carlbordum

I made an HTTP tunneling service based on WireGuard that doesn't require any custom software on the clients: https://tunnel.pyjam.as/.

I haven't used kali.net, but it sounds like https://tailscale.com/ might be for you :)

Shameless plug: I built Cactus Comments (https://cactus.chat/).

It's an open-source comment system federated on the Matrix (https://matrix.org/) network. This means you can use your Matrix identity to comment on any site that uses Cactus, without the tracking of something like disqus. Works well with static site generators too.

I thought this was such a good read that I created an online version of the 1913 dictionary.

It's available at https://webster.bordum.dk/ if anyone is interested.

Teamspeak 5 may be a Matrix client: https://news.ycombinator.com/item?id=25743874

In my opinion, XSS is not a security issue autofill should deal with at all.

The real issue is if attackers can trick the autofill to fill in a password for a different site. I did a pentest for a password manager a few years ago, and if I remember correctly this type of exploit had been successful against multiple of the big password managers.

Hi, I am one of the authors of Cactus Comments.

Making Cactus Comments work without javascript would require a backend server. Right now, the frontend is actually just a special-purpose Matrix client that interacts directly with Matrix homeservers.

You don't, you have to trust it just like any other Matrix client. Hopefully there will be OAuth or something similar in the Matrix spec in the future, so you can use less trusted clients. If you want to comment with your user, but don't trust the client, you can use any Matrix client with Cactus Comments by clicking "Use a Matrix client" :-)

Shameless plug: My friend and I are building a federated commenting system on top of Matrix if anyone is interested. You control the data, your users choose where they want to be signed up, and the system will not disappear overnight because a company decides to discontinue it. And of course there are no trackers/pixels.

This is a hobby project that we're launching in three weeks. If you are interested, come talk to us on matrix (https://matrix.to/#/#cactus:bordum.dk) or keep an eye on our (for now dummy-) landing page: https://cactus.chat/, https://gitlab.com/cactus-comments

In Python `=` is not just a binary operator. Python is evaluated left-to-right (but not on assignment).

I think all talk about computer intelligence and learning is bullshit. If I'm right, then AI is probably the most /dangerous/ field in computer science because it sounds just likely enough that it lures in great minds, just like a sitcom startup idea[0].

[0] http://paulgraham.com/startupideas.html

Also, I have not figured out a good way to test `manly` yet, but maybe someone creative here has an idea?

Hi everyone. For the last ~6 months I've been using this script I made to quickly find out what some flags do for a program. Saves me about 10 seconds every week :)