HNHacker News
TopNewBestAskShowJobs

Samon

124 karma · joined April 9, 2017

submissionscomments
Samon··on Ask HN: What is the best setup to work remotely with GUI on Linux?
I've had decent success using Xpra.
Samon··on Ask HN: Are You Using Windows 10 with Ubuntu (Or Another Linux)?
Debian host, Ubuntu 18.10 and Win10 Pro guest VMs using VFIO passthrough for a USB controller and GPU. I use the Ubuntu VM as my daily machine, with an RDP session across to the Win10 VM when needed (I work remotely and my day-job is heavily MS focussed). I run a fullscreen RDP session taking up a full virtual desktop, so I effectively just flick between the two OSs with a keyboard or mouse shortcut. On the rare occasions that I require GPU acceleration under Windows I have a second GPU passed to that VM plugged into a second input on my monitor, and a script to remap the USB controller. Basically dual-booting but without shutting down either :)
Samon··on Switching my parents over to Linux saved me a lot of headache and support calls
I've found WPS Office (https://www.wps.com/linux) to be pretty good in terms of both compatibility and UI similarity.
Samon··on Ask HN: Trying to be more Gmail-independent with Gandi and email forwarding
I've just learned something too :)

I've known for years it "just works", but now I know why :D

Samon··on Ask HN: Trying to be more Gmail-independent with Gandi and email forwarding
Here's the relevant headers from a recent email from Apple, including the Authentication-Results and Received-SPF lines:

  Delivered-To: (ME)@gmail.com
  Received: by 2002:a9d:650d:0:0:0:0:0...
  Received: from sender-of-f72.zoho.com (sender-of-f72.zoho.com. [135.84.80.227]) by mx.google.com...
  Received-SPF: pass (google.com: domain of (ME)+aml_=(MY DOMAIN)=gmail.com@(MY DOMAIN) designates 135.84.80.227 as permitted sender) client-ip=135.84.80.227;
  Authentication-Results: mx.google.com;
       dkim=pass header.i=@id.apple.com header.s=id0517 header.b=S5Hlyy1T;
       spf=pass (google.com: domain of (ME)+aml_=(MY DOMAIN)=gmail.com@(MY DOMAIN) designates 135.84.80.227 as permitted sender) smtp.mailfrom="(ME)+aml_=(MY DOMAIN)=gmail.com@(MY DOMAIN)";
       dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=id.apple.com
  Received-SPF: pass (zoho.com: domain of email.apple.com designates 17.151.1.66 as permitted sender) client-ip=17.151.1.66; envelope-from=uatdsasadmin@email.apple.com; helo=nwk-txn-msbadger0405.apple.com;
  Authentication-Results: mx.zohomail.com;
	dkim=pass;
	spf=pass (zoho.com: domain of email.apple.com designates 17.151.1.66 as permitted sender)  smtp.mailfrom=uatdsasadmin@email.apple.com;
	dmarc=pass(p=reject dis=none)  header.from=id.apple.com
  Received: from nwk-txn-msbadger0405.apple.com (nwk-txn-msbadger0405.apple.com [17.151.1.66]) by mx.zohomail.com...

  From: Apple <appleid@id.apple.com>
Samon··on Ask HN: Trying to be more Gmail-independent with Gandi and email forwarding
Sorry, no, I'm not using Gandi, I actually have a legacy account in Zoho that I use (from back when POP3 was available on free accounts), but the logic is the same.

The emails get accepted into the Zoho mailbox, then forwarded to Gmail. If Gmail rejects the forwarded email (due to DMARC policy) then I get the failure notification, not the original sender (as the failure is that Zoho was unable to forward the email to Gmail, not that Zoho didn't accept the original email from the sender), and that email will be retrieved by Gmail when it next does it's POP3 check.

Samon··on Ask HN: Trying to be more Gmail-independent with Gandi and email forwarding
Where Gmail refuses to accept the forwarded email (because the DMARC policy doesn't allow forwarding) I receive the 'Mail Forward Failure' notification but the email has been accepted into the original mailbox, so will be pulled into my Gmail mailbox the next time the POP3 check runs. I have a rule on the Gmail side to remove those failure notifications.

