Hacker Newsnew | past | comments | ask | show | jobs | submit | MathMonkeyMan's commentslogin

The amount of work that you put into this comment far exceeds what I typically see in a pull request.

Dancing with Smurfs is a breed of blueberries.

I remember at my first job, the internet stopped working at my workstation. I got on the phone with IT, and the guy said "looks like you don't have our new certificates." I asked why I would need my employer's certificates. He said "because we MITM every connection." I asked if that was even legal, and he said yes it's legal.

At another job I was handling a support ticket where a customer was asking, in so many words, "can I get HTTP headers of requests flowing through my Envoy TLS reverse proxy?" I said that they could terminate TLS at the proxy and redo things that way, but then that wouldn't be a TLS proxy it'd be a MITM or a gateway. They could log the downstream/upstream and duration of connections, but that wouldn't help.


No one who understands what "MITM" means should have any expectation that I/O with a device owned and administered by a third party can be trusted (whether they do it by subverting PKI with internal certificate or not).

Sometimes. For example, you might be setting a non-crucial option on a socket, and if it fails you don't even care to log the fact (maybe the logging would be too expensive), so you just ignore the return value of whatever library is wrapping setsockopt.


1. Download file of content you wish to consume (this usually, but not always, involves piracy).

2. Put file onto computer. Maybe the computer you already downloaded it onto.

3. Plug computer into TV or monitor.

4. Open file to consume content.

One of these days I'll get around to setting up something like this for my dad:

- laptop sits under the TV (maybe asleep), occasionally checking for commands

- dad sends command from his computer "I want to torrent"

- laptop sitting under the TV hosts remote web interface for qbittorrent or similar

- dad sends command from his phone "I want to watch movie now"

- movie starts playing on TV from laptop, and dad can control it with his phone


Jellyfin is great for this if you don't want to put the computer right next to the TV. Set up your torrent program to download to a particular directory and set up Jellyfin to watch it. The most seamless experience to watch anything. The only downside compared to Netflix is you need to wait 10-15 minutes to let the torrent finish. Also sometimes you have to hunt for the subtitles if you want them.


Contraception is a bargain deal for any class, assuming you were not intending to have a kid.

I also question the idea that safety regulations (let's call them that) are the result of a class of people who have "so few real problems they stop minding their business and mind other's business." I get the idea, but couldn't the high cost of obstetrics and child car seat requirements be due to the wishes and decisions of people outside of this supposed class?


> be due to the wishes and decisions of people outside of this supposed class?

Of course, but life is just so easier when you can attribute every problem to an imaginary enemy.


A sequence of triangles, where the limit of the sum of angles is zero.


You can open youtube in the phone's web browser and install an extension that blocks a site's ability to tell when focus has left the page/app. This is how I listen to some music on my phone while working out.

Ad blockers help with the constant nagging about "open in the app!"


I've worked with init.d style init systems that had those features using special comments and sourced helper functions, but I bet if you wanted to do it all properly you'd end up with something like systemd. Or GNU Shepherd!


That nearby star has oppressed us for long enough. Look at what happened to Venus!


Exactly. Photosynthesis is vastly overrated.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: