Hacker Newsnew | past | comments | ask | show | jobs | submit | kernelPan1c's commentslogin

I've taken my stack of old laptops and created a microk8s cluster out of them for the purpose of self-hosting random stuff.


Are you hosting stuff that you can access from outside of your local network? I was always a bit concerned about allowing outside traffic since I don't feel like managing security.


Agreed, this is a problem that we will solve through scientific innovation in power generation (nuclear) and carbon sequestration. The solutions that fall in the emotional domain often involve legislation and a reduction in quality of life.


Industrial control systems are experiencing the growing pains of letting go of older technology that was designed prior to security being much of a concern.

ICS networks are often designed to be 'air gapped'. All too often the air gap is broken via a vpn into the network so that someone can RDP to a windows scada machine (that doesn't receive updates because it can't reach the internet itself).


Full-disk encryption. https://www.howtogeek.com/234826/how-to-enable-full-disk-enc...

Nothing more than speculation but...I suspect if you aren't using an open source OS, it's possible the NSA has a backdoor into the machine. The lack of open source is partly why the EternalBlue exploit existed across decades of windows releases.


How does this work?


The source code (JavaScript) is quite readable.

This seems to be the backing store:

https://www.jsonstore.io/9cfa993cd55704f2254949dc21a5f3a7a63...

With the ability to get a specific key from this style of URL:

https://www.jsonstore.io/9cfa993cd55704f2254949dc21a5f3a7a63...

And post to it to set a value.

There's no security though - anyone can overwrite any URL - e.g. in the console on that page:

    pushJSON(endpoint + '/AAAAaaAaAaaAAaaAAAAAaAAAAaAAaAAaaaAAAAaA', 'http://www.example.com/');


Looks like there's a limit to the number of urls shortened... it's throwing out the old ones. Womp, womp. :P


Or some people are Curling random stuff into the JSON endpoint


I'd bet money it's just binary represented in uppercase and lowercase.

AAaAAaAAaaaaaaaaaaAaAAaaAAAaAAaAAAaa = 110110110000000000101100111011011100 = [Some ID in the database]


Confidential...as in only you, the recipients, Google, the NSA, and other intelligence agencies the NSA shares information with can read these emails.


Is this the right #? 1517486 points to something about a tug crew error.

https://titan-server.arc.nasa.gov/ASRSPublicQueryWizard/Quer...


No – it should have been 1555013. Must have had the wrong number in the clipboard.


I understand the sentiment. I certainly have my own bouts of intense paranoia related to security and the privacy of my personal stuff. It can become unhealthy. However, I think as long as the majority are complicit with email providers that don't offer end-to-end encryption, we may fall deeper into the clutches of government surveillance, targeted advertising, and other practices that IMO are an overall toxic influence on humanity. I don't practice what I preach at the moment but hopefully the loss of convenience is not too significant as I make the switch.


> "has never turned over their SSL keys or customers’ SSL keys to anyone;"

How would they be able to give up customers' SSL keys?


Customers on some plan can upload a certificate of their choice, and generally have to provide the key along with it. Keyless SSL exists, but isn't widespread.


Ah, I guess the point I'm missing is that with a 'serverless' setup, the cloud provider must have access to your private key? Unless you use some sort of key server setup (what they call Keyless SSL)


It means the ones they use for the customers site, versus the ones they use for their own site.


I have an XPS 15 9550 as well and primarily use ubuntu. I feel your pain on the failure to hibernate/heating up in a bag. Dell seems to have had plenty of issues with buggy BIOS and motherboards on this laptop. Last week mine became afflicted with the notorious XPS issue of powering itself on automatically immediately after shutdown (from windows or ubuntu) and will only respond to the power button being pushed if the charger is plugged in. I've replaced the battery and the CMOS battery in an unsuccessful attempt to solve the problem. Dell support said I could pay $70 to send in my laptop to get it diagnosed and then quote me an exorbitant price to replace the MOBO; all while being without a laptop for god knows how long... no thanks!

I resurrected a MacBook Air from 2013 and have been running Ubuntu for a week now. It's very refreshing to be on stable hardware even if it's not a powerhouse.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: