Recent submissions

Comment · 4 months ago
At any moment some change outside my control could occur and my place in society would change. Right now I'm pretty self sufficient and don't really need the support of others in day to day life, but that can change, and there's nothing I can do about it. Seems like a good idea to use this opportunity to try and improve things for everyone, even if you don't care about others, just in case your place in society changes. (I actually think it's neat if we try to improve things for everyone for everyone's sake tbh but I get there are people that do not have such empathy)
Comment · 4 months ago
I think this may be a US thing, in the UK at least unions work to promote solidarity.
Comment · 4 months ago
I'm a director of my small company, and a member of UTAW. The union doesn't just help with employment disputes but also campaigns generally on improving working conditions for all, through things like health and safety and setting reasonable expectations for how work will be done.
Comment · 3 years ago
When I read this through 25 years ago I learned more about networking than I think I knew in total up until that point, and that was nearing the end of an A level (English further education) Computing course. It's a really comprehensive guide that laid it out exactly the way I needed it for me to absorb it. I still recommend it to people that might be new to network programming as the sockets API really doesn't change that much whether you're using C or Python or some other language.
Comment · 3 years ago
It's pretty upsetting that we've got India's UPI and China's UPI (UnionPay International) and they're both doing exactly the same thing and without geographical context you don't know which one it is.
Comment · 3 years ago
Like QuickBooks Online?
Comment · 4 years ago
That's nonsense. There are somewhere between 2 and 8 million users of Tor every day. The vast majority of Tor users are ordinary people that want a little more privacy. What a waste of resources it would be to try to identify and track each of them.
Comment · 4 years ago
Comment · 4 years ago
China and Chinese Red Cross are different things.
Comment · 4 years ago
I know the title is the title on the actual article, but it's the Chinese Red Cross, not China itself. National Red Cross Societies are independent of the country's government. They may receive government funding but they decide what they do with the money themselves.

From https://www.ifrc.org/fundamental-principles

"The Movement is independent. The National Societies, while auxiliaries in the humanitarian services of their governments and subject to the laws of their respective countries, must always maintain their autonomy so that they may be able at all times to act in accordance with the principles of the Movement."

Comment · 4 years ago
SSH keys authenticate you. They are an identity. You probably don't need more than one or two identities (maybe personal and work). You can just get a couple of YubiKeys and configure the OpenPGP applet, or the PIV applet, with an authentication key/certificate and use that for SSH. Take the token with you and you've got some pretty strong authentication.

More modern SSH servers will let you use U2F security keys in the same way, which are cheaper than the full YubiKey.

I've learned recently that YubiKey has really good documentation for how to set up their tokens to achieve different goals, it would be worth reading their docs if you're considering getting a hardware token for your keys.

Comment · 4 years ago
I see. They didn't mention it on the two factor authentication page I was reading because they've split the security key and TOTP documentation and not made it obvious (enough for me to see it while skimming) how to find the former from the latter.
Comment · 4 years ago
Ok, I assume that's with FIDO/U2F, so that's not so bad.

At that point though, you already have a hardware token capable of holding SSH keys, so I'm still not convinced of the benefit.

Comment · 4 years ago
Comment · 5 years ago
In modern TLS this just doesn't work, because you generate a shared key. You can verify what you've received from the server because you know you didn't generate it, but someone else cannot verify if any content was generated by you or the server, only that it was part of an exchange between you and the server.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton