs was fine but not able to power off the cluster).
PureParadigm··on Apple told some Apple TV+ show developers not to anger China
I'd argue those "humanistic values" are only advertised to improve public opinion about Apple's brand... and ultimately make more money. If customers feel good about supporting Apple, then they'll be more likely to purchase their products.

Apple wouldn't be doing it if it cost them significantly, as we see with them compromising their supposed values under Chinese pressure.

PureParadigm··on PG&E Outage Darkens Northern California Amid Wildfire Threat
Yes, there's definitely some truth in what you're saying -- UC Berkeley managed back in 1868 presumably without power, but it's also much bigger and has different facilities now. It's not as simple as just telling 40,000+ students to improvise. Many buildings, especially those with deep basements (like Soda Hall) may have ventilation problems without power. With the number of students here, holding lecture on the lawn or even rearranging to rooms with windows would be complete chaos, assuming that's even possible. To top it all off, elevators might also not function and cause issues for people in wheelchairs, etc.

The current news now is classes will be held unless the power actually does go out.

PureParadigm··on PG&E Outage Darkens Northern California Amid Wildfire Threat
At UC Berkeley all classes were cancelled today (Wednesday) because PG&E said campus would lose power. Buildings, libraries, computing services all shut down... but power stayed on all day. I'm sure the administration is very upset that all this happened for no reason.
PureParadigm··on Microsoft has removed the “use offline account” option when installing Windows
You can also try syncthing [1], which has been working well for me on Linux and Android.

1. https://syncthing.net/

PureParadigm··on Pi-Hole 4.3.2
Yeah, thanks for looking deeper into it. I found before that I could do it by running my own DNS server (like dnsmasq) on the local device (so I could do it no problem on my laptop), but that isn't easy on a phone.
PureParadigm··on Pi-Hole 4.3.2
Thanks for your answer. I think the sources you linked to are tunneling all of their DNS queries through Wireguard. I don't want to do this, since my work has some DNS records which only resolve internally. Basically I want to be able to give DNS names to the various hosts on my Wireguard network, while falling back to the DNS provided by the network I'm on.
PureParadigm··on Europeans have a 'right to be forgotten' online. Should Canadians?
Sure, of course there are and should be reasonable restrictions (shouting fire in a crowded theater causing immediate danger, for example). But is this a restriction that society should accept? How could you expect to have a functioning democracy if a politician could make people "forget" to stop them from sharing any inconvenient facts about the politician's past actions?

And perhaps I want to make a list of sources where you can search for information about politicians to hold them accountable. If it's not censorship for them to be able to stop me from linking to true things they don't want people to see about them, then what is?

PureParadigm··on Europeans have a 'right to be forgotten' online. Should Canadians?
Wouldn't that seem to violate the idea of freedom of speech? What if someone running for public office requests that I "forget" and not share what I know about some bad things they did in the past?
PureParadigm··on Pi-Hole 4.3.2
Have you managed to get WireGuard to do split tunnel DNS? I've been wanting to do this, but couldn't figure out how to make it work on Android, for example.
PureParadigm··on The Birth of the Semicolon
thanks :)
PureParadigm··on Intel Core I9 9980XE vs. Ryzen 9 3900X Benchmark
Is it an advantage that the 9989XE has more cores and threads even if, according to the article, the Ryzen still wins in overall multithreaded performance?
PureParadigm··on IPFS, Again
Just to give an example of a blockchain approach to this: Ethereum Name Service [1].

1. https://ens.domains/

PureParadigm··on A systematic study of the advice people would give to their younger selves
Thanks for sharing. I'd like to read your guide about being social. Did you mean to add a link?
PureParadigm··on Google to restrict modern ad blocking Chrome extensions to enterprise users
The AdNauseam extension [1] does exactly that, and Google really didn't like it (banned it from the Chrome extension store [2]).

1. https://adnauseam.io/ 2. https://adnauseam.io/free-adnauseam.html

PureParadigm··on AMD Ryzen 3000 announced
Thanks for the suggestion. I'll look into whether a VPS is viable, but we often have poor internet at our LAN parties and get the best experience when the server is local.

It's a vanilla server and I also get around 4 players. The real problem occurs when people are generating new terrain while flying on an elytra, sometimes causing the server to crash altogether. When not exploring, it will frequently report "Can't keep up!" messages even when hanging around spawn, which I think might be due to the truly insane amount of hoppers we have (although haven't seen this as much in the recent update).

If you're curious, the CPU is a i5-3570K @ 3.40GHz. The game is certainly playable, but it struggles under load like I described.

PureParadigm··on AMD Ryzen 3000 announced
In all seriousness, I've been wanting better single threaded performance for running a Minecraft server.
PureParadigm··on Falsehoods programmers believe about Unix time
Leap seconds definitely add way more complexity/uncertainty when dealing with timestamps in the future. I once made a program that would output the amount of time remaining until some time in the future (with the future time represented as a Unix timestamp). I realized that it is simply not possible to report the number of seconds until an event >6 months in the future because we simply don't know if there might be a leap second or not between now and the time in the future. Perhaps the best approach for users would be to smear any leap seconds that are announced so it never has a hard jump, but it's still not ideal because if you really want to count down to the future time you simply can't.
PureParadigm··on MDS: Microarchitectural Data Sampling side-channel vulnerabilities in Intel CPUs
If running Linux you can disable the meltdown/spectre mitigations with the nopti option [1].

1. https://yux.im/posts/technology/security/disable-meltdown-an...

PureParadigm··on GitHub Package Registry
Thanks for your insight. I think those are definitely real challenges to a fully decentralized system, but allowing some sort of federation can't hurt. The worst case scenario would be if GitHub is the only one pinning all the packages, which is what we would have now. It'd be nice to at least have the option to mirror in a way that interops with an open protocol so it would still work if GitHub went down. I doubt many mirrors would pin the entirety like GitHub, but I know I would certainly be happy to mirror my own and any open source software I've used.
PureParadigm··on GitHub Package Registry
I'm worried about the resiliency of code distribution as we continue the trend of centralizing distribution in a few large companies. GitHub has had service outages in the past, so what happens when not just our repositories but also now packages are not accessible the next time that happens? It would be great if they'd implement it using an open/decentralized protocol such as IPFS, so that even if GitHub went down the content would still be accessible.
PureParadigm··on Amazon S3 will no longer support path-style API requests
One counter example is GreatFire, who use GitHub for their wiki [1].

[1] https://github.com/greatfire/wiki

← PreviousPage 5 of 5