HNHacker News
TopNewBestAskShowJobs

rfmoz

258 karma · joined November 5, 2015

submissionscomments
rfmoz··on NetBSD adds a new text editor called atto
mg is nice, but I miss the colored text
rfmoz··on Who killed the EV cert? A browser whodunit for Halloween
The green bar from HTTP EV certificates is being reincarnated as the green tick of email BIMI Verified Mark Certificates (VMCs)
rfmoz··on JetKVM Mini
GL-iNet has really nice KVM. Maybe the worst thing is the company name, difficult to write it down correctly.
rfmoz··on Casio F-B100W-1A
The Amazfit Neo was already doing something very similar a few years ago, a Casio-like design, always-on monochrome display, physical buttons and a 28-day battery life, while adding notifications and basic fitness tracking.
rfmoz··on SNET offline internet Cuba [pdf]
Details of SNET (StreetNet), a massive user-built offline intranet in Havana
rfmoz··on Goodbye, and Thanks for All the Bikesheds
This matches what I’ve seen in practice, individual tasks may become faster, but the overall development process doesn’t automatically improve. Heavily dependant of the real hands behind.
rfmoz··on Lobste.rs is now running on SQLite
Another SQLite user here. My site gets constantly hammered by crawlers, and SQLite just keeps going on hit miss. Anyway, the real magic is on the ram and the ssd perf.
rfmoz··on Collection of Digital Clock Designs
What would be the best device to put any of these ones over the desk? And old phone? Maybe an esp32?
rfmoz··on OpenBSD 7.9
The main differences between OpenBSD, FreeBSD, NetBSD and DragonFly BSD

https://unixdigest.com/articles/the-main-differences-between...

rfmoz··on OpenBSD 7.9
I used to run it on a laptop too, but the battery life was shorter and the laptop ran noticeably hotter than under Linux, so I eventually switched back.

That said, OpenBSD feels unusually coherent (ej. check wifi connection from terminal). The whole system has a level of consistency that's hard to find elsewhere, also between other BSDs.

For pet servers, it usually fits perfect.

rfmoz··on The vi family
Totally agree, Vis really hits an spot between modern feel without losing what made vi great. The structural regex is a game-changer.
rfmoz··on Screenshots of Old Desktop OSes
I miss on the list Counterpoint GUI for Amstrad PCs with MS-DOS

https://www.seasip.info/AmstradXT/Counterpoint/index.html

rfmoz··on GoDaddy gave a domain to a stranger without any documentation
Any provider for critical domain vault?
rfmoz··on Top laptops to use with FreeBSD
Search on bios-mods for a modified whitelist BIOS firmware -> https://www.bios-mods.com/forum/Forum-WiFi-WWAN-Whitelist-Re...
rfmoz··on Top laptops to use with FreeBSD
There are modified BIOS firmware that allow any WiFi card. Good luck
rfmoz··on Helix: A post-modern text editor
Vis editor [0] also has multicursor and powerful sam's structural regular expression

[0]: https://github.com/martanne/vis

rfmoz··on Linux From Scratch ends SysVinit support
Yes, "everything is a file" but the mouse on Rio is written in stone.

Aside of that, plan9 wins on the theoretical side, it was a research OS, but in the practical one... it's opinionated.

rfmoz··on The Book of PF, 4th edition
Linux Firewalls by Steve Suehring covers nftables. It’s a good book to know the basics.
rfmoz··on Reticulum, a secure and anonymous mesh networking stack
Give a try to Meshcore, their design has proven to be reliable in realworld use.
rfmoz··on LWN is currently under the heaviest scraper attack seen yet
Chinese AI is doing large amounts of request in the past weeks.
rfmoz··on Total monthly number of StackOverflow questions over time
They had pretty neat infra, maybe it still runs in the same clever way. https://meta.stackexchange.com/questions/10369/which-tools-a...
rfmoz··on Total monthly number of StackOverflow questions over time
Quora, sadly, is a good example of enshittification.
rfmoz··on CSRF protection without tokens or hidden form fields
I reply myself because I've found that idea already porposed:

"Origin policy was a proposal for a web platform mechanism that allows origins to set their origin-wide configuration in a central location, instead of using per-response HTTP headers." - https://github.com/WICG/origin-policy

But their status is "[On hold for now]" since, at least, three years ago.

rfmoz··on CSRF protection without tokens or hidden form fields
The reference of robots.txt offer a good way to define specific behavior for the whole domain, as example. Something like that for security could be enough for large amount of websites.

Also, a new header like “sec-policy: foo-url” may be a clean way to move away that definitions from the app+web+proxy+cdn mesh to a fixed clear point.

rfmoz··on CSRF protection without tokens or hidden form fields
Adding more security headers every year feels like strapping seatbelts onto a collapsing roller coaster. It would be better to stop this "sec headers stack" in favour of simpler, secure by default browser primitives with explicit opt-out. Getting an example from https://securityheaders.com the list nowadays is as follows:

- Strict-Transport-Security - Content-Security-Policy - X-Frame-Options - X-Content-Type-Options - Referrer-Policy - Permissions-Policy - Cross-Origin-Embedder-Policy - Cross-Origin-Opener-Policy - Cross-Origin-Resource-Policy

rfmoz··on HTTP Caching, a Refresher
CDNs manage user TLS certificates and that is one of the advantages of using them.

A node server could negociate https close to the user, do caching stuff and create an other https connection to your local server (or reuse an existing one).

Https everywhere with your CDN in middle.

rfmoz··on Cloudflare outage on December 5, 2025
They do in some way because the LaLiga blocking problems in Spain don’t affect the paid accounts=large websites.

An other suggestion is to do it along night shift in every country, right now they only take into account EEUU night.

rfmoz··on Meshtastic
MeshCore app is way better than the Meshtastic one.
rfmoz··on Moving from OpenBSD to FreeBSD for firewalls
Let me extend the question to what’s wrong with NFTables on Linux? It’s a different way to manage Netfilter, out of IPTables
rfmoz··on Why use OpenBSD?
The development move in ZFS from FreeBSD to OpenZFS (AKA Linux) was a mayor point on that.
Page 1 of 4Next →