Hacker News

...

NicolaiS

157

Karma

2016-06-15

Created

Recent Activity

  • Commented: "New Linux udisks flaw lets attackers get root on major Linux distros"

    After the Linux Foundation became a CNA (CVE Numbering Authority), it started issuing CVEs for a broad range of "vulns", such as local denial-of-service, memory errors with no viable exploit path, and logic flaws lacking meaningful security implications.

    Looking at the raw number of CVEs is not very meaningful

  • Commented: "Twitter's new encrypted DMs aren't better than the old ones"

    Parent comment writes: "ship[ing] the tree root hash", for a merkle tree ("bitcoin style") this would just be a single (small) hash no matter the tree size, i.e. 32 bytes is enough.

  • Commented: "How we reduced the impact of zombie clients"

    Agree

    Caddy even supports 'ACME profiles' for people that want to follow the latest recommendation from CAB / want shortlived certs

  • Commented: "Show HN: Lnk – Git-native dotfiles manager"

    Another approach that avoids symlinks and avoids a git repo in $HOME (i.e. everything is a subdir of that git repo) is to use the option "git-dir" to clone into a subdir, e.g. `$HOME/.dotfiles/` but checkout into $HOME:

        git clone --bare git@github.com:.../dotfiles.git $HOME/.dotfiles
    git --git-dir=$HOME/.dotfiles/ --work-tree=$HOME checkout
    alias dotfiles='git --git-dir=$HOME/.dotfiles/ --work-tree=$HOME'
    dotfiles config --local status.showUntrackedFiles no
    Now the "dotfiles"-alias can be used like git, "dotfiles add, checkout, log", no symlinks are needed and you avoid "contaminating" subdirs of $HOME (git searches parent dirs for ".git", so a ".git" folder in $HOME kinda sucks)

  • Commented: "The cryptography behind passkeys"

    A confidential channel can be established over an insecure medium using e.g. Diffie-Hellman key exchange. To protect against MITM, an out-of-band QR/bluetooth can be used.

HackerNews

About