I haven't noticed any impact to Gmail's actual spam filtering, either garbage slipping through or false positives.

I've just checked a few random emails and Gmail shows "SPF: PASS with IP xxx.xxx.xxx.xxx". For most emails, the DKIM and DMARC checks also show PASS, but this is obviously dependent on the sender.

Samon··on Ask HN: Trying to be more Gmail-independent with Gandi and email forwarding
I actually use both. I use a POP3 enabled account on my hosting provider, but because Gmail only polls for new mail from external accounts on its own schedule (you can't specify the frequency, and when you're on the phone and someone says "I've emailed that through, is X correct?", waiting 5 or 15 minutes for it to appear in your inbox in Gmail isn't ideal, so I also have mail forwarding turned on. This means that for mail where the DKIM policy allows forwarding, you get the email almost instantly, but if the DKIM fails, you will still get it just a few minutes later. I've been doing it this way for years without an issue. I set a very strong password on my POP account (since I only have to enter it once into the Gmail interface to setup the account) and accept the security risk of no 2FA.
Samon··on Ask HN: Who is your domain registrar and hosting provider?
Also Netlify for static sites
Samon··on Ask HN: Who is your domain registrar and hosting provider?
Vultr for hosting, Cloudflare for DNS/CDN
Samon··on Reasons to Switch from Windows to Linux
GIMP etc certainly isn't up there with the Adobe suite, however WPS Office (community edition) is pretty damn good as far as a MS Office clone (in terms of file format compatibility and user interface).
Samon··on Work less, get more: New Zealand firm's four-day week an 'unmitigated success'
As the saying goes, when you work for yourself, while in theory you can "work your own hours", in practise what generally happens (at least initially) is you work all the hours.
Samon··on Ask HN: Do you have a home office (if you work from home)?
Employer. The paperwork pretty much covered a lot of what would be required if it were a company operated office, stuff like there being smoke detectors, fire extinguisher, a basic first aid kit, that the work area was adequately sized and in an ergonomic configuration, that all exits from the work area are clear and unobstructed, no slip/trip hazards, that the lighting is appropriate, proper ventilation and adequate heating/cooling, that all electrical cords and appliances are in good order (didn't need to go to the level of 'test & tag' thankfully) and safely secured, etc.

It also stated that the company is entitled to send someone to randomly inspect my work area if they choose to... I wouldn't expect this to ever actually occur, it certainly hasn't happened for me in the last 5 years I've been working in this arrangement.

I know a number of years back there was a legal case where a big Australian company was ordered to pay the legal and medical costs of an employee who injured herself after slipping down the stairs twice in two months while working from home... so I guess it's not that crazy.

