News for hackers. Stuff that matters.

totalart9000

Re:Show HN: 3D Vector Graphics on Tuesday February 02, 2016 @04:55PM (#11022982)
We already have something. It's called man pages. I say this kind of tongue-in-cheek but I'm also serious about it at the same time.
Re:Bad USB-C cable destroys laptop on Tuesday February 02, 2016 @04:52PM (#11022962)
Question is, did they pull it for real or did they only do so to relist it without having that review show up?
Re:Bad USB-C cable destroys laptop on Tuesday February 02, 2016 @04:51PM (#11022955)
Anyone have a hub to recommend? I have a hub which I bought for cheap on eBay which I use on my desk for keyboard, mouse and similar but would not trust that hub to offer much if any in way of voltage protection so I'd like to know about safe hubs for lab use.
Re: on Tuesday February 02, 2016 @08:20AM (#11019243)
Neat stuff. Be aware though that by doing this you expose yourself to revealing valid credentials.

Let's say that you have a user "bob". bob has the password "iamyouruncle". One day bob makes a typo in his password, spelling it as "iamyouurncle". Username and mistyped password is shown on this web page and visitors could be able to deduce the correct password.

Now you may say "oh but this is actually not the real sshd used by users, the real one is running on port 2022 instead of on port 22". Not much better. bob could be on a host where he doesn't have his regular .ssh/config which specifies to use port 2022 so now when he does ssh, he hits port 22 and gives up his real credentials to it.

You may then say, "no matter, everybody is actually using pubkeys, not passwords" but to that I say that still, sometimes people might give their password, either because they've lost their keypair and are trying to get in or because they do so without thinking.

These are my thoughts on the matter. As I said, though, I think what you've made is neat, I just want people to think about the potential consequences before they go ahead and set up something similar.

Re:Deploying a Haskell Web Service with Nix on Monday February 01, 2016 @08:42PM (#11017156)
>[...] taking care to change ~/.zshrc to reflect the “run commands” file of your shell if necessary

Huh, I've been wondering what the rc part of config files actually meant. The only thing I could come up with previously was "resource" file, which didn't make much sense but I never looked it up so whenever I deal with rc files, I think of them as resource files. Now I know what it actually means and can begin thinking of them as such.