HN user

addingnumbers

844 karma
Posts0
Comments271
View on HN
No posts found.

Proxy ARP would have the raspberry pi provide its own MAC address as the MAC for the server IP. All the traffic from the clients to the backup server would have to pass through the Pi's network interface for the duration of the session.

With this ARP stand-in, it provides the server's MAC to the client so subsequent traffic to the server doesn't need to pass through the Pi.

All it takes to get rid of snaps forever is `sudo apt purge snapd`.

That's not enough. Some package could eventually drag it back in.

    $ apt show firefox
    Package: firefox
    ...
    Pre-Depends: debconf, snapd
If you really want to keep it off your system for good, you need something like this:
    $ cat /etc/apt/preferences.d/no-snapd
    Package: snapd
    Pin: release a=*
    Pin-Priority: -1
    $

Add this to your login script:

  export FZF_DEFAULT_OPTS="--exact"
Or invoke it with one of these:
  fzf --exact
  fzf -e
Or if you start your search with a single quote ' it disables fuzz. (But maybe you already knew that, it sounds like you want the first option.)

That's a petty interpretation, it's a big leap reading "don't send your unique identity to strange servers by default" as "never use private keys, always use passwords instead."

Nothing about that config snippet precludes using private keys for known servers.

only including data from users who have turned on "Make searches and browsing better (Sends URLs of pages you visit to Google)"

One big problem there is that we don't know what percentage of users for whom "turned on" is a euphemism for "didn't notice."

I'm surprised they didn't recommend dnsmasq to begin with, it's a lot lighter on resources which could be important with low-end machines, and with DNS and DHCP services baked in to one process you don't need to worry about configuring hungrier services like dhcpd and BIND to read each other's state.

The only reason I'd recommend dhcpd/bind over dnsmasq for a small lab is if you are trying to familiarize yourself with the former pair for use in larger networks with more expansive requirements.

My grandmother's best friend was a librarian, so I got a lot of encouragement growing up to make use of library services.

I remember calling the local library dozens of times for school reports. The local library wasn't where my grandmother's friend worked, so I wasn't getting any preferential treatment. To them I was just another random eight-year-old ringing them up to ask questions.

They were always delightfully eager to help with obscure questions about geology and history and science, running off to grab books while I waited, slowly reading me facts and passages while I took notes. They'd set aside books for me to check out later in the week, with bookmarks already placed in the sections where they thought I'd be most interested.

As much as I love the instant access to information we have nowadays, I feel a sense of loss over kids missing out on that shared human sense of enthusiasm and encouragement from working with a person who enjoys feeding childrens' curiosity.

Also, aren't there proxies that you can setup that can inspect HTTPS connections (so long as you install the proxy's cert on your machine).

It's common for apps to prevent this with certificate pinning. They'll ignore the certs you've installed manually and will only connect to servers with certs signed by their in-house certificate authority.

If they have my authenticator app then they've already totally owned me anyway.

Seems like that is the problem they're trying to improve by using 3FA instead of 2FA.

They completely undermined the first establishment of "have you tried turning it off an on again?"

The line doesn't land half as well without the entire 45 seconds (no exaggeration, I counted on the seek bar) of Roy licking his fingers and drinking tea while the phone rings first.

most websites/companies will quite happily let the impostor click a "Forgot password" link and get a SMS code to verify their identity

That's not 2FA. There is one single factor there, the SMS code.

SMS 2FA does not require you to have a 1FA backdoor, so you can't claim the latter is an inherent fault of the former.

For example, pairing "enter the SMS code" with "click the link we sent to your backup e-mail address" gets you a two-factor password recovery process.

That isn't the best or only method of 2FA password resets, it just comes to mind first because it's the last one I used and it is sufficient to prevent access via SIM hijacking alone.

What about battery replacement?

Seems like no matter how good the display and build quality, all eBook readers are bound to stop holding a charge after 3-4 years. I feel like the ongoing availability of newly-produced replacement batteries and the difficulty of replacing them are the primary factors in choosing an ebook reader.

My 2015 Paperwhite barely lasts 20 minutes after I pull the charging cable, even back in 2018 it was down from two weeks to two days per charge.

It's not like you can avoid the problem by loading up on extra batteries. A replacement battery manufactured shortly after the reader is going to be as bad as the one that came installed by the time I need it.

All the other problems I worry about like responsiveness, display quality and defects apply early on when a refund or warranty replacement is a solution.

It would be more honest to say "We aren't able to determine whether it was exploited" which could better brace potentially impacted users for the possibility they might be affected.

This is a relatively benign case but the same language is used in other breaches when people should be taking measures like freezing their credit or reviewing financial transactions.