HNHacker News
TopNewBestAskShowJobs

rfmoz

258 karma · joined November 5, 2015

submissionscomments
rfmoz··on TCP, the workhorse of the internet
Playing with protocol number change usually results in “Protocol Unreachable” or “Malformed Packet” from your OS.
rfmoz··on TCP, the workhorse of the internet
RUDP from Plan9 was a nice step between TCP and UDP - https://en.wikipedia.org/wiki/Reliable_User_Datagram_Protoco...
rfmoz··on Let's Help NetBSD Cross the Finish Line Before 2025 Ends
An interesting thread about the upgrade exists on the same list that the link points to, just a few messages earlier. Hopefully, with the donations, the project can improve the existing friction points - https://mail-index.netbsd.org/netbsd-users/2025/10/01/msg033...
rfmoz··on OpenBSD 7.8
from what point of view are you looking for?
rfmoz··on OpenBSD 7.8
Connecting to wifi on OpenBSD terminal is wonder simple, one reflection to the meticulous work behind the system.
rfmoz··on OpenBSD 7.8 Released
None yet.
rfmoz··on Entire Linux Network stack diagram (2024)
Linux Kernel map is an other good one https://commons.wikimedia.org/wiki/File:Linux_kernel_map.png
rfmoz··on How I'm using Helix editor
For those looking beyond Helix, Kakoune and Neovim, Vis is a lightweight and elegant option, worth a look.
rfmoz··on Way past its prime: how did Amazon get so rubbish?
But Amazon started as marketplace and people associate the brand with that, also with their Amazon Basics stuff. But is the experience for the user is not equal for brands that have been working in their solely brand reputation. I think that they fall into “I do it because the competitors have done it before”, it would be nice to know the revenue for the marketplace part and time invested in development.
rfmoz··on Way past its prime: how did Amazon get so rubbish?
The marketplaces in brand shops are completely annoying. If you choose to buy from Decathlon, you expect their coverage over all products, not some of them. Only imagine the same in the physical shop, completely crazy trying to avoid falling into non-decathlon things along the display racks.
rfmoz··on Old Stockholm Telephone Tower
Madrid (Spain) had an equivalent structure https://historiatelefonia.com/2014/11/21/templetes-telefonic...
rfmoz··on Meshtastic 64 – A meshtastic radio for the Commodore 64
It would work a Meshtastic repeater from the ISS?
rfmoz··on SystemD Service Hardening
Systemd had the momentum to unify nearly all the init distribution process and it did it, but without aligned with the right unix approach, the evolved versions confirm that, getting more and more from the reliying Linux distribution.

Broad view betweeen BSD ecosystem offers that this wasn’t a good way. I still want to see a good alternative from that point of view…

rfmoz··on Debian 13 “Trixie”
It is done by a systemd timer unit
rfmoz··on Nginx introduces native support for ACME protocol
The problem with DNS-01 is that you can only use one delegation a time. I mean, if you configure a wildcard cert with _acme-challenge.example.com in Google, you couldn't use it in Cloudflare, because it uses a single DNS authorization label (subdomain).

The solution has been evolving along these years and currently the las IETF draft is https://datatracker.ietf.org/doc/draft-ietf-acme-dns-account...

The new proposal brings the dns-account-01 challenge, incorporating the ACME account URL into the DNS validation record name.

rfmoz··on Nginx introduces native support for ACME protocol
Give a try to DNSMadeEasy or RcodeZero
rfmoz··on Yes, the Book of PF, Fourth Edition Is Coming Soon
Nftables is a step forward in the Linux firewall. It evolved a lot in the last years and nowadays it really requires that the tooling linked to iptables setups do the migration step.

The scenario is like the cgroup v1 and v2 change.

rfmoz··on Yes, the Book of PF, fourth edition is coming soon
Take a look to “Linux Firewalls: Enhancing Security with Nftables and Beyond”
rfmoz··on X-Clacks-Overhead
A good related book written by Gerard Holzmann and Bjorn Pehrson:

The early history of data networks https://archive.org/details/earlyhistoryofda0000holz

rfmoz··on X-Clacks-Overhead
The Clacks is a copy of an optical telegraph system that was used in Sweden

https://en.m.wikipedia.org/wiki/Abraham_Niclas_Edelcrantz

Also UK used a system close to that. And a lot of countries along Europe developed their networks with different signaling devices.

rfmoz··on Cozy video games can quell stress and anxiety
Walden, a game. This is an other calm game, full of nature and simple life.
rfmoz··on Understanding the Origins and the Evolution of Vi and Vim
And vis editor, that also has herietage from sam.
rfmoz··on TLS certificate lifetimes will officially reduce to 47 days
This could be addressed in a more progressive way.

For example, EV carts had the green bar that was a soft way to promote their presence/use over the normal ones. That bar, started as a strong evidence on the url box and lost that look with the time.

Something like that let the owner to decide and, maybe, the user push their use because it feels more secure, not directly the CA.

rfmoz··on Running NetBSD on IBM ThinkPad 380Z
I just came across this article after reading what's new in SystemD v257

It's a miracle how simple NetBSD still is, a few foo=NO in /etc/rc.conf and a check with ps auxc after rebooting, that's all.

rfmoz··on The Influence of Bell Labs
Inline with this, the talk from Richard Hamming "You and Your Research" (June 6, 1995)

https://m.youtube.com/watch?v=a1zDuOPkMSw

rfmoz··on MIT Aluminum Bicycle Project 1974 (2016)
Magnesium is common in suspension forks lower legs.
rfmoz··on MIT Aluminum Bicycle Project 1974
Gary Fisher has an insteresting paper too about alu frames:

https://web.archive.org/web/20061103174315/http://www.kleinj...

rfmoz··on Make Your Own CDN with NetBSD
And log delivery using smtp (attaching files) from the nodes at the border to the central servers
rfmoz··on Towards a true multi-cloud offering to deliver on broken promises
What is the current state of GAIA-X?
rfmoz··on RegreSSHion: RCE in OpenSSH's server, on glibc-based Linux systems
From the report:

> Finally, if sshd cannot be updated or recompiled, this signal handler race condition can be fixed by simply setting LoginGraceTime to 0 in the configuration file. This makes sshd vulnerable to a denial of service (the exhaustion of all MaxStartups connections), but it makes it safe from the remote code execution presented in this advisory.

Setting 'LoginGraceTime 0' in sshd_config file seems to mitigate the issue.

← PreviousPage 2 of 4Next →