ymse

The GP never asserted being an expert and made a well-reasoned argument (unlike yours). I spent three weeks in China last year and generally got the same impression.

We westerners perceive Chinese people as oppressed and poor, but the people I talked to were extremely friendly and optimistic.

I'm guessing that was GPs point, that receptionists and doctors will happily fail to inform patients of this, and rather make separately charged appointments.

While I haven't been to the dentist yet, after living in UK for a year I can testify that the bar for cheating or misleading customers is very low.

As an example, taxi drivers usually pick a longer route than necessary, sometimes driving around the whole city. Especially if they perceive that you are not local.

10K Indian Rupee (INR) ~ USD $150.

Salt or Puppet could work, if you don't mind templating out your dotfiles.

Yes. I don't understand why everyone keeps reinventing this tiny, full-featured symlink manager.

It can also unstow and restow, ignore patterns, etc. Highly recommended.

If you don't explicitly specify (de)compression method (z for gzip, J for xz), tar will try to guess it.

I was not familiar with DANE:

https://en.wikipedia.org/wiki/DNS-based_Authentication_of_Na...

Until the CA system is completely abolished, this appears to works great with LE -- free certificates and a guarantee that no other CA can impersonate you.

The ACME protocol could conceivably be extended to update SRV records along with the certificate for some DNS providers.

Hardware provisioning is a dying art. I would love to see a modern-day xCAT[0] clone that's easy to install and configure and with proper multi-platform support. Foreman is half-way there, but AFAIK doesn't do BMC provisioning and discovery, which is a big deal.

0: https://github.com/xcat2/xcat-core/blob/master/docs/source/i...

It works if you disable XHR on the page (yes, really).

It's a trap.

As someone implementing the S3 API (on Ceph) for a non-profit, another missing option is wildcard certificates.

I ran some benchmarks with perf stat a while back, consisting of displaying a multi-MB text file on screen. st was a lot slower than urxvt, but on par with VTE based terminals. urxvt has other problems though, so I'll stick with st.

So $6000 would get them over two years of self-service DDoS mitigation. Ouch.

Cloudflare should have an emergency hotline for situations like this. Charge half the ransom to handle the traffic for the duration of the attack. Offer contract afterwards.

> It makes me wish I was interesting enough to be snooped on.

Oh, but you are. Having access to VMs on other networks makes you a sysadmin, which automatically raises flags[0] within NSHQ.

I've used DNScrypt[1] for some time now, which tunnels all DNS requests to a remote site over SSL. Coupled with a local DNS server[2] to cache lookups, this works amazingly well.

It will be interesting to see how this "snoopers charter" will be implemented, if at all. I get the impression it's mostly to legitimize (and scale out) what GCHQ and MI5 have been doing for a long time already, while adding some form and structure to it.

0: https://theintercept.com/2014/03/20/inside-nsa-secret-effort...

1: https://dnscrypt.org/

2: https://unbound.net/

How is this related to anything, let alone your job?

As I'm sure you know, systemd grew out of Red Hat, and Debian as most other Linux distributions have adopted it in lack of a better alternative. There is no grand scheme to it other than getting rid of SysV.

In a few years time uselessd, nosh, dmd and the many other systemd-lookalikes in development have matured and there will once again be diversity in init land.

Hm? It's still there.

http://git.busybox.net/busybox/log/?ofs=49

Since you have the luxury of a FSF-blessed laptop, I would recommend trying GuixSD[0]. Transactional package managers are the best thing since sliced bread.

0: https://www.gnu.org/software/guix/

Fairphone is doing something similar with their upcoming phone. Although the hardware is not open. They should talk with OP.

https://www.fairphone.com/phone/

I'm surprised Poul-Henning Kamp isn't involved. Linux Foundation have been throwing money at him for the past year[0] to work on an ntpd replacement[1] and he's well-known for his time (and security) nuttery[2].

[0] http://phk.freebsd.dk/time/20140926.html [1] https://github.com/bsdphk/Ntimed [2] https://www.youtube.com/watch?v=fwcl17Q0bpk

As an Evil user, I concur. Perhaps it could be implemented through a plug-in architecture, with some LISP-like interface.. :)

The Android HN app is a pleasure to use: https://f-droid.org/repository/browse/?fdid=com.manuelmaly.h...

It even supports thread collapsing.

Spice works pretty well: http://www.spice-space.org/

Did you have Javascript disabled? Upvoting with JS enabled generates an additional GET request for an image with the same href as the vote button.

Perhaps part of their security minded hacker detection system. ;)

I'd be happy just to get rid of DST.

It also supports multiple identities, so passwords can have different recipients. Good if you don't want to share everything with your phone.

The best part is that the program itself is a ~500 line shell script: https://github.com/zx2c4/password-store/blob/master/src/pass...

The most annoying part is that blocking first-party cookies (e.g. with µMatrix) causes this message to appear every time since you are not sending your "consent" back to the server.

War with the Newts (1936) by Karel Čapek (of R.U.R. fame). Classical sci-fi novel and political satire in which a new intelligent breed of Newts are taking over the world and no-one realizes before it's too late. Still relevant today.

https://en.wikipedia.org/wiki/War_with_the_Newts

Just like your mobile.. http://www.osnews.com/story/27416/The_second_operating_syste...