Does anyone use Thunderbird with Gmail and 2FA, and does it work correctly 100% of the time there?

Comments URL: https://news.ycombinator.com/item?id=46925631

Points: 1

# Comments: 0

https://en.wikipedia.org/wiki/Cost_of_electricity_by_source

I'm also interested in smartphone operating systems like Ubuntu Touch and postmarketOS etc.

Comments URL: https://news.ycombinator.com/item?id=46098007

Points: 1

# Comments: 0

This is not correct. There isn't a cdb subdomain because cdb.cr.yp.to doesn't have NS records, which is where DNSCurve fits in. If you have a DNSCurve resolver, then your queries for cdb.cr.yp.to will use DNSCurve and will be sent to the yp.to nameservers.

From there, if you have pqconnect, your http(s) connection to cdb.cr.yp.to will happen over pqconnect.

Maybe the confusion is because both DNSCurve and pqconnect encode pubkeys in DNS, but they do different things.

Here is DNSCurve:

  $ dig +short ns yp.to
  uz5jmyqz3gz2bhnuzg0rr0cml9u8pntyhn2jhtqn04yt3sm5h235c1.yp.to.

  $ dig +short cdb.cr.yp.to
  pq1htvv9k4wkfcmpx6rufjlt1qrr4mnv0dzygx5mlrjdfsxczbnzun055g15fg1.yp.to.
  131.193.32.108

Low Tech Magazine wrote an article about this here:

https://solar.lowtechmagazine.com/2020/12/how-and-why-i-stop...

https://app.electricitymaps.com

I just installed Open Street Map (the iOS app is called OsmAnd) and it looks nice! Zoom in/out is much better than on Apple Maps. A quick check of a route I know produced a good map, so I'll start using OSM from now on.

Comments URL: https://news.ycombinator.com/item?id=43765281

Points: 1

# Comments: 0

The post had a number of grammatical errors too, so if "whilst" we're at it, should we criticize all of European education? Please don't post low-effort negative nationalism. It's cheap and the subject (the richest person alive is apparently a nazi) is a serious matter.

If you read Drawdown, you'll see that it doesn't cost money to stop climate change, it saves money.

https://drawdown.org/the-book

I assume but don't know for sure that this refers to Veriexec in NetBSD, and I'm not sure what in HardenedBSD. Anyone know?

https://man.netbsd.org/veriexec.8

My understanding is that Veriexec isn't enabled by default - the manpage says only that "[s]ome kernels already enable Veriexec by default." If you have this enabled, how do you upgrade binaries? The manpage says that in strict mode 1, write access to monitored binaries is allowed but then access is denied. So I assume that after file modification, root then runs veriexecgen and veriexecctl load as mentioned in the manual to update the signatures list. So it seems that strict level 1 isn't functionally different from a read-only /usr or even just root-owned binaries. In either case, you just need root to update targeted binaries. Surely I'm missing something and would appreciate some insight.

At a glance as an outsider, stricter modes appear somewhat functionally similar to "chflags schg" on BSD systems, where more work is needed to get around restrictions. In the case of schg, you have to reboot into single user mode, remove the schg flag, then modify the binary, and continue booting into multi-user mode. You could do this as a remote attacker (as in not having console access) depending on what boot files are or aren't protected with schg, but modifying all the necessary files can be a source of new problems.

You can transfer PSKs safely and easily with OpenSSH 9.0 (released 2022-04-08) or later, which uses sntrup761x25519-sha512@openssh.com as the default key exchange method.

> After six months at sea the WindWings have cut fuel consumption by about 15%, although the company reckons three sails could cut average fuel use by 30% or more.

> Oceanbird reckons the sails could deliver 50-60% lower emissions compared with conventional vehicle-carriers.

> Airseas tested a Seawing last year on a k Line cargo ship. They are expected to reduce carbon-dioxide emissions by some 20%, says k Line.

These are consistently good results across a range of carriers. If the industry moved to these sails, the aggregate emissions drop would be significant.

After tedu's comment here I installed 7.5 in a VM and could build and run my Go software in it successfully, so I figured there were some Go build or config files or something somewhere getting in the way. I pkg_delete'd go, removed every Go build/config file I could find, and re-added Go with pkg_add. Now I can build apps with the previously mentioned modules; everything works fine now.

Thank you for the responses. :-)

> Users of syscall(2), such as Perl and the Go programming language were converted to use the libc functions.

I think the following may still need to be converted:

  * unix.Pledge from golang.org/x/sys/unix
  * unix.Unveil from golang.org/x/sys/unix
  * terminal.ReadPassword from golang.org/x/crypto/ssh/terminal

Just in case, I want to note that pledge(2) and unveil(2) are also supported by SerenityOS, so checking only for an OpenBSD target is insufficent.

https://awesomekling.github.io/pledge-and-unveil-in-Serenity...

Pledge and unveil in SerenityOS, combined with the planned move to memory safety, will be a powerful combination.