HN user

ice3

282 karma
Posts1
Comments34
View on HN

There's a short VR film "Trails of Angels" https://angelutakais.lt/en/

" The virtual reality film "Trails of Angels", the winner of prestigious international and national competitions, is a work by Kristina Buožytė and Vitalijus Žukas, dedicated to the creations of the artist, composer, and pioneer of abstract art Mikalojus Konstantinas Čiurlionis. "

Available in Lithuania and in couple of locations in US

Huh, I always assumed it’s a double tap, and I’ve been using iPhones sines 4, but just checked and it’s a single tap.

Talk about action discoverability.

Some extra things I do.

My combined water boiler is set to turn on/off on schedule. When running off electricity it only heats water during the night.

Some other appliances are also set to work on schedule. Washing machine, dish washer etc... usually run overnight.

All computers are set to sleep after 10 min of inactivity. The only things that are on 24/7 are APs, a few cameras and a NAS.

I also have a garden. I grow/pickle my own tomatoes, cucumbers, pumpkins, apples, prunes, mushrooms, nuts, berries. But not potatoes, since those are cheap to buy.

I think in total, it would be enough to last for 3-4 months.

My office is in fact the smallest room, just enough for a table, a chair and my homelab (a bunch of rPIs, some network equipment, a few servers).

All the electronics keep the room relatively warm, so most of the heating is actually turned off in that room :)

Installed solar power last year and an air source heat pump. My pellet burner is still going to be the main source of heat/hot water though. Got pellets at the start of the year (with only 80% premium over last year, now the prices are 3x of what they used to be ), have wood to offset use of pellets and even some coal [just in case]. Replaced every bulb with LEDs from IKEA.

Set all rooms in the house to 18-19 c. Going to heat my home office/bedroom to 20-21 c only during the day/while being there.

Somehow this reminded me of this post on LKLM:

- <odd>.x.x: Linus went crazy, broke absolutely _everything_, and rewrote the kernel to be a microkernel using a special message-passing version of Visual Basic. (timeframe: "we expect that he will be released from the mental institution in a decade or two").

[*] https://lkml.org/lkml/2005/3/2/247

It's really interesting to see Linux getting more and more micro-kernel like features throughout the years.

You're absolutely correct. And I completely understand the author's point of view.

By disclosing the vulnerability, I'd be taking a risk of a criminal investigation. This is not a joke. This has already happened at least once in Lithuania.

I have a job, one that has nothing to do with infosec, but I'd be risking that job if I had an ongoing criminal investigation.

Right, and there's no possibility to do research/testing anonymously anyway. You use your personal e-Signature/ID card to logon to government sites, your logon is always tied to you.

What one should do is to involve the www.NKSC.lt - Nation Cyber Security Center. They have a form to submit vulnerabilities

I did send a few reports from throwaway email accounts, but the issues did not get resolved.

I suspect there's another way to go about it - if you're a Telia customer - send them GDPR Article 33 request.

So this issue affects Telia Lithuania clients. But I wouldn't be surprised if the same (or similar) issue affects clients in Sweden.

The article mentions a leaked password hash from 2014, but as far as I know, there were at least 3 password (not hash!) leaks over the last 10 years.

Generally, I recommend people buy their own routers and never use the "Self Service" for managing passwords.

As for hostility of service providers - the situation isn't that good.

Some years ago, a white hat reported some data leak vulnerabilities in a medical "self service" portal.

Vulnerability: change your personal code/id (SSN for folks in US) to another person's number in the POST, and voila - you get the medical history of another person.

What happened is that the white hat got blamed for "hacking" that system.

Result: Vulnerabilities aren't getting reported. Bad guys are exploiting them left and right. White hats don't bother disclosing them.

I personally know at least 5 exploitable vulnerabilities in some government websites, but I won't be disclosing them, since that will land me in a lot of trouble.

EDIT: grammar

I want to thank the author for an amazing tool.

I've used ShellCheck to catch/fix numerous bugs on some mission critical financial systems (that depend on shell scripts!).

Added it to pipelines and as a mandatory pre-commit hook in git, so all teams started using it (whether they like it or not).

It even caught some places where a rm -rf / could happen because default parameter substitutions were not set ( Same as the Steam bug where it would remove your home directory, but on some big financial systems :) )

All in all - an amazing tool that saved me from a lot of grey hairs throughout the years.

OpenWrt 19.07 7 years ago

AFAIK (some?) MikroTik hardware runs Openwrt quite well. I remember running Openwrt on an old Mikrotik routerBoard without any issues.

OpenWrt 19.07 7 years ago

Couldn't agree more. Consumer grade routers are all buggy or have some proprietary features that just don't work with Openwrt.

I've been using ASUS based routers for the last ~10 years (with Openwrt) and a few months ago decided to upgrade to something else.

After researching what routers are out there, I ended up getting a Turris Omnia [~320 eur]. It's running a fork of Openwrt. Can probably run vanilla Openwrt without too many issues.

There's also Turris Mox - a modular design from the same people, but I ended up getting Turris Omnia, since they pack 2gb of RAM into that router and it has 3 miniPCIe slots on it.

Microsoft is not known for innovation

Can't really agree on this point. Microsoft has historically done a lot of research and innovation, what they weren't really good is making a product out of that and bringing it to market.