News for hackers. Stuff that matters.

msturgill

The Docker images are an option as well: https://hub.docker.com/r/certbot/certbot/

Ask HN: “Next Generation” Free Cross-Platform Text and Code Editors

There are exhaustive articles discussing load times, memory footprints, edge-case limitations, and the underlying frameworks of projects like Atom, Brackets, and VS Code.What I'm more interested in is a more subjective opinion in terms of investment of time: time to master a system, time to develop plug-ins, time to teach others, and so on.That becomes more of a factor of community adoption,...

( Read More... | no comments | on HN )
Re:We Need to Break the Mobile Duopoly on Tuesday February 10, 2015 @03:52AM (#9026030)
Windows Phone is not that bad.

Google has done a good job trying to starve WP users of their services, but I think we can all survive without Hangouts (Telegram, etc) and Google Voice (who cares anymore) at this point.

Re:Why not DANE in browsers on Sunday January 18, 2015 @05:49PM (#8909303)
The DNS traffic doesn't need to be secret ("encrypted"), it just needs to be authenticated (i.e. the payload has not been modified and there is a chain of trust).

If a client is pre-seeded with trusted root keys, DNSSEC protected payload can be validated to the apex.

Re:Why not DANE in browsers on Sunday January 18, 2015 @05:16PM (#8909163)
Broadly? General MITM, Kaminsky, etc.

DANE as an application of DNSSEC is interesting (and based on the recent string of editorials, contentious as well). Using DANE to constrain CAs could add an additional layer of protection against a rogue CA. Using it as an additional CA could help facilitate moving towards "HTTPS-everywhere".

The takeaway of course in implementing it in any manner is that it is just another layer, not a panacea.

Outside of DANE, there are other applications such as IPSECKEY and SSHFP that have utility.

Re:Why not DANE in browsers on Sunday January 18, 2015 @04:57PM (#8909094)
There are a lot of real problems that DNSSEC can help solve.

However, it is important to note that DNSSEC and DANE are two different things. Much of the recent discussion here has lumped them together.

Re:Questions and Answers from “Against DNSSEC” on Saturday January 17, 2015 @10:16PM (#8906466)
The author of this is missing the point of DNSSEC.

They seem to be confusing DNSSEC and functionality that is possible with DNSSEC (DANE/TLSA). Not only that, they don't seem to fully understand DANE (there are modes that complement the traditional CA model, not replace it).

DNSSEC is just another tool. It isn't a panacea.

I definitely urge readers to objectively research the technical aspects of DNSSEC and draw conclusions for themselves.

Re:Komanda: IRC Client For Developers on Saturday August 23, 2014 @09:27PM (#8217372)
I think that description is pitching it as a tool for small businesses or development teams (that don't already know about ZNC, HexChat, irssi, weechat, freenode, etc).
Re:Chromecast Rooted on Saturday August 23, 2014 @07:58PM (#8217226)
You can find them even cheaper (~$30).

Hackability is just icing on the cake.