HN user

idatum

627 karma
Posts13
Comments233
View on HN

What I've found beautiful about -J is the host you jump through requires no privileges on the final host. Only my laptop has the SSH key to access my home server, not my cheap VPS.

And this allows me to have zero open ports on my home internet. I do a reverse tunnel to my VPS from my home server (in a FreeBSD jail), and that port is what my laptop client jumps through.

Ten Basic Clouds 2 months ago

Living in the PNW it's good to have an interest in types of clouds and weather generally. Helps keep ones sanity during the rainy season.

But you can just use any cloud blob storage provider (including the big ones) along with the rclone utility. rclone supports many.

I even use rclone to sync photos to OneDrive I can then share with family/friends.

OpenBSD 7.9 2 months ago

Runs well on my Lenovo T-490. I use this as my main non-Windows laptop.

Ti-84 Evo 3 months ago

Bring back the HP-10c. RPN with "scientific calculator" label. Pure and simple, and approved for testing that forbids any programmable devices.

EDIT: oops, conflated with HP-35, from a decade earlier. 10c was programmable. HP-35 was not.

'If you don't want the government to have your location history, you just flip that off. You dont have to have that feature on your phone. so whats the issue?'

https://www.cbsnews.com/news/google-location-tracking-data-w...

Can someone catch me up on how the settlement against Google where turning off location on your phone didn't stop them from collecting location data, plays in this Supreme Court case?

Isn't this like cell tower data, where the user doesn't have a choice if their location data is collected?

My wife is on a business trip and so it's just me. Some learnings to share on how the house works:

- Weirdly, the kitchen sink is almost exactly the geometric center of the house; hence, equal probability for odors to travel.

- And that reminds me: Need to download PDF for dishwasher operation.

- Day 2 (Friday) of my wonderful better half's travels, I started laundry. I remembered less then 2 days later that I need to transfer the clean (??) clothes from the bottom device (water/soap) to the upper "dryer" -- this device produces some serious heat. Kills odor causing bacteria, and stuff. Will call that a success.

- I find my clothes are scattered on the floor randomly. Seriously high entropy -- reminds me of CloudFlare's lava lamp application: https://en.wikipedia.org/wiki/Lavarand

- Yep, total regression to the mean of bachelor-self and loving life..and the miracles of modern technology, where like the water automatically fills in the washing device. But not the soap.

Digg is gone again 4 months ago

Digg's founder who started the company back in 2004

Their plan is to make the internet what is was 22 years ago.

Acme Weather 5 months ago

After losing Dark Sky on Android, I discovered Foreca app. Works well in my area in the PNW.

One thing I learned is some post processing done by these services are better in some areas than others.

I couple years ago I read "A Mind at Play", Soni & Goodman, a biography on Claude Shannon. He grew up on a farm and the book mentions how he made extensive use of barbed wire fence telegraph (and if I recall telephone). Perhaps one of the early experiences Shannon had regarding information.

The MIT Museum had a display (last year) of Shannon's "toys", including the famous mouse maze. I don't recall any mention of his early days using barbed wire telegraph though.

I'm seeing Groups.io show up more for hobbies/interests I have. It seems email can be a way to slow down heated discussions. Perhaps at the expense of push-back on using more email?

Anyone have any experiences to share with moving their discussion groups from Discord to Groups.io?

It's far quicker and easier to hit a toggle in JuiceSSH

termux via F-droid is far better now than JuiceSSH Pro. Termux:Widget let's you launch an SSH tunnel script with one click. I stopped using JuiceSSH Pro more than a year ago once I realized this.

Unfortunately I refuse to participate in the Facebook ecosystem so I can’t comment on if Facebook Groups is a suitable replacement

I really resent having FB pushed on me. I don't have an account and don't plan to, even if it's to be a member of one FB group. My HOA tried that and I pushed back hard. There are many other options over FB. We just use email.

In the past few years whenever I re-watch 2001 when Dave is shutting down HAL, I see a spaceship capable data center. And HAL sings "Daisy.." finally at the foundational, bare metal layer.

If you are already running a VPS, the SSH -J option is useful if you don't want to expose your SSH to your home public address.

You create an SSH reverse tunnel (-R option) from a server in your home network to your remote VPS. This gives you a localhost port on your VPS to your server SSH port. Something like:

    ssh -NT -R 2222:localhost:22 vpsuser@yourvps.com
From your laptop, use your your VPS address and localhost port in the -J option. Something like:
    ssh -J vpsuser@yourvps.com:2222 homeuser@yourhome.com
I only allow ssh key auth and only my laptop is trusted by my home server. The home server doesn't need to trust the VPS "jump server".

This is my experience as well. I have a couple PINE64 devices, a Rock64 (Rockchip RK3328) and a RockPro64 (RK3399). And an N150 device.

Both ARM64 devices run headless, make use of GPIO, and have more than enough CPU. In fact, these are stable enough that I run BSDs on them and don't bother with Linux.

The Rock64 runs FreeBSD for SDR applications (e.g. ADS-B receiver). FreeBSD has stable USB support for RTL-SDR devices.

The RockPro64 runs NetBSD with ZFS with a PCIe SSD. NetBSD can handle ARM big.LITTLE well. I run several home lab workloads on this. Fun device.

I also have an N150 device running the latest Debian 13 as my main home lab server for home automation, Docker, MQTT broker, etc.

In short: SBCs are cheap enough that you can choose more than one, each for the right task, including IoT.

OpenBSD makes it easy to try IPv6 tunnelbroker.net with NAT64/DNS64 if your ISP only has IPv4 ("one more lab test away.." they say).

This has worked for me well for a couple years. I do use a VLAN to keep the IPv6-only network separate (homelab) from video streamers in the household.

In my pf.conf:

    # IPv6 tunnel
    block in log on $tun6_if all
    block in quick on $tun6_if inet6 from fd00::/8 to any
    antispoof quick for $tun6_if
    # allowed icmp6
    pass in quick log on $tun6_if inet6 proto icmp6 icmp6-type {
        unreach, toobig, timex, paramprob, echoreq
    }
    # MSS clamping 60 bytes less than HE 1480
    # 20 byte IPv4 tcp header + 40 byte IPv6 ip header
    match on $tun6_if all scrub (random-id max-mss 1420)
and in /var/unbound/etc/unbound.conf:
    # DNS64/NAT64
    module-config: "dns64 validator iterator"
    dns64-prefix: 64:ff9b::/96
Done. I don't have 464XLAT on Win11 but I do want to know if there's a hard coded IPv4 address anyway. I never had an issue.