HN user

silasdavis

735 karma

Wearer of socks.

[ my public key: https://keybase.io/silasdavis; my proof: https://keybase.io/silasdavis/sigs/W1ncYgiogWNgpdzI7fQk-YTKecuo-Mj2tl9i3qEv-jQ ]

Posts5
Comments227
View on HN

1) I'm typing this in a pixel 7 pro running grapheneos. I'd say these are plenty good enough. Device support is pretty solid compared to cyanogenmod of previous times. App installation is a bit slow using sandboxed play store. Not sure why that is.

Okay well I guess we are still dealing with someone else's proxy in the way (also providing TLS termination which was a big thing I was after). So you share fates with that service. It's not just a case of hole punching via a relay.

It would be nice to get something like that also with easy TLS setup.

I would have been all over this a few months ago but I've recently been an enthusiastic convert to netbird recently. I had a look at your guide. I am using netbird reverse proxy to expose a few services and it's been pretty much flawless. It saves me from needing to set up port forwards or worry about a firewall.

Do you see an advantage or alternative benefits to also having a public dynamic DNS, because for me I am struggling to see any?

Stopped following Deno while they were rejecting the need for a package management solution. Used Bun instead.

Coming back to London for a spell having lived abroad, I see speech supporting a non violent protest group banned, and find my myself firing up a VPN to avoid dragnet data collection.

Terrorism Act 2000 and 2006 Racial and Religious Hatred Act 2006 Investigator Powers Act 2016 Online Safety Act 2023

There has been a raft of legislation both permitting and mandating digital monitoring while increasingly prohibiting types of speech. Many of these laws with overly broad definitions and large amounts of discretion.

This is rather misleading, the FLP theorem talks about fully asynchronous networks with unbounded delay. Partial synchrony is a perfectly reasonable assumption and allows atomic broadcast and locking to work perfectly well even if there is an unknown but finite bound on network delay.

Galois Theory 2 years ago

The maths appendices in Infinite Jest are about half the book. There's a section written by Hal's friend (?), proving something like the intermediate value theorem where he says something like: we'll use epsilon delta because it's mad fun to say.

I'm not sure what enumeration attack you have in mind, but if you were to encrypt the same value many times you would not get the same ciphertext under most schemes.

I need to have a play with it, but the problem is i deliberately have a 'kill switch' style setup to stop any requests accidentally going not over wireguard (for reasons) so I assume I'll need to do some other firewall type thing. Maybe something something tagging.

Tangential: I have a pi 4 running openwrt and a wireguard interface that is routed over the WiFi access point. If you connect to this network it's as if you are connecting in another country. I have outbound traffic only going over wireguard. If wireguard is down then no internet (to avoid any leakage). However if pi loses power the clock resets, wireguard can't handshake with that much clock skew, NTP can't connect without wireguard. So I need to manually update clock after a power failure.

I guess I need requests to the NTP server to go over WAN directly. Always seemed like a hassle to get this to work with openwrt zones and stuff. My eternal gratitude to anyone who shoves me in the right direction...

I was searching for 'cloudflare spending limits' based on comments here, at first glance they (like Vercel) seem to have a notify don't terminate policy.

What I didn't appreciate is static assets are completely free: https://developers.cloudflare.com/pages/functions/pricing/#s...

So therefore I assume static cloudflare pages are free.

Incidentally Vercel does seem to have an (annoyingly indirect) way of halting usage based on spending: https://vercel.com/docs/accounts/spend-management

Has anyone implemented this, are there any problems with it?

How slow can a light aircraft go if pulling up heavily into a stall? Are they only going a few kmh when snagged like that?

What dreadful marketing drivel on their site.

It would be nice to see a technical overview, but this is absent from their docs. Looking at their modules reference docs the runtime seems to comprise:

- A distributed replicated log - Peer discover via a distributed hash table - UDP holepunching to set up direct connections - A TCP like protocol running over the UDP connection - Key-based crypto routing (ala wireguard)

I assume there needs to be some servers available to facilitate the holepunching. Not sure how that works.

https://pears.gitbook.io/pears-docs/