m3nu
Joined 9 years ago
Karma
878
Submissions
332
Member since
Apr 26
Tech entrepreneur, traveler, hiker, mostly hanging out in Asia. Contact: manu [at] vlx.cc
View on Hacker NewsRecent submissions
Comment · 11 days ago
It was suggested to only allow GET/HEAD requests. Works if you don't have login forms.
Comment · 11 days ago
Good resource!
Comment · 13 days ago
No, they also disabled a domain with 20k user subdomains without notice based on an abuse report that was weeks old and the site long disabled. Wouldn't trust them with a proper abuse process.
Comment · 3 months ago
Just arrived on open router. Was waiting for this.
Comment · 4 months ago
Speaking of a crappy forum: I packaged phpbb for Docker because there was no good image after Bitnami went under. But not sure what to do with it. Didn't even put it on our hosting site yet. Is this useful for something beyond nostalgia and fun?
https://github.com/pikapods/docker-phpbb/pkgs/container/dock...
Comment · 5 months ago
100% this. For my own company I mostly build deterministic workflows that may have a simple AI step in the middle using an appropriate Chinese model in a very limited way. I wouldn't want to burn tokens to satisfy some metric.
With this AI is a fallback and not the default. Sounds like large companies have it backwards.
Comment · 5 months ago
Ansible playbook to mitigate and verify:
https://gist.github.com/m3nu/d85533bbf342edd3a9426711409a1b9...
Comment · 6 months ago
What other kernel modules would you suggest disabling that aren't used usually?
Comment · 6 months ago
Good idea. Added to the playbook for RHEL only.
On Debian normal unloading of the module works.
Comment · 6 months ago
I wasn't able to unload algif_aead on RHEL 9/10 because it's built in, rather than a module.
So here the next-best thing I found: Disable AF_ALG via systemd. Needs drop-ins for all exposed services. Here an Ansible playbook that covers ssdh and user@, which are the main ones usually.
https://gist.github.com/m3nu/c19269ef4fd6fa53b03eb388f77464d...
Comment · 6 months ago
Releases aren't being published for me.
Comment · 6 months ago
I have a feeling that Codex is also getting lower limits. Got this email just now. Basically they copy Claude's $100 tier.
> To help you go further with Codex, we’re introducing a new €114 Pro tier designed for longer, high-intensity sessions.
> At launch, this new tier includes a limited-time Codex usage boost, with up to 10x more Codex usage than Plus (typically 5x).
> As the Codex promotion on Plus winds down today, we’re rebalancing Plus usage to support more sessions across the week, rather than longer high-intensity sessions on a single day.
Comment · 6 months ago
A Docker image would be good too.