HNHacker News
TopNewBestAskShowJobs

_bernd

67 karma · joined October 9, 2025

submissionscomments
_bernd··on IPv6 is the only way forward
That's why server use a static suffix and do slaac to get their prefix. It's really as simple as that.

Regarding firewall policies:

just because most network OS are plain dumb, does not implies that's the fault of IPv6.

A zone based firewall solves that already. And for instance OpenWrt fw4 can make rules for suffixes in a zone too.

_bernd··on Why are we still using Markdown?
A path should be written `/root`...
_bernd··on SSH certificates: the better SSH experience
You can also configure multiple CA for client auth, and on the client side multiple ca to verify host keys.
_bernd··on Claude Wrote a Full FreeBSD Remote Kernel RCE with Root Shell (CVE-2026-4747)
Tfa contains the whole session dude.
_bernd··on Ariane 6 user's manual [pdf]
Thanks for the tip. I only knew about old manuals of the space shuttle.
_bernd··on Ariane 6 user's manual [pdf]
I will definitely start to read this out loud to my 5 year old. He will love it. Thanks for sharing your finding.
_bernd··on SSH has no Host header
You can also sign ssh host keys with an ssh ca.

See ssh_config and ssh-keygen man-pages...

_bernd··on AirSnitch: Demystifying and breaking client isolation in Wi-Fi networks [pdf]
What do you think about to just use open networks and the use of IPsec/wireguard?
_bernd··on AirSnitch: Demystifying and breaking client isolation in Wi-Fi networks [pdf]
In addition to equvinox (hey again): In enterprise networks you should rely on 802.1x or what's also valid use case is the use of ipsec to ensure the local client connection is "safe".
_bernd··on Faster Than Dijkstra?
The link to https://book.systemsapproach.org/internetworking/routing.htm... is in the first paragraph.
_bernd··on Faster Than Dijkstra?
> and thought to myself "they do textbooks?".

Indeed: https://systemsapproach.org/books-html/

If you are cheap on money, but you do have time, and like to get into networking, I can only highly recommend https://book.systemsapproach.org/

_bernd··on Running Your Own AS: BGP on FreeBSD with FRR, GRE Tunnels, and Policy Routing
I.e. bird detects interface failure but this affects only your side of decision making. For bidirectional failure detection you do BFD with BGB. BFD default timers are 3 times 30 ms, iirc.
_bernd··on Stop using low DNS TTLs
With cloud providers and such the wording could also be "bring your own address".
_bernd··on Stop using low DNS TTLs
You can configure your assigned network numbers that other AS are allowed to announce certain networks of your own. Not uncommon for in examples authoritative name server addresses.
_bernd··on Route leak incident on January 22, 2026
Here you go: https://en.wikipedia.org/wiki/Resource_Public_Key_Infrastruc...
_bernd··on Ask HN: Vxlan over WireGuard or WireGuard over Vxlan?
Links between, and in between data centers use so called jumbo frames with an mtu of over 9000. Not joking.
_bernd··on The IPv4 address swamp: The new normal
The issue is; in the default free zone, every peer which gives you a full table, gives you 1 million routes. Core infrastructure is not getting refreshed every 5 year, I have heard so...
_bernd··on The closer we look at time, the stranger it gets
> That’s how I see time, it is the ordering of physical events, which we can trivially observe.

My teacher explained it in a similar way. Time passes when we can observe change. If there is no change then we can not measure time. Like with the heat death of the universe. At that time (lol) no more time would "happening".

_bernd··on Germany votes to bring in voluntary military service programme for 18-year-olds
In case you missed the details.

The current law from Friday states:

- every young adult get information material about the Musterung

- everyone is free to go there and free to go to do the basic training

- just in case we will have to few volunteers then the state can at first force everyone to go to the evaluation as it was before - if we will have to few recruits then next step is a loot box system

- then and only then the state can force you. But this has also limits as we are still in Germany

Yes it was a shitty move by Merz to not involve the actual effected generation but I would have expected a far much worst law then this.

_bernd··on Germany votes to bring in voluntary military service programme for 18-year-olds
> If I remember correctly Germany or Austria were ready to put non vaccinated people in jails.

Citation needed! I'm from Germany and followed the COVID rules real close. Please do not talk shit.

_bernd··on Steam Machine
Now I see...

Down down down you find

> (April 1, 2024): After over 2 3 years (and 2 Steam Deck model releases - LCD and OLED) Valve still hasn't publicized their private GitLab repositories nor fully complied with the GPL. I decided to (finally) release the relevant portion of my automated "bot" project, aptly titled srcpkg2git. This/These software/tools haven't been updated/modified much since 2022, but should allow users to easily access and even mirror Valve's SteamOS private repositories (as I've demonstrated with these public mirrors (@gitlab.com/evlaV) the past over 2 3 years).

Yes indeed. That's hardly public what we can get...

_bernd··on Steam Machine
> I dunno if I'd characterize this as "public"

Then define public and state what's wrong with this repo which conflicts from your definition of public.

For me this looks like a fine public resource and after a short glimpse it looks like that you should be able to even build this effing source code from this repo.

Edit ps. If you edit your own content then please leave a note about what you have changed please

_bernd··on Open-source communications by bouncing signals off the Moon
1 sec up and 1 sec down... more or less. Speed of light and distance to the moon, two times.... roughly.
← PreviousPage 3 of 3