HNHacker News
TopNewBestAskShowJobs

rfmoz

258 karma · joined November 5, 2015

submissionscomments
rfmoz··on Swift's native Clocks are inefficient
OSX clock_gettime() [0] offers CLOCK_MONOTONIC and CLOCK_MONOTONIC_RAW, but not CLOCK_UPTIME, only CLOCK_UPTIME_RAW.

Maybe someone knows why? On FreeBSD it is available [2].

[0]: https://www.manpagez.com/man/3/clock_gettime_nsec_np/ [2]: https://man.freebsd.org/cgi/man.cgi?query=clock_gettime

rfmoz··on Run0, a systemd based alternative to sudo, announced
hopefully
rfmoz··on I looked through attacks in my access logs
With Fastly WAF - SignalSciences, Distil Networks - Imperva, Akamai - StackPath. There are a few companies that started alone in this ecosystem and found the evolution path with the mayor CDN networks, those who have failed themselves in provide a good internal alternative service.

Human security - PerimeterX, Haproxy WAF, Datadome, are other players to different target audience.

If you have a good control over the app exposed, maybe you only need a WAF in the sense of stop stuff outside your infra. The sql injections, weird urls trying the way to /etc/passwd or related things look from the past and only makes noise nowadays. The real issue is when someone hits you in a rate impossible to manage with your resources or when it cost you more than the securing layer.

rfmoz··on Chasquid – SMTP server focused on simplicity
Postfix was designed years ago, but that doesn't do it bad, it is a beast, it can handle 5k mails per second (DKIM signed) with an small tunning in a modern hardware without problem.
rfmoz··on Chasquid – SMTP server focused on simplicity
The security solutions on the mail system make a line that you need to cross, but it doesn’t guarantee a success.

It’s a hard way to guess how good is the implementation on the receiver, like GMX, Libero or other big country providers with “historical” service that don’t care about them too much.

rfmoz··on Chasquid – SMTP server focused on simplicity
Looking for help with Postfix configuration usually put you in forums threads with almost +10 years.
rfmoz··on How does Linux NAT a ping?
But the ID is on the ICMP header or it belongs to the IP part?
rfmoz··on That Old NetBSD Server, Running Since 2010
Drop a message on https://www.reddit.com/r/uptimeporn/
rfmoz··on FreeBSD replaces bubblesort with mergesort on SYSINTs
With a custom kernel and without initrd/initramfs is possible to boot around 1 second.
rfmoz··on DHCP is not blocked by ufw/iptables
What advantages have ferm over nftables? The format looks similar.
rfmoz··on DHCP is not blocked by ufw/iptables
Linux Firewalls: Enhancing Security with Nftables and Beyond
rfmoz··on Nanosecond timestamp collisions are common
Someone knows why OSX clock_gettime() doesn't offer CLOCK_UPTIME and only CLOCK_UPTIME_RAW?
rfmoz··on AWS networking concepts in a diagram
It’s interesting to see how they are piling up complexity as the time passes. Sad to discover new features varnished by marketing terms that on the technical side attempt to fix the problems arised from previous solutions and narrow and struggle the ways to use them.
rfmoz··on OpenBSD: Shutdown/reboot now require membership of group _shutdown
Debian, in their Policy 4.5.0 said:

"When maintainers choose a new hardcoded or dynamically generated username for packages to use, they should start this username with an underscore."

https://www.debian.org/doc/debian-policy/upgrading-checklist...

rfmoz··on The long life of Apache httpd 2.4
Getting Apache from distro repos is like using MS Word and Nginx like Notepad. Rarely you use all the features available on Apache but, mostly at the beginning, compiling Nginx to get features was the daily routine.
rfmoz··on Tell HN: Twitter started mass suspending apps today for no reason
They would have to move the users automatically to the free plan and give them the warning about reaching the quota, if it would be the case, with a grace period.
rfmoz··on Semaphore: A Full-Body Keyboard
In this case, the term semaphore is equivalent to optical telegraph.

The separation isn't completely clear, but take a semaphore like a basic tool that produces signals with a strong predefined signification, like a red light in a highway traffic light. The optical telegraph have a basic signification on their symbols, like letters or numbers, but a wide range of meanings, like the message transmission.

Take a look to the wikipedia information: https://en.wikipedia.org/wiki/Optical_telegraph

rfmoz··on Simply explained: How does GPT work?
I’ve been looking an article like this, great job. Thanks
rfmoz··on Avoiding HTTP/3 (for a while) as a pragmatic default
As note, for client browsers, there is a way to know their network problems. It's called "NEL" https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/NE...

An interesting usage from Wikimedia: https://www.usenix.org/sites/default/files/conference/protec...

rfmoz··on Avoiding HTTP/3 (for a while) as a pragmatic default
Looking outside “desktop” environments the state is still a mess. There are api services using libraries capables of connecting via HTTP/3 but hanging under firewalls or network security appliances that hit that UDP traffic in weird ways. From the outside, you can only expect the complaint from the customer.
rfmoz··on Ghoti
The languages that hadnt had an early written grammar, have nowadays a close relationship between the spelling and the written form.
rfmoz··on Twitter Is Down Globally
A new ASAP functionality is beng deployed.
rfmoz··on What is a CDN? How do CDNs work?
And the time that you spent waiting to see the logs. They aggreagate them via attached files in mails sended from the pops.
rfmoz··on Starting February 9, we will no longer support free access to the Twitter API
They are doing that for give an small step backward next week, giving the impression that they are hearing the users. Hopefully it’ll give a narrow free api usage…
rfmoz··on Is AM radio dead?
Like shortwave broadcasting, AM have their place nowadays, it brings a comunication service to their target. It's true that it isn't as popular as before, but take a look to the postal service and their letters. Who writes a letter today? but you can do it without problem if you want.
rfmoz··on Cistercian Numerals
This method could be used to compress numbers? You get a conversion from 4 to 1 digit.
rfmoz··on Sudoedit can edit arbitrary files
CVE-2023-22809
rfmoz··on Systemd.timer, an Alternative to Cron
It’s odd, but actually you can not restart an active unit with a timer
rfmoz··on HAProxy 2.7
ACME support must be integrated, this was turned into a mandatory feature nowadays…
rfmoz··on Mail: Make The Dragonfly Mail Agent (dma) the default mta
Maybe a coincidence, but Eric Allman is the developer of Sendmail [1] and the spouse of Marshall Kirk McKusick, one of the long-serving board members that left the FreeBSD Foundation this summer [2].

[1] - https://en.wikipedia.org/wiki/Eric_Allman [2] - https://freebsdfoundation.org/blog/foundation-elects-new-off...

← PreviousPage 3 of 4Next →