News for hackers. Stuff that matters.

jamielinux

Show HN: A cross-platform wrapper for pyright that makes it less noisy

https://github.com/jamielinux/pyright-polite

This was mainly a fun weekend project to play around with Python's asyncio! But it also scratched an itch.pyright (a static type checker for Python) is far noisier than it needs to be: $ pyright WARNING: there is a new pyright version available (v1.1.300 -> v1.1.301). Please install the new version or set PYRIGHT_PYTHON_FORCE_VERSION to `latest` No configuration file found. ...

( Read More... | no comments | 2 points | on HN )
Re:Linux kernel lockdown, integrity, and confidentiality on Wednesday April 22, 2020 @04:35PM (#22949905)
You can sign modules using these instructions: https://docs.fedoraproject.org/en-US/fedora/f31/system-admin...

Though it's definitely a faff, and it's required every time there's kernel upgrade.

Re:How to Protect Yourself from NSA Attacks on 1024-bit DH on Friday October 16, 2015 @02:08PM (#10401049)

  agwa wrote:
  > Last I looked nginx used fixed 1024 bit parameters, which is very bad.
  > I don't know if this has changed or if there's a bug report.
NGINX has had the ssl_dhparam directive (allowing dhparam of arbitrary size) since version 0.7.2, released in 2008.
T.C. and I worked on getting jQuery packaged for Fedora [1].

It's quite painful trying to package npm modules in a way that's suitable for distributions like Red Hat/Fedora/Debian. The dependency tree just goes on and on and on, and there are versioning issues all over the shop. And if you want to run test suites in the package build process then you'd better package mocha, tap, tape, nodeunit, should, vows, expresso, jasmine, supertest etc. And all of their dependencies too. And make sure every test in the test suites for every module pass. By the end of it all, you're a broken, hollow shell of the person you were before, but at least now it's possible to run "yum install js-jquery" and get version 2.1.3 :-)

[1]: https://fedoraproject.org/wiki/Changes/jQuery

Re:Secure Secure Shell on Tuesday January 06, 2015 @11:39AM (#8845241)
The article states that host key authentication methods cannot be disabled. Instead of creating broken symlinks, you can actually specify this server-side in sshd_config (at least on CentOS 7):

  HostKey /etc/ssh/ssh_host_rsa_key
You can also force this on the client-side in ~/.ssh/config:

  HostKeyAlgorithms ssh-rsa
See man pages for defaults.