Hacker Newsnew | past | comments | ask | show | jobs | submit | isaack's commentslogin

I always find this to be handy: https://learnxinyminutes.com/

It is useful as a cheat sheet.

In addition: if you have experience in multiple "imperative" language (read: non-functional / non-prolog / etc) it's easy to pick up another language using that site alone.


Non-paywall version: https://outline.com/c789vA


iOS supports DoH/DoT natively via work profile. Create one yourself here: https://dns.notjakob.com


Add (2021) to the title?


Not following. Is it 2022 already?


No. It's 2038


Isn’t that 1901 or 1902?


No, it's 1st Jan 1970


It’s a signed integer, so when it rolls, you roll ~68 years before 0.


(Before the fall)


Have you looked into https://github.com/slackhq/nebula? It uses X509 cert for auth.

Although for my home lab, using X509 is more of a minus than a plus due to complexity involved.


Nebula uses public key certificates, but they are not x509. The nebula certificate format uses protobuf for its encoding.


There's a similar site that shows towers and coverage around the world! And everyone can contribute data too! Sadly you can only contribute on Android but not iOS.

http://www.cellmapper.net/


Isn’t that the main link in the post you’re replying to?

Or did you mean to paste a different site but had the parent URL on your clipboard?


Yes, but if you goal is to hide your identity, this really wouldn't work. Everything is still tagged to your identity, i.e. @mydomain.com.


> Yes, but if you goal is to hide your identity, this really wouldn't work

It still could.

> Everything is still tagged to your identity, i.e. @mydomain.com.

If your domain is tied to your identity, then yes. But to be extra clear, this should have said "Everything is still tagged to your domain" as not everyone has their domain tied to their identity. I for example have my domain setup njal.la with zero personal details attached to the domain itself, either publicly or at njal.la.


Except now this comment ties your username to that domain ;)


To njal.la? I guess that's fine, I'm not their only user ;)


Maybe not the best idea to provide that info in searchable plaintext tied to an account you own?


Neither my identity here, my domain or my account on njal.la is connected to anything in my real life so not sure why it would be a bad idea?


A comment you made in the past or make in the future could reveal something; simply changing the text to "njal dot la" would prevent a google search of the domain from finding this.


CloudFlare had a much more elegant solution: the Alt-Svc HTTP header [1]. It is entirely transparent to the user. Security is guaranteed because it uses the original SSL/TLS certificate for exchange (that is, on top of the usual safety guarantees provided by a Tor hidden service).

Sadly they stopped doing that a while ago [2]. If anyone has insider knowledge about the reason behind, I would be really interested to hear about it.

[1]: https://blog.cloudflare.com/cloudflare-onion-service/

[2]: https://community.cloudflare.com/t/tor-alt-svc-header-not-be...


Cloudflare is still using the Alt-Svc HTTP header. Use Ctrl+Shift+J to see the 'Browser Console' which contains logs in the form "Alternate Service Mapping found: https://blog.cloudflare.com:-1 to https://cflaresuje2rb7w2u3w43pn4luxdi6o7oatv6r2zrfb5xvsugj35....

Cloudflare only sends the header to clients it detects as Tor Browser. If you have tweaked your config or are running an older version, it may not detect correctly. Even if it had previously worked.

This technique is not "better than" the "Onion-Location" approach. They complement well. Use the 'Alt-Svc' header for all users with Tor Browser's user agent and send "Onion-Location" to all users. If a user decides to opt for the .onion address, they can. But they don't have to.


It’s so transparent that Tor Browser users cannot actually tell if Cloudflare’s Alt-Svc “Onion Routing” is actually working. Try to determine how your traffic was routed while browsing a site with Alt-Svc enabled.

A user should plainly know if _any_ traffic exited the Tor network and that is not always the case. (See mixed content on most HS mirrors of major sites like NYTimes)


How about 802.1x? It's still safe and I can do many fancy networking tricks (VLAN, etc) with it. But it's not compatible with a lot of "IOT" stuff including Chromecast.


You might wanna hang IoT stuff in a DMZ anyway, or just not use it (especially if its a proprietary standard, like Chromecast).


I don't think Tailscale's use of 100.x.x.x address space conforms with the RFC, but I don't think that there are any better alternatives out there. Do note though, once people start abusing the 100.x.x.x space, it will become "just another private IP space" and lost its significance:

RFC6598 requires that, when used as a routable address, the device must be able to do address translation across router interfaces when the addresses are identical on two different interfaces.

[1]: https://tools.ietf.org/html/rfc6598#section-4


CGNAT block is popular in private k8s as overlay network address space because often the enterprise network already claims rfc1918 blocks. I'm not sure how close to the line that kind of usage is but I suspect it is SHOULD NOT. Speaking of, I probably should not even post this comment as it will now be indexed and served in search results, further contributing to the corruption. Alas, it works.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: