HNHacker News
TopNewBestAskShowJobs

weightedreply

40 karma · joined September 9, 2022

submissionscomments
weightedreply··on Lego collaboration with Daft Punk
Remember Daft Punk!? They're back! In Lego form.

https://comb.io/gqMDSC

weightedreply··on StreetComplete v64.0
I've completed a few square kilometers around my home while walking my dog over the last year. I'd like to get better at remembering to check the app when I'm in different neighborhoods.

With the ease of use of StreetComplete, it really wouldn't take many volunteers in a city to complete all quests. And I'd love for a privacy focused navigation app to also have the best datasets for public roads and businesses.

weightedreply··on Cloudflare opens more Enterprise-only features to all customers
The feature I don't want to pay for but would be nice to have: deeper level proxied wildcards.

> If you want to proxy a wildcard DNS record on a deeper level like .www.mycoolwebpage.xyz you can subscribe to Cloudflare Advanced Certificate Manager and get a certificate that is covering that wildcard ¹ ²

When building out services in my smart home, I started with something like 'home.domain.com'. I used Let's Encrypt for services like 'smart.home.domain.com' (and I think Cloudflare proxied these for free?) but realized I was losing some privacy since the subdomains were describing my network services. I also wasn't aware SSL certificates are a permanent record (though what isn't these days) and I had to be careful what names I was using.

I realized instead I could use Let's Encrypt wildcard feature '.home.domain.com' and at least limit the private details potentially leaked in certificate history. But because Cloudflare doesn't proxy deeper wildcard subdomains for free, I'd have to manually create each subdomain in Cloudflare DNS - defeating the privacy objective.

For now, instead of wildcards, I'm just using URL path prefixes. For example 'smart.home.domain.com' becomes 'home.domain.com/smart/'. This works pretty easily in a docker host with traefik handling domains, paths, and certificates. Some apps don't work under path prefixes without a lot of tweaks. And it works fine if it's one-to-one server to subdomain - but if I want to host another server at home I have to come up with another subdomain like 'app-home.domain.com'.

I could also move everything into something like tailscale. Then at least the domains are private. Right now I use an oauth2 proxy infront of my services - but most of them don't need direct internet access. The issue is, for the services that do need the convenience of direct access, tailscale funnel doesn't support custom domains.³ And even if eventually they do, maybe they'll also limit subdomain depth or wildcards.

Anyway for privacy reasons it'd be swell if deeper level subdomain certificates were part of the free tier.

¹ https://blog.cloudflare.com/wildcard-proxy-for-everyone/ ² https://developers.cloudflare.com/ssl/edge-certificates/adva... ³ https://github.com/tailscale/tailscale/issues/11563

weightedreply··on The Mafia may be keeping fentanyl out of Italy
> cocaine *and* pot

I don't think these very different drugs should be compared equivocally.

And while both drugs have the possibility of abuse; most issues stem from legality - not the chemical effects.

weightedreply··on Most People Don't Think About Culverts. Their Failure Can Be Deadly
I learned a lot about culverts after following post 10! ¹

¹ https://www.youtube.com/channel/UCsCNU-ptlze2tqAJSDeVGNQ

weightedreply··on Shopify is moving from React Native back to Swift and Kotlin
Isn't it silly that this even needs to be a conversation? Shouldn't we be able to write in any language we want and have the bindings for it to work cross platform? And shouldn't AI aid in building those cross-platform tools?

Maybe React Native isn't the right choice - but two tech stacks for virtually identical interfaces is dumb. Three stacks if you include browsers.

weightedreply··on Show HN: Kadō – open-source habit tracker, with non-binary habit score, for iOS
Oh thanks! Do you have a link? I searched but a lot of Habit apps are returned.
weightedreply··on Show HN: Kadō – open-source habit tracker, with non-binary habit score, for iOS
This looks great!

I use Loop Habit Tracker¹ on Android which at a glance seems similar.

I wish someone could pair a habit tracker with a CalDAV task tracker like jtx Board².

¹ https://f-droid.org/packages/org.isoron.uhabits ² https://f-droid.org/packages/at.techbee.jtx

weightedreply··on Hardcore IndieWeb: Run your own website 100% independently for only $0.01/day
Is this really true? "A friend of mine" has been running a Jellyfin server behind Cloudflare tunnels for years and hasn't had any issue.
weightedreply··on Extreme Heat conference cancelled due to extreme heat warning
We need a humidity comparison to go with temperature.

I grew up in a humid city and summers were unbearable. Now I live in a dry climate and 30°C is pretty comfortable.

weightedreply··on Lanzaboote – NixOS Secure Boot
Microsoft's certification states that OEM's must allow the user to configure secure boot to trust other bootloader's.

https://learn.microsoft.com/en-us/windows/security/operating...

However OEM's like HP are ignoring the certification requirements:

https://h30434.www3.hp.com/t5/Notebook-Operating-System-and-...

https://h30434.www3.hp.com/t5/Notebook-Boot-and-Lockup/How-t...

weightedreply··on 'Everyone's a Line on a Spreadsheet:' Inside Oracle's Mass Layoffs
> The former software manager, for example, told TIME that 70% of his compensation was tied up in RSUs—and that he was four months away from $1 million in stock options vesting

If you are laid off without cause then shouldn't you be able to exercise those options early? Otherwise these contracts sound like scams.

weightedreply··on Cloudflare targets 2029 for full post-quantum security
Any information on future CPU's with support for hardware accelerated PQC algorithms? Will all my old devices become slow when PQC is the norm and encrypted communication is no longer hardware accelerated?
weightedreply··on FCC updates covered list to include foreign-made consumer routers
Will this impact the Mono Gateway[0]?

[0] https://mono.si/

weightedreply··on NewPipe: YouTube client without vertical videos and algorithmic feed
See also: Tubular

https://f-droid.org/en/packages/org.polymorphicshade.tubular...

weightedreply··on Austrian ministry kicks out Microsoft in favor of Nextcloud
I host a small server for family and it seems to work well:

https://hub.docker.com/r/collabora/code/

weightedreply··on Retiring Windows 10 and Microsoft's move towards a surveillance state
Many OEM's don't allow changing keys and Microsoft doesn't even enforce their own certification requirements. See:

https://linustechtips.com/topic/1610033-hp-charges-for-warra...

weightedreply··on Show HN: A Marble Madness-inspired WebGL game we built for Netlify
I ran into the same infinite respawn. Here's where it happened to me:

https://imgur.com/RFxyl1Q

weightedreply··on OpenStreetMap Is Turning 20
Thanks for sharing! I'm glad there is an FDroid version. I think I'll enjoy this while on walks. It's like gamification for map stewardship.

I remember when OpenStreetMap was new. I added a short missing footpath in my neighborhood at the time. It was a shortcut between homes. Today that same path even displays a very slight 1° turn. Amazing.

weightedreply··on A New Age of Materials Is Dawning, for Everything from Smartphones to Missiles
I'm glad there's more choice but I wish my favorite Levi's still had a 100% cotton option. After years of easy jean shopping I now have to find another brand.