Hacker Newsnew | past | comments | ask | show | jobs | submit | ectospheno's commentslogin

You block inbound to block inbound. Of course it doesn’t do anything for outbound. Acting like you can just turn inbound filtering off because of that is disingenuous.

Nobody suggested "just turn inbound filtering off"?? We're talking about an alternate universe of program design.

And we're talking about malware in general, not inbound or outbound specifically.


I use it for the web interface. Worth checking out again if you haven't recently.

My problem with Chase and PNC is that their "fraud detection" seems to be random die rolls or monkeys throwing darts at my picture on a wall. I love the 5 minutes of anxiety after each and every purchase where I wonder if it will just randomly fail.

To be fair the example above is easier to remember than:

  ls -l --sort=size | head -n 5 | tail -n 4 | awk '{print $5 " = " $9}' | numfmt --to iec | jq --raw-input --null-input 'inputs | gsub("\r$"; "") | split(" = "; "") | select(length == 2) | {"s": (.[0]), "n": .[1]}'

This example shows nicely how ugly text processing is: you have to use head and tail simply to trim out the first line of ls (the total).

I think it doesn't even work correctly. ls lists files and directories and then picks the first 4 (it should only select files).

And this also uses awk and jq, which are not just simple "one purpose" tools, but pretty much complete programming languages. jq is not even part of most standard installations, it has to be installed first.


I'd replace the first part with (which isn't any shorter, but in general if I want a list of files for a pipeline, find is usually more flexible than ls for anything but the most trivial):

    find -maxdepth 1 -type f -printf '%s %f\n' | sort -n | head -n 5
For the latter part, I'd tend to think that if you're going to use awk and jq, you might as well use Ruby.

   ruby -rjson -nae ' puts(JSON.pretty_generate({n: $F[1], s: "%.5f MB" % ($F[0].to_i / 10e6) }))'
("-nae" effectively takes an expression on the command line (-e), wraps it in "while gets; ... end" (-a), and adds the equivalent to "$F = $_.split" before the first line of your expression (-n))

It's still ugly, so no competition for nushell still.

I'd be inclined to drop a little wrapper in my bin with a few lines of helpers (see my other comment) and do all Ruy if I wanted to get closer without having to change shells...


Ruby is a pretty natural fit for shell scripting.

https://lucasoshiro.github.io/posts-en/2024-06-17-ruby-shell...


It's close, but there are some things that could be better to make it easier to access e.g. file size and type. I think maybe a 50-100 line set of helpers and a one line wrapper (to spawn Ruby with -r<helper> -e <command line>) would get you mostly to where nushell is.

> And this also uses awk and jq, which are not just simple "one purpose" tools, but pretty much complete programming languages

In a way that exactly illustrates the GGP's point: why learn a new language (nushell's) when you can learn awk or jq, which are arguably more generally- and widely-applicable than nushell. Or if awk and jq are too esoteric, you could even pipe the output of `find` into the python or ruby interpreters (one of which you may already know, and are much more generally applicable than nushell, awk, or jq), with a short in-line script on the command line.


> awk or jq, which are arguably more generally- and widely-applicable than nushell

That is backwards. I know I said "complete programming languages", but to be fair, awk only shines when it comes to "records processing", jq only shines for JSON processing. nushell is more like a general scripting language — much more flexible.


Yes, the point was to show that nushell is pretty awesome. I totally punted on the file only part.

I'm aware ;)

I don’t compile from my phone but I do write code using it. I use fossil for version control. The in browser editor is good enough to get ideas down. It has great diffs which is also nice. I will check in code and move it to a branch then revisit it when I’m home.

https://meta.wikimedia.org/wiki/Wikimedia_DNS

Can’t imagine they care too much given they themselves also run public dns servers.


Dell Pro Max Plus 16. Cheapest I could spec one at 96 GB Ram on their website was just under $5k.

That thing is too big for me. Also, I want the mousepad in the middle of the device and not left aligned.

I believe openrsync exists just because of rpki.

https://news.ycombinator.com/item?id=43605846

Most openbsd people I know install the real version from ports.


I had a much less annoying time with ipv6 on windows after I explicitly disabled all ipv6 tunnel interfaces.

https://learn.microsoft.com/en-us/troubleshoot/windows-serve...


Turn off temp addresses. If your prefix changes then use ULA addresses.

I suppose I could have said how.

Windows in powershell:

  SetNetIPv6Protocol -UseTemporaryAddresses Disabled
  SetNetIPv6Protocol -RandomizeIdentifiers Disabled
Linux:

  sysctl net.ipv6.conf.all.use_tempaddr=0
or in NetworkManager config file:

  ip6-privacy=0
OpenBSD:

  ifconfig em0 inet6 -temporary

Yeah. ULA and nat66 would work nicely. Except you would get murdered for asking about nat66.

I'm convinced half the ipv6 subreddit is made of people who don't actually like ipv6 and are trying to subvert it. The advice they give sometimes is just insane. "Just get a new ISP bro..."

I think a lot of people assume privacy addresses are required. You can just not mess with them. Privacy is dead anyway.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: