HN user

nicolas314

221 karma

Night and day hacker. Unix lover since 1992. Rambling at https://maz.one

Posts2
Comments70
View on HN

Did you manage to get IPv6 prefix delegation working with dynamic prefixes? Best solution I found involves scripting to re-build config files and restart a daemon, where OpenWRT just does it out of the box.

XFCE 4.18 4 years ago

Try Alt+RightClick and drag. Not so easy on a trackpad but fine with mouse.

At my electronics engineering school we had access to everything we needed to mass-produce those decoders and did so at a reasonable scale to pay for our studies. That was a lifeline. Knowledge of TV signals gave me my first job, during which I got to work with the guy who designed the scrambling system and had a chance to thank him in person. Small world.

If I understood correctly, the link between ULA-based address and host name is done through a DUID. This is assuming that DUID values do not change over time and can easily be harvested from everything you want to connect to the local network. What guarantees that DUIDs are fixed and easily collectable? What are the solutions if they aren't?

Genuinely curious: how do you maintain a local DNS to make sure you can always designate 'printer' and 'intranet' by name?

"with AES-NI the system should be easily able to push the full 1 Gbps of traffic through Wireguard"

You were probably thinking of OpenVPN? Wireguard is not based on AES and thus has no use for AES-NI.

Having a generic "Send to" would only solve a part of it though. There is currently no standard way of connecting the two ends of the same cable to two computers and expect them to exchange files without heavy configuration on both sides. Wireless goes the same way.

They even have a decimal clock dated from the French revolution: 10 hours per day, 100 minutes per hour, 100 seconds per minute. Total of 100k seconds/day, making seconds a bit shorter. Was largely ignored, only lasted a few years. The computer section has a ZX81, a ZX Spectrum, an Oric Atmos, and a Commodore 64 on display if memory serves me right. All my childhood computers, feels weird seeing them in a museum. My kids were amazed by the first calculators made of paper and cardboard.

Messages via JSON 7 years ago

Ah but sockets are only an illusion that fall apart under the next tunnel. Mobiles are not constantly connected, they use a wireless packet-based network. The only way your mobile is registered as part of a network is because it is the one polling stations at regular intervals. Can't go the other way around, really. How could the network know you are now out of that tunnel? You may want to have a look at how APN are implemented on iOS to see how a push is in fact a poll from device.

Messages via JSON 7 years ago

True enough, this is in concept the very same as Apple Push Notification (APN) service. Difference is that you are in charge of the server side and handle all the security and uptime yourself. Very cool idea, simple enough to generate a lot of really cool projects.

Messages via JSON 7 years ago

And yet, this is exactly how push notifications are implemented on mobile phones. You have the illusion to push a message from server to device while in fact you also push a message onto a queue that is polled at regular intervals by the mobile. No way around it, mobile devices don't have guaranteed connectivity as servers do.

Good point: Mbed OS is only for ARM-based processors. The main difference lies in the vast number of drivers it offers, which is the reason why you already have 100+ supported boards today. In comparison, FreeRTOS would run on any MPU but without drivers you won't go far.

Did the same with my first son with all Harry Potter books, which came out as he grew up. When my second son was born he caught up with the early books by watching the movies then participating to our reading sessions. I acted all voices when reading, and we sometimes would re-enact a complete scene all together, improvising lines to fit with the story and acting with any kind of props we could put our hands on.

My sons are grown-ups now, how I miss these times.

Same here: APU2C4 running vanilla OpenBSD for routing, DHCP, DNS, attached to a Unifi AC configured in pure bridge mode. I was not too pleased with Ubiquiti's firmware though and flashed LEDE, for which you can find ready-to-use firmware images. No more need to install and run a java-based controller instance on another PC for just a wireless bridge. For guest WiFi, I got a GL-AR150 for 20€ and also run LEDE, this time in isolation mode -- guests are NAT'd on their own network and cannot see each other.

There is still one issue left with Yubikeys: backups. When I loose my Yubikey after I cautiously registered it with a hundred different sites and servers, I would like to restore its secrets onto a brand new (blank) Yubikey and go forward. The only official course of action given by Yubico today is to manually un-register and re-register on all sites and servers.

Of course the key backup should be correctly protected, but that problem is not hard to solve.

Three guys just arrived in the Gulag. They ask each other what they did to end up there. First one says:

- I came to work 5 minutes late, I was sentenced to 10 years for sabotage

Second one says:

- I came to work 5 minutes early, I was sentenced to 10 years for espionage.

Third one says:

- I came to work precisely on time, I was sentenced to 15 years for contraband of foreign clocks.

Dropbox Paper 9 years ago

Second this. All these fancy services are neat but hosting private data in the US is seen in Europe as a major security risk, when it's not a complete no-no. Would be cool to know about self-hosted options.