Viewing profile — Liskni_si
Liskni_si
HN member- Joined
- Fri, Mar 30, 2018, 3:00 PM UTC
- HN karma
- 404
- Public activity
- 225 items
- HN profile
- View on Hacker News ↗
About Liskni_si
https://meet.hn/city/gb-London
Socials: - github.com/liskin - linkedin.com/in/pivnik - reddit.com/user/Liskni_si
Interests: Cycling, Fitness, Gaming, Hacking, Hiking, Open Source, Outdoor Activities, Programming, Remote Work, Running
---
Recent public activity
-
comment
Comment #48533799
2007 is when xrandr 1.2 came and made it feasible to use on a laptop - enable/disable outputs dynamically without restarting X. Xinerama (the extension that enables one virtual scr…
-
comment
Comment #48533747
> So realistically no application did this. Old versions of GIMP (back when the toolbars etc. were separate windows) used to let you move any of its windows to a different X screen…
-
comment
Comment #48487796
What about this (actively maintained) fork of uBO that polyfills some MV2 APIs to make uBO work as an MV3 extension: https://github.com/r58playz/uBlock-mv3 Anyone tried that?
-
comment
Comment #48436345
I'm somewhat aware of some of this but also... External keyboard only works if you're using the laptop as a desktop computer. It's not really practical if one uses a laptop as a la…
-
comment
Comment #48415411
Not just hard - impossible. To the point of making it harder to find a job, as very few jobs let you use a non-Windows ThinkPad. (I mean yeah, of course AuDHD makes it harder to fi…
-
comment
Comment #48292005
Anyone else still using the 7x13 "misc fixed" font that comes with X11? I just can't switch. Perfectly readable on both 14" 1920×1200 and 35" 3440×1440. Yes it's small but that's k…
-
comment
Comment #47855232
What if "the IT department" is just this one guy who asks me to Cc him an invoice when I buy a laptop and that's the end of it? (yes that's a real story from my career, and the com…
-
comment
Comment #47800682
> But they won't get your private key. Indeed, that was my point exactly a couple posts up the thread. :-) > you may realise that something wrong happened I think I can iterate on …
-
comment
Comment #47799134
Okay let me elaborate how I envision that attack to work: 1. attacker wants to use your yubikey-backed ssh key, let's say for running ssh-copy-id once with their own key so they ca…
-
comment
Comment #47798945
Perhaps one extra bit to add: you've mentioned consuming slots on the device - that's what happens if you generate a resident key. Those keys live on the device and can be used fro…
-
comment
Comment #47797716
Well I wasn't talking about ssh keys at all - that's where the misunderstanding comes from. I was simply trying to counter your claim that TPMs are never ever useful for individual…
-
comment
Comment #47797548
I don't see how entering a passphrase into a compromised boot loader/kernel/initramfs is as safe as a measured boot with TPM providing the decryption key only if nothing seems to h…
-
comment
Comment #47796993
I really don't think this is true for FIDO2 like Yubikey. My understanding is that your ssh client gets a challenge from the server, reads the key "handle" from the private key fil…
-
comment
Comment #47796493
Yeah but they already mentioned that they expect the attacker to hijack your ssh command so you'll touch it yourself, thinking you're authorizing something else than you actually a…
-
comment
Comment #47796442
Fair point. Ubuntu 18.04 won't support this. :-)
-
comment
Comment #47796168
TPMs can be useful to you as an individual if you're trying to protect against an evil maid attack. Although I think Linux isn't quite there yet with its support for it. The system…
-
comment
Comment #47796096
They can use the key as long as they can access your computer, but they shouldn't be able to get the secret key out of the TPM or Yubikey and use it elsewhere while your computer i…
-
comment
Comment #47796024
It's also a bit outdated. OpenSSH supports FIDO2 natively, so all this gnupg stuff is unnecessary for ssh. One can even use yubikey-backed ssh keys for commit signing. And the best…
-
comment
Comment #47767158
Many of those are "Merge branch 'master' into armanc/subtitle-sync-refactor". Rebasing the PR on top of master would bring that down to like 15 or something.
-
comment
Comment #47765953
It's awesome that they're adding a UI for stacked branches¹! The UX of the CLI tool seems weird, though. Why do I need to explicitly create and add branches to the stack if all I r…
-
comment
Comment #47764309
They haven't fixed the fork issue, the FAQ clarifies this. I suspect the target audience is squash merging corpos. Everyone else can just do normal PRs with atomic commits reviewed…
-
comment
Comment #47764108
Not a single one, but it can be done with 2. Assuming you're currently on the most recent branch (furthest from the trunk), `git rebase -i --update-refs trunk` will rebase all the …
-
comment
Comment #47721297
That's not that unusual though. Many countries' age of consent is ~15 so you can legally do it sooner than you can film it.
-
comment
Comment #47580564
I tried to do something similar well over a decade ago during an internal hackathon (the motivation back then being speeding up destructive integration tests). My idea was to have …
-
comment
Comment #46621339
You can comment on the individual commits' changes, but you can't comment on the commit (e.g. its message) itself. I believe you can do this in Gerrit.