Viewing profile — isaack

I always find this to be handy: https://learnxinyminutes.com/ It is useful as a cheat sheet. In addition: if you have experience in multiple "imperative" language (read: non-functi…

Non-paywall version: https://outline.com/c789vA

iOS supports DoH/DoT natively via work profile. Create one yourself here: https://dns.notjakob.com

Add (2021) to the title?

Have you looked into https://github.com/slackhq/nebula ? It uses X509 cert for auth. Although for my home lab, using X509 is more of a minus than a plus due to complexity involved.…

There's a similar site that shows towers and coverage around the world! And everyone can contribute data too! Sadly you can only contribute on Android but not iOS. http://www.cellm…

Yes, but if you goal is to hide your identity, this really wouldn't work. Everything is still tagged to your identity, i.e. @mydomain.com.

CloudFlare had a much more elegant solution: the Alt-Svc HTTP header [1]. It is entirely transparent to the user. Security is guaranteed because it uses the original SSL/TLS certif…

How about 802.1x? It's still safe and I can do many fancy networking tricks (VLAN, etc) with it. But it's not compatible with a lot of "IOT" stuff including Chromecast.

I don't think Tailscale's use of 100.x.x.x address space conforms with the RFC, but I don't think that there are any better alternatives out there. Do note though, once people star…

@Jorge - is there a way for me to build "relays" out of ESP32/RPi Zero? @HN Crowd - is there something I could do to prepare for possible censorship? I was thinking of mesh Interne…

As a Hongkonger, can I ask what's the best technology for: 1. Censorship-resistant chat: Something DHT-based preferrably, I am looking at Status.im right now 2. Mesh Internet over …

Cathay Pacific CEO stepped down after China’s civil aviation regulator issued a major safety risk warning to Cathay and set out a list of demands, including giving full information…

Does anyone have experience with getting their paid G Suite account locked? If paying them means that I can un-suspend my Google Account easily, I would be more than happy to shell…

I have always wanted to create a Slack alternative that is built upon email. Everything happens on emails (and hidden headers), standards-compliant since day 1 and low barrier to u…

A carrier deploying NAT might not be using CGNAT, and hence, in compliance with the spec, decide not to use the 100.64/16 space. One requirement of CGNAT, for instance, requires th…

You need to turn off CloudFlare proxying for your domain. Instructions here: [1]. (Can't find an official help page, sorry). Also make sure that you are using a CNAME record pointi…

For people on the "hipster" train of SPA/JWT etc, I found OpenID Connect (not the original OpenID) incredibly useful. With a simple JS library [1] you can ask your users to log in …

If I were the hacker: 1. I would get a proper SSL cert signed 2. Only hijack one of the ranges, and do not respond to other domains (causing SERVFAIL), so other domains will resolv…

Taken down now Backup 1: http://archive.is/WnwiB Backup 2: http://webcache.googleusercontent.com/search?q=cache%3Ahttp%...

You should thank HDMI CEC [1] for that. [1] https://support.google.com/chromecast/answer/7199917