Hacker News: justusw

New comment by justusw in "Backdoors in official Claude Code extensions"

justusw — Fri, 30 Oct 2026 13:45:30 +0000

Agreed, it doesn't offer a root cause analysis. Remedies are good but how do you prove that it won't happen again? Remember that these are never singular incidents but part of a bad security culture.

New comment by justusw in "Locking the Web Open: A Call for a Decentralized Web (2015)"

justusw — Sun, 13 Sep 2026 02:08:39 +0000

The author of the article linked here demoed his Onion service-based WordPress app this year at DWeb Camp:

https://onionpress.org/onionhome/

The extra trick that Brewster uses here is that by sharing your Onion service's private key with someone you trust, they can take over hosting your website when your computer goes offline.

How to log in where you shouldn't

justusw — Sat, 12 Sep 2026 03:24:55 +0000

Article URL: https://djnn.sh/posts/pam_access/

Comments URL: https://news.ycombinator.com/item?id=49668432

Points: 1

# Comments: 0

Locking the Web Open: A Call for a Decentralized Web (2015)

justusw — Fri, 11 Sep 2026 03:44:01 +0000

Article URL: https://brewster.kahle.org/2015/08/11/locking-the-web-open-a-call-for-a-distributed-web-2/

Comments URL: https://news.ycombinator.com/item?id=49653306

Points: 3

# Comments: 3

Two months too late (Linux kernel 1day)

justusw — Tue, 01 Sep 2026 08:56:06 +0000

Article URL: https://djnn.sh/posts/2months2late/

Comments URL: https://news.ycombinator.com/item?id=49519617

Points: 1

# Comments: 0

Generate Nix binary caches without Nix copy

justusw — Wed, 29 Jul 2026 01:24:00 +0000

Article URL: https://www.justus.pw/posts/2026-07-29-generate-nix-cache.html

Comments URL: https://news.ycombinator.com/item?id=49092290

Points: 2

# Comments: 0

New comment by justusw in "Can uBlock Origin Block WebRTC?"

justusw — Mon, 27 Jul 2026 04:35:58 +0000

Thanks for the reference links. I blocked RTC connections initiated on the SBI Shinsei banking log in page at bk.web.sbishinseibank.co.jp with the following custom uBlock Origin filter:

    bk.web.sbishinseibank.co.jp##+js(nowebrtc)

You can see that it works because typing `new window.RTCPeerConnection()` in the browser console prints this:

     Document tried to create an RTCPeerConnection:  undefined

Which comes from uBlock, see https://github.com/gorhill/uBlock/blob/5efb8ee4891c09720011e...

Edit: I gave a shout-out to your comment on the blog post linked in this submission. Thanks again.

New comment by justusw in "Can uBlock Origin Block WebRTC?"

justusw — Mon, 27 Jul 2026 03:01:40 +0000

Perhaps someone here knows how to make uBlock Origin block STUN/TURN connection attempts to domain names that are in its block list?

Can uBlock Origin Block WebRTC?

justusw — Mon, 27 Jul 2026 03:01:40 +0000

Article URL: https://www.justus.pw/posts/2026-07-27-can-ublock-origin-block-webrtc.html

Comments URL: https://news.ycombinator.com/item?id=49064740

Points: 3

# Comments: 3

Cybersecurity by the Book

justusw — Mon, 29 Jun 2026 06:33:12 +0000

Article URL: https://www.justus.pw/posts/2026-06-29-cybersecurity-by-the-book.html

Comments URL: https://news.ycombinator.com/item?id=48715606

Points: 3

# Comments: 1

New comment by justusw in "Ask HN: Is Signal down for you too?"

justusw — Mon, 20 Oct 2025 07:54:00 +0000

Same here with a Japanese ISP. Is this related to the AWS outage?

New comment by justusw in "A year later, a bug fix"

justusw — Wed, 27 Aug 2025 09:01:03 +0000

I've finally fixed a bug in Hugo that I've told myself to fix for a while now. The experience was pleasant and I want to share my experience with the review process with everyone.

A year later, a bug fix

justusw — Wed, 27 Aug 2025 09:01:03 +0000

Article URL: https://www.justus.pw/posts/2025-08-27-hugo-bug-fixed.html

Comments URL: https://news.ycombinator.com/item?id=45037078

Points: 2

# Comments: 1

New comment by justusw in "How I configure BorgBackup and borgmatic (2023)"

justusw — Wed, 13 Aug 2025 02:06:01 +0000

Thank you for the link, I'm quite intrigued by myba. At least on macOS, I spend way too much time finding workarounds, even with borgmatic.

How I configure BorgBackup and borgmatic (2023)

justusw — Fri, 01 Aug 2025 07:54:32 +0000

Article URL: https://www.justus.pw/garden/borgbackup.html

Comments URL: https://news.ycombinator.com/item?id=44754092

Points: 40

# Comments: 9

New comment by justusw in "Autodesk Email System Hacked"

justusw — Tue, 18 Mar 2025 05:44:51 +0000

Can confirm, I've got a DKIM passing email today asking me to sell my "Illuvium". DKIM auth result header:

> Authentication-Results: spamfilter01.heinlein-hosting.de (amavisd-new); > dkim=pass (2048-bit key) header.d=autodesk.com

For this DKIM-Signature:

> DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=autodesk.com; > h=from:subject:mime-version:list-unsubscribe:content-type:reply-to: > cc:content-type:from:subject:to; > s=s11; bh=...

MTA:

> Received: from ec2-3-8-140-122.eu-west-2.compute.amazonaws.com (unknown) > by geopod-ismtpd-13 (SG) with ESMTP id n5WDORJ6Taauv7FuUNA9Ug

I wonder if just their DKIM selector got stolen or someone owned their AWS accounts as well?

New comment by justusw in "Trees not profits: we're giving up our right to ever sell Ecosia (2018)"

justusw — Tue, 11 Mar 2025 00:21:19 +0000

Chiming in to say the same.

I was there in their earlier years. Ecosia set the standard for me what an ethical company should be like.

And hey odiroot ;)

New comment by justusw in "Our audit of Homebrew"

justusw — Wed, 31 Jul 2024 05:25:31 +0000

Funny that you mention it, I also went Homebrew -> MacPorts -> Nix. Homebrew had analytics and broke versions too often. MacPorts is way more stable, but some niche packages would not build well, and I had terminfo issues with tmux.

Nix allows me to override most of that, and I can share home manager config with my Debian workstation.

New comment by justusw in "Show HN: Pomoglorbo, a TUI Pomodoro timer for your terminal"

justusw — Thu, 20 Jun 2024 01:22:37 +0000

Thanks for your feedback. You are right. I've lowered the minimum version to Python 3.10. If you want to give it another try, the package is on PyPI now.

New comment by justusw in "Show HN: Pomoglorbo, a TUI Pomodoro timer for your terminal"

justusw — Wed, 19 Jun 2024 10:10:41 +0000

Good one! That's pretty much how I started and then ended up with Pomoglorbo instead. I have wanted the timer to integrate with timewarrior, and automatically time what I am working and also keep track of my breaks. Another issue is that when your computer sleeps, you'd want to keep counting seconds in the background, so time.sleep(1) will lose accuracy very quickly.