HNHacker News
TopNewBestAskShowJobs

ancientsofmumu

234 karma · joined October 31, 2021

submissionscomments
ancientsofmumu··on SSH tips and tricks
> How is vim + tmux compatibility these days?

I find I like having "set-option -g mouse on" in ~/.tmux.conf so that mousewheel scrolling feels more natural (like it does in a local terminal).

> I find that SSH times out / disconnects if unused...

This one is a little tricky - it partly depends on the default settings of the remote sshd_config for sending KeepAlive pings (changed Debian 10 to 11, e.g) and what your local vendor-compiled ssh_config defaults look like. In general, to just solve the problem add this to your macOS ~/.ssh/config at the bottom/end:

    Host *
      TCPKeepAlive yes
      ServerAliveInterval 300
TCPKeepAlive is what it sounds like, it's the L3 level tweak. ServerAliveInterval is a higher level ping-pong on the SSH session itself; kind of overkill to have both configured, but it Just Works(tm) for most people to have them set on their client. You can look these up in the man pages (ssh_config, sshd_config) and discover even more tweakable options than just these two I presented - some you can set server side, some client side, some both.

Side note: bash has an envvar `TMOUT` -- if that's set, bash will auto-logout if you idle in a shell. It's usually not set on most Linux server installs, just be aware it exists and is a thing to look for if you're debugging some day.

ancientsofmumu··on Stop using DICT dictionary apps (such as GNOME/MATE Dictionary)
Why doesn't the author tell people to just got to https://dict.org in a browser, which is the default backend for the apps? SSL, POST queries, minimal and fast web output. Only javascript on the site is an old useless widget from a decade ago that bounced you to the internet strike of 2012. Works well even in elinks / links in a terminal if that's your thing, could probably whip up a cURL alias in minutes.
ancientsofmumu··on Gitlab plans to delete dormant projects in free accounts [rumor]
Gitea can import all those things, it's referred to as a Migration - you can sign up for a free account on, say, codeberg.org and give it a try before committing to running your own instance. Click the + button top right after logging in and choose New Migration -> Gitlab and follow your nose. Create an access token in your Gitlab account first, Gitea will need to use it.
ancientsofmumu··on Simon Tatham's Portable Puzzle Collection
> For instance, their Minesweeper guarantees that it is solvable - you will never have a 50/50 choice you cannot identify.

Alas, I've backed myself into a corner a couple of times and triggered "just gotta guess" choices in it - while it's generally good at this, it's not a 100% implementation based on my playing.

I find "Net" way more fun though for quick casual gaming, a 7x11 grid (depends on exact screen size) with wraparound enabled is a favorite for easy to tap but enough squares to make it take some time to solve (about 5 minutes per game, give or take).

ancientsofmumu··on SearchHut
I think it would be great if we had Code Forge index to search uniquely. In this index are only the myriad of code hosting sites around the internet - shared hosting like gitlab, github, sourcehut, sourceforge, codeberg, and all the project instances like the kernel.org, GNU Savannah, GNOME, KDE, BSD, etc. Probably hundreds of them out there, and allow people to submit their own self-hosted Gitea/Gitlab/sr.ht/etc. instances to be crawled - maybe even suggest a robots.txt entry your crawler could key in on as "yes please index me, hutbot".
ancientsofmumu··on DNS Esoterica – Why you can't dig Switzerland
I kind of think this is a dig bug -- the man page indicates you can specify `name type class queryopt` in an unargumented style, but when using IN in this fashion against `ch` it does not work correctly (testing on Debian 11 stable). Compare these 4 sets of results:

    dig ch NS IN +short
    dig -q ch -t NS -c IN +short
    dig uk NS IN +short
    dig -q uk -t NS -c IN +short
Only when using the first form do you get a comment ";; Warning, extra class option" and the incorrect results. So even when using the full pattern of un-argumented options as outlined in the man page, it fails to work as expected specifically for ch.
ancientsofmumu··on The world needs a non-profit search engine
I put your search into SearX with a lot of the major engines enabled (Google, Bing, Qwant, Brave, DDG, etc.). Arguably, Google did a better job giving me HN results (but it's a very small sample set).

https://searx.be/search?q=what%20camera%20would%20HN%20recom...

Results 1-3: SEO "best cameras" from DDG, Qwant

Result 4: Ask HN from DDG, Qwant

Result 5: Ask HN from Google

Results 6-8: SEO "best cameras" from DDG, Qwant

Result 9: Ask HN from Google

Result 10: Camera forum from DDG, Qwant

Edit: if you're not familiar with SearX, everyone who visits will get a slightly different result based on dynamic results. Even if the same person refreshes a few times the exact results and ordering will vary; I've learned to try the same search a few times to get better results, it's just a quirk of how it works and how each remote engine reacts at that given instant.

ancientsofmumu··on Texas repeatedly raises pollution limits for Cheniere LNG plant
This original title also used "limits" which is more correct for the content, this link and the original title should be substituted. A "raised standard" would imply lower limits allowed by conventional use of the word/phrase.

