HN user

tomputer

315 karma
Posts17
Comments75
View on HN

It seems the domain fritz.box has been suspended. March 5 was the first time this message got captured on archive.org[1]:

The Domain Name you have entered is not available. It has been taken down as a result of dispute resolution proceedings pursuant to the Uniform Rapid Suspension System (URS).

The fritz.box name servers also point to URS[2] name servers:

  Name Server: ursns1.viagenie.ca
  Name Server: ursns2.viagenie.ca
[1] https://web.archive.org/web/20240305162200/https://fritz.box...

[2] https://www.icann.org/urs-en

reusing private keys is an enormous vulnerability.

As long as the private key is stored/handled safely and RSA/ECC is not broken, it is not vulnerable.

I do agree that key rotation is better/recommended practice.

a single leaked private key means your entire site is compromised

The leak is the actual vulnerability. As long as the leak is still there and you are not aware of the compromised private key, a fresh new private key will probably leak again.

However, the chances of leaking may be greater if a private key has to be used in multiple locations.

What Was ISDN? 3 years ago

Same here in the Netherlands, somewhere between 1998-1999 using KPN Telecom. I was in high school and convinced my parents to upgrade from single-line PSTN to dual-line ISDN, so we could call and surf the internet at the same time. At the start of 1999, because of the rapid increase in phone and internet traffic, the national call tariffs had been reduced a lot[1]. Tariffs were even cheaper in the afternoon and during the weekend.

For normal internet browsing the single ISDN connection (64 kbps) was enough. Then later in 1999, Napster[2] launched and I was hooked! This made me use bundling ISDN channels quite a lot. Because of the cheaper tariffs, weekends where great because I enabled the bundling around midnight until early in the morning, so my parents wouldn't notice. :-)

I was on ISDN until 2002, when ADSL was available here and we could be online 24/7 for a fixed price. I do remember my ISP (XS4ALL) still had a fair-use-policy for downloading, which they removed a few years later.

[1] https://www.acm.nl/en/publications/publication/9213/OPTA-agr...

[2] https://en.wikipedia.org/wiki/Napster

Isn't that almost always the logical consequence once you understand how Bitcoin works and you believe it can actually work as a safe haven investment?

Those who believe it can not work are most probably not invested. Those who believe it can work are most probably invested.

This is exactly what makes Bitcoin a fantastic store of value. Bitcoin supersedes gold because compared to gold, it has no other use.

If Bitcoin would be used as a store of value instead of gold, gold can be used for other material purposes for a lower price. The same goes for real estate. A house does not have to be an investment asset or store of value. If (institutional) investors would use Bitcoin instead of housing, it could make housing affordable again. Or at least result in more fair/realistic housing market instead of the propped up market from the last few years.

Compared to gold and real estate, Bitcoin is a scarce asset that can easily be divided into small pieces. It has a liquid market and can be exchanged 24/7 anywhere in the world.

Is Crypto Dead? 3 years ago

See, it's already over. If you have to explain that to a layperson, it's not going to get adopted.

Does every layperson have to adopt stocks or commodities? Are these also dead if a layperson does not adopt it?

PostgreSQL 15 4 years ago

Where I work we've recently upgraded many PostgreSQL servers from 9.x/10.x/11.x to 14.x.

A very cool PostgreSQL feature is that, if you install a second instance on the same server, it will by default use a different path and port to run the second instance.

  root@example:~# pg_lsclusters
  Ver Cluster Port Status Owner    Data directory              Log file
  11  main    5432 online postgres /var/lib/postgresql/11/main /var/log/postgresql/postgresql-11-main.log
  14  main    5433 online postgres /var/lib/postgresql/14/main /var/log/postgresql/postgresql-14-main.log
Now you can dump and import databases on the second instance and test your applications with the new version. If it all works as expected, use pg_upgrade[1] to migrate everything to the new instance and switch the ports after the migration.

I have only done this migration process on Debian systems but in my experience it worked fantastic!

[1] https://www.postgresql.org/docs/current/pgupgrade.html

Indeed! HATop is great to show the status, traffic, HTTP codes, errors or number of connections. It is also very simple to enable/disable HAProxy backends, for example:

  hatop -s /var/run/haproxy/example.sock
Use the arrows to select a backend server and press:
   F9 - Enable a backend server (Status: UP)
  F10 - Disable a backend server (Status: MAINTENANCE)
For Apple keyboards it is fn+F9 and fn+F10.

I did the same, visted Berlin a few weeks ago. It was indeed nice that I could take any S-Bahn or U-Bahn without checking the times or zones.

I hope they’ll continue with this type of ‘unlimited’ tickes. If only during peak summer/winter months. I guess a lot of people would gladly pay more for such unlimited (no worry) tickets.

