Hacker News: c45y

New comment by c45y in "SSH has no Host header"

c45y — Wed, 18 Mar 2026 06:10:56 +0000

I would love it if more systems just understood SRV records, hostname.xyz = 10.1.1.1:2222

So far it feels like only LDAP really makes use of it, at least with the tech I interact with

New comment by c45y in "A Botnet Accidentally Destroyed I2P"

c45y — Sun, 22 Feb 2026 21:23:27 +0000

As I understand they weren't building tunnels, so every time a legit client wanted to it has to wade through all the bad nodes to find a good one, so everything slowed right down. I was building at about 3% success rate during the issue which enables general eepsite browsing but torrenting was essentially dead

New comment by c45y in "A header-only C vector database library"

c45y — Sat, 14 Feb 2026 23:19:52 +0000

Extremely easy copy paste deployment into projects

New comment by c45y in "Stop using low DNS TTLs"

c45y — Fri, 30 Jan 2026 21:16:58 +0000

Probably an expectation for floating IPs for load balancing instead of DNS.

Relatively simple inside a network range you control but no idea how that works across different networks in geographical redundant setups

New comment by c45y in "Xfce is great"

c45y — Tue, 13 Jan 2026 11:40:04 +0000

I use thunar with niri and some of the taskbar applets for bluetooth etc in waybar

New comment by c45y in "Jimmy Lai Is a Martyr for Freedom"

c45y — Tue, 23 Dec 2025 04:04:01 +0000

Officially no deaths caused by police.

Chan yin-lam case is one that always sticks in my head.

I can well believe correlation is sometimes the answer but the odds of an award winning swimmer doing a midnight dip and washing up naked the next day, with a rushed police investigation and extremely expedited cremation is a fair bit to accept as coincidence

New comment by c45y in "Chat-tails: Throwback terminal chat, built on Tailscale"

c45y — Tue, 16 Dec 2025 23:52:22 +0000

https://yggdrasil-network.github.io/ for the most part enables this - otherwise I2P and Tor for the most part facilitate this with the bonus encryption element.

We might one day have it natively with ipv6 adoption increasing.

New comment by c45y in "Helm 4.0"

c45y — Thu, 13 Nov 2025 08:30:40 +0000

I really appreciate the k3s default with HelmChart type and operator installed. Makes working with charts simpler in my view

New comment by c45y in "I may have found a way to spot U.S. at-sea strikes before they're announced"

c45y — Thu, 06 Nov 2025 07:24:22 +0000

Innocent until the courts say otherwise. It's why we apprehend people for crimes instead of just shooting them (in most countries)

New comment by c45y in "Show HN: Run a GitHub Actions step in a gVisor sandbox"

c45y — Fri, 31 Oct 2025 08:55:22 +0000

How one person can be so good at putting out useful security tech is just wild.

I'll add this to my pile of filo made security I consistently rely on

New comment by c45y in "Linux Ready to Upstream Support for Google's PSP Encryption for TCP Connections"

c45y — Sun, 21 Sep 2025 21:13:27 +0000

It should be exactly that for exactly that reason

New comment by c45y in "Azure API vulnerability and roles misconfiguration compromise corporate networks"

c45y — Wed, 02 Jul 2025 20:59:00 +0000

They bundle versioned API schemas....looooots of them.

It would be a garbage fire in any language

New comment by c45y in "Show HN: AgenticSeek – Self-hosted alternative to cloud-based AI tools"

c45y — Wed, 30 Apr 2025 06:17:20 +0000

You can do a lot with seccomp filters that would stop even root messing things up too badly, down to path level io filtering unless I misremember

New comment by c45y in "Immortal: A *Nix cross-platform supervisor"

c45y — Tue, 22 Apr 2025 02:08:16 +0000

Replacing systemd seems to be the goal

New comment by c45y in "Podman Quadlets with Podman Desktop"

c45y — Mon, 14 Apr 2025 21:27:37 +0000

It's just a ~/.config/containers/systemd/ folder for rootless containers, I stuff the whole thing in a git repo

New comment by c45y in "Open-sourcing OpenPubkey SSH (OPKSSH): integrating single sign-on with SSH"

c45y — Tue, 25 Mar 2025 21:18:48 +0000

You can have multiple trusted CAs which I've found to make rotation a non issue with tooling like Ansible etc.

New CA is minted, public key is added to the accepted list, client signing start using the new CA and you remove the old after a short while.

If missing servers is a common problem it sounds like there are some other fundamental problems outside just authenticated user sessions.

New comment by c45y in "Open-sourcing OpenPubkey SSH (OPKSSH): integrating single sign-on with SSH"

c45y — Tue, 25 Mar 2025 21:08:02 +0000

CA key also allows those servers to avoid reaching out to some central location to validate which I've found to be a nice side bonus for disaster recovery type scenarios.

New comment by c45y in "Hidden Messages in Emojis and Hacking the US Treasury"

c45y — Tue, 18 Mar 2025 07:38:24 +0000

In this case PAM is the name of a type of security product and not the Linux PAM system.

New comment by c45y in "ZFS 2.3.0 released with ZFS raidz expansion"

c45y — Tue, 14 Jan 2025 07:45:04 +0000

Bcachefs allows it

New comment by c45y in "Labwc: Wlroots-based window-stacking compositor for Wayland, inspired by openbox"

c45y — Sun, 05 Jan 2025 10:35:33 +0000

Having made the switch from sway to labwc nearly a year ago I've edited the config maybe all of 3 times

It's xml but at least it's plain and well documented with sensible defaults