Hacker News Reader

allset_on An open DNS recursive service for free security and high privacy

Your ISP can snoop on upstream requests. It is likely less private than Quad9 or similar services where you can mix requests with a large crowd.

allset_on Go is an ideal language for AI-assisted software engineering

Large companies use more than one language.

allset_on NixOS 26.05

> Removed 17532 outdated packages, in an effort to keep the package set maintainable and secure.

Thanks for this! I appreciate the acknowledgement that more software in nixpkgs is not necessarily better.

allset_on Security researcher says Microsoft built a Bitlocker backdoor, releases exploit

Presumably, not paying out for these bugs which often take weeks of research to find.

allset_on Restore full BambuNetwork support for Bambu Lab printers

Maybe they don't have any openings at this time.

allset_on Trivy under attack again: Widespread GitHub Actions tag compromise secrets

Even then, that's only immutable for the workflow config. Many workflows then go on to pull in mutable inputs downstream (eg: default to "latest" version).

allset_on Cloud VM benchmarks 2026

If only they offered dedicated in the US.

allset_on Go's Sweet 16

No.

allset_on DNS Provider Quad9 Sees Piracy Blocking Orders as "Existential Threat"

DNS literally would not work if they did that.

allset_on TernFS – An exabyte scale, multi-region distributed filesystem

I can only comment about the one I work for, but yes. It's also discussed publicly to some degree.

https://cloud.google.com/blog/products/storage-data-transfer...

allset_on Ask HN: The government of my country blocked VPN access. What should I use?

Cloud Flare supports ECH. https://developers.cloudflare.com/ssl/edge-certificates/ech/

allset_on Signal – An Ethical Replacement for WhatsApp

> AFAIK the proprietary server can glean your IP, your phone number, who you talk to, and when you talk to them. This type of metadata is valuable information.

To the best of my knowledge, so can matrix.org or whatever servers you connect and federate to. This is required to route messages between users. What is your point?

allset_on A $20k American-made electric pickup with no paint, no stereo, no screen

OK now do a small hatchback.

allset_on How each pillar of the First Amendment is under attack

No.

allset_on How I pwned a major New Zealand service provider

And every tutorial you could find on how to use PHP with a database was a tutorial on how to add SQL injection to your site.

allset_on Landrun: Sandbox any Linux process using Landlock, no root or containers

The underlying library that does most of the work is MIT.

https://github.com/landlock-lsm/go-landlock

allset_on Feds Link Cyberheist to 2022 LastPass Hacks

Which you should absolutely do when the company storing your seed phrase gets hacked.

allset_on GeoCities in 1995: Building a Home Page on the Internet

Which is why Neocities has a free tier which doesn't even have ads.

allset_on The cost of Go's panic and recover

>your code

3P code is a thing

>why

Sometimes there are edge cases with nil pointers that testing missed.

>automatically restart

What about all of the other requests in flight? Letting those fail because one request hit an edge case isn't great for a production service with high throughput.

allset_on Ask for no, don't ask for yes (2022)

You can also phrase it a little more gently.

"I plan to start on this on X date, let me know if you have any concerns."

And send a reminder so that you're giving them multiple chances to respond.

allset_on Understanding gRPC, OpenAPI and REST and when to use them in API design (2020)

As the linked docs mention, grpcurl is a thing if you want to use it.

allset_on Understanding gRPC, OpenAPI and REST and when to use them in API design

Server reflection exists (https://grpc.io/docs/guides/reflection/), but you don't really need to whip out curl when you have the RPC service's definition. It tells you everything you need to know about what to send and what you will receive, so you can just start writing type-safe code.

allset_on New Google Sheet on half of 13.6" MacBook Air screen is fully covered by popups

Phone apps can have their own UI layout, font size, etc. though. No reason to force that on desktop users.

allset_on Phishers Love New TLDs Like .shop, .top and .xyz

Or are hosting non-public services and want TLS certs that all my devices trust automatically, like me.

allset_on WireGuard Performance with a Pi Zero (2019)

They do proxy your traffic if it can't set up direct connections, and it's still free.

https://tailscale.com/kb/1232/derp-servers

allset_on 7-Eleven is reinventing its food business to be more Japanese [video]

Cheap, safe to drink bottled water was my reason for making the daily pilgrimage while backpacking through Thailand.

allset_on Netflix's bet on advanced video encoding

I suspect that what you receive is determined client-side in software, and with some reverse engineering, you could force it to send you whatever quality you want (as long as your subscription allows for that quality level).

allset_on The upcoming iterator design for Go 1.23

> - Files ending with "_unix.go", "_linux.go", "_windows.go" etc. will only be compiled when compiling for the specified platform. The exact list of platform is very hard to find in documentation.

Sure, you won't find it in the Go 101 guides, but it is well documented in the "go build" CLI reference in the official Go docs site. See https://pkg.go.dev/cmd/go#hdr-Build_constraints and https://pkg.go.dev/internal/platform.