HNHacker News
TopNewBestAskShowJobs

mfincham

1,318 karma · joined November 22, 2011

bloop
submissionscomments
mfincham··on Xpra: Multi-platform screen and application forwarding system for x11
There used to be a hack for getting integrated windows using Remote Desktop, but I can't remember the name of it anymore and Google isn't finding much :( Hopefully someone remembers (and it's still maintained).

Edit: Found it: https://github.com/rdesktop/seamlessrdp. Seems like there are probably more modern solutions now though.

mfincham··on Xpra: Multi-platform screen and application forwarding system for x11
I do almost all my computing through Xpra these days. Being able to combine windows seamlessly from multiple VMs is a much more usable way to segregate workloads, and Xpra doesn't suffer from the same security (and increasingly compatibility) issues of X forwarding.
mfincham··on Ask HN: Which mailing lists would you recommend to subscribe to?
The classic metzdowd cryptography list is generally good reading: https://www.metzdowd.com/mailman/listinfo/cryptography

Another good fly-on-the-wall place to see what's going on in a specific tech niche is the dns-oarc operations list: https://lists.dns-oarc.net/mailman/listinfo/dns-operations

mfincham··on Open Source PC That Fits in Your Pocket
They brought a laptop to market and shipped thousands of those. So, seems likely?
mfincham··on Using saltpetre for cooling drinks (2013)
This is a very long lived urban legend.
mfincham··on Why I left Pine64
The currently shipping affordable RISC-V SBCs tend to be RISC-V cores embedded with a bunch of frustrating undocumented peripherals, more or less the same as with affordable ARM SBCs. It's disappointing :(

See for instance the Allwinner D1 chip.

mfincham··on Your compliance obligations under the UK’s Online Safety Bill
"We will just use technology to bypass this bad law" is a very convenient position for a technology-focused group to take. It feels weirdly privileged to just say "ah we will abdicate ourselves from the problem by using ever more complicated technology" rather than working to improve the legislation to benefit everyone.
mfincham··on Notes on Running Containers with Bubblewrap
Google's nsjail (https://github.com/google/nsjail) has a nice "inetd style" mode where it can launch a sandboxed process in response to a TCP connection for similar use cases to this (and is relatively quick to fire up).
mfincham··on The PocketReform is a made-in-Berlin Linux handheld
For reasons of safety: they're LiFePO4 batteries, swapping in Lithium Ion would be hazardous :)
mfincham··on How I would sell OpenBSD as a salesperson
The first sentence of the page says the author is a woman.
mfincham··on Tailscale SSH
SFTP isn't really FTP over SSH, it's just a collision of naming.
mfincham··on The Hidden Worlds of the Klein Tools TI250 Thermal Imager
Excellent! I have the Uni-T version and it was suspiciously similar :)
mfincham··on The Hidden Worlds of the Klein Tools TI250 Thermal Imager
I believe this Klein Tools camera is a re-brand of the Uni-T UTi80P, so probably these tricks apply there as well.
mfincham··on SMTP protocol basics from scratch in Go: receiving email from Gmail
It's basically like you described - an informally specified set of rules the various "big players" in e-mail enforce. There's some consensus about the things you "have" to do to participate in e-mail but it's generally not a black and white "do these things and you'll be fine" situation.
mfincham··on Interview with CEO of rsync.net: “no firewalls and no routers”
The tl;dr as to why it doesn’t work is that they blanket forbid calling “rclone serve”, which is required for “append-only” support in restic.

This doesn’t make sense given that the specific invocation of “rclone serve restic --stdio” doesn’t open any network sockets, it’s no less safe than e.g. “tar”

mfincham··on Interview with CEO of rsync.net: “no firewalls and no routers”
My first experience with rsync.net was very disappointing. To this day they still advertise “append-only mode” support for restic at https://www.rsync.net/products/restic.html.

Their support people confirmed it doesn’t work (though they didn’t seem to understand why it would be fine for them to support it as advertised...) yet 6 months later they still advertise that they support it, even when I have e-mailed to remind them (and it still doesn’t work either) :(

mfincham··on Full-Bleed Layout Using CSS Grid
Just whatever other software I'm using. Usually terminal windows, sometimes text or graphics editor, e-mail client. That kind of thing.
mfincham··on Full-Bleed Layout Using CSS Grid
If a site like Wikipedia is too wide, wouldn't you just make your browser window thinner? Mine has never been wider than half the display since I got a widescreen LCD ~ 15 years ago.
mfincham··on # of days since the last alg=none JWT vulnerability
A couple more from recent history:

https://insomniasec.com/blog/auth0-jwt-validation-bypass https://auth0.com/blog/critical-vulnerabilities-in-json-web-...

mfincham··on SpaceX will launch Masten’s first lander to the moon in 2022
Potentially also of interest: Rocket Lab is planning to launch a cubesat to lunar orbit soon as well https://www.rocketlabusa.com/lunar/

Then to Venus in 2023! https://www.space.com/rocket-lab-private-venus-mission-2023....

mfincham··on ProtonMail Bridge is now open source
It would be great if someone forked this to allow it to function as an XOAUTH2 IMAP proxy for other providers.

This would be particularly useful with big e-mail providers (Google, Microsoft) looking at retiring password based authentication in the near future.

mfincham··on Show HN: Simple note-taking and blogging
Is it open source?
mfincham··on Ask HN: Are we all OK with short DNS TTLs now?
Also in the mix: is there any point in having multiple A records for a busy site now?
mfincham··on Show HN: Didyougogo – An Altavista slayer
The "submit a URL" seems to need the URL scheme added (e.g. https://) or it silently fails.
mfincham··on Rent a Raspberry Pi 3 on a native IPv6-only network
To address your 2nd point: as far as I know, Digital Ocean's IPv6 doesn't provide the things you'd need to run an IPv6-only server (e.g. there is no NAT64 or DNS64 gateway, no v4-to-v6 proxy for letting the v4 Internet reach your server).

And sure, if you just want a little bit of computing power and literally don't care where from, you might as well get a VM from somewhere like Digital Ocean instead of a Pi from Mythic Beasts, but that is beside the point. This is an offer to rent a Pi on an IPv6-only network, which nobody else is doing.

mfincham··on Rent a Raspberry Pi 3 on a native IPv6-only network
Digital Ocean don't rent out Raspberry Pi or provide IPv6-only connectivity, so it's quite a different kettle of fish
mfincham··on Choose Firefox Now, Or Later You Won't Get A Choice (2014)
The only thing standing in the way of me returning to Firefox is them having a comparable rendering process sandbox to Chromium. It's coming, but it's hard to say how long it'll be before it's as good as Chromium.

More info: https://wiki.mozilla.org/Security/Sandbox

mfincham··on [dead]
Just dig(1)
mfincham··on [dead]
You can ignore things like "Not advertised to any peer" in looking glass output, just a function of a router being used as the looking glass server and not participating in routing.
mfincham··on [dead]
Indeed the DNS seems alright. I am seeing broken routes to their load balancers from all of my testing sites (on opposite sides of the globe).
Page 1 of 5Next →