Hacker News Reader

It's simple to setup a resolver, really. Basically just "apt install unbound" and you have a resolver ready.

the only thing you might have to adjust is the access control

https://www.linuxbabe.com/ubuntu/set-up-unbound-dns-resolver...

      access-control: 10.0.0.0/8 allow
      access-control: 127.0.0.1/24 allow
      access-control: 2001:DB8::/64 allow

letters90on How much EU is in DNS4EU?

That'd be a really good idea

https://en.wikipedia.org/wiki/Root_name_server

To be honest, setting up a DNS4EU replica would just be a simple unbound

letters90on The Danish Ministry of Digitalization Is Switching to Linux and LibreOffice

If denmark was to successfully adopt libreoffice they would probably invest in its upkeep aswell

Preventing another migration is a cost reduction in itself

letters90on IRS Direct File on GitHub

Not in other countries besides the US. Haven't seen a printout since I started doing taxes.

letters90on HeidiSQL Available Also for Linux

With DBeaver I was able to use tnsnames.ora to use a few tricks to connect to an oracle db

It required certain host/user/cid combination to pass the whitelist.

letters90on CheerpJ 4.1: Java in the browser, now supporting Java 17 (preview)

The minecraft demo is quite impressive

https://browsercraft.cheerpj.com/

letters90on Debian bookworm live images now reproducible

the update is gold, original message: "They are reproduceable" updated message "lol actually not"

letters90on Sell yourself, sell your work

I'm not the type to write a blog. I just don't want to invest that much.

What I do though is documenting for myself, everything.

It has helped me greatly in the last few years

letters90on Slow SMB Speeds over WiFi

I was asking myself the same question, looking for something noteworthy.

No there's nothing here to find. The way to go is in the linked discourse, god it's ugly, use iperf.

letters90on On Running systemd-nspawn Containers (2022)

I used nspawn to get a system running in the most ridiculous way.

A debian aarch64 vm on kvm starting a systemd-nspawn for an unpacked raspberry pi 3 iso.

It works way too well judging by how ridiculous it was.

Still saved me a few days instead of setting things up myself.

I actually liked how easy it is to spin up nspawn as a systemd service

  [Unit]
  Description=Raspberry Image Machine
  After=multi-user.target

  [Service]
  Type=simple
  User=root

  ExecStart=/usr/bin/systemd-nspawn -D /mnt/ /sbin/init

  [Install]
  WantedBy=multi-user.target

letters90on Openhaystack: Build 'AirTags' – track Bluetooth devices via Apple's network

> All you need to use is a mac.

Might as well require you to pay 1000$ up front to use.

letters90on Bus Number – The GitHub plugin my coworkers asked me not to write

If you wanted to view this from a darker side it could also be titled:

How to generate a hit list to hurt a global economy

letters90on Hacking cars in JavaScript (Replay attacks in the browser with the HackRF)

it's nothing new for cars to be susceptible to replay attacks, yet it's always a proof of incapacity of the involved developers.

to even implement such a design is audacious

letters90on Can't trust any VPN these days

or just a portable mingw coming with an openssh and a dynamic proxy

there you go with an easy socks5 proxy.

letters90on Can't trust any VPN these days

So much work just because someone is using advertised dns from pppoe

letters90on Huly – Open-source project management platform

I don't really see where you are getting that

https://github.com/hcengineering/huly-selfhost

letters90on RegreSSHion: RCE in OpenSSH's server, on glibc-based Linux systems

I didn't consider embedded, probably the biggest target for this.

letters90on RegreSSHion: RCE in OpenSSH's server, on glibc-based Linux systems

> In our experiments, it takes ~10,000 tries on average to win this race condition, so ~3-4 hours with 100 connections (MaxStartups) accepted per 120 seconds (LoginGraceTime). Ultimately, it takes ~6-8 hours on average to obtain a remote root shell, because we can only guess the glibc's address correctly half of the time (because of ASLR).

Mitigate by using fail2ban?

Nice to see that Ubuntu isn't affected at all

letters90on Open-Source Detector of CISA's Known Exploitable Vulnerabilities

Scan Created? Scan Created where? ...

Usage Instructions seem lacking.

letters90on Audio CD ripping – optical drive accuracy listing

No mentioning of abcde ?

Would like to know how it's seen in the ripping community https://wiki.ubuntuusers.de/abcde/

letters90on Ring0VBA – Getting Ring0 Using a Word Document

Cool to see an environment supporting each other in it security research.

He mentions his community on:

https://www.vx-underground.org/

Cool papers, code snippets, nice to spend some time on. Nice gimmik with the banner.

letters90on Zero Trust Hosting and Reverse Proxy via Cloudflare, Swag and Authelia

"Zero Trust"

...

Proceeds to use docker images no user will verify.

letters90on ComiCSS

Impressive, kinda proofs that CSS is becoming its' own profession by the state of complexity that is involved

letters90on DietPi is more than just a minimal image

https://www.armbian.com/bananapi/#kernels-archive-all

350~MB. Not the smallest but better.

letters90on V Programming Language released

I'm curious but too lazy to look it up myself. SO I'll just ask.

How far does the 'linux' specification go. Say I want to run a V program on AIX what kind of libraries will I need?

What about the 'windows' specification. Do the redistributables support windows 2000/7/Vista/8/8.1/10

We have a lot of different systems on our clients, mac as well. It would be nice to read concrete requirements for running to really see how much effort rolling out a V application would be.

letters90on Show HN: Shellvault – Cloud SSH terminal accessible from any browser

You could pay 5$ for this service. Or you could pay 5$ for a virtual server that can be secured off by yourself and still use reverse proxies on ssh to access any machine...

Since a lot of people here have a technical background the most popular choice should be apparent.

letters90on Sci Hub repository torrents of scientific papers

you are referring to pdf viewer exploits, you can circumvent most of them by either using linux or utilizing less targeted pdf viewer software like sumatra.

letters90on Ripple fully funded every live DonorsChoose classroom project yesterday

Beside how great of an effort this is, the main recipients seem to come from the US. Is the US really that poor of a country to need donations for basic school supplies?