HN user

kwesthaus

31 karma
Posts1
Comments15
View on HN

Would be nice to keep your complete config in git or the config management widget of your choice (often Puppet or Ansible).

I did this with my (mostly) OpenWrt-based network: https://github.com/kwesthaus/network-config.

I chose the NanoPi R4S instead of the R6S as my router since it is fully supported by vanilla OpenWrt [1] whereas the R6S is still in the works [2].

[1] https://openwrt.org/toh/friendlyarm/nanopi_r4s_v1

[2] https://forum.openwrt.org/t/nanopi-r6s-a-rockchip-rk3588s-ro...

Fascinating, thank you for sharing. I'm impressed they were able to find so many ways to essentially confuse the GFW as to the current state of the connection. Looks like any company which wants to do business in China will just avoid implementing ESNI for the foreseeable future.

Are you competing this weekend? I put together a small team for qualifiers and had a blast with the CTF problems. We did well enough to get challenge coins but not to move on to finals.

I also use restic and I have a cron script which runs early Monday morning every week. Restic supports auto-pruning, so I have it set up to backup a new snapshot then purge all except the most recent 100 years, 12 months, and 5 weeks.

Sure thing!

Will do, I've been a little lax the past few weeks but my school semester just finished so now I should have more time again.

Wasn't at a huge scale but for one project another intern and I took a proof of concept that another engineer had done with Gremlin [1] and turned it into a full tool and ended up using dgraph. The python bindings were easy to work with and Ratel (the UI/web frontend) made quick searches and tests easy.

I liked working with it so now I'm the package maintainer for it on AUR [2]. At some point I'd like to make a repo showing how to implement common graph algorithms with the python bindings, since GraphQL+- currently only supports k-shortest path at the query level [3].

[1] https://tinkerpop.apache.org/gremlin.html [2] https://aur.archlinux.org/packages/dgraph-bin/ , https://aur.archlinux.org/packages/dgraph-git/ [3] https://discuss.dgraph.io/t/how-about-doing-some-graph-compu...

You are right that many pieces of software infringe on privacy. However, Zoom only recently has become one of the most widespread of these and because of that has only recently begun to affect a significant portion of the population, hence why it is newsworthy.

I think this also has to do with the fact that Zoom is being used for work and school and therefore people have less choice over their use of it. It's not a social network that many people have chosen to start using, it's a piece of software that millions of students and other people are being required to use without consideration of privacy.

The OverTheWire Advent Security CTF had one problem this year [0] which involved reverse engineering a (self-modifying) Master Boot Record binary similar to this which implemented AES-ECB-128, felt very rewarding to complete. I made heavy use of bochs [1] which seems to be the most common tool for emulating and debugging protected mode and bootloader code such as this. The creator of the CTF challenge talked about it on twitter as well [2].

[0] https://advent2019.overthewire.org/challenge-zero [1]: https://wiki.osdev.org/Bochs [2]: https://twitter.com/David3141593/status/1210363683815272448

That's why the best course of action is to not censor at all and allow the system to work itself out.

I disagree with this sentiment, and upon reflection of why, it seems we've come to a real-life example of the trolly problem. Choosing to be passive and "let the system sort itself out" will almost certainly result in more deaths (edit: specifically in terms of mass shootings), but choosing to be active means the powers that be are forced to make subjective choices. I personally believe that it's worth taking on the responsibility of subjective choice.

Edit: However, I also realize that censorship oftentimes just ostracizes already-radical groups. This has the advantage of making it harder for them to find an audience, but also allows them to radicalize further while under less scrutiny, which also seems like a complicated balance to me.

Google CTF 2019 7 years ago

Same. As far as I can tell, none of the usual restricted shell escape tricks work, so you just have to search through all the binaries on the system until you find one you can abuse to print the file contents, and that seems like more of a time sink than it's worth.