Live data from Hacker News

Viewing profile — rdme

rdme

HN member
Joined
Tue, Mar 12, 2019, 2:00 PM UTC
HN karma
112
Public activity
39 items

About rdme

No profile information was provided.

Recent public activity

  1. comment
  2. comment
    Comment #48199603

    might want to check https://github.com/alexandru/social-publish

  3. comment
    Comment #48138044

    actually that is exactly how i am currently running it - dogfooding from my Mac sudo numa install handles launchd, numa then becomes tailscale's fallback resolver docker socket ser…

  4. comment
    Comment #48136409

    honestly, nothing major, just deployed the docker-compose to a hetzner $5 instance https://github.com/razvandimescu/numa/tree/main/packaging/re... then submit a pr to Frank https:/…

  5. comment
    Comment #48136028

    sovereign naming without ICANN or registrars - pkarr through DHT (not blockchain)

  6. comment
    Comment #48134515

    no, you are actually telling the relay where to redirect your question from the start (because you are encrypting the question with the public key of the destination resolver) - th…

  7. comment
    Comment #48134457

    The relay sees IP + ciphertext, the target sees question + relay's IP. No single party gets both

  8. comment
    Comment #48134438

    I agree with you, however that's a separate problem that needs to be solved

  9. comment
    Comment #48134050

    They solve different things. ODoH hides your question, not who you're talking to.

  10. comment
    Comment #48133603

    The relay is a systemd unit on a VPS, Caddy for TLS, SSRF-hardened (regex-strict hostnames, no IP literals). eTLD+1 same-operator check rejects relay+target run by the same org by …

  11. story
    Show HN: Running the second public ODoH relay

    Every privacy-focused DNS service requires an account: NextDNS, Cloudflare for Families, Apple's iCloud Private Relay (paid, iOS-only). The protocol that doesn’t require one - ODoH…

  12. comment
    Comment #48104336

    this must be some a/b testing as i’m not seeing anything different actually it does have a dismissable banner i haven’t even noticed

  13. comment
    Comment #47852270

    How would this work? One would connect it's repository to a cloud platform that would then act based on the existing daemons of the repo?

  14. comment
    Comment #47750977

    Just shipped numa v0.13.0: added request hedging (fires a parallel query after 10ms if the primary stalls, inspired by Google's Tail at Scale paper) wire-level cache with serve-sta…

  15. comment
    Comment #47714395

    should be fixed by #54 in 0.10.3 thanks again!

  16. comment
    Comment #47665082

    Thanks for pointing this out! I’ve created https://github.com/razvandimescu/numa/issues/36

  17. comment
    Comment #47624071

    let me know how it goes

  18. comment
    Comment #47620209

    Split DNS already works — Numa auto-detects Tailscale forwarding rules from the system config. Queries matching . go to Tailscale’s DNS, everything else goes through Numa If you wa…

  19. comment
    Comment #47618830

    This was started as a learning project, went from the start to the lowest level then I've just added features I wanted one by one, it just made the most sense

  20. comment
    Comment #47618196

    let me know if you do it!

  21. comment
    Comment #47616852

    Numa can do recursive resolution from root nameservers + DNSSEC, .numa local domains with auto HTTPS for dev, and LAN service discovery. What features would you be interested in?

  22. comment
    Comment #47616647

    It definitely is and you can see it in the git commits. The DNS wire protocol parser was the original learning project I wrote to understand the spec. Later features (recursive res…

  23. comment
    Comment #47615725

    exactly, I'll add a pr soon that tells the os (and browsers) that is'a a valid domain

  24. comment
    Comment #47615566

    also in romanian nume = name(dns) and I also get the easter egg of that well known Romanian song numa numa :) https://www.youtube.com/watch?v=YnopHCL1Jk8 On OpenWRT — it's musl-bas…

  25. comment
    Comment #47615458

    Yes — numa install generates a local CA and stores it in the system trust store. When you register a .numa service, it generates a per-service TLS cert signed by that CA