Hacker News: h43z

ImageMagick: From Arbitrary File Read to File Write in Every Policy

h43z — Tue, 07 Apr 2026 09:48:47 +0000

Article URL: https://pwn.ai/blog/imagemagick-from-arbitrary-file-read-to-rce-in-every-policy-zeroday

Comments URL: https://news.ycombinator.com/item?id=47672764

Points: 1

# Comments: 0

New comment by h43z in "Show HN: Localhorst – Websites Hosted in the Browser"

h43z — Thu, 25 Dec 2025 14:17:58 +0000

Right click, view source?

Show HN: Localhorst – Websites Hosted in the Browser

h43z — Thu, 25 Dec 2025 11:18:21 +0000

Article URL: https://localhorst.43z.one/

Comments URL: https://news.ycombinator.com/item?id=46383718

Points: 3

# Comments: 2

New comment by h43z in "Is Firefox Firefucked?"

h43z — Fri, 19 Dec 2025 16:37:14 +0000

Firefox is really in a sad state. The politics, ideology is getting worse and the tech is still bad. Kind of crazy that they waste everyones battery and cpu https://b.43z.one/2025-02-12/

Am I the one who is crazy and nitpicking here?

New comment by h43z in "Upcoming Changes to Let's Encrypt Certificates"

h43z — Mon, 15 Dec 2025 22:14:01 +0000

Did I understand that correctly that I will be able to get a certificate for an IP?

New comment by h43z in "Cloudflare Radar: AI Insights"

h43z — Mon, 01 Sep 2025 15:17:02 +0000

I recently wanted to find out which company crawls the deepest. The openAI bot was the most thorough one, it followed 405 links [1].

[1] https://deep.43z.one

A Replacement for the Mouse in Linux

h43z — Fri, 29 Aug 2025 09:44:25 +0000

Article URL: https://github.com/jbensmann/mouseless

Comments URL: https://news.ycombinator.com/item?id=45062073

Points: 5

# Comments: 0

New comment by h43z in "Lucky 13: a look at Debian trixie"

h43z — Fri, 29 Aug 2025 09:12:16 +0000

Doesn't feel like much of an explanation to me.

  # UMASK is the default umask value for pam_umask and is used by
  # useradd and newusers to set the mode of the new home directories.
  # 022 is the "historical" value in Debian for UMASK
  # 027, or even 077, could be considered better for privacy
  # There is no One True Answer here : each sysadmin must make up his/her
  # mind.

New comment by h43z in "Lucky 13: a look at Debian trixie"

h43z — Fri, 29 Aug 2025 08:05:08 +0000

Can someone explain why we are still using a umask of 022 in ubuntu and debian?

Would it really be so hard to make that switch to a more privacy focused umask?

New comment by h43z in "A small change to improve browsers for keyboard navigation"

h43z — Mon, 25 Aug 2025 20:19:00 +0000

The span one is the important one though as most of the modern web does not use

New comment by h43z in "A small change to improve browsers for keyboard navigation"

h43z — Mon, 25 Aug 2025 14:46:23 +0000

I don't see it working on firefox for buttons but on chrome. Both don't work on other html elements (div,span,..).

New comment by h43z in "A small change to improve browsers for keyboard navigation"

h43z — Mon, 25 Aug 2025 14:35:10 +0000

I used to use vimium (and tried similar extensions) but it always scared me how big the codebase was for most of the popular extensions. In the end I came up with a tiny extension for just the things I need https://github.com/h43z/jkscroll

New comment by h43z in "A small change to improve browsers for keyboard navigation"

h43z — Mon, 25 Aug 2025 14:31:52 +0000

This works on links and buttons in chrome. In firefox just on links. In both it doesn't work for other html elements.

New comment by h43z in "A small change to improve browsers for keyboard navigation"

h43z — Mon, 25 Aug 2025 14:27:55 +0000

The links yes, but what about buttons or other html elements?

A small change to improve browsers for keyboard navigation

h43z — Mon, 25 Aug 2025 13:40:11 +0000

Article URL: https://b.43z.one/2025-07-22/

Comments URL: https://news.ycombinator.com/item?id=45013737

Points: 207

# Comments: 68

Ask HN: Are SSH keys with passphrases considered 2FA?

h43z — Fri, 22 Aug 2025 10:17:05 +0000

It could be argued that from the servers perspective only one thing was provided, so it's not 2FA.

Then what about ssh keys AND user/password authentication?

Like this sshd_config

  PasswordAuthentication yes
  PubkeyAuthentication yes
  AuthenticationMethods publickey,password

I guess it boils down to if one thinks ssh keys are something you know or something you have? The passphrase and password is very clearly something I know.

I'd like to hear your thoughts.

Comments URL: https://news.ycombinator.com/item?id=44982763

Points: 3

# Comments: 1