Live data from Hacker News

Viewing profile — Liskni_si

Liskni_si

HN member
Joined
Fri, Mar 30, 2018, 3:00 PM UTC
HN karma
404
Public activity
225 items

About Liskni_si

https://github.com/liskin https://lisk.in/

https://meet.hn/city/gb-London

Socials: - github.com/liskin - linkedin.com/in/pivnik - reddit.com/user/Liskni_si

Interests: Cycling, Fitness, Gaming, Hacking, Hiking, Open Source, Outdoor Activities, Programming, Remote Work, Running

---

Recent public activity

  1. comment
    Comment #48533799

    2007 is when xrandr 1.2 came and made it feasible to use on a laptop - enable/disable outputs dynamically without restarting X. Xinerama (the extension that enables one virtual scr…

  2. comment
    Comment #48533747

    > So realistically no application did this. Old versions of GIMP (back when the toolbars etc. were separate windows) used to let you move any of its windows to a different X screen…

  3. comment
    Comment #48487796

    What about this (actively maintained) fork of uBO that polyfills some MV2 APIs to make uBO work as an MV3 extension: https://github.com/r58playz/uBlock-mv3 Anyone tried that?

  4. comment
    Comment #48436345

    I'm somewhat aware of some of this but also... External keyboard only works if you're using the laptop as a desktop computer. It's not really practical if one uses a laptop as a la…

  5. comment
    Comment #48415411

    Not just hard - impossible. To the point of making it harder to find a job, as very few jobs let you use a non-Windows ThinkPad. (I mean yeah, of course AuDHD makes it harder to fi…

  6. comment
    Comment #48292005

    Anyone else still using the 7x13 "misc fixed" font that comes with X11? I just can't switch. Perfectly readable on both 14" 1920×1200 and 35" 3440×1440. Yes it's small but that's k…

  7. comment
    Comment #47855232

    What if "the IT department" is just this one guy who asks me to Cc him an invoice when I buy a laptop and that's the end of it? (yes that's a real story from my career, and the com…

  8. comment
    Comment #47800682

    > But they won't get your private key. Indeed, that was my point exactly a couple posts up the thread. :-) > you may realise that something wrong happened I think I can iterate on …

  9. comment
    Comment #47799134

    Okay let me elaborate how I envision that attack to work: 1. attacker wants to use your yubikey-backed ssh key, let's say for running ssh-copy-id once with their own key so they ca…

  10. comment
    Comment #47798945

    Perhaps one extra bit to add: you've mentioned consuming slots on the device - that's what happens if you generate a resident key. Those keys live on the device and can be used fro…

  11. comment
    Comment #47797716

    Well I wasn't talking about ssh keys at all - that's where the misunderstanding comes from. I was simply trying to counter your claim that TPMs are never ever useful for individual…

  12. comment
    Comment #47797548

    I don't see how entering a passphrase into a compromised boot loader/kernel/initramfs is as safe as a measured boot with TPM providing the decryption key only if nothing seems to h…

  13. comment
    Comment #47796993

    I really don't think this is true for FIDO2 like Yubikey. My understanding is that your ssh client gets a challenge from the server, reads the key "handle" from the private key fil…

  14. comment
    Comment #47796493

    Yeah but they already mentioned that they expect the attacker to hijack your ssh command so you'll touch it yourself, thinking you're authorizing something else than you actually a…

  15. comment
    Comment #47796442

    Fair point. Ubuntu 18.04 won't support this. :-)

  16. comment
    Comment #47796168

    TPMs can be useful to you as an individual if you're trying to protect against an evil maid attack. Although I think Linux isn't quite there yet with its support for it. The system…

  17. comment
    Comment #47796096

    They can use the key as long as they can access your computer, but they shouldn't be able to get the secret key out of the TPM or Yubikey and use it elsewhere while your computer i…

  18. comment
    Comment #47796024

    It's also a bit outdated. OpenSSH supports FIDO2 natively, so all this gnupg stuff is unnecessary for ssh. One can even use yubikey-backed ssh keys for commit signing. And the best…

  19. comment
    Comment #47767158

    Many of those are "Merge branch 'master' into armanc/subtitle-sync-refactor". Rebasing the PR on top of master would bring that down to like 15 or something.

  20. comment
    Comment #47765953

    It's awesome that they're adding a UI for stacked branches¹! The UX of the CLI tool seems weird, though. Why do I need to explicitly create and add branches to the stack if all I r…

  21. comment
    Comment #47764309

    They haven't fixed the fork issue, the FAQ clarifies this. I suspect the target audience is squash merging corpos. Everyone else can just do normal PRs with atomic commits reviewed…

  22. comment
    Comment #47764108

    Not a single one, but it can be done with 2. Assuming you're currently on the most recent branch (furthest from the trunk), `git rebase -i --update-refs trunk` will rebase all the …

  23. comment
    Comment #47721297

    That's not that unusual though. Many countries' age of consent is ~15 so you can legally do it sooner than you can film it.

  24. comment
    Comment #47580564

    I tried to do something similar well over a decade ago during an internal hackathon (the motivation back then being speeding up destructive integration tests). My idea was to have …

  25. comment
    Comment #46621339

    You can comment on the individual commits' changes, but you can't comment on the commit (e.g. its message) itself. I believe you can do this in Gerrit.