quillo

I have built a small signing service that works by a user SSHing in, performing LDAP (password) authentication and 2FA with duo, then injecting a time-limited certificate signed by Hashicorp Vault back to their user agent (although it could be modified to remove the Vault requirement). The UX is very simple (SSH to this address once per day), but the backend is complicated, so if there is any demand for me to put this on Github I am happy to do so.

I personally feel that browsers are headed entirely in the wrong direction - "one thing well" no longer applies in this space.

Does anyone have any recommendations for a lightweight browser, if such a thing even exists anymore? Perhaps Chromium + Scriptsafe + uBlock is what I need, but ultimately I want is a tabbed browser without a load of unnecessary features bundled in.

For example; there is no way I would trust the VPN embedded into a browser, thereby rendering it useless bloat. Much like I don't trust the ad blocker in Brave for Android, but I find the experience better than Firefox mobile, and carry on using it despite my displeasure.

A job, doing what I love, with conditions I never dreamed possible for someone with poor formal qualifications but an insatiable desire to learn and prove my value.

I am grateful.

x86 offerings are so cheap now, is there still a market for this kind of ARM hosting? I would argue that you will achieve at least equivalent performance from an entry level KVM or Xen VM.

Perhaps there is still a market for the security concious or workloads sensitive to noisy neighbours.

Somewhat of a tangent - although not small scale, I have found the packet.net 96 core ARM offering to be good value.

On the topic of enterprise features and specifically, Hashicorp Vault, I did ask Hashicorp sales if it was possible to trial Vault Enterprise (for the UI) without the pre-sales dance and was flatly told "no".

This kind of attitude really rubs me the wrong way. On follow up from their sales I simply told them I opted for an open source UI from Github.

While I want to support the work Hashicorp are doing, I want to be treated as someone who understands that I don't need to spend money on the product. It's a concern to me that as these open source projects find ways to monetise they start to slowly make their way back to the type of ecosystem that I wanted to avoid in the first place.

I would expect that this will have an unexpected (?) side effect of further weakening the capabilities of packet inspection by intelligence agencies through increased utilisation of VPN services, especially those outside of the US.

At face value this is a good thing for privacy, but I am concerned that when lawmakers realise their error they will just legislate themselves out of the hole by making access to VPN services harder.