News for hackers. Stuff that matters.

traumivator

You are very close to solving a real business problem. The problem is not "how can I have SSH aliases on my computer" but "how can we manage, company-wide, who can access which SSH servers."

My company currently uses YubiKeys to support hardware-based individual SSH keys. These SSH keys are distributed with Ansible. It works but is cumbersome and lacks a single pane of glass.

What we would like to have: a list of servers, a list of users, user roles (via sudoers), and a WebUI to manage all of it. And I don't know of any tool to do this. Of course, there are tools like Teleport or SSH CA instead of SSH keys, but they are for larger organizations and are overkill for my company.

My company evaluated both Yubikey and Nitrokey and decided to use Yubikey. While they are both in the same price range, Yubikeys are more durable, whereas the Nitrokey plastic cover began to show cracks. Because our employees wear them on their keychains, that would be a problem, while the Yubikeys were fine.

Also, the cheap Nitrokey FIDO2 key doesn't support ED25519 for SSH keys, only RSA and ECDSA, and even though they are open source, the promised support for ED25519 is still not delivered even after 4 years, so I doubt it will ever come: https://github.com/Nitrokey/nitrokey-fido2-firmware/issues/3...

Ultimately, while I like the idea of open-source, for a company use case, we had to go with Yubikey.

Ask HN: I keep forgetting the new habits I'm trying to form

This is something I have been struggling with: Let's say the habit I want to form is daily meditation- research the topic a bit why this habit would beneficial- make a plan to meditate for 10 min every day- set up a daily reminder on my phone- first day: do a 10 min session- second day: do a 10 min session- third day: something happens and I skip the session- fourth day: I skip the session-...

( Read More... | 19 comments | 33 points | on HN )
Re:ExampleConfig on Wednesday February 10, 2021 @03:52AM (#26086910)
Hi everyone, this the Creator of ExampleConfig.

I encountered the following problem: When editing configuration files I sometimes reached a point where I messed up the config file pretty bad. No point in trying to fix things, when clearly a fresh start makes more sense. Turns out finding the shipped original version of the configuration file is actually pretty hard. If you are lucky you find this original config file on some random GitHub Gist or accidentally indexed FTP server. You probably know this situation.

Solution: I went ahead and built an archive of these clean, original configuration files. Now you and me got them all in one place. They are collected from a fresh installation of the application (Apache, nginx, MariaDB, etc) on various Linux distros (Debian, CentOS, Alpine, etc). This is important because config files differ slightly between Linux distros.

Tech: Frontend: static site generated with Hugo.

Backend: applications are installed in Docker containers. The shipped configuration files are fetched and the containers are destroyed. This process is repeated for every Linux distro.

The goal of ExampleConfig is to provide a collection of original, unaltered configuration files for multiple applications.

Let me know what you think, what I should improve and what applications/distros you are missing and so on! (especially since this is my first time launching a product)

Re:The Bit Short: Inside Crypto’s Doomsday Machine on Friday January 15, 2021 @06:56AM (#25789833)
Check the volume for USDC/USDT. It has been increasing the last couple of weeks.

So one could argue that people are trading largely unbacked USDT for backed and audited USDC. Which increases the demand for USDC and the USDC minting.

Re:Ask HN: Are there free APIs for Financial trading? on Monday January 04, 2021 @01:51PM (#25636080)
I can recommend https://twelvedata.com/
Re:Slack is down on Monday January 04, 2021 @10:55AM (#25632901)
Same, I still see my colleagues typing but that's it.
Re:Slack Is Down? on Monday January 04, 2021 @10:14AM (#25632291)
Their status page reports it's fine: https://status.slack.com/