News for hackers. Stuff that matters.

markuman123

Re:Sshole on Thursday November 05, 2026 @09:21AM (#50379403)
Re:Sshole on Thursday November 05, 2026 @08:56AM (#50379094)
It's because alpine has updated all openssh-server packages already. Even from EOL alpine versions.
Re:Tell HN: Mistrap Pro includes DeepSeek v4.1 Flash 1017 on Sunday November 01, 2026 @07:58AM (#50325220)
Since 28th oct, mistral pro plan includes also DeepSeek V4.1 Flash 1017. 1 Plan, 3 open weight models: https://docs.mistral.ai/inference/model-selection-guide?mode...
Three layer of defense on default Port here.

1. ufw limit ssh.

2. Ansible devsec.hardening.ssh_hardening

3. fail2ban

Re:I will never need to buy a new computer again on Sunday January 12, 2025 @12:32PM (#42675172)
Energyconsumption is a reason for a CPU update.
Re:I will never need to buy a new computer again on Sunday January 12, 2025 @12:31PM (#42675165)
Energyconsumption is nowaday the reason for a CPU Update.
Re:TOTP Codes in the Terminal on Monday February 26, 2024 @03:29AM (#39508820)
I store my TOTP secrets in the Gnome Keyring

      totp() {
        TOKEN=$(keyring get totp $1)
        oathtool -b --totp $TOKEN | xclip
      }
and my TOTP secrets are saved via ansible-vault

    - name: set TOTP in keyring
      with_items: "{{ TOTP }}"
      community.general.keyring:
        service: totp
        username: "{{ item }}"
        password: "{{ TOTP[item] }}"
        keyring_password: "{{ keyring_password }}"
Surface Go
Re:Expired SSL Certificate at GitHub on Friday March 24, 2023 @04:59PM (#35295402)
maybe the certificate crew is laid off?
Re:Expired SSL Certificate at GitHub on Friday March 24, 2023 @04:58PM (#35295388)
expired two days ago (3/22/2023) and no one cares
Re:Microsoft Azure Outage on Wednesday January 25, 2023 @03:24AM (#34515787)
russia? shut down a service and halt the productivity of most companies in the west...because most companies moved to azure ad and teams.
Re:Ask HN: Do you think Meta could compete with AWS on Tuesday January 03, 2023 @08:45AM (#34231192)
No.
Re:Ask HN: LastPass Alternatives on Tuesday December 27, 2022 @12:39AM (#34145494)
Passwords for nextcloud
Re:Manifesto for Minimalist Software Engineers on Monday November 07, 2022 @05:26AM (#33504009)
no valid https ...
Re:Ask HN: Offline resources during internet outages? on Thursday September 29, 2022 @05:12AM (#33018105)
raspberry pi (some low energy home computer) serving nextcloud, offline wikipedia and OSM.
it's super easy to integrate in every ci/cd pipeline
Re:Show HN: AWS credentials management CLI tool on Wednesday November 03, 2021 @12:36AM (#29091144)
I always wonder why people are investing so much energy and time to invent New tools instead oft using existing tools that already solve the same issues. Just use ansible for that.
Re:Ask HN: How to handle 500+ repositories in GitHub? on Tuesday July 13, 2021 @02:41AM (#27818177)
with ansible
Re:Intentionally Leaking AWS Keys on Wednesday January 20, 2021 @01:36AM (#25843201)
using s3 as a cdn is a complete different thing than leaking intentionally credentials.
Re:Intentionally Leaking AWS Keys on Tuesday January 19, 2021 @03:40PM (#25838592)
Sorry, I cannot follow.

To be clear, I'm no aws advocate.

Re:Intentionally Leaking AWS Keys on Tuesday January 19, 2021 @03:13PM (#25838250)
Nope, because you just get a 404, even on public buckets, because you have no access to the kms key.
Re:Intentionally Leaking AWS Keys on Tuesday January 19, 2021 @02:54PM (#25837997)
that's the reason why should always use aws:kms encryption on s3.
Re:Intentionally Leaking AWS Keys on Tuesday January 19, 2021 @02:40PM (#25837828)
but the budget alert is delayed...I bet you're ruined when you've noticed the alert.
Re:Intentionally Leaking AWS Keys on Tuesday January 19, 2021 @01:53PM (#25837131)
AWS_PROFILE=broken aws s3 ls s3://deltars/simple/

14kb in your bucket and you pay for outgoing traffic. means, while you're sleeping, I can ruin your aws bill.

In any case, committing credentials is always wrong and you cannot justify it.

Depending on your ci tool (e.g. gitlab-runner, drone-ci ... ) there are other and better ways to provide credentials for a git project in CI/CD pipeline.

Re:Ask HN: Google Drive/Office 365 alternatives on Monday September 07, 2020 @07:38AM (#24398687)
nextcloud with onlyoffice

Older »