Hacker News: letters90

New comment by letters90 in "How much EU is in DNS4EU?"

letters90 — Thu, 12 Jun 2025 10:43:56 +0000

It's simple to setup a resolver, really. Basically just "apt install unbound" and you have a resolver ready.

the only thing you might have to adjust is the access control

https://www.linuxbabe.com/ubuntu/set-up-unbound-dns-resolver...

      access-control: 10.0.0.0/8 allow
      access-control: 127.0.0.1/24 allow
      access-control: 2001:DB8::/64 allow

New comment by letters90 in "How much EU is in DNS4EU?"

letters90 — Thu, 12 Jun 2025 08:19:34 +0000

That'd be a really good idea

https://en.wikipedia.org/wiki/Root_name_server

To be honest, setting up a DNS4EU replica would just be a simple unbound

New comment by letters90 in "The Danish Ministry of Digitalization Is Switching to Linux and LibreOffice"

letters90 — Tue, 10 Jun 2025 11:45:54 +0000

If denmark was to successfully adopt libreoffice they would probably invest in its upkeep aswell

Preventing another migration is a cost reduction in itself

New comment by letters90 in "IRS Direct File on GitHub"

letters90 — Thu, 05 Jun 2025 06:54:15 +0000

Not in other countries besides the US. Haven't seen a printout since I started doing taxes.

New comment by letters90 in "HeidiSQL Available Also for Linux"

letters90 — Mon, 02 Jun 2025 10:20:42 +0000

With DBeaver I was able to use tnsnames.ora to use a few tricks to connect to an oracle db

It required certain host/user/cid combination to pass the whitelist.

New comment by letters90 in "CheerpJ 4.1: Java in the browser, now supporting Java 17 (preview)"

letters90 — Wed, 28 May 2025 11:01:03 +0000

The minecraft demo is quite impressive

https://browsercraft.cheerpj.com/

New comment by letters90 in "Debian bookworm live images now reproducible"

letters90 — Thu, 27 Mar 2025 06:45:03 +0000

the update is gold, original message: "They are reproduceable" updated message "lol actually not"

New comment by letters90 in "Sell yourself, sell your work"

letters90 — Wed, 26 Mar 2025 07:24:16 +0000

I'm not the type to write a blog. I just don't want to invest that much.

What I do though is documenting for myself, everything.

It has helped me greatly in the last few years

New comment by letters90 in "Slow SMB Speeds over WiFi"

letters90 — Wed, 26 Mar 2025 07:17:37 +0000

I was asking myself the same question, looking for something noteworthy.

No there's nothing here to find. The way to go is in the linked discourse, god it's ugly, use iperf.

New comment by letters90 in "On Running systemd-nspawn Containers (2022)"

letters90 — Fri, 21 Feb 2025 09:14:20 +0000

I used nspawn to get a system running in the most ridiculous way.

A debian aarch64 vm on kvm starting a systemd-nspawn for an unpacked raspberry pi 3 iso.

It works way too well judging by how ridiculous it was.

Still saved me a few days instead of setting things up myself.

I actually liked how easy it is to spin up nspawn as a systemd service

  [Unit]
  Description=Raspberry Image Machine
  After=multi-user.target

  [Service]
  Type=simple
  User=root

  ExecStart=/usr/bin/systemd-nspawn -D /mnt/ /sbin/init

  [Install]
  WantedBy=multi-user.target

New comment by letters90 in "Openhaystack: Build 'AirTags' – track Bluetooth devices via Apple's network"

letters90 — Mon, 27 Jan 2025 08:29:06 +0000

> All you need to use is a mac.

Might as well require you to pay 1000$ up front to use.

New comment by letters90 in "Bus Number – The GitHub plugin my coworkers asked me not to write"

letters90 — Tue, 12 Nov 2024 09:31:28 +0000

If you wanted to view this from a darker side it could also be titled:

How to generate a hit list to hurt a global economy

New comment by letters90 in "Hacking cars in JavaScript (Replay attacks in the browser with the HackRF)"

letters90 — Thu, 07 Nov 2024 13:48:50 +0000

it's nothing new for cars to be susceptible to replay attacks, yet it's always a proof of incapacity of the involved developers.

to even implement such a design is audacious

New comment by letters90 in "Can't trust any VPN these days"

letters90 — Wed, 16 Oct 2024 10:47:57 +0000

or just a portable mingw coming with an openssh and a dynamic proxy

there you go with an easy socks5 proxy.

New comment by letters90 in "Can't trust any VPN these days"

letters90 — Wed, 16 Oct 2024 10:38:46 +0000

So much work just because someone is using advertised dns from pppoe

New comment by letters90 in "Huly – Open-source project management platform"

letters90 — Mon, 14 Oct 2024 06:32:20 +0000

I don't really see where you are getting that

https://github.com/hcengineering/huly-selfhost

New comment by letters90 in "RegreSSHion: RCE in OpenSSH's server, on glibc-based Linux systems"

letters90 — Mon, 01 Jul 2024 09:39:12 +0000

I didn't consider embedded, probably the biggest target for this.

New comment by letters90 in "RegreSSHion: RCE in OpenSSH's server, on glibc-based Linux systems"

letters90 — Mon, 01 Jul 2024 09:33:28 +0000

> In our experiments, it takes ~10,000 tries on average to win this race condition, so ~3-4 hours with 100 connections (MaxStartups) accepted per 120 seconds (LoginGraceTime). Ultimately, it takes ~6-8 hours on average to obtain a remote root shell, because we can only guess the glibc's address correctly half of the time (because of ASLR).

Mitigate by using fail2ban?

Nice to see that Ubuntu isn't affected at all

New comment by letters90 in "Open-Source Detector of CISA's Known Exploitable Vulnerabilities"

letters90 — Tue, 16 Jan 2024 14:08:39 +0000

Scan Created? Scan Created where? ...

Usage Instructions seem lacking.

New comment by letters90 in "Audio CD ripping – optical drive accuracy listing"

letters90 — Mon, 07 Nov 2022 08:26:58 +0000

No mentioning of abcde ?

Would like to know how it's seen in the ripping community https://wiki.ubuntuusers.de/abcde/