Recent submissions

Comment · 11 days ago
yeah but what does that have to do with bioware
Comment · 12 days ago
Reading further, it seems like they say they first generated some keys on-HSM, but then used 'test keys' (that were used to test wrap/unwrap of key material) instead by accident. Fishy.
Comment · 12 days ago
It's real.
Comment · 12 days ago
https://chaos.social/@fluepke/117474156947559280

Private keys can be trivially recovered from the public keys because they're tiny. I found D=156, flüpke found D=4.

Yes, that's the entire private key.

Comment · 12 days ago
https://chaos.social/@fluepke/117474156947559280

D=4. That's the entire private key for one of the certs.

Comment · 12 days ago
Cat's out of the bag: https://chaos.social/@fluepke/117474156947559280

D=156 in my case. Yeah, that's the entire private key.

Comment · 12 days ago
It doesn't. This is an additional, ad-hoc blocklist for compromised intermediaries, it's not even roots. The roots are just taken from your system.
Comment · 12 days ago
$ curl https://q3k.google.com --resolve 'q3k.google.com:443:135.181.235.221'

Yeah okay this is funny. Nice little CTF challenge :).

Comment · 14 days ago
It's 2026 and people still believe in measuring productivity by lines of code^W^W^Wnumber of commits? Amazing.

Two vibecoders are walking down a forest path.

One of them spots a Zig codebase and challenges the other: “I'll give you $100 to convert this codebase to Rust!”. They accept and after spending $1000 worth of tokens on a thousand commits the codebase is now in Rust.

On the way back, the second vibecoder spots the same codebase again, and challenges back: “I'll give you $100 to convert this codebase to Zig!”. Another gajillion tokens later, the codebase is now in Zig.

Walking a little more, one vibecoder (in a moment of unusual clarity) asks the other: “It feels like we just did this for nothing”. “No”, the other responds, ”we just increased our company productivity by two thousand commits per day!”.

Comment · 15 days ago
Use a loopback address! Only one to configure per host, and useful to establish iBGP sessions on them afterwards.
Comment · 16 days ago
This isn't one of those. It's for ISPs who run a native IPv6 backbone and want to exchange and route IPv4 traffic without setting up IPv4 addressing.
Comment · 16 days ago
It's also just nice to not need numbered point-to-point links (ie. just use IPv6 LL).

(this is one of those things that's really magical with OSPv3 - it just runs on IPv6 LL addresses, no need to set anything up other than set the link to be within some area and it just works! well, as much as they do with OSPF anyway.)

Comment · 16 days ago
That's basically MP-BGP! Your dream is real.

(Keep in mind that the setup described here has work for years now.)

Comment · 24 days ago
Yeah but you see the slaves are actually happy to work here!
Comment · 24 days ago
Dungeons & Dragons DM bans 'abusive or cruel behaviour' towards their NPCs.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton