Hacker News: kolp

New comment by kolp in "Bunny Database"

kolp — Wed, 04 Feb 2026 08:18:25 +0000

I've been using their DNS (migrating away from Cloudflare) for over a year and I've found it solid. Good latency and fast propagation. Custom nameservers are easy to setup. Migrating from CF is easy too - just export your zonefile from CF and import it to Bunny and you're good to go.

New comment by kolp in "Netbird – Open Source Zero Trust Networking"

kolp — Mon, 02 Feb 2026 08:38:15 +0000

I had to use tailscale to bust through port forwarding on chained routers because, even with ports configured correctly, wireguard wasn't able to get through.

My use case was for remote access into a home-hosted Nextcloud instance, via an ISP supplied fibre router (IPv4, not CGNAT), then my own Gl iNet router, then to my Nextcloud instance.

Despite opening up port forwarding correctly, wireguard just couldn't get through that chain, whereas tailscale got through with no problems.

Downside of using tailscale is that it's messy to use at the same time as a VPN on your client device. Split tunnelling supposedly works, but I couldn't get it going.

New comment by kolp in "Bring bathroom doors back to hotels"

kolp — Thu, 27 Nov 2025 10:10:47 +0000

When I lived in NL, it was explained to me that closing the curtains would imply, in some sort of weird Calvinistic belief, that the occupants were engaged in some nefarious activities; therefore the curtains are left open to show that the occupants have nothing to hide and are engaged only in wholesome activities.

The other side of the social contract obliges passers-by to not look inside.

The other strange thing that I found is that some apartments have little spy mirrors mounted on the exterior wall to allow the occupants to monitor what's going on in the street.

New comment by kolp in "Ask HN: Startup getting spammed with PayPal disputes, what should we do?"

kolp — Wed, 04 Jun 2025 09:01:38 +0000

These Cloudflare WAF rules (not my creation) should help mitigate some of the threat by blocking TOR traffic, blocking bots and blocking datacenter IPs (eg bots running on a VPS). The rules are granular so you can tweak them when you start to identify the traffic sources of the bad actors.

You'll probably need to block entire ASNs. I assume most of your legitimate customers aren't using VPNs or eg DigitalOcean droplets to access your site.

https://webagencyhero.com/cloudflare-waf-rules-v3/

In addition, you should start looking for alternatives to PayPal in case they decide to drop you.

New comment by kolp in "Switching to BunnyCDN in Less Than 2 Hours"

kolp — Sat, 15 Mar 2025 13:09:49 +0000

Might be worth adding that Bunny offers DNS services as well.

I've started switching a few sites from Cloudflare to Bunny and the experience has been great so far. Bunny offers custom name servers as well, so if you can setup glue records with your domain registrar, it's easy enough to have custom nameservers, DNS and CDN hosted with Bunny. Cheap as chips and great performance so far.

I'm looking for a decent alternative to ReCaptcha or Turnstile but haven't found one yet that has easy integration (form builders etc.)

My move away from US providers isn't in protest - it's just risk avoidance. The unpredictable nature of the current administration reduces the attractiveness of using US based providers.

New comment by kolp in "[dead]"

kolp — Tue, 04 Mar 2025 11:06:36 +0000

Irish police used newly updated Cellebrite system to bypass security on murder suspect's locked phone. Suspect immediately changed plea to guilty.

Irish government has banned purchases of military equipment from Israel, but the ban doesn't extend to purchases by the police force.

New comment by kolp in "Microsoft is killing Skype"

kolp — Fri, 28 Feb 2025 09:15:50 +0000

Try voip.ms. Incoming texts can be sent to you as an email. A US number costs about $1.50 a month.

New comment by kolp in "Plane crashes, overturns during landing at Toronto airport"

kolp — Tue, 18 Feb 2025 09:59:16 +0000

To be fair, it had all her stuff, so she couldn't just leave it behind. /s

New comment by kolp in "Take the pedals off the bike"

kolp — Wed, 15 Jan 2025 10:04:06 +0000

Apparently the tradition continues. On our Peugeot 407, the button to open the boot (trunk) is in the "0" on the "407" badge.

New comment by kolp in "Colocation: Non-Clown Hosting"

kolp — Tue, 24 Sep 2024 08:54:52 +0000

SFR will switch you from cgnat to ipv4 if you contact customer support and explain that you work from home and need to open specific ports to access your work servers or VPN. I did just this a month ago. Takes less than 24 hours and you should be OK on ipv4.

Progressive Web Apps (PWAs) Phishing

kolp — Tue, 11 Jun 2024 17:44:41 +0000

Article URL: https://mrd0x.com/progressive-web-apps-pwa-phishing/

Comments URL: https://news.ycombinator.com/item?id=40649282

Points: 132

# Comments: 39

New comment by kolp in "Rare and Amusing Insults, Volume 2"

kolp — Tue, 04 Jun 2024 05:58:01 +0000

Gobshite, while it might appear to be "mouth shitter", isn't used to describe a braggard bullshitter or liar, as the components might suggest. It's more commonly used to describe a person who's both stupidly incompetent and contemptible, as in:

"Why is the system down?"

"Dave pushed the updates to the production server again."

"F*king gobshite."

Gobdaw is a less offensive variation, typically used by those who say fe_k instead of fu_k.

New comment by kolp in "Android's theft protection features"

kolp — Thu, 16 May 2024 07:11:07 +0000

Lane assistance is fine, if it can be permanently disabled. But I've rented cars where it seemed to have been hard coded to default = ON for each trip. Every time I started the car, I had to go into the car config (great fun on a rental with a different GUI each time) and disable it before driving.

Otherwise, in city driving, it's like some paranoid front seat passenger grabs the wheel every 30 seconds.

New comment by kolp in "Man in remission from blood cancer and HIV after remarkable treatment"

kolp — Wed, 28 Feb 2024 20:17:27 +0000

As an atheist, I would say that the opinions of these organisations do matter, insofar as they are likely to influence political opinion in the countries where they have significant followers.

New comment by kolp in "Not all TLDs are Created Equal"

kolp — Wed, 14 Feb 2024 09:35:20 +0000

First, nobody owns a domain; it is assigned to a registrant, by the registry, via the registrar. No domain "owner" has ownership rights; you have the right to use the domain subject to the rules of the registry. If the rules of the registry require the registrant to be a citizen or body of the EU and the registrant no longer meets that requirement, the registrant loses the right to use the domain.

Your proposed solution of grandfathering existing registrations would cause confusion or uncertainty for end users (site visitors) who could not ascertain with confidence that the organisation with which they were dealing was actually in the EU, or registered to an EU citizen or body.

Your assertion that the EU enforced the established rules because they were "being dicks" to the UK is similar to the anti-EU tropes spouted by the anti-EU press in the UK, eg the EU is punishing Brits by making them use non-EU passport lanes, restricting their visits to 90 days, etc. Your fellow citizens voted (unfortunately) to leave the organisation and these are the consequences of non-membership. If you decide to leave your golf club, you don't get to continue using the golf course and clubhouse.

New comment by kolp in "Google can turn ANC earbuds into a heart rate monitor with no extra hardware"

kolp — Sat, 28 Oct 2023 10:32:03 +0000

It's currently operated in Dublin. Barcode on back of each of 3 bins (recyclables, non-recyclables and organic). Recyclables and organic are free, and non-recyclables includes a quota of x kg per month included in your monthly fee. You pay extra per kg if you go over the quota for non-recyclables in any month. The system encourages recycling, but at the risk of people contaminating the (free) recyclables bin with non recyclable material.

New comment by kolp in "JMAP – a modern email open standard"

kolp — Wed, 31 May 2023 06:22:27 +0000

Another happy user of Purelymail here. The GUI is unpolished, but deliverability and reliability have been excellent for me in the few years that I've used it. Unlimited custom domains and inexpensive.

It's not suitable for bulk sending, but for transactional and personal email, I've found it meets my needs.

Be warned, however, that it appears to be a one-man band, and if he goes under a bus...

I'm also a happy user of Migadu. More polished GUI and more features. I've never hit their limits, so not sure how suitable it would be for a medium-sized enterprise. As with Purelymail, it's not intended to be used as a bulk sending service.

New comment by kolp in "Ask HN: How to prevent a company from taking my domain name?"

kolp — Fri, 24 Feb 2023 18:13:28 +0000

I like them as a company, but I wouldn't use them as a registrar if there was a significant risk of UDRP. Domains are not their core business and customer service is close to non-existent if you're not at least a pro-level customer. For your case, you should use a dedicated domain registrar, such as the ones I outlined earlier. Infomaniak is another registrar that I've found good in terms of customer service and price. They're Swiss based, and I've found them to be competent and professional.

New comment by kolp in "Ask HN: How to prevent a company from taking my domain name?"

kolp — Fri, 24 Feb 2023 13:10:14 +0000

Most enterprise class registrars (registry =/= registrar) are brand protection and brand monitoring services. Quite expensive for individuals and probably not in the price range of OP, according to the description of his circumstances.

I've used name.com, namecheap.com, sav.com and porkbun.com as registrars without difficulty, although one will always find anecdotal reports of problems other users have had with any service.

GoDaddy, on the other hand, is to be avoided. It's like the PayPal of domains. Awful customer service and dark patterns everywhere.

New comment by kolp in "Ask HN: How to prevent a company from taking my domain name?"

kolp — Fri, 24 Feb 2023 12:47:52 +0000

Domain investor here. Some, but not all of the advice here is absolutely dreadful and is an example of why you should not take advice from random strangers on the internet.

Some basic rules if you wish to keep the domain:

* Don't offer to sell the domain. If you are contacted by a prospective buyer, just decline, saying that the domain is not for sale. Don't counter-offer or enter into discussions or negotiations.

* Don't put ads or links to third-party commercial entities on your website. If you're going to use it for business purposes, make sure that it's just for your business, which incorprates your family name, eg FamilyName IT Services Ltd.

* Make sure your website has an "About Me/Us" page, which briefly outlines who you are, ensuring that you mention that your Family Name is the same as the domain name.

* The advice in this thread regarding use of 2FA on everything is sound. I've a high value domain portfolio and receive password reset requests every week, triggered by bad actors trying to access anything that they can think of that might give them access to accounts.

* Don't use GoDaddy or any or their network.

* Read up on UDRP (dispute resolution) and Reverse Name Hijacking if you want to get up to speed on the legal and procedural issues that might affect you.

* Domain disputes are a specialised field and you would need the advice of a specialised lawyer if you find yourself the recipient of a UDRP complaint. John Berryhill (I've no connection) is well regarded in this area, and I'm sure that there are others. He would be my first port of call.