News for hackers. Stuff that matters.

a904guy

Show HN: Multi-hop WireGuard chaining, speed-tested and API-controlled

https://github.com/a904guy/VPN-Chainer

Hey HN, I built VPN-Chainer to make multi-hop WireGuard setups a bit easier for the average VPN user.It can chain multiple WireGuard endpoints together, and can run speed tests with `--fastest`, installs as a systemd service (hooks included), and lets you rotate tunnels via a lightweight API. Imagine in the movies where they say they connection is bouncing around the world. Similar but not...

( Read More... | no comments | on HN )
Re:The beauty of a text only webpage on Friday August 15, 2025 @02:30PM (#44915895)
I wasn't. I indeed find the site to be fun, and fits the author's own words.

> “So thank you to everybody who writes and publishes text-only webpages.”

The site is 100% text.

Re:The beauty of a text only webpage on Friday August 15, 2025 @01:23PM (#44915050)
Guilty on the splash. Regardless the entire site is clean text, fast loads, no images, and no blockers.

In the author's own words:

> “So thank you to everybody who writes and publishes text-only webpages.”

Re:The beauty of a text only webpage on Friday August 15, 2025 @12:12PM (#44914172)
Ooo, I have a fun one!

https://hawkins.tech/

I built a Krita plugin called Smart Segments that lets you easily select objects using Meta’s Segment Anything Model (SAM v2). Just run the tool, and it automatically finds everything on the current layer. You can click or shift-click to choose one or more segments, and it converts them into a selection. No more struggling with the magic wand or cutting stuff out by hand. It supports GPU and CPU, works on Windows, macOS, and Linux, and sets everything up on first run without needing to install anything manually.
No, not at the moment. Just need an account.
Didn't really take your own advice in keeping your API key safe :)
Re:SQL Injection Galore on Monday August 05, 2013 @05:45AM (#6159206)
Re:SQL Injection Galore on Monday August 05, 2013 @05:40AM (#6159195)
I always preferred the remote code execution search myself personally...

https://github.com/search?q=extension%3Aphp+exec+%24_GET&typ...

Re:ArXiv vs snarXiv on Wednesday February 06, 2013 @02:50PM (#5178396)
Oops: Was going for the high score...

OperationalError: (1203, "User #### already has more than 'max_user_connections' active connections")

Re:ArXiv vs snarXiv on Wednesday February 06, 2013 @02:46PM (#5178373)
Nobel Prize Winner ( aka Ed ) goes to:

$("a:contains("+arxiv['title']+")").click();

Re:Show HN: My HTML5 Game for Github Game Off on Friday November 30, 2012 @09:13AM (#4853282)
mit.score = 1337000000001337;
Re:Bootstrap Toggle Buttons on Thursday October 04, 2012 @06:15AM (#4611630)
#1: Not really impossible, just requires additional maintaining of a monitor, methods within the script, or custom triggers to handle the switch.
Re:Bootstrap Toggle Buttons on Sunday September 30, 2012 @06:56PM (#4594520)
Looks great.

Two things,

#1: If you modify the attribute checked of the input, the state doesn't change.

#2: I don't see a programmatic way of changing the state from your source without re-initializing all the elements?

Re:Why Is The Defense Department Snooping On My Phone? on Tuesday November 08, 2011 @03:35PM (#3212672)
A (extremely) large number of usual local network IP ranges are issued to the DOD. Including my local subnet as well. 11.1.11.0/24, if I ran a whois on that IP as well, it would return DOD, but that doesn't mean the DOD is snooping my network, it just means my router has all the routes for 11.1.11.0/24 associated with it and doesn't actually attempt to send traffic over the wire to that IP. I assume your Android phone is listening locally on that address for the VOIP communication, which would in return mean the DOD is NOT snooping on your phone. Much similar to apache or (insert other socket application) listening to 127.0.0.1:80 for local only traffic.
Re:Introducing MotionCAPTCHA: Stop Spam, Draw Shapes on Saturday June 04, 2011 @10:11PM (#2621087)
As far as I can tell from the demo there is no server side validation on this captcha. Everything is handled on the client side. So really all your doing is making an annoyance for your honest target users. And allowing a spam bot to just totally ignore this 'captcha' to submit their POST regardless....

I've seen hundreds of these 'alternative' captchas. 'slide to unlock', 'sort images' ect. None yet have proven to be as effective at stopping a simple curl script.

Real captchas will store the value of the image or verification method on the first fetch in a session, and when the form is finally filled out the server will verify that the session value matches the submitted value. Without this component, the alternative captchas are pointless and just an annoyance to your real users.

Spam bots are not built on top of web browsers...

Older »