Hacker News: jamespwilliams

Certificate Transparency now enforced in Firefox on desktop, starting with v135

jamespwilliams — Tue, 04 Feb 2025 20:48:57 +0000

Article URL: https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/OagRKpVirsA

Comments URL: https://news.ycombinator.com/item?id=42938392

Points: 4

# Comments: 0

New comment by jamespwilliams in "Go: Sentinel errors and errors.Is() slow your code down by 3000%"

jamespwilliams — Sat, 01 Jun 2024 09:31:31 +0000

https://go-review.googlesource.com/c/go/+/576015 this change to optimise errors.Is in the err == nil case was merged recently. It’s not included in the latest Go release, hence the stats here, but should end up in a release pretty soon I’d imagine.

New comment by jamespwilliams in "Go: Sentinel errors and errors.Is() slow your code down by 3000%"

jamespwilliams — Sat, 01 Jun 2024 09:21:50 +0000

That err == nil check was added very recently and isn’t included in the latest Go release, which the author used in this article.

New comment by jamespwilliams in "Google Public DNS's approach to fight against cache poisoning attacks"

jamespwilliams — Sun, 07 Apr 2024 17:28:53 +0000

And conversely, short domains like Google’s own g.co are less secure!

New comment by jamespwilliams in "Show HN: Goralim - a rate limiting pkg for Go to handle distributed workloads"

jamespwilliams — Wed, 03 Apr 2024 18:38:10 +0000

Fun weekend project but definitely not production-ready (no tests, no error handling, concurrent requests will cause a race condition, etc.). If readers are looking for something production-ready to use, consider https://github.com/go-redis/redis_rate (which implements GCRA/leaky bucket), or https://github.com/ulule/limiter (which uses a much simpler algorithm, but has good middleware).

New comment by jamespwilliams in "Xz.git: Fix Linux Landlock Feature Test in Autotools"

jamespwilliams — Sat, 30 Mar 2024 22:31:24 +0000

Can you spot the intentional bug in this commit?

Xz.git: Fix Linux Landlock Feature Test in Autotools

jamespwilliams — Sat, 30 Mar 2024 22:31:24 +0000

Article URL: https://git.tukaani.org/?p=xz.git;a=commitdiff;h=328c52da8a2bbb81307644efdb58db2c422d9ba7

Comments URL: https://news.ycombinator.com/item?id=39879325

Points: 29

# Comments: 6

New comment by jamespwilliams in "Type-Safe Printf() in TypeScript"

jamespwilliams — Sun, 24 Mar 2024 17:44:54 +0000

> Maybe it would be easier to have some kind of framework for compiler plugins that do extra checks. [...] But I haven't seen any language community do something like that. What am I missing?

Go has adopted a similar approach to this - they've made it fairly easy to write separate plugins that check stuff like this. The plugins aren't executed as part of the compiler though, they're standalone tools. For example, see golangci-lint, which bundles together a load of plugins of this kind.

Some of these plugins are shipped within the go command directly, as part of the "go vet" subcommand. (including a printf format check, which is similar to what's described in this post, i.e. it checks that arguments are of the correct type).

New comment by jamespwilliams in "How to Lose Control of Your Shell"

jamespwilliams — Sat, 09 Mar 2024 17:20:29 +0000

> Now, listen. I wish I could continue here and end with “… and this is why ZSH does it that way!”

https://github.com/zsh-users/zsh/blob/47c7bc9b1493c7374f076b... has a comment about this behaviour, but no justification. I think it's just an optimization to save a little bit of time by not forking, and to avoid having the zsh process hanging around taking resources for no reason.

New comment by jamespwilliams in "Freenginx: Core Nginx developer announces fork"

jamespwilliams — Wed, 14 Feb 2024 23:39:31 +0000

nginx supports graceful reloading and I’m pretty sure it has for a very long time - there are references to it in the changelog from 2005

https://nginx.org/en/docs/control.html

New comment by jamespwilliams in "Anki – Powerful, intelligent flash cards"

jamespwilliams — Sun, 28 Jan 2024 18:55:29 +0000

It doesn’t cover all of your requirements but you might find Clozemaster interesting

New comment by jamespwilliams in "Anki – Powerful, intelligent flash cards"

jamespwilliams — Sun, 28 Jan 2024 18:53:35 +0000

I can recommend this too, although I use DeepL instead of Google Translate, and I also use DeepL Write to identify issues in my grammar

New comment by jamespwilliams in "Non-interactive SSH password authentication"

jamespwilliams — Mon, 25 Dec 2023 21:35:42 +0000

Depending on your use case it might be better to just store the key unencrypted. There’s not really much point encrypting it if you’re storing the passphrase on disk alongside the key anyway.

New comment by jamespwilliams in "Non-interactive SSH password authentication"

jamespwilliams — Mon, 25 Dec 2023 18:27:34 +0000

Something like https://matrixzj.github.io/documentations/idm_decrypt_ssh_pr... (then ssh -i decrypted_key) should work and avoid ssh-agent

New comment by jamespwilliams in "SSH over HTTPS"

jamespwilliams — Sun, 24 Dec 2023 12:38:27 +0000

You could probably use a self-signed cert, then configure socat either to trust that certificate (with the cafile option) or to disable verification (with the verify option)

Checking If a Certificate Is Revoked: How Hard Can It Be?

jamespwilliams — Sun, 17 Dec 2023 20:45:19 +0000

Article URL: https://www.agwa.name/blog/post/checking_if_a_certificate_is_revoked_how_hard_can_it_be

Comments URL: https://news.ycombinator.com/item?id=38676229

Points: 2

# Comments: 0

Shared wildcard certificate in EV chargers

jamespwilliams — Mon, 04 Dec 2023 15:04:24 +0000

Article URL: https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/Z1koTnE1Rh8

Comments URL: https://news.ycombinator.com/item?id=38518122

Points: 1

# Comments: 0

New comment by jamespwilliams in "Shellcheck finds bugs in your shell scripts"

jamespwilliams — Thu, 23 Nov 2023 21:48:06 +0000

Shellcheck is a godsend

https://github.com/jamespwilliams/strictbash, I wrote this little wrapper a while back that you can use as a shebang for scripts. It runs shellcheck for you before the script executes, so it’s not possible to run the script at all if there are failures. It also sets all the bash “strict mode” [0] flags.

[0] http://redsymbol.net/articles/unofficial-bash-strict-mode/

Chromium Money Tree Browser

jamespwilliams — Tue, 21 Nov 2023 22:29:04 +0000

Article URL: https://lyra.horse/misc/chromium_vrp_tree.html

Comments URL: https://news.ycombinator.com/item?id=38371344

Points: 2

# Comments: 0

The Awful German Language

jamespwilliams — Sat, 28 Oct 2023 23:20:17 +0000

Article URL: https://faculty.georgetown.edu/jod/texts/twain.german.html

Comments URL: https://news.ycombinator.com/item?id=38054398

Points: 2

# Comments: 0