News for hackers. Stuff that matters.

unixsheikh

Re:OpenBSD 7.2 on Thursday October 20, 2022 @07:17PM (#33282088)
Author of https://openbsdrouterguide.net/ here. What part do you consider outdated?
Re:Ask HN: IT Security Checklist for Startups? on Wednesday August 31, 2022 @06:41PM (#32669279)
I am sorry, but if you need someone else to provide you with a list like that, you should NOT be doing this. It is the wrong approach on so many levels.
Re:Using the same Arch Linux installation for a decade on Tuesday August 16, 2022 @05:54PM (#32489477)
I don't get what the fuss is about.

I run several Arch boxes, a couple I believe is on 15+ years. One such installation has even been mirrored from one disk to multiple other disks and put into other machines, just because it was already set up as needed. Only once did a package I ran require manual intervention during upgrade, but as always, that was clearly described on the Arch website.

This also goes for Debian, FreeBSD and OpenBSD.

Re:Ask HN: Is it still worth learning Kubernetes in 2022? on Saturday January 01, 2022 @06:07AM (#29757376)
No. It adds nothing but unneeded complexity to the stack. Learn how to package your software and use the package manager. You can combine that, if you must, with any kind of config manager like Ansible or something else.

So many companies are doing what's "trendy and shiny", and it can almost look like it is becoming a de-facto standard, but they will eventually realize the mistake.

Re:Systemd 250 Released on Friday December 24, 2021 @05:15PM (#29678289)
I cannot believe how big of a monstrosity systemd has become. It started out as an init system and was promoted as such and I started out liking it. Then the wording suddenly changed to "a suite of basic building blocks for a Linux system", then came the hardcoded DNS servers, then the shitload of bugs that has been ignored since about 2015. Now instead of fixing what's broken and making things more secure, more and more cruft keeps getting added.

> We used to sit around in the Unix Room saying, 'What can we throw out? Why is there this option?' It's often because there is some deficiency in the basic design — you didn't really hit the right design point. Instead of adding an option, think about what was forcing you to add that option. (Doug McIlroy).

Sigh!

No, it's useless for me too.
Re:SQLite-TUI: A TUI for viewing SQLite databases, written in Go on Saturday September 04, 2021 @01:40AM (#28412381)
Very well done! Great project!
Re:Ask HN: Are you using Go for web development? on Friday March 26, 2021 @10:42AM (#26592720)
We keep things as close to the bare metal as possible and avoid complex layers as the plague.

We have only negative experiences with frameworks and big layers. They solve problems quickly in the beginning, but they always end up causing problems. Years later, debugging strange errors, security issues, etc. The more layers you add the less useful and good the application becomes.

we use the standard library and a couple of slim and well written external libraries, such as sqlx and go-sql-driver.

I have written my own HTML form validator and custom error handler - once you get that done, web development in Go becomes MUCH easier.

We don't use ANY JavaScript on the front-end unless it is a minor custom enhancement to the UI (it must be able to run without). Everything is pure HTML and CSS.

However, I personally do find the HTML templating tedious, but I have always found templating stupid and annoying, this is not specific to Go. I prefer to write HTML inline in PHP (when I do PHP) i.e. the old fashion way. I hate templating in any language!

It's easy to make mistakes in Go HTML templates, make sure you test that part of your code well!

Writing big web applications from scratch is great though, and it's really fast in Go, faster than PHP, as long as you do it right! Documentation, documentation, documentation. Anyone who inherits your code, whether you're alone or on a team, needs to know and understand your thinking and rationale.

The main reason why projects fail when they build tailor made software is because of laziness regarding documentation.

The correct way is to regard missing documentation as a bug! Write the documentation WHEN you write the code. If you change the code, change the documentation right away, when you can still remember what you're doing and why - this is the most important part and why so many code bases are horrible to inherit. Missing or poor documentation.

Never use "clever" code, make code that is easy to read and understand. Don't worry too much about design patterns and philosophy, they mostly belong in the books and in theoretical discussions!

Web development in Go is not for everyone, it requires experience and thoroughness. The build fast, deploy and forget strategy - that most people use these days - doesn't belong in Go.

Go will reward you in the end with really good performance and very easy future maintenance. Nothing suddenly breaks because a third of the standard library has suddenly been changed in the next version upgrade, such as with PHP.

EDIT: Typo.

Re:Ask HN: Who wants to be hired? (December 2020) on Tuesday December 01, 2020 @06:19PM (#25271370)

  Location: Europe/Copenhagen
  Remote: Yes
  Willing to relocate: No
  Experience: Senior 30+ years
  Technologies:
    * PHP, Go, Python, C, JavaScript, HTML, CSS, XML, JSON,
      SQL, Shell scripting.
    * Debian, Arch, Void, Alpine, OpenBSD, FreeBSD.
    * Apache, NGINX, MySQL/MariaDB, Galera, Sphinx,
      PostgreSQL, MongoDB, Redis, SQLite, OpenSSH, Git,
      Mercurial, DHCP, DNSMasq, Bind, Unbound, NTP, PF,
      iptables, ZFS, Btrfs, GlusterFS, NFS, Samba,
      OpenSMTPD, Postfix, SpamAssassin, Dovecot, GnuPG,
      rsync, ProFTPD, PureFTPd.
  Websites:
    * https://unixsheikh.com
    * https://openbsdrouterguide.net
    * https://phpthewrongway.com
  Resume/CV: Request via email
  Email: [job] at [unixsheikh dot com]
I'm glad I neither use Google nor YouTube! Security.. riiight!
> Why? Why not use a single protocol that's widely tested and trusted by security experts? I mean, we didn't come up with a brand new encryption strategy for FTP, we made FTPS.

> Why on earth would we want to use 5 different encryption protocols in the browser? That's just pointlessly adding attack surface. What's wrong with HTTPS that means it's a bad fit for encrypting a DNS query? A DNS query is essentially at its core an HTTP request to a remote server, and HTTPS is already very good at encrypting HTTP requests. There's no need to reinvent the wheel here.

This is where you're wrong. A DNS request is far from the same as a HTTP request!

You don't seem to understand how the technology really works in the underlying protocol.

HTTPS is designed to encrypt HTTP traffic, it was never designed to be stuffed by other kinds of traffic. When you stuff DNS into HTTPS you not only get a destination IP in clear text, something you cannot get if you use DoT e.g.

Furthermore, DoH also completely ruins analysis and monitoring of DNS traffic for security purposes. Already DoH has been used in a worm to mask connections to its command-and-control server.

If you want to solve the obvious problems with DNS, you don't keep doing the same mistake over and over again by patching with the same half-baked solution.

DoH does not solve ANY of the issues it is set out to do! I have worked for a long time in the ISP industry, users gets tracked by source IP and destination IP mainly, and figuring out what particular website they have visited, even when the hosting provider has multiple websites running on the same IP, is so easy just by looking at a hash of the payload that it is ridiculous.

DoH is "fake privacy". Period.

I think you misunderstand. Of course everything needs to be encrypted. However, feeding everything through HTTPS is WRONG! This is basic computer and network engineering. If you want to encrypt DNS, fine encrypt DNS, but flipping leave the HTTPS protocol out of it!

Furthermore, the destination IP address is ALWAYS in clear text when you use HTTPS. Which demonstrates exactly why this is so wrong.

DoH - is fake privacy, it's nothing more than extra sugar on Cloudflares spying cake - and more funding for Mozilla.

Wake up.

Yeah, let's start feeding our mail, ftp, ntp, and everything else over HTTPS as well now we're at it!

DoH is DNS done completely wrong. It's the worst patch solution to a problem that should have been solved correctly long ago!

I almost look forward to the day when it all blows up in the face of those who thought that all of these, in reality economical driven half-baked solutions - disguised as privacy or security, end up causing such a break down, that nothing works any longer.

The amount of sheer stupidity that goes into the "modern web" is just mind bugling.

DoH does absolutely nothing that helps privacy since the destination IP address is always clear and DoH only obscures that which it never should have touched with in the first place.

I have just about had it with the IT industry and the modern web!

Re:Wikimedia is moving to Gitlab on Wednesday October 28, 2020 @04:47PM (#24923954)
Google's non-free JavaScript recaptcha is an absolute showstopper! At least roll out a custom made solution of nothing else.
Re:Is the web getting slower? on Friday September 11, 2020 @03:50AM (#24440131)
From a hardware perspective, everything is many times faster that it was just ten years ago.

From a user of the web perspective, then I cannot even find the right words to describe the madness that front-end developers are causing with their utter clueless usage of absolutely ridicules JavaScript on top of frameworks on top whatever other useless crap they throw into the mix just to display basic static HTML!

The web is not getting slower, it's getting faster, but even amazing technology cannot compensate for front-end developer stupidity!

Re:Ask HN: Who wants to be hired? (May 2020) on Sunday May 03, 2020 @09:16PM (#23063508)
I'm looking for new opportunities, only remote.

I don't need any insurance or benefits as I got that covered myself.

  Location: Europe/Copenhagen
  Remote: Yes
  Willing to relocate: No
  Technologies:
    * PHP, Go, Python, C, JavaScript, HTML, CSS, XML, JSON,
      SQL, Shell scripting.
    * Debian/Devuan/Ubuntu, Arch, Void, Alpine, OpenBSD,
      FreeBSD.
    * Apache, NGINX, MySQL/MariaDB, Galera, Sphinx,
      PostgreSQL, MongoDB, Redis, SQLite, OpenSSH, Git,
      Mercurial, DHCP, DNSMasq, Bind, Unbound, NTP, PF,
      iptables, ZFS, Btrfs, GlusterFS, NFS, Samba,
      OpenSMTPD, Postfix, SpamAssassin, Dovecot, GnuPG,
      rsync, ProFTPD, PureFTPd.
  Website: https://unixsheikh.com
  Resume/CV: Request via email
  Email: [job] at [unixsheikh dot com]
Re:Ask HN: Who wants to be hired? (April 2020) on Thursday April 02, 2020 @01:58AM (#22756585)
I'm looking for new opportunities, only remote (preferably part time, but not a must).

  Location: Europe/Copenhagen
  Remote: Yes
  Willing to relocate: No
  Technologies: 
    * PHP, Go, Python, C, JavaScript, HTML, CSS, XML, JSON,
      SQL, Shell scripting.
    * Debian/Devuan/Ubuntu, Arch, Void, Alpine, OpenBSD,
      FreeBSD.
    * Apache, NGINX, MySQL/MariaDB, Galera, Sphinx, 
      PostgreSQL, MongoDB, Redis, SQLite, OpenSSH, Git,
      Mercurial, DHCP, DNSMasq, Bind, Unbound, NTP, PF,
      iptables, ZFS, Btrfs, GlusterFS, NFS, Samba,
      OpenSMTPD, Postfix, SpamAssassin, Dovecot, GnuPG,
      rsync, ProFTPD, PureFTPd.
  Website: https://unixsheikh.com
  Resume/CV: Request via email
  Email: [job] at [unixsheikh dot com]
Re:Ask HN: Who wants to be hired right now? on Monday March 23, 2020 @10:06PM (#22671122)
I'm looking for new opportunities, only remote (preferably part time, but not a must).

I have many years of experience with Linux, FreeBSD and OpenBSD system administration.

I enjoy programming in Go and PHP (+20 years of experience in PHP+SQL).

  Location: Europe/Copenhagen
  Remote: Yes
  Willing to relocate: No
  Technologies: 
    * PHP, Go, Python, C, JavaScript, HTML, CSS, XML, JSON, SQL, Shell scripting.
    * Debian/Devuan/Ubuntu, Arch, Void, Alpine, OpenBSD, FreeBSD.
    * Apache, NGINX, MySQL/MariaDB, Galera, Sphinx, PostgreSQL, MongoDB, Redis,
      SQLite, OpenSSH, Git, Mercurial, DHCP, DNSMasq, Bind, Unbound, NTP, PF,
      iptables, ZFS, Btrfs, GlusterFS, NFS, Samba, OpenSMTPD, Postfix,
      SpamAssassin, Dovecot, GnuPG, rsync, ProFTPD, PureFTPd.
  Website: https://unixsheikh.com
  Resume/CV: Request via email
  Email: [job] at [unixsheikh dot com]
Re:DuckDuckGo is good enough for regular use on Friday March 06, 2020 @05:20PM (#22507881)
I think I switched to Duckduckgo about 3 years ago and I have not done any searching on Google since then (with a very few exceptions just to compare).

I have been very happy with the results Duckduckgo provides.

The only exception, which is something I find really annoying, is when you want to limit the search to something specific using quotes and it ignores the quotes and provides results that are completely useless.

Startpage.com respects the quotes.

Re:Ask HN: Who wants to be hired? (March 2020) on Monday March 02, 2020 @01:38PM (#22467305)
I'm looking for new opportunities, only remote and preferably part time, but if what you are doing is really interesting I will consider full time too.

I have many years of experience with Linux (different distributions) and FreeBSD and OpenBSD system administration.

I also enjoy programming in Go and PHP, and I have more than 20 years of experience doing PHP, SQL, and other programming stuff too.

  Location: Europe/Copenhagen
  Remote: Yes
  Willing to relocate: No
  Technologies: Debian/Devuan/Ubuntu Linux, Arch Linux, Alpine Linux, OpenBSD, FreeBSD, Apache, NGINX, MySQL/MariaDB, Galera, Sphinx, PostgreSQL, MongoDB, Redis, SQLite, OpenSSH, Git, Mercurial, Shell scripting, DHCP, DNS (DNSMasq, Bind, Unbound), NTP, PF, iptables, ZFS, Btrfs, GlusterFS, NFS, Samba, OpenSMTPD, Postfix, SpamAssassin, Dovecot, GnuPG, rsync, ProFTPD, PureFTPd, PHP, Go, Python, HTML, CSS, XML, JSON, SQL, NoSQL, Make and Hardware troubleshooting (x86), and many other things.
  Website: https://unixsheikh.com
  Resume/CV: Request via email
  Email: [job] at [unixsheikh dot com]
Re:A half-hour to learn Rust on Saturday February 29, 2020 @07:39AM (#22450270)
What a nice approach to presenting the language in a clear cut way. We should have this for every language out there.
Re:Show HN: Angeldust – a fast and efficient video game on Sunday December 22, 2019 @09:09PM (#21861016)
Congratulations, amazing work!

I absolutely love how you have opted out for frameworks on the website and that it just work. Kudos!

The same for your considerations for making it work on old hardware and you comments on your live stream today about your old Mac and making it run on Windows XP as well.

More developers need that attitude.

I wish you all the best and I hope this becomes a Minecraft size success!

It has nothing to do with isolation from the world, it's protection. The children still have lots of friends.
I'm perhaps going to hit a soft spot here, but parents need to take serious responsibility for their children.

Home school the children!

Take control of the Internet (firewall and DNS) and don't allow access to social media or a smart phone until appropriate age.

Teach the children about these problematic issues so they actually understands why they can't have free access to a smart phone, and what's really bad about the Internet. Make them understand these issues!

Make contact to other people who do the same and let the children's social contacts be with like minded people in real life.

We, and several other families, have done that, and are still doing it, with great success.

No. I would never work like that. In all the projects I have been doing remotely we have used email, wiki, and occasional online meeting or phone meeting. It has always worked great, even with people from a completely different timezone (day/night difference).
Re:Ask HN: Freelancer? Seeking Freelancer? (December 2019) on Wednesday December 04, 2019 @01:19PM (#21705153)
Currently I'm looking for new opportunities, only remote and preferably part time or about 6 hours a day.

I have many years of experience with Linux and BSD system administration (many different tasks). And I have been doing PHP programming and SQL (nor ORM, but real SQL) for more than 20 years.

I also enjoy programming in Go. But many other IT related work are also of interest.

  Location: Europe/Copenhagen
  Remote: Yes
  Willing to relocate: No
  Technologies: Debian/Ubuntu Linux, Arch Linux, OpenBSD, FreeBSD, Alpine Linux, Apache, NGINX, MySQL/MariaDB, Galera, Sphinx, PostgreSQL, MongoDB, Redis, SQLite, OpenSSH, Git, Mercurial, Shell scripting, DHCP, DNS (DNSMasq, Bind, Unbound), OpenNTPD, PF (OpenBSD firewall), iptables (Linux firewall), ZFS, Btrfs, GlusterFS, NFS, Samba, OpenSMTPD, Postfix, SpamAssassin, Dovecot, GnuPG, rsync, ProFTPD, PureFTPd, PHP, Go, Python, HTML, CSS, XML, JSON, SQL, NoSQL, Make and Hardware troubleshooting (x86).
  Resume/CV: https://unixsheikh.com/cv.html
  Email: Add [job] to [unixsheikh dot com]
Re:Ask HN: Who wants to be hired? (December 2019) on Monday December 02, 2019 @08:41PM (#21689147)
Currently I'm looking for new opportunities, only remote and preferably part time or about 6 hours a day.

I will help your company become much better at what you do!

I have many years of experience with Linux and BSD system administration (many different tasks). And I have been doing PHP programming and SQL (nor ORM, but real SQL) for more than 20 years.

I also enjoy programming in Go. But many other IT related work are also of interest.

  Location: Europe/Copenhagen
  Remote: Yes
  Willing to relocate: No
  Technologies: Debian/Ubuntu Linux, Arch Linux, OpenBSD, FreeBSD, Alpine Linux, Apache, NGINX, MySQL/MariaDB, Galera, Sphinx, PostgreSQL, MongoDB, Redis, SQLite, OpenSSH, Git, Mercurial, Shell scripting, DHCP, DNS (DNSMasq, Bind, Unbound), OpenNTPD, PF (OpenBSD firewall), iptables (Linux firewall), ZFS, Btrfs, GlusterFS, NFS, Samba, OpenSMTPD, Postfix, SpamAssassin, Dovecot, GnuPG, rsync, ProFTPD, PureFTPd, PHP, Go, Python, HTML, CSS, XML, JSON, SQL, NoSQL, Make and Hardware troubleshooting (x86).
  Resume/CV: https://unixsheikh.com/cv.html
  Email: Add [job] to [unixsheikh dot com]

Older »