Viewing profile — h43z

It's just something everyone should be aware of. It's up to you to decide if it's okay that you send a server provider (in this case late.sh) a bunch of your public keys which he c…

OpenSSH server is designed not to reveal whether a username exists.

If I have your public key I could probe a server to see if it recognizes that public key. Which would tell me information you might not want to be leaked.

By default SSH leaks all of the below public keys (if they exist) + all public keys in your ssh-agent to a server you connect to. ~/.ssh/id_ecdsa.pub ~/.ssh/id_ecdsa_sk.pub ~/.ssh/…

Reminder to be cautious about leaking public keys. Once you leak your public key it could be used to check if another server recognizes that leaked public key.

Today frontier models became Groypers.

Right click, view source?

Firefox is really in a sad state. The politics, ideology is getting worse and the tech is still bad. Kind of crazy that they waste everyones battery and cpu https://b.43z.one/2025-…

Did I understand that correctly that I will be able to get a certificate for an IP?

I recently wanted to find out which company crawls the deepest. The openAI bot was the most thorough one, it followed 405 links [1]. [1] https://deep.43z.one

Doesn't feel like much of an explanation to me. # UMASK is the default umask value for pam_umask and is used by # useradd and newusers to set the mode of the new home directories. …

Can someone explain why we are still using a umask of 022 in ubuntu and debian? Would it really be so hard to make that switch to a more privacy focused umask?

The span one is the important one though as most of the modern web does not use anymore.

I don't see it working on firefox for buttons but on chrome. Both don't work on other html elements (div,span,..).

I used to use vimium (and tried similar extensions) but it always scared me how big the codebase was for most of the popular extensions. In the end I came up with a tiny extension …

This works on links and buttons in chrome. In firefox just on links. In both it doesn't work for other html elements.

The links yes, but what about buttons or other html elements?

It could be argued that from the servers perspective only one thing was provided, so it's not 2FA. Then what about ssh keys AND user/password authentication? Like this sshd_config …

Do I understand this correctly that the server here is only needed to make sure the secret it's only read once?