back
user profile
Bender
68,554karma·24,253submissions·June 16, 2015
about
Σ I am not for everyone. To ignore me in uBlock Origin, add to "My filters":
news.ycombinator.com##tr.athing.comtr:has(a.hnuser):has-text(/\bBender\b/)
- For HN usage questions see [1] for HN tips not my repo
- Suggested Firefox add-on to replace or restore inflammatory words and phrases: Foxreplace [2]
[1] - https://github.com/minimaxir/hacker-news-undocumented
[2] - https://addons.mozilla.org/en-US/firefox/addon/foxreplace/
(\_/)
(='.'=)
(")_(")recent activity (24,253 total)
comment
Some day we may reach that point. Today, I deal with businesses that require us to enable a firewall restricted vip for them so they can use SSLv3. Some can't remove RC4 from SSH. Some use ant…
comment
Turns out, others beat me to this ages ago. There are already loads of scripts for automation of VPN's, proxies, etc. Search for Streisand, AutoVPN. There are also many scripts, including Ansib…
comment
Anyone using postfix already has smtp-sink in their arsenal. You already have a fake SMTP server.
comment
My script isn't ready for public consumption, as it is specific to my home setup and use cases, but I could certainly make one that is more generic. I probably should anyway, with all the change…
comment
I created my own mesh of VPN nodes on multiple VPS providers using tinc. [1] It is very simple to script and automate. [1] http://tinc-vpn.org/ …
comment
Thankyou for that. I might contact Digicert and get one to test with. I can see a use case where tor proxy -> server needs TLS. Tor can not protect that last hop if it isn't on the same mac…
comment
Does LetsEncrypt support .onion sites yet?
comment
My solution is a linux router between my home network and the cable modem that intercepts ntp/dns requests and sends them on over several VPN paths to different VM's around the country, each…
comment
That is bad. One should always use
set -u
on scripts that rm any files or perform any destructive actions. One can always unset that if you need to accept args further along in a script to use i…
comment
Being a geek, I would have pre-registered the .net, .org and .com for many variations of any business I might start up, so there would be no need to pay a lot. I've seen people shaken down due t…
comment
For my own domains, I use rbldnsd on a couple of VM's in two datacenters with really high TTL's. No maintenance aside from the trivial yum update. At my workplace we use Dyn and Verisign. …
comment
My personal preference would be MPTCP, then BitTorrent, Googles idea for UDP HTTP, then plain TCP HTTP. Many things can benefit from MPTCP however, including BitTorrent.
comment
If the open resolvers fail, people will have to go back to the method the internet has used since it's inception of utilizing the internet root servers.
comment
ops-y + dev-y, isn't that supposed to evolve into DevOps? I know the term is a bit overloaded. Do the community chef, ansible and puppet cookbooks use secure defaults for MongoDB? Asking becaus…
comment
I had not seen that site before, thank you! I will keep an eye on the popular sites using IdenTrust.
comment
Is there a list of major B2B and eCommerce sites using LE for their primary customer facing sites? This would be useful if our customers brought it up. Are there any plans or water-cooler discussions…
comment
Is it wrong of me to feel a little good about this? I realize extortion is bad and I hope nobody pays it. That said, are all 10k of these databases full of nothing but non-sensitive data that was alr…
comment
Would this not hurt SC more than it helps? If everyone is forced to purchase electronics online, then will local stores not suffer? How will they enforce this for online purchases? Maybe Amazon woul…
comment
Not to mention, the live hacks of moving vehicles have already occurred multiple times. Thankfully, there are not yet enough skiddie tools and the bar to entry is just high enough that mass casualtie…
comment
I agree with all of this. I would also add; that I will stay consider these vehicles to be unsafe until the manufacturers can prove to be beyond a shadow of doubt that I or the local computer are the …
comment
This may be a bit of a tangent; but if you wish for them to not watch your traffic (as much), encapsulate all of your data in pictures. Oh, you think I am about to suggest Stego? No way, super obvi…
comment
Visibility is good, but I have found SELinux to be rather simple. Most applications can be automatically configured and supported by Ansible with SELinux enabled. Most community chef cookbooks also …
comment
The internet was not built by the users (as they are known today). It was designed and built by the department of defense, for the military to use initially. They let some universities make use of i…
comment
Absolutely, I am not suggesting a defeatist posture. Rather, just design around the problem because that is what folks here can do. Those are the only actionable items I envision folks at HN contrib…
comment
While this is sub-optimal, I would suggest that everyone should assume this is where most countries will eventually land. I would not waste too much energy debating this, in my humble opinion. Even i…
comment
I have VM's at Linode, DigitalOcean and RamNode. My VM's are long running (vs. bursty spin-up, do a job then terminate) I prefer the UI and feature-set of Linode. I have found the technica…