Homes aren't heated with nuclear power, they're heated with gas. Industrial processes don't run on nuclear power either, they run on gas.

I'm glad that there are still people who understand this. In the Netherlands 90% of the homes[1] still run on natural gas and that's not something we can "simply" replace. It is possible and will eventually happen but it will take years if not decades.

And that's just homes in the Netherlands. Take a look at the global energy mix[2] how much the world still depends on gas.

[1] https://www-cbs-nl.translate.goog/nl-nl/nieuws/2021/07/92-pr...

[2] https://ourworldindata.org/energy-mix

It has a good pace, amazing visuals, asks tough questions, has some really good action sequences, etc.

If I may add: the score produced by Vangelis.

Currently this seems to apply only for customers in the Netherlands:

https://help.coinbase.com/en/coinbase/trading-and-funding/se...

Related to this:

In 2020 the Netherlands approved the implementation for the European fifth Anti-Money Laundering Directive (AMLD5). Crypto providers operating in or from the Netherlands also needed to apply for registration with the Dutch Central Bank (DNB). Besides the AMLD5 implementation DNB required from crypto providers to implement additional measures, which is the same wallet verification that Coinbase now requires.

Bitonic (a dutch crypto broker/provider) filed a lawsuit against DNB regarding the additional wallet verification requirement, which was not part of AMLD5. DNB formally acknowledged the complaints from Bitonic and revoked the wallet verification. I'm not sure but I believe (until now) it has only be revoked for Bitonic.

Bitonic published some articles on their site:

https://bitonic.nl/en/news/206/dutch-amld5-implementation-la...

https://bitonic.nl/en/news/224/lawsuit-bitonic-vs-dutch-cent...

https://bitonic.nl/en/news/231/dnb-formally-acknowledges-com...

Except finance is extremely advanced.

Exactly. This is a problem. It can be so advanced that almost nobody understands it.

Now take a look at how advanced Bitcoin is:

  Total circulation will be 21,000,000 coins. It'll be distributed
  to network nodes when they make blocks, with the amount cut in half
  every 4 years.
  
  first 4 years: 10,500,000 coins
  next 4 years: 5,250,000 coins
  next 4 years: 2,625,000 coins
  next 4 years: 1,312,500 coins
  etc...
  
  When that runs out, the system can support transaction fees if
  needed. It's based on open market competition, and there will
  probably always be nodes willing to process transactions for free.

  Satoshi Nakamoto

Your argument strikes me as very odd -- you seem to suggest that nothing can beat Bitcoin in theory, but Ethereum is already beating it in practice.

In theory everything is possible. I do not follow the beating really. They can both exist with different use cases.

Bitcoin wants to be digital gold (and money) and Ethereum wants to be a smart contract world computer running dapps. They solve different problems.

Ethereum is already much better at it's core

What you and many others seem to overlook is first mover advantage, network effects and most important: trust. Bitcoin is not Yahoo or Facebook, it is not a company product which has to improve and break things all the time.

In the long run Bitcoin is a store of value. That requires trust, which takes time. To gain trust over time it has to move slow and steady because there can be no mistakes.

When it comes to money and trust it is almost impossible to get a second chance (see Terra UST). Just one mistake could result in everyone distrusting Bitcoin.

The parent post was about trading/selling crypto for money without exchanges. Gold has indeed some other use cases.

It is however not possible to send physical gold over the internet. Gold is also difficult to verify. You'll probably need to rely on a broker/shop and their tools to test if it's real. Bitcoin is relatively easy to verify with software anyone can download for free.

Bitcoin is more like holding a piece of gold. If all gold exchanges are closed you can still trade your gold with someone in person. You don’t get your money without ever selling your piece of gold to someone else.

For almost a decade I have worked with IPsec and OpenVPN solutions for both client and site-to-site VPN tunnels. On enterprise hardware, community/proprietary software and at public cloud providers. I still work with these because today many vendors only support IPsec.

A few years ago I discovered WireGuard and I was really amazed how easy it was to setup a tunnel. Especially if you've dealt with IPsec before. It felt as easy as creating an SSH tunnel between two servers, with only 4 or 5 lines of code in a config on both sides.

Then last year I discovered Tailscale and I was blown away! How did this even work[1] without opening ports in the firewall? And how cool is it that I no longer have overlapping addresses[2] from other networks. Within 15 minutes I had my own mesh network between my Mac, iPhone, Raspberry Pi and other servers. Fantastic!

I'm on the Personal/Free plan but if this would no longer be free, I would be happy to pay for this service (shut up and take my money).

[1] https://tailscale.com/blog/how-tailscale-works/

[2] https://tailscale.com/kb/1015/100.x-addresses/