"Texas repeatedly raises pollution limits for Cheniere LNG plant"

ancientsofmumu··on Type-ish – A runtime type checker for bash, in bash
It's not that cut & dry, as bash is doing evaluations; 0 and 1 can both be "true" if simply used without an evaluation, but add logic and it starts to matter (grep returns 0 if hit, 1 if not).

    [[ 0 ]] && echo "hit 0"
    [[ 1 ]] && echo "hit 1"
    grep -q 127 /etc/hosts && echo "hit grep"
    grep -q 128 /etc/hosts || echo "miss grep"
ancientsofmumu··on End-of-life smartphone? Penguins at PostmarketOS aim to revive it
> (Owner of Pixel 3a) Yeah, that's a bummer. There's not something else I'd rather own right now, so I'll likely keep running it for a while.

I have the 3a and 4a (non-5G), if you can find a 4a someone is trying to give away on the cheap it's basically a nicer version of the 3a IMHO. It's going to EOL in a year so I wouldn't spend much on it, but if one crosses your path for $100, well...

ancientsofmumu··on Hertzbleed Attack
I think you're running into changing the governor mode here, which is a related but different part of the same ballpark. Modern Intel even has a "bias hint" allowed in addition to just a governor, where the user can help tell the power saving features what tradeoffs they prefer; power-saving mode is an additional limitation in conjunction with SpeedStep (or Turbo) P-state use; if the laptop is almost silent (no fans) you're surely clocking it down to avoid heat/thermal buildup (no fans) - this is usually used to conserve/extend battery to the max possible, at the expense of CPU clock speed.

The Arch Wiki has a nice page outlining all of it, there's a lot of knobs to twiddle. https://wiki.archlinux.org/title/CPU_frequency_scaling

ancientsofmumu··on Hertzbleed Attack
This paper relies on Turbo P-states, where they measure the oscillation when that is active; it is not measuring general SpeedStep (OS software controlled) as some seem to have taken away from it. Turbo state is the HWP (hardware P-state controlled) layer above SpeedStep; turning off Turbo in the BIOS still fully allows OS controlled SpeedStep P-states to function, it just disables the hardware level bursting P-states above that max listed CPU level for short periods of time. As others have noted, Turbo state can really kill a laptop battery and/or drive up the thermals pretty quick, a lot of folks disable it anyways if they've tinkered around before.

The abstract writes it as "When frequency boost is disabled, the frequency stays fixed at the base frequency during workload execution, preventing leakage via Hertzbleed. This is not a recommended mitigation strategy as it will very significantly impact performance." This is a confusing grammatical way to state it, as SpeedStep will still work at the OS layer, you'll scale min to max "as usual" and just lose temporary hardware boost max+ capability when under stress (full load at P0 state) - not really "fixed" as it were in layperson's terms. That would be more akin to saying SpeedStep had to be disabled, IMHO.

https://www.kernel.org/doc/html/v4.19/admin-guide/pm/intel_p...

ancientsofmumu··on Tell HN: Bitwarden does not export attachments in backups
Quick note, the Secure Note field can store up to 10k characters (I think it is, last I looked) post-encryption - that's typically big enough for most SSH key types, but may not be big enough for some GPG key exports - I have one GPG key armor export too large to fit. Point being you can stuff a good amount of info in those Notes most times to get exported, but there is a limit to be aware of - the client should fail to save the data once you've crossed that limit if I recall correctly, red error text etc.
ancientsofmumu··on New Upcoming Telegram Premium Features
I would say it's the same question as "what does IRC do?" as the general design is the same - maybe a bit more friction signing up with Matrix than IRC but at the end of the road they operate on the same trust model. The Matrix team blogged about a spambot attack last year on this very question: https://matrix.org/blog/2021/06/30/security-update-synapse-1...

Side comment: because my mobile number was leaked (breached) by T-Mobile which included my name, I get way, way way more spam via it than anything else. Lots of political spam, 95% or greater from the right/repub end of the spectrum.

Edit, side comment #2: I ported my secondary Google Voice number out to Tello (a low cost MVNO in the US) with a SIM in a spare phone, and all the spam I was getting every day to that number simply stopped instantly. I'm a little amazed to be honest, it's very interesting.

ancientsofmumu··on On the Shortcomings of Gemini Protocol
My mistake there, I meant "the Gemini server" meaning to refer to https://sr.ht/~sircmpwn/gmnisrv/ which I'm to understand is pretty popular. Bad English on my part, apologies.
ancientsofmumu··on On the Shortcomings of Gemini Protocol
Proving your point, the Kineto proxy turning that into HTTPS + HTML:

https://gemini.envs.net/x/gerikson.com/gemlog/gemini-sux/Win...

