Hacker News: rfmoz

New comment by rfmoz in "OpenBSD 7.9"

rfmoz — Tue, 19 May 2026 16:26:44 +0000

The main differences between OpenBSD, FreeBSD, NetBSD and DragonFly BSD

https://unixdigest.com/articles/the-main-differences-between...

New comment by rfmoz in "OpenBSD 7.9"

rfmoz — Tue, 19 May 2026 16:22:20 +0000

I used to run it on a laptop too, but the battery life was shorter and the laptop ran noticeably hotter than under Linux, so I eventually switched back.

That said, OpenBSD feels unusually coherent (ej. check wifi connection from terminal). The whole system has a level of consistency that's hard to find elsewhere, also between other BSDs.

For pet servers, it usually fits perfect.

New comment by rfmoz in "The vi family"

rfmoz — Wed, 13 May 2026 10:15:57 +0000

Totally agree, Vis really hits an spot between modern feel without losing what made vi great. The structural regex is a game-changer.

New comment by rfmoz in "Screenshots of Old Desktop OSes"

rfmoz — Tue, 12 May 2026 12:38:47 +0000

I miss on the list Counterpoint GUI for Amstrad PCs with MS-DOS

https://www.seasip.info/AmstradXT/Counterpoint/index.html

New comment by rfmoz in "GoDaddy gave a domain to a stranger without any documentation"

rfmoz — Sun, 26 Apr 2026 21:04:12 +0000

Any provider for critical domain vault?

New comment by rfmoz in "Top laptops to use with FreeBSD"

rfmoz — Fri, 10 Apr 2026 08:02:46 +0000

Search on bios-mods for a modified whitelist BIOS firmware -> https://www.bios-mods.com/forum/Forum-WiFi-WWAN-Whitelist-Re...

New comment by rfmoz in "Top laptops to use with FreeBSD"

rfmoz — Thu, 09 Apr 2026 20:20:31 +0000

There are modified BIOS firmware that allow any WiFi card. Good luck

Most complex cloud service dependency chain you've seen?

rfmoz — Mon, 23 Mar 2026 19:42:07 +0000

Comments URL: https://news.ycombinator.com/item?id=47494178

Points: 2

# Comments: 0

New comment by rfmoz in "Helix: A post-modern text editor"

rfmoz — Sat, 07 Mar 2026 07:57:38 +0000

Vis editor [0] also has multicursor and powerful sam's structural regular expression

[0]: https://github.com/martanne/vis

New comment by rfmoz in "Linux From Scratch ends SysVinit support"

rfmoz — Wed, 04 Feb 2026 08:41:35 +0000

Yes, "everything is a file" but the mouse on Rio is written in stone.

Aside of that, plan9 wins on the theoretical side, it was a research OS, but in the practical one... it's opinionated.

New comment by rfmoz in "The Book of PF, 4th edition"

rfmoz — Sun, 01 Feb 2026 22:24:02 +0000

Linux Firewalls by Steve Suehring covers nftables. It’s a good book to know the basics.

New comment by rfmoz in "Reticulum, a secure and anonymous mesh networking stack"

rfmoz — Tue, 20 Jan 2026 18:04:09 +0000

Give a try to Meshcore, their design has proven to be reliable in realworld use.

New comment by rfmoz in "LWN is currently under the heaviest scraper attack seen yet"

rfmoz — Fri, 16 Jan 2026 23:46:22 +0000

Chinese AI is doing large amounts of request in the past weeks.

Omero: Pervasive User Interfaces in the Plan B Operating System

rfmoz — Fri, 16 Jan 2026 23:09:45 +0000

Article URL: https://www.youtube.com/watch?v=iKy2UxFLhgQ

Comments URL: https://news.ycombinator.com/item?id=46653440

Points: 2

# Comments: 0

New comment by rfmoz in "Total monthly number of StackOverflow questions over time"

rfmoz — Sun, 04 Jan 2026 00:36:34 +0000

They had pretty neat infra, maybe it still runs in the same clever way. https://meta.stackexchange.com/questions/10369/which-tools-a...

New comment by rfmoz in "Total monthly number of StackOverflow questions over time"

rfmoz — Sun, 04 Jan 2026 00:27:26 +0000

Quora, sadly, is a good example of enshittification.

New comment by rfmoz in "CSRF protection without tokens or hidden form fields"

rfmoz — Thu, 25 Dec 2025 21:57:36 +0000

I reply myself because I've found that idea already porposed:

"Origin policy was a proposal for a web platform mechanism that allows origins to set their origin-wide configuration in a central location, instead of using per-response HTTP headers." - https://github.com/WICG/origin-policy

But their status is "[On hold for now]" since, at least, three years ago.

New comment by rfmoz in "CSRF protection without tokens or hidden form fields"

rfmoz — Thu, 25 Dec 2025 12:44:27 +0000

The reference of robots.txt offer a good way to define specific behavior for the whole domain, as example. Something like that for security could be enough for large amount of websites.

Also, a new header like “sec-policy: foo-url” may be a clean way to move away that definitions from the app+web+proxy+cdn mesh to a fixed clear point.

New comment by rfmoz in "CSRF protection without tokens or hidden form fields"

rfmoz — Thu, 25 Dec 2025 07:21:23 +0000

Adding more security headers every year feels like strapping seatbelts onto a collapsing roller coaster. It would be better to stop this "sec headers stack" in favour of simpler, secure by default browser primitives with explicit opt-out. Getting an example from https://securityheaders.com the list nowadays is as follows:

- Strict-Transport-Security - Content-Security-Policy - X-Frame-Options - X-Content-Type-Options - Referrer-Policy - Permissions-Policy - Cross-Origin-Embedder-Policy - Cross-Origin-Opener-Policy - Cross-Origin-Resource-Policy

New comment by rfmoz in "HTTP Caching, a Refresher"

rfmoz — Wed, 24 Dec 2025 08:27:03 +0000

CDNs manage user TLS certificates and that is one of the advantages of using them.

A node server could negociate https close to the user, do caching stuff and create an other https connection to your local server (or reuse an existing one).

Https everywhere with your CDN in middle.