Hacker News Reader

gclaweson Microsoft technical breakdown of CrowdStrike incident

There is eBPF for Windows: https://github.com/microsoft/ebpf-for-windows

I'd hope security products in the future leverage this more than custom kernel-mode sensors.

gclaweson NASA releases Hubble image taken in new pointing mode

I wonder if after Polaris Dawn proves out spacewalking from Dragon, SpaceX will develop the capability to repair the Hubble once again.

I doubt it'll be from spacewalks on Dragon, given they probably can't support something as big as an MMU (unless they pull a really cool hat trick), but maybe with Starship.

I get that at some point it's more worthwhile to launch a new telescope (maybe one of those donated KENNENs from NRO), but Hubble is a big symbol of space exploration, and SpaceX is all about big symbols...

gclaweson Special-use domain 'home.arpa.' (2018)

I've been doing this for a while with SmallStep CA: https://github.com/smallstep/certificates

It's a bit of a pain to load a cert onto every device (easier with stuff like Ansible if you have a bunch of linux devices), but manageable. And it lets me do proper trusted TLS for a lot of stuff that would otherwise be self-signed.

edit: It's also just a fun homelab project to see what it's like to run a full production-ish PKI setup.

One thing I recommend is to add X509v3 Name Constraints extensions to your root CA if you go down this path. It prevents the CA from being abused to MITM you for other domains (at least for browsers/clients that respect names constraints)

  X509v3 Name Constraints: critical
      Permitted:
        DNS:home.arpa
        DNS:.home.arpa
        IP:10.0.0.0/255.0.0.0
        IP:172.16.0.0/255.240.0.0
        IP:192.168.0.0/255.255.0.0

gclaweson Passkeys: A shattered dream

For what it's worth, 1Password Passkeys works fine in this use case. I suspect it may be a subtlety in how BitWarden works.

gclaweson SPQR 1.3.0: a production-ready system for horizontal scaling of PostgreSQL

No, only Roman failures

gclaweson GrapheneOS finds Bluetooth memory corruption via ARM MTE

The only major inconvenience I've heard of is that Google Pay won't let you enroll contactless payments via NFC, apparently because GrapheneOS isn't approved/certified by Google Play SafetyNet.

gclaweson Wintergatan Marble Machine (2016) [video]

Hey, it's the DarkHorse Podcast music! I forgot that was Wintergatan, cool!

gclaweson Helium is essential but nonrenewable and difficult to recycle

The tape is good enough for fusion reactors but not MRIs?

gclaweson Bazzite – a SteamOS-like OCI image for desktop, living room, and handheld PCs

The identifier for the content (image layers + manifest) is the hash of the content, and the has serves as an "address", the registry repo + tag is basically a pointer to a hash.

gclaweson Bazzite – a SteamOS-like OCI image for desktop, living room, and handheld PCs

Fedora's OSTree recently-ish started supporting using OCI containers as the content-addressed image backend in addition to their original git-like one:

https://coreos.github.io/rpm-ostree/container/ https://fedoraproject.org/wiki/Changes/OstreeNativeContainer...

gclaweson I forked SteamOS for my living room PC

That's awesome. How does proton treat anti-cheat software or DRM?

gclaweson European digital identity: provisional agreement reached on eID

"Ihre Papiere, bitte"

gclaweson Valve says Counter-Strike 2 for macOS not happening, there aren't enough players

How much of what was done with Proton for linux is transferrable to macOS?

gclaweson We are beginning to roll out new voice and image capabilities in ChatGPT

I just want one of these things to have Majel Barrett's voice...

gclaweson Running one’s own root Certificate Authority in 2023

And they support ACME. I've been running a smallstep CA off of a Nitrokey HSM 2[1] w/ PKCS #11 for my homelab for a few years now

1. https://shop.nitrokey.com/shop/product/nkhs2-nitrokey-hsm-2-...

gclaweson Unity introduces per-install fee for game developers

The moment Godot engine has been waiting for.

gclaweson Flatpak is not the future (2021)

I'm curious how all of this compares to macOS's .app packages.

gclaweson Unpacking Google’s Web Environment Integrity specification

What's the potential for this to enable mandatory remote attestation that your personal machine is running For-Your-Own-Good™ spying software in order to use any significant services (banking, etc)?

gclaweson Fairphone 4 is coming to the US

I'd buy a Framework phone in an instant...

gclaweson Libreboot 20230423

Does Libreboot (.org) still have the binary blob drama going on?

gclaweson Ask Wirecutter: Can you recommend a not-smart TV for me?

It would be so cool if it supported something like an insertable Raspberry Pi like these NEC displays did, but with standard consumer TV display characteristics (4k, > 60hz, etc)

https://www.youtube.com/watch?v=-epPf7D8oMk

gclaweson Facebook LLAMA is being openly distributed via torrents

He never saw the propaganda film!

gclaweson The US Air Force successfully tested AI-controlled jet fighter

Man, Incubus was on some great soundtracks back then. Halo 2...

gclaweson Bitwarden design flaw: Server side iterations

Holy shit, firefox is only using 1000 iterations?

gclaweson Building NAS with ZFS, AFP/Samba for Time Machine (2021)

Isn't AFP deprecated?

gclaweson Netlink Added to FreeBSD – Unmodified Linux IP(8) Correctly Works

Oh may, I pray for this to be added to macOS. The amount of times I reach for 'ip ...' and am stymied...

gclaweson Show HN: SigNoz – open-source alternative to DataDog, NewRelic