News for hackers. Stuff that matters.

rfmoz

Re:NetBSD adds a new beginner-friendly text editor called atto on Thursday October 29, 2026 @03:57PM (#50294891)
mg is nice, but I miss the colored text
Re:Who killed the EV cert? A browser whodunit for Halloween on Monday October 26, 2026 @06:34PM (#50252069)
The green bar from HTTP EV certificates is being reincarnated as the green tick of email BIMI Verified Mark Certificates (VMCs)
Re:JetKVM Mini on Sunday September 13, 2026 @09:58AM (#49684069)
GL-iNet has really nice KVM. Maybe the worst thing is the company name, difficult to write it down correctly.
Re:SNET offline internet Cuba [pdf] on Saturday August 08, 2026 @02:55PM (#49224752)
Details of SNET (StreetNet), a massive user-built offline intranet in Havana
Re:Goodbye, and Thanks for All the Bikesheds on Sunday July 19, 2026 @07:32AM (#48967132)
This matches what I’ve seen in practice, individual tasks may become faster, but the overall development process doesn’t automatically improve. Heavily dependant of the real hands behind.
Re:Lobste.rs is now running on SQLite on Friday July 17, 2026 @06:17PM (#48952812)
Another SQLite user here. My site gets constantly hammered by crawlers, and SQLite just keeps going on hit miss. Anyway, the real magic is on the ram and the ssd perf.
Re:Collection of Digital Clock Designs on Wednesday July 15, 2026 @12:51PM (#48923685)
What would be the best device to put any of these ones over the desk? And old phone? Maybe an esp32?
Re:OpenBSD 7.9 on Tuesday May 19, 2026 @12:26PM (#48195502)
The main differences between OpenBSD, FreeBSD, NetBSD and DragonFly BSD

https://unixdigest.com/articles/the-main-differences-between...

Re:OpenBSD 7.9 on Tuesday May 19, 2026 @12:22PM (#48195428)
I used to run it on a laptop too, but the battery life was shorter and the laptop ran noticeably hotter than under Linux, so I eventually switched back.

That said, OpenBSD feels unusually coherent (ej. check wifi connection from terminal). The whole system has a level of consistency that's hard to find elsewhere, also between other BSDs.

For pet servers, it usually fits perfect.

Re:OpenBSD 7.9 on Tuesday May 19, 2026 @12:14PM (#48195322)
The main differences between OpenBSD, FreeBSD, NetBSD and DragonFly BSD

https://unixdigest.com/articles/the-main-differences-between...

Re:The vi family on Wednesday May 13, 2026 @06:15AM (#48120002)
Totally agree, Vis really hits an spot between modern feel without losing what made vi great. The structural regex is a game-changer.
Re:Screenshots of Old Desktop OSes on Tuesday May 12, 2026 @08:38AM (#48107406)
I miss on the list Counterpoint GUI for Amstrad PCs with MS-DOS

https://www.seasip.info/AmstradXT/Counterpoint/index.html

Any provider for critical domain vault?
Search on bios-mods for a modified whitelist BIOS firmware -> https://www.bios-mods.com/forum/Forum-WiFi-WWAN-Whitelist-Re...
There are modified BIOS firmware that allow any WiFi card. Good luck
Re:Helix: A post-modern text editor on Saturday March 07, 2026 @02:57AM (#47285509)
Vis editor [0] also has multicursor and powerful sam's structural regular expression

[0]: https://github.com/martanne/vis

Re:Linux From Scratch ends SysVinit support on Wednesday February 04, 2026 @03:41AM (#46883193)
Yes, "everything is a file" but the mouse on Rio is written in stone.

Aside of that, plan9 wins on the theoretical side, it was a research OS, but in the practical one... it's opinionated.

Re:The Book of PF, 4th edition on Sunday February 01, 2026 @05:24PM (#46850009)
Linux Firewalls by Steve Suehring covers nftables. It’s a good book to know the basics.
Re:Reticulum, a secure and anonymous mesh networking stack on Tuesday January 20, 2026 @01:04PM (#46695450)
Give a try to Meshcore, their design has proven to be reliable in realworld use.
Chinese AI is doing large amounts of request in the past weeks.
Re:Total monthly number of StackOverflow questions over time on Saturday January 03, 2026 @07:36PM (#46483469)
They had pretty neat infra, maybe it still runs in the same clever way. https://meta.stackexchange.com/questions/10369/which-tools-a...
Re:Total monthly number of StackOverflow questions over time on Saturday January 03, 2026 @07:27PM (#46483400)
Quora, sadly, is a good example of enshittification.
Re:CSRF Protection Without Tokens or Hidden Form Fields on Thursday December 25, 2025 @04:57PM (#46387294)
I reply myself because I've found that idea already porposed:

"Origin policy was a proposal for a web platform mechanism that allows origins to set their origin-wide configuration in a central location, instead of using per-response HTTP headers." - https://github.com/WICG/origin-policy

But their status is "[On hold for now]" since, at least, three years ago.

Re:CSRF Protection Without Tokens or Hidden Form Fields on Thursday December 25, 2025 @07:44AM (#46384089)
The reference of robots.txt offer a good way to define specific behavior for the whole domain, as example. Something like that for security could be enough for large amount of websites.

Also, a new header like “sec-policy: foo-url” may be a clean way to move away that definitions from the app+web+proxy+cdn mesh to a fixed clear point.

Re:CSRF Protection Without Tokens or Hidden Form Fields on Thursday December 25, 2025 @02:21AM (#46382790)
Adding more security headers every year feels like strapping seatbelts onto a collapsing roller coaster. It would be better to stop this "sec headers stack" in favour of simpler, secure by default browser primitives with explicit opt-out. Getting an example from https://securityheaders.com the list nowadays is as follows:

- Strict-Transport-Security - Content-Security-Policy - X-Frame-Options - X-Content-Type-Options - Referrer-Policy - Permissions-Policy - Cross-Origin-Embedder-Policy - Cross-Origin-Opener-Policy - Cross-Origin-Resource-Policy

Older »