Samon··on Ask HN: Do you have a home office (if you work from home)?
I work from home 3-4 days a week, and absolutely have a home office setup. As it falls into the "two or more days per week" category, my home office is considered a "remote office" by my employer for workplace health-and-safety purposes. This means I needed to take photos, and fill out a declaration that the setup was ergonomically sound (chair, desk/keyboard/mouse/monitor height, lighting, etc), that there werent any dangers/risks around, etc. Certainly no way I could get away with sitting on a couch or at the kitchen table (well I can, I just have to say that I'm not...). Welcome to big corporate CYA!
Samon··on Ask HN: What do you have on your desk?
I aim for a minimalistic work environment... So 3x monitors, wireless keyboard and mouse, speakers and my desk phone. My PC is down on the floor underneath, and I've gone 'slightly overboard' on the cable management to keep it as neat and tidy as possible.
Samon··on Ask HN: How do large companies send newsletters to massive email lists?
We use Salesforce Marketing Cloud (formerly ExactTarget) for multiple lists totalling around 2M subscribers.
Samon··on Ask HN: Anyone rather just be alone during work day?
I don't really have a 'team' as such these days (the joys of corporate silos) - I don't work in a vacuum, but the others that I interact with are spread out over the country, so I generally work from home 3-4 days a week. The office is open plan, and quite noisy on a 'busy' day, but a lot of my peers also work remotely several days a week, so most of the time its not too bad.
Samon··on The 111M Record Pemiblanc Credential Stuffing List
My solution for this is to use a unique email address for each site/ service. That way if I see that hn@mydomain.com has appeared in a breach, I know both where the leak came from and which password to change. Also helps identify the source of any spam emails...
Samon··on How do you manage team passwords?
We use LastPass Enterprise with 2FA to share relevant credentials with the required groups.
Samon··on Tell HN: I miss the old internet
This may be just nostalgia talking, but I think a big part of it is that these days there is much more of a 'commercial' nature to the internet. 'Back in the day', it seemed like there were a lot more 'community' focused sites, that were primarily there to serve the community, rather than to actually make a profit. Forums, blogs, etc where communities of people with similar interests would share information, collaborate, or just 'hang out'. Forums in general seem to have almost died out, and most blogs have some kind of commercial intent.
Samon··on Tell HN: I miss the old internet
Totally this. Most of the car forums I 'grew up on' 10 years ago are pretty much just wastelands these days. Where they were once a buzz with fantastic knowledge, insightful comments and advice, etc, they're now mostly filled with image-less posts (ImageShack, PhotoBucket, etc), spammy posts, and crickets. The missing images is the biggest shame... "The issue is the hose circled in red"... no pic.
Samon··on No Copyright Law: The Real Reason for Germany’s Industrial Expansion? (2010)
Give WPS Office a go on Linux... it's been the most similar to MS Office I've found (in terms of both file format and UI).
Samon··on Ask HN: How did you hack your home?
I've built a few raspberry pi based home automation systems, from relays switching my garden lights and irrigation, to 3D printed brackets and pulleys to convert my manual curtain tracks to motorised ones, WiFi controlled power sockets to switch lamps, and even a full aquarium control system managing the lighting (colour temperature and brightness), filter and aeration, and heater. I'm currently using NodeRED to build the logic and provide a web interface.
Samon··on Ask HN: What do you wear to work everyday?
Slacks, business shirt (tucked in), dress shoes, no tie. On 'Casual Friday', that gets relaxed to a nice pair of jeans (no rips, etc) and a collared shirt or polo.
Samon··on Ask HN: Why has no one created an “Amazon” driven by local businesses?
One additional issue is that while you might walk into the local shop, look around, get served by the local salesperson, have them provide recommendations or compariaons on different products, etc and "have a good experience", once you take the purchasing journey online much of this non-transactional experience disappears, so price becomes much more of a deciding factor. Most people don't 'shop around' too much for a few dollars less in meatspace, but when its all online (especially in an Amazon-style marketplace where products are compared between multiple sellers), customers are much more likely to pick whichever seller is cheaper, which isn't exactly appealing to business owners!
Samon··on OVH outage explained
When we had the building UPS replaced several years ago, the contractors accidentally left one of the neutral bars disconnected... everything was up and working fine, the switch was flipped to cut off mains and ensure the backup system could take over, and suddenly there were pops and smoke all over the place as hundreds of desktops, servers, network gear, etc got a dose of ~430v instead of 240. That was a very expensive test.
Samon··on Ask HN: What you use for automating chores (DevOps)
Rundeck
Samon··on Ask HN: Best remote desktop app for customer support?
We run a ConnectWise Control (formerly ScreenConnect) server, with several hundred client machines. Unfortunately they changed their pricing model drastically a fee years back, and if it wasn't for the fact that we are grandfathered in with our existing licenses, it wouldn't be even a remotely viable solution.
Samon··on Ask HN: How would you go about making a mobile device single-purposed?
Maybe it wasn't lookup, perhaps it was one of the share features, I don't remember exactly, just that it was possie to semi 'break out' by selecting some text and long-pressing to reach the context menu, even with all of the options disabled in guided access mode.
Samon··on Ask HN: How would you go about making a mobile device single-purposed?
This. I have used simple HTML5 web applications with the meta tags to allow running in 'app mode' (no browser chrome etc) and then enabling guided access mode on iPads (mounted in display stands, mostly) many times, and find it works suitably well to lock the device to a single purpose. You need to consider a few edge-cases (for example not allowing text selection and long-press, which allows the user to access the 'look up' function, and making sure there are no links to any external URLs etc, but once you've covered off those things, it works as a fairly effective way to provide a 'kiosk' style interface.
← PreviousPage 2 of 3Next →