Kineto is written by the same person who wrote Gemini (Drew DeVault), showing us that Gemini as a protocol isn't really needed for transport to share Gemini content, which can be just plain HTML anyways.

ancientsofmumu··on LWN Is Now on Mastodon
There's a tangible benefit to being discoverable without effort (no friction for users); other "famous" FOSS projects are part of the fosstodon.org instance such as https://fosstodon.org/@mate - kind of makes sense to me as a generic user. $0.02
ancientsofmumu··on Nginx Modern Reference Architectures
> if nginx made letsencrypt as easy as caddy does

The EFF cerbot plugin has it covered; assuming your generic Debian server with nginx already configured to host www.domain.com (trivial hello, world setup - nothing fancy) then it's:

    apt-get install cerbot python3-certbot-nginx
    
    certbot --nginx -d www.domain.com -d domain.com \
      --agree-tos -m "email@domain.com" --no-eff-email \
      --deploy-hook "systemctl reload nginx"
    
    systemctl restart nginx
All done. Certbot is already running as a systemd service to handle ongoing renewals and it'll now restart nginx if your cert is updated. This example uses the trivial http-01 ACME method, if you need the more complex DNS based setup for wildcards that'll take a bit more elbow grease.
ancientsofmumu··on CTemplar Is Shutting Down
CTemplar as a service has no integration with standard protocols (SMTP, IMAP, CardDav, CalDav, etc.) even if you paid. It is/was a walled garden solution that can only be used with it's web portal or mobile client; when I was evaluating non-GMail solutions to de-Google it was an instant "nope" in my evaluations. It does not fit in the same category as other general purpose email solution providers.
ancientsofmumu··on CTemplar Is Shutting Down
I'm a (paying) Mailfence customer as well, and use it as a destination sync backup of my primary domain using imapsync, encountered a similar problem so opened a ticket to Support.

The general problem is that Mailfence has what I guess you could call DDoS protections in place and opening too many simultaneous IMAP threads trips their defenses. I have my ~/.mbsyncrc set to only use one thread when writing to Mailfence to avoid tripping the trigger and it runs like clockwork now (cron timer doing IMAP sync writes from the primary). $0.02, hope this helps.

ancientsofmumu··on Cron-based backup for SQLite
The example uses Dead Man's Snitch, Healthchecks.io is my preference and their plans offer more for less. Both offer code on Github for examination.

https://deadmanssnitch.com/plans vs. https://healthchecks.io/pricing/

ancientsofmumu··on Bitwarden: Generate a Username
> you have to manually copy over any credentials from Bitwarden to Keepass

pass-import works pretty well; create an initial empty KeePass DBX file first and keep a copy to re-use, then one can re-run pass-import to import BW to a fresh KDBX on a recurring basis with a simple script.

[1] https://github.com/roddhjav/pass-import

ancientsofmumu··on Bash-oneliner: A collection of handy Bash one-liners and terminal tricks
> Watch out, that's a Linux-ism and macOS's sed

It's GNU sed vs (Free)BSD sed, which are different enhancements of the POSIX standards for sed that went in different design directions. One could Homebrew/macports install gnu-sed on macOS to get a GNU version to write Linux-portable scripts as-needed.

ancientsofmumu··on Fediverse
> So far Mastodon and their goodreads clone

Had to look this up, I think you mean BookWyrm(?).

https://news.ycombinator.com/item?id=28420580

https://bookwyrm.social/

ancientsofmumu··on Ask HN: Is it safe to remove snap from Ubuntu 22.04 LTS completely?
mozillateam-ppa

https://launchpad.net/~mozillateam/+archive/ubuntu/ppa?field...

ancientsofmumu··on Fedora considers deprecating legacy BIOS
Side note: Red Hat disabled the kernel code for the Perc 6/I raid card which is standard in the basic R710 chassis starting with RHEL8.

Unless you have the higher end H710 raid controller or whatever else, Red Hat rendered this chassis controller inoperable with their custom in-house kernel patching process.

ancientsofmumu··on K-9 Mail 6.000
K-9 has been using 3 digits to the right of the decimal for over 12 years.

https://github.com/k9mail/k-9/tags?after=2.107

ancientsofmumu··on Show HN: Emacs Configuration Generator
Hello, I think you have a bug disabling the splash screen: https://git.sr.ht/~pkal/ecg/tree/master/item/ecg.lisp#L372

According to the internet (I don't use emacs) it's supposed to be "inhibit-splash-screen t" - looks like a copypasta induced mistake is all.

ancientsofmumu··on Show HN: Discover the IndieWeb, one blog post at a time
Random drive-by user feedback: I like Random density better - the number of sites I don't want to visit is greater than the number which I'm interested in, Explore is too modal/singular at a time. The 20x density of the Random page is quicker to scan and discard results within seconds to try and find something I'm willing to click into that piques my curiosity, as I may reload the Random page a few times to get a hit I like.
ancientsofmumu··on Protect domains that do not send email
Here are 4 tarpit MX services which can complement the solution to absorb spam being directed at/into the no-email domain, depending on needs:

    # https://wiki.junkemailfilter.com/index.php/Project_Tar
    tar.junkemailfilter.com

    ## https://abusix.com/blackhole-mx/
    void.blackhole.mx

    ## https://www.dnswl.org/?page_id=17
    mail-in.verboten.net

    ## https://fakemx.org/
    mx.fakemx.net
Page 1 of 2Next →