https://news.ycombinator.com/item?id=16238937

[dupe] https://news.ycombinator.com/item?id=16015539 (543 points, 107 comments)

HN user saulrh mentioned that the list of requirements "does not seem incredibly unusual" for enterprise setups with AMT on.

Pre-Meltdown/Spectre this was 2017's "big deal" re:Intel; nearly all of the varying degrees of paranoia in the previous discusson seem a lot more reasonable with the benefit of hindsight. (If any more AMT info has become available thanks to Meltdown/Spectre-enhanced reverse engineering I would appreciate a heads-up; example vs SGX: https://github.com/lsds/spectre-attack-sgx)

[dupe] https://news.ycombinator.com/item?id=15776995 (267 points, 96 comments)

Surprised to see it again so soon -- darn you Medium flexible URLs!

PS. Anyone willing to earn $400 implementing mosh ssh port forwarding https://www.bountysource.com/issues/4471419-ssh-port-forward..., or should I move on to the mentioned alternative https://mistertea.github.io/EternalTCP?

PPS. Bountysource feels sketch: https://hn.algolia.com/?query=bountysource

In any case you should ask the author, as they are currently active on another discussion where they linked their article in a comment: https://news.ycombinator.com/item?id=16238501#16238845

>perlgod: I've spent years tweaking my mail server setup (Postfix, Dovecot, RSPAMD, LDAP...) and did a full writeup a few months ago. I've used other guides online but found most of the rest lacking on details

https://news.ycombinator.com/item?id=14856277#14858784

>opie34: A friend and I put together a free dynamic DNS service [1] offering cool custom domains aimed at the Raspberry Pi community (and similar hardware hackers.) It's not strictly a hardware project, but it's a crucial building block for any network-enabled Raspberry Pi project, and we'd love your feedback.

[1]: https://www.legitdns.com

Comments URL: https://news.ycombinator.com/item?id=16238937

Points: 638

# Comments: 325

http://www.pe0sat.vgnet.nl/decoding/unix-tlm-decoding (2015)

I wish there was even the tiniest bit of public accountability! Even user profile totals of upvotes, downvotes, comments, and flags would be a usable signal. Maybe one of the perks of being a YC company is seeing which accounts downvoted yours... ;)

I actually prefer candid home video infinitely more -- most pictures on social networks are as authentic as pornography stills.

I believe this may not even be possible due to privacy issues, hidden cameras / recording without consent is enough of a problem already!

Trust the babysitter to make wise choices. This is actully really tough as cell phones end up lowering the standard expected of babysitters, like the whole GPS/map thing.

Perhaps a resurrection of the Redis Watch newsletter is in order! Are there any existing alternatives?

>seniorsassycat: I don't understand why AWS released Go support instead of binary support and I don't understand why they chose to rely on go's net/rpc [...] which encodes objects using Go's special [gobs] binary format

You need to get yourself some whitespace in this reply!

I don't really see how replication/HA is an issue in this setup beyond normal file system replication/HA (which seems to be a solved "spend money on NAS" problem in the enterprise world). If your filesystem isn't reliable / delivering what's needed then you're gonna have a bad time no matter the storage approach; I doubt some unusual option is involved though it would be cool to be proven wrong.

The only time the filesystem could even potentially have read/write conflicts (assuming 1-to-1 correlation between devices writing to files) is when querying. I did wind up muddling the terminology in the interest of jumping to the actual problem.

A legitimate, soup-to-nuts "turn one email into $___ in cash" walkthrough (perhaps the beginnings of which is below, though I can't personally vouch for it) would do well!

https://medium.com/@marckohlbrugge/you-might-have-204-worth-...

(Search "2. Stellar" [no quotes] twice; does anyone know how to link directly on Medium? This piece focuses more on breadth than depth, covering multiple cryptocurrencies. The only useful Stellar info there seems to be https://launch.stellar.org/#/login)

>swanson: Related to the Coinbase/insider trading noise around BCH a few weeks ago, it seems strange for Stripe to plug other alt-coins (OMG, Stellar, etc) in the post as things they view as "promising" and "imagine enabling support for". I don't think it's illegal nor unethical personally, but it is such a dicey topic that I'm surprised to see someone writing without a mountain of disclaimers on an official Stripe communication channel

>>ChristianBundy: FYI, Stripe has been very transparent in the fact that they believe (and have pumped millions of dollars into) Stellar

Comments URL: https://news.ycombinator.com/item?id=16233723

Points: 1

# Comments: 0

>network of transportation organizations [...] services are provided free to the public and employers

Commuter Connections | https://tdm.commuterconnections.org/mwcog

>Instantly find rideshare partners [...] Ride Free!