Hacker News: rfmoz

New comment by rfmoz in "Top laptops to use with FreeBSD"

rfmoz — Fri, 10 Apr 2026 08:02:46 +0000

Search on bios-mods for a modified whitelist BIOS firmware -> https://www.bios-mods.com/forum/Forum-WiFi-WWAN-Whitelist-Re...

New comment by rfmoz in "Top laptops to use with FreeBSD"

rfmoz — Thu, 09 Apr 2026 20:20:31 +0000

There are modified BIOS firmware that allow any WiFi card. Good luck

Most complex cloud service dependency chain you've seen?

rfmoz — Mon, 23 Mar 2026 19:42:07 +0000

Comments URL: https://news.ycombinator.com/item?id=47494178

Points: 2

# Comments: 0

New comment by rfmoz in "Helix: A post-modern text editor"

rfmoz — Sat, 07 Mar 2026 07:57:38 +0000

Vis editor [0] also has multicursor and powerful sam's structural regular expression

[0]: https://github.com/martanne/vis

New comment by rfmoz in "Linux From Scratch ends SysVinit support"

rfmoz — Wed, 04 Feb 2026 08:41:35 +0000

Yes, "everything is a file" but the mouse on Rio is written in stone.

Aside of that, plan9 wins on the theoretical side, it was a research OS, but in the practical one... it's opinionated.

New comment by rfmoz in "The Book of PF, 4th edition"

rfmoz — Sun, 01 Feb 2026 22:24:02 +0000

Linux Firewalls by Steve Suehring covers nftables. It’s a good book to know the basics.

New comment by rfmoz in "Reticulum, a secure and anonymous mesh networking stack"

rfmoz — Tue, 20 Jan 2026 18:04:09 +0000

Give a try to Meshcore, their design has proven to be reliable in realworld use.

New comment by rfmoz in "LWN is currently under the heaviest scraper attack seen yet"

rfmoz — Fri, 16 Jan 2026 23:46:22 +0000

Chinese AI is doing large amounts of request in the past weeks.

Omero: Pervasive User Interfaces in the Plan B Operating System

rfmoz — Fri, 16 Jan 2026 23:09:45 +0000

Article URL: https://www.youtube.com/watch?v=iKy2UxFLhgQ

Comments URL: https://news.ycombinator.com/item?id=46653440

Points: 2

# Comments: 0

New comment by rfmoz in "Total monthly number of StackOverflow questions over time"

rfmoz — Sun, 04 Jan 2026 00:36:34 +0000

They had pretty neat infra, maybe it still runs in the same clever way. https://meta.stackexchange.com/questions/10369/which-tools-a...

New comment by rfmoz in "Total monthly number of StackOverflow questions over time"

rfmoz — Sun, 04 Jan 2026 00:27:26 +0000

Quora, sadly, is a good example of enshittification.

New comment by rfmoz in "CSRF protection without tokens or hidden form fields"

rfmoz — Thu, 25 Dec 2025 21:57:36 +0000

I reply myself because I've found that idea already porposed:

"Origin policy was a proposal for a web platform mechanism that allows origins to set their origin-wide configuration in a central location, instead of using per-response HTTP headers." - https://github.com/WICG/origin-policy

But their status is "[On hold for now]" since, at least, three years ago.

New comment by rfmoz in "CSRF protection without tokens or hidden form fields"

rfmoz — Thu, 25 Dec 2025 12:44:27 +0000

The reference of robots.txt offer a good way to define specific behavior for the whole domain, as example. Something like that for security could be enough for large amount of websites.

Also, a new header like “sec-policy: foo-url” may be a clean way to move away that definitions from the app+web+proxy+cdn mesh to a fixed clear point.

New comment by rfmoz in "CSRF protection without tokens or hidden form fields"

rfmoz — Thu, 25 Dec 2025 07:21:23 +0000

Adding more security headers every year feels like strapping seatbelts onto a collapsing roller coaster. It would be better to stop this "sec headers stack" in favour of simpler, secure by default browser primitives with explicit opt-out. Getting an example from https://securityheaders.com the list nowadays is as follows:

- Strict-Transport-Security - Content-Security-Policy - X-Frame-Options - X-Content-Type-Options - Referrer-Policy - Permissions-Policy - Cross-Origin-Embedder-Policy - Cross-Origin-Opener-Policy - Cross-Origin-Resource-Policy

New comment by rfmoz in "HTTP Caching, a Refresher"

rfmoz — Wed, 24 Dec 2025 08:27:03 +0000

CDNs manage user TLS certificates and that is one of the advantages of using them.

A node server could negociate https close to the user, do caching stuff and create an other https connection to your local server (or reuse an existing one).

Https everywhere with your CDN in middle.

New comment by rfmoz in "Cloudflare outage on December 5, 2025"

rfmoz — Fri, 05 Dec 2025 22:30:26 +0000

They do in some way because the LaLiga blocking problems in Spain don’t affect the paid accounts=large websites.

An other suggestion is to do it along night shift in every country, right now they only take into account EEUU night.

New comment by rfmoz in "Meshtastic"

rfmoz — Sun, 30 Nov 2025 13:19:45 +0000

MeshCore app is way better than the Meshtastic one.

New comment by rfmoz in "Moving from OpenBSD to FreeBSD for firewalls"

rfmoz — Mon, 24 Nov 2025 19:11:36 +0000

Let me extend the question to what’s wrong with NFTables on Linux? It’s a different way to manage Netfilter, out of IPTables

The Evolution of Packet Switching – 1978 [pdf]

rfmoz — Mon, 17 Nov 2025 21:28:20 +0000

Article URL: https://www.ece.ucf.edu/~yuksem/teaching/nae/reading/1978-roberts.pdf

Comments URL: https://news.ycombinator.com/item?id=45958539

Points: 3

# Comments: 1

New comment by rfmoz in "Why use OpenBSD?"

rfmoz — Sun, 16 Nov 2025 17:32:25 +0000

The development move in ZFS from FreeBSD to OpenZFS (AKA Linux) was a mayor point on that.