Hacker News: new23d

New comment by new23d in "Hacker Public Radio"

new23d — Thu, 30 Jul 2026 15:56:31 +0000

Says Not Before: Thu, 09 Jul 2026 01:02:21 GMT ; Not After: Wed, 07 Oct 2026 01:02:20 GMT for me. Works fine, too.

New comment by new23d in "Euro firms must ditch Uncle Sam's clouds and go EU-native"

new23d — Sat, 31 Jan 2026 12:56:11 +0000

netim.com has been reliable over the years for me

New comment by new23d in "What data do coding agents send, and where to?"

new23d — Tue, 04 Nov 2025 12:11:25 +0000

Our report seeks to answer some of our questions for seven of the most popular agentic code editors and plugins. By intercepting and analysing their network flows across a set of standardised tasks, we aim to gain insight into the behaviour, privacy implications, and telemetry patterns of these tools in real-world scenarios. Incidentally, a side-effect was running into OWASP LLM07:2025 System Prompt Leakage for three of the chosen coding agents. You can see the system prompts in the appendix.

What data do coding agents send, and where to?

new23d — Tue, 04 Nov 2025 12:11:25 +0000

Article URL: https://chasersystems.com/blog/what-data-do-coding-agents-send-and-where-to/

Comments URL: https://news.ycombinator.com/item?id=45810026

Points: 2

# Comments: 1

New comment by new23d in "Obfuscating outbound traffic via a Suricata "firewall""

new23d — Fri, 11 Jul 2025 14:42:18 +0000

Obfuscation via egress firewalls and evasive binary development with an iterative LLM agent.

Obfuscating outbound traffic via a Suricata "firewall"

new23d — Fri, 11 Jul 2025 14:42:18 +0000

Article URL: https://www.new23d.com/obfuscating-outbound-traffic-via-a-suricata-firewall/

Comments URL: https://news.ycombinator.com/item?id=44532682

Points: 1

# Comments: 1

New comment by new23d in "Why I no longer have an old-school cert on my HTTPS site"

new23d — Sat, 24 May 2025 19:32:48 +0000

Use AWS Route53?

New comment by new23d in "Living-off-the-land Dynamic DNS for Route 53"

new23d — Tue, 25 Mar 2025 19:20:48 +0000

Making a dynamic DNS client with aws and jq CLI, with a least-privilege IAM role and a SystemD service.

Living-off-the-land Dynamic DNS for Route 53

new23d — Tue, 25 Mar 2025 19:20:48 +0000

Article URL: https://www.new23d.com/living-off-the-land-dynamic-dns-for-route-53/

Comments URL: https://news.ycombinator.com/item?id=43474817

Points: 1

# Comments: 1

New comment by new23d in "Why are UK electricity bills so expensive?"

new23d — Fri, 20 Dec 2024 23:00:08 +0000

Exactly the same happened with me. Picking up the phone and responding to email (in weeks, not hours or days) didn't lower my bills. This sort of marketing is perhaps deflection.

New comment by new23d in "An analysis of CRL sizes from various CAs"

new23d — Wed, 24 Jul 2024 19:38:28 +0000

We'll be working on that in the coming days. Thought the data at this point was a good start.

New comment by new23d in "An analysis of CRL sizes from various CAs"

new23d — Wed, 24 Jul 2024 16:06:23 +0000

Some initial observations:

• Google's CRLs from the same intermediate CA (same public key) have different URLs and different content when pulled from different hosts (google.com, youtube.com).

• DigiCert has sharded according to 'assurance' class, algorithm, year and acquisition's name.

• Sectigo also has sharded according to 'assurance' class [1].

• GlobalSign has sharded by the yearly quarter presumably.

• HTTP Cache-Control maxage (or s-maxage), 'Expires' and 'Next Update' within the CRL file are not in sync.

• Some CAs other than Let's Encrypt also do not publish CRL URLs in the leaf certificates.

[1] https://www.sectigo.com/knowledge-base/detail/Sectigo-Interm...

New comment by new23d in "Intent to end OCSP service"

new23d — Wed, 24 Jul 2024 15:40:14 +0000

We collected some data [1] on the viability of only CRLs as the future (phasing out OCSP) - motivated by Let's Encrypt's announcement today [2].

Data is on CRL availability, number of entries, expiry & refresh times, etc. from various x509 leaf server SSL certificates.

[1] https://news.ycombinator.com/item?id=41058138 [2] https://news.ycombinator.com/item?id=41046956

New comment by new23d in "An analysis of CRL sizes from various CAs"

new23d — Wed, 24 Jul 2024 15:36:12 +0000

We collected some data on the viability of only CRLs as the future (phasing out OCSP) - motivated by Let's Encrypt's announcement today [1].

Data is on CRL availability, number of entries, expiry & refresh times, etc. from various x509 leaf server SSL certificates.

[1] https://news.ycombinator.com/item?id=41046956

An analysis of CRL sizes from various CAs

new23d — Wed, 24 Jul 2024 15:36:12 +0000

Article URL: https://chasersystems.com/blog/an-analysis-of-certificate-revocation-list-sizes/

Comments URL: https://news.ycombinator.com/item?id=41058138

Points: 1

# Comments: 4

New comment by new23d in "Capturing Linux SSL/TLS plaintext without a CA certificate using eBPF"

new23d — Fri, 12 Jul 2024 07:20:45 +0000

TLS 1.3 and ESNI (now called Encrypted Client Hello - ECH) are separate standards, although you'll see ECH only enabled in bleeding edge stacks. In fact, ECH is still in IETF draft phase [1].

It can be disabled if an organisation wishes to. I wrote about how to do this in Chrome [2,3], and will write about Firefox when I get a chance.

[1] https://datatracker.ietf.org/doc/draft-ietf-tls-esni/ [2] https://chasersystems.com/blog/disabling-encrypted-clienthel... [3] https://news.ycombinator.com/item?id=37823262

New comment by new23d in "What the damaged Svalbard cable looked like"

new23d — Sun, 26 May 2024 22:55:51 +0000

Product appears to be an ID Tent from Evi-Paq. It has inches on the front 'leg' and cms on the rear.

https://forensicssource.com/collections/evidence-markers/pro...

New comment by new23d in "Ask HN: Bootstrapped founder. Does it make sense to move out of SF for a while?"

new23d — Mon, 20 May 2024 18:52:34 +0000

Stay near a transport hub so you can connect with your prospects and customers regularly, by travelling. Working along side other founders in the B2B space would be extremely beneficial too.

New comment by new23d in "Is the AWS Network Firewall safe? CyberRatings tests reveal concerns"

new23d — Tue, 07 May 2024 15:15:41 +0000

Wait till they get to the part where it can be easily bypassed. I spoke about it [1] at the fwd:cloudsec conference [2] in July 2022. Others have raised concerns about discovery of these bypasses too [3].

[1] https://www.youtube.com/watch?v=DKSa32qWiRw [2] https://fwdcloudsec.org/ [3] https://canglad.com/blog/2023/aws-network-firewall-egress-fi...

New comment by new23d in "Pilot of Boeing flight says he lost control after instrument failure"

new23d — Tue, 12 Mar 2024 17:12:30 +0000

This is the FlightRadar24 playback of the flight: https://www.flightradar24.com/data/flights/la800#34506b53

At time ~02:27, a dip in the altitude can be seen in the flight data chart.