Hacker News: ibotty

New comment by ibotty in "SSH certificates: the better SSH experience"

ibotty — Fri, 03 Apr 2026 13:50:29 +0000

Yes. Caveat: It might not really be worth it if all your infrastructure is managed by these newfangled infrastructure-as-code-things that are quick to roll out (OpenShift/OKD, Talos, etc.) and you have only one repo to change SSH keys (single cluster or single repo for all clusters).

There are some serious security benefits for larger organizations but it does not sound as if you are part of one.

New comment by ibotty in "Fermented foods shaped human biology"

ibotty — Thu, 26 Mar 2026 20:23:14 +0000

Beer, cider and bread (leavened with yeast or sourdough at least) are fermented. What was your point again?

New comment by ibotty in "Daily Driving GrapheneOS"

ibotty — Tue, 03 Mar 2026 08:56:09 +0000

The problem is the device attestation. See https://grapheneos.org/articles/attestation-compatibility-gu... for details.

New comment by ibotty in "US funding for global internet freedom 'effectively gutted'"

ibotty — Thu, 19 Feb 2026 09:28:24 +0000

Well, double standard is of course a thing (like accusing the only democracy for not being democratic enough without saying anything about much more oppressive regimes around; but also about surveillance in one place and also another). I think it is to make a different point though.

This funding from the US was to get around surveillance (everywhere), so it makes sense to argue, that a rival global player exports surveillance tech, because the funded tech is to counter that. That argument would not work with Israeli surveillance tech.

New comment by ibotty in "US funding for global internet freedom 'effectively gutted'"

ibotty — Thu, 19 Feb 2026 09:01:31 +0000

As if the guardian was overly pro-Israeli. I would argue that it makes more sense in that context to mention Chinese surveillance tech, because it's not an ally of the US.

New comment by ibotty in "US funding for global internet freedom 'effectively gutted'"

ibotty — Thu, 19 Feb 2026 08:53:34 +0000

Really important to first, pick that example of content moderation and then point out that he's an Israeli. Maybe think about why you used that example when there are countless others regarding free speech/internet freedom.

New comment by ibotty in "Pocketblue – Fedora Atomic for mobile devices"

ibotty — Mon, 16 Feb 2026 08:47:46 +0000

Very unhelpful comment. Some people don't want to run on anything AOSP. Being able to manage the device with standard linux tooling is a major plus for some people.

New comment by ibotty in "Rust the Process"

ibotty — Mon, 29 Dec 2025 11:12:45 +0000

I don't think your run often into these things, because of Rust's ownership enforcement. But I might be misunderstanding you, because it's all pretty abstract and I might not have the whole context.

New comment by ibotty in "The state of the kernel Rust experiment"

ibotty — Fri, 19 Dec 2025 08:42:22 +0000

There is relatively little Rust in the kernel, but there are even less Rust CVEs. In this cycle alone there were 160 CVEs, one in Rust. The first one! The amount of rust is way less than 1/160 and even that statistic is off, because one should count all CVEs.

New comment by ibotty in "Ion: Modern System Shell in Rust"

ibotty — Tue, 18 Nov 2025 10:45:19 +0000

https://gitlab.redox-os.org/redox-os/ion/-/blob/master/examp...

But I assume it's for redox, so you can't use it on a regular linux.

Varnish Cache to be renamed Vinyl Cache project

ibotty — Mon, 15 Sep 2025 15:58:30 +0000

Article URL: https://varnish-cache.org/#new-release-8-0-0-with-bonus-project-news

Comments URL: https://news.ycombinator.com/item?id=45251271

Points: 70

# Comments: 6

New comment by ibotty in "Ask HN: Looking for headless CMS recommendation"

ibotty — Wed, 03 Sep 2025 19:23:57 +0000

Or use decap https://decapcms.org/

New comment by ibotty in "Graphene OS: a security-enhanced Android build"

ibotty — Fri, 25 Jul 2025 14:35:36 +0000

Can you use mobilepay? (Or is that not a thing in Sweden?)

New comment by ibotty in "How to handle people dismissing io_uring as insecure? (2024)"

ibotty — Mon, 21 Jul 2025 07:19:39 +0000

One problem is that you can't filter its "syscalls" as you can regular syscalls. This removes a security boundary that e.g. container runtimes regularly use. So you cannot use it in your regular kubernetes cluster without weakening its security for these pods.

New comment by ibotty in "Weird Expressions in Rust"

ibotty — Fri, 27 Jun 2025 16:40:49 +0000

What's the joke exactly? English is not my native language.

New comment by ibotty in "My A11y Journey"

ibotty — Fri, 20 Jun 2025 14:26:39 +0000

The numeronym a11y has been around for at least 15 years now.

My A11y Journey

ibotty — Fri, 20 Jun 2025 10:34:48 +0000

Article URL: https://mjg59.dreamwidth.org/72379.html

Comments URL: https://news.ycombinator.com/item?id=44326407

Points: 27

# Comments: 23

New comment by ibotty in "Introducing stronger dependencies on systemd"

ibotty — Wed, 11 Jun 2025 07:27:52 +0000

Not a maintainer. A disgruntled developer. And one with questionable patches. Please read the gitlab discussions before coming to this conclusion.

New comment by ibotty in "The X.Org Server just got forked (announcing XLibre)"

ibotty — Fri, 06 Jun 2025 13:51:39 +0000

Well-known as in notorious, right?

New comment by ibotty in "The X.Org Server just got forked (announcing XLibre)"

ibotty — Fri, 06 Jun 2025 13:49:28 +0000

I am pretty sure you are wrong. They even tell in the README https://github.com/X11Libre/xserver that nvidia is going to be a problem.