alpn

[2020]

previous discussions:

- https://news.ycombinator.com/item?id=25136422

- https://news.ycombinator.com/item?id=32035054

- https://news.ycombinator.com/item?id=40103590

"[..] a security bug identified by AI tools is subsequently independently discovered by a different researcher. This suggests that adversaries who do not report bugs to OSS projects are likely to be able to discover these bugs too. Given this, the OpenSSH team will, for now, be making more frequent releases to get bugfixes into users' hands more quickly rather than batching them until the next planned release."

I'm working on https://wireplug.org:

wireplug lets you create mesh VPNs using standard WireGuard. Your wg config files stay almost the same, except you no longer have to specify an `Endpoint` for your peers. Instead, wireplug detects all your possible endpoints (including LAN) and coordinates them with your peers for you. It handles NAT traversal and works with the in-kernel WireGuard driver on Linux and OpenBSD. This lets you keep managing your own keys and network topology, while also maintaining connectivity when moving between networks.

Currently working on improving NAT traversal by adding support for PCP and NAT-PMP.

ref: https://youtu.be/4DQsG3TKQ0I?t=29

I continue working on https://wireplug.org: A simple, free, and open source connectivity coordinator for WireGuard. Basically a way to keep WireGuard tunnels connected while moving between different access points. It handles (basic) NAT traversal and works with the in-kernel WireGuard driver on Linux and OpenBSD. You can find the technical details at https://wireplug.org

> 95% of the time the stuff with your sushi isn't wasabi

so unexpected that i had to look it up; turns out you're right: https://chefcoca.com/blogs/food-service-equipment-resources/...

For anyone wondering: AF_ALG is a Linux socket interface that exposes the kernel’s crypto API via file descriptors, using normal read(2)/write(2) calls for hashing and encryption.

here's the mailing list thread in case anyone is interested:

https://marc.info/?t=177377722400001&r=1&w=2

In case anyone else is wondering -

Neo:

  Height: 0.50 inch (1.27 cm)
  Width: 11.71 inches (29.75 cm)
  Depth: 8.12 inches (20.64 cm)
  Weight: 2.7 pounds (1.23 kg)

Air:

  Height: 0.44 inch (1.13 cm)
  Width: 11.97 inches (30.41 cm)
  Depth: 8.46 inches (21.5 cm)
  Weight: 2.7 pounds (1.23 kg)

Not OP, but I believe they are paraphrasing "First They Came…". https://en.wikipedia.org/wiki/First_They_Came

I'm working on https://wireplug.org: A simple, free, and open source connectivity coordinator for WireGuard. Basically a way to keep WireGuard tunnels connected while moving between different access points. It handles (basic) NAT traversal and works with the in-kernel WireGuard driver on Linux and OpenBSD. You can find the technical details at https://wireplug.org

> I'd rather expose a Wireguard port and control my keys than introduce a third party like Tailscale.

I’m working on a (free) service that lets you have it both ways. It’s a thin layer on top of vanilla WireGuard that handles NAT traversal and endpoint updates so you don’t need to expose any ports, while leaving you in full control of your own keys and network topology.

https://wireplug.org

I'm working on https://wireplug.org: A simple, free, and open source connectivity coordinator for WireGuard. Basically a way to keep WireGuard tunnels connected while moving between different access points. It handles (basic) NAT traversal and works with the in-kernel WireGuard driver on Linux and OpenBSD.

You can find the technical details at https://wireplug.org

smtp2go.com offers a free tier with 1,000 emails/month. I’ve been using it for a few small services I run and haven’t had any issues so far.

yes we can - https://www.openbsd.org/faq/pf/example1.html

Another interesting tool in this space is trippy, which ‘combines the functionality of traceroute and ping’

https://github.com/fujiapple852/trippy

> say, "can't touch the filesystem or network"

Well, OpenBSD has pledge(2) and unveil(2), both of which are very easy to use.

https://man.openbsd.org/pledge.2 https://man.openbsd.org/unveil.2

I made a simple service that lets you read Substack newsletters on your Kindle.

https://substack2kindle.com

> I think OpenBSD stands out without a Wayland plan, but maybe I'm wrong there.

check this out - https://www.openbsd.org/papers/eurobsdcon2023-matthieu-wayla...

> OpenBSD managed to loose my data.

can you elaborate please?

I'm working on https://hackerli.st to do exactly that, rolling out jobs this week.

Hi HN! I’m Ido, I’ve been working on this thing for quite a while now.

HackerList turns your public work (GitHub and StackOverflow, for now) into a profile page with skills ranking, like these ones -

https://hackerli.st/@robindaugherty https://hackerli.st/@thamaraiselvam https://hackerli.st/@potherca https://hackerli.st/@aisrael

It’s free, fully automate, and takes literally two clicks to join.

Ranking (in essence):

1. Each repo gets a score based on various factors. 2. The score is factored by the amount of work contributed. 3. Each language that is used in that repo is weighted by its relative share. 4. Points gained in each language are summed over all repos and ranked by their percentile across all members. 5. StackOverflow tag points are factored-in similarly to form final ranks.

I have two goals here:

1. Provide hackers with a measurable way to grow, improve and collaborate (WIP) 2. Make hiring easier and more predictable for both ends. Ideally, by eliminating the whiteboard/do-a-mini-project- at-home-without-payment part of the process altogether.

(If you’re hiring and want to participate in the pilot, hit me up at [email protected] or DM https://twitter.com/hacker_list)

I’d love to hear your thoughts!

Sam Harris’s conversation with Robert Sapolsky - https://samharris.org/podcasts/91-biology-good-evil/

This.

Is there an actual technical limitation preventing Signal from offering a one-field signup, whereby one would simply enter a self generated public key?