Hacker News: justinsaccount

New comment by justinsaccount in "sshole"

justinsaccount — Thu, 05 Nov 2026 14:02:29 +0000

oooh, that'll do it.

Didn't notice that the openssh-server-10.3_p1-r2 was released today.

New comment by justinsaccount in "Sshole"

justinsaccount — Thu, 05 Nov 2026 14:00:55 +0000

I can't reproduce it either. I used alpine:3.24.1 and openssh is openssh-server-10.3_p1-r2

I tried adding PermitRootLogin yes and PasswordAuthentication yes. Tried adding another user with a valid password.

Verified shadow entry has a *. Can't login as root or a test user. Tried another incorrect password first as well.

edit: can reproduce after `git revert 384e25e6bd1f2e7b30095900e48b570d46953510` in aports and rebuilding openssh without the fix. It also accepts the password on the 2nd+ attempt, NOT the first.

New comment by justinsaccount in "Debian apt security update: man-in-the-middle arbitrary code execution"

justinsaccount — Wed, 04 Nov 2026 13:56:00 +0000

based only on the wording in the notice:

> APT can merge two different package downloads after an HTTP redirect gives them the same URI

It sounds like the verification is ran but there is some deduplication or caching involved keyed on the destination of the url redirect, not the original source.

So could imagine a malicious server that:

Responds for a request for foo.deb with a redirect to evil.deb containing the original foo.deb. This validates properly.

Responds with a second request for bar.deb with a redirect again to evil.deb that now returns a malicious package. The downloading code thinks it has already validated evil.deb

New comment by justinsaccount in "Tailscale SSH: Investigation and remediation update"

justinsaccount — Tue, 27 Oct 2026 21:07:06 +0000

https://tailscale.com/docs/features/tailscale-ssh

New comment by justinsaccount in "Show HN: Kinesis – Control your Mac with the Meta Neural Band"

justinsaccount — Mon, 14 Sep 2026 13:08:36 +0000

> Do you think it's likely someone goes looking for the real-time data processing platform, lands on this GitHub and gets confused?

No, but I do think it is likely that someone might find this while looking for the kinesis keyboard, a popular product which has been on the market for 34 years.

New comment by justinsaccount in "We are rebuilding Monica"

justinsaccount — Tue, 01 Sep 2026 16:12:28 +0000

and that Chandler is different from this Chandler? https://en.wikipedia.org/wiki/Chandler_(software)

New comment by justinsaccount in "Data centers' 'oh s–t' moment"

justinsaccount — Fri, 28 Aug 2026 22:28:49 +0000

I think a lot of people out there are being manipulated about things that they don't understand.

I saw some comments from people against a proposed data center at the site of an old power plant. I pointed out that it was a mile from anything. Someone replied saying that that was still too close, and that they wouldn't want to live 50 miles from a data center.

We are 20 miles from Ashburn.

New comment by justinsaccount in "Writing by hand is good for your brain"

justinsaccount — Thu, 23 Jul 2026 15:45:47 +0000

I'm a huge fan of N.S. and what he says might be true, but I have an aversion to writing by hand after being tortured while growing up in the late 80s.

I just couldn't seem to hold a pen or pencil the right way and would always fall behind following along with the rest of the class. I was forced to spend hours at home with worksheets tracing over letters. I was led to believe that if I couldn't write properly I would be a complete failure.

It turns out being able to use a computer and type quickly was a more useful skill.

New comment by justinsaccount in "SQLite should have (Rust-style) editions"

justinsaccount — Thu, 16 Jul 2026 02:20:24 +0000

The entire point of "SQLite should have editions" is so that projects can opt into a set of modern defaults for 2026 and not get all of those backwards compatible decisions from 20 years ago.

New comment by justinsaccount in "GTA 6 will cost $80"

justinsaccount — Wed, 24 Jun 2026 15:59:44 +0000

Sonic the Hedgehog 3 launch price was $69.99. in 1994.

That's $159.89 in today's dollars.

New comment by justinsaccount in "Steam Machine launches today"

justinsaccount — Tue, 23 Jun 2026 19:01:27 +0000

> You can't use many of the features it's capable of in gaming mode

It is trivial to switch between gaming mode and desktop mode. I'm not sure what point you are trying to make here.

New comment by justinsaccount in "Bun Has Been Converted to Rust. Now What?"

justinsaccount — Wed, 03 Jun 2026 16:00:47 +0000

> The Zig implementation that powered Bun is gone.

The Zig implementation is literally still there.

You can make predictions of what might happen in the future, but hard to take the rest of the article seriously when it has the basic facts wrong.

New comment by justinsaccount in "Stop Ruining It"

justinsaccount — Tue, 02 Jun 2026 14:58:00 +0000

Wait, the example held up for "Stop ruining it" is a company that sells snake oil audiophile bullshit?

New comment by justinsaccount in "Openrsync: An implementation of rsync, by the OpenBSD team"

justinsaccount — Sat, 30 May 2026 16:17:37 +0000

that quote seems to be a bit of an oversimplification to the point of being completely wrong.

> Without them, your system accepts arbitrary data from the public network.

Neither of these features change if you are accepting arbitrary data from the public network. They limit what an exploited process can do. It's explained properly in the 'Security' section, so I'm not sure where this came from.

New comment by justinsaccount in "MiniStack (replacement for LocalStack)"

justinsaccount — Thu, 02 Apr 2026 13:14:35 +0000

I ran into the same thing with Kinesis. The Kinesis API has strict limits on batch size, message size, and rate limiting. Any client writing to Kinesis must deal with all of these constraints and handle errors properly.

I briefly looked at localstack to see how they implemented the Kenesis api and other than a `KINESIS_ERROR_PROBABILITY` option to simulate rate limiting, they did not implement any of the constraints.

New comment by justinsaccount in "macOS 26 breaks custom DNS settings including .internal"

justinsaccount — Thu, 19 Mar 2026 22:20:15 +0000

> none of my dockers

Containers ran using docker are called containers, not dockers.

New comment by justinsaccount in "Origin of the rule that swap size should be 2x of the physical memory"

justinsaccount — Thu, 26 Feb 2026 02:36:20 +0000

One interesting thing with zram (which OS X also does by default) is that certain memory leaks... effectively don't. I have a little raspberry pi where I have zram enabled. If I make a string in python and keep appending 'a's to it, eventually zram just soaks it up:

  $ zramctl
  NAME       ALGORITHM DISKSIZE  DATA COMPR TOTAL STREAMS MOUNTPOINT
  /dev/zram0 zstd          3.8G  2.3G 13.2M 17.2M       4 [SWAP]

2.3GB of 'a's that gets compressed down to 20MB.

New comment by justinsaccount in "New York’s budget bill would require “blocking technology” on all 3D printers"

justinsaccount — Wed, 04 Feb 2026 14:14:55 +0000

Did you consider clicking the "Click here for more information" to learn what the reason was?

New comment by justinsaccount in "Ian's Shoelace Site"

justinsaccount — Mon, 02 Feb 2026 02:44:35 +0000

The end result is the same as the regular way of tying it. perhaps you are doing a https://www.fieggen.com/shoelace/crossedianknot.htm by mistake

New comment by justinsaccount in "Lennart Poettering, Christian Brauner founded a new company"

justinsaccount — Tue, 27 Jan 2026 20:45:33 +0000

> Stop trying to make everyone act like you act.

Yeah! Telling people what to do is rude!

> Anyone still using Linux on the desktop in 2026 should switch

Oh.