acme.sh is maintained by ZeroSSL. https://github.com/acmesh-official/acme.sh#2%EF%B8%8F%E2%83%...
Cloudflare has been offering SSH CA-based authentication for more than 2 years [1], I wrote a guide back in feb '23 [2]. The announcement is more about offering new features, such as more granular user control.…
Image CDN primarily offers image resizing, especially useful for responsive images. It has a sizable market, both Cloudflare and AWS offer image processing service, see also major players like Cloudinary and Cloudimage.…
If "orthodox" means "vpn traffic cannot be established through third-party cloud infrastructure", then tailscale and any other cloud-hosted ZTNA solutions wouldn't be accepted in that kind of enterprise.
SSH protocol does not protect against weak configuration, e.g. password authentication without brute force mitigation. Zero-trust can be misconfigured too, so it depends how well either of them is configured.
The manual mentions it includes EasyEUICC hash in an ARA-M slot, so it should work. ARA-M does not apply to OpenEUICC; as a system app, it can work with any esim. https://www.sysmocom.de/manuals/sysmoeuicc-manual.pdf…
JMP SIM Manager is a rebadged version of EasyEUICC available on f-droid. JMP resells eSIM card and usb reader from https://www.estk.me/product/
for anyone new keepassxc, do check out the auto-type feature. you can trigger it (through keyboard shortcut) to type TOTP digits.
On Android, to unlock Keepass database secured with Yubikey, an alternative to Keepass2Android+ykdroid is KeePassDX[1] + Key Driver [2]. Both USB and NFC are supported. [1]:…
I'm using xmlstarlet in Alpine as a bare minimum way to scrap a webpage in CI pipeline.
I'm using these FF addons CanvasBlocker and Spoof Timezone to spoof UA and timezone. I checked vytal.io and it shows those addons can't fully spoof web worker method. I usually use https://browserleaks.com/javascript to…
I think the most useful feature of modern filesystems (e.g. ZFS & Btrfs) relevant to desktop usage is the ability to create snapshot. Software store can automatically take a snapshot before add/remove/upgrade apps; if…
The diagonal combines light and dark themes' screenshot. Light: https://postimg.cc/BPW3vwJN Dark: https://postimg.cc/dkZvwKcL
AFAIK this is a wrapper of worker_threads API. https://github.com/tuananh/camaro utilises this for multi-threading processing of XML input. Hexo (static site generator) is attempting to utilise this library…
Hetzner managed nextcloud costs $12/month (https://www.hetzner.com/storage/storage-share?country=us).
I have a .onion running on ipv6-only host and it's been working fine for the past few months. Relevant torrc configs: HiddenServicePort 80 [::1]:8080 ClientUseIPv4 0 ClientUseIPv6 1 ClientPreferIPv6ORPort 1
I'm using Statically (https://statically.io/) which offers screenshot API so thumbnail can be generated automatically. In my blog template, I use the following snippet: <meta property="og:image"…
There is an existing f-droid version of Maps.me [1] and this looks like a separate effort. Despite having access to the source code, map hosting is a non-trivial problem [2]. [1]: https://gitlab.com/axet/omim [2]:…
This project's logo reminds me of Metricon [1], an Australian construction company. https://metricon.azureedge.net/Metricon/media/metricon/about...
[1] generates ico, png and svg. you may want to remove some favicons from the generated HTML snippet; in my brief testing, Firefox loads both png and svg, while Chrome loads ico. [1]: https://realfavicongenerator.net/
> ...email providers to try deploying a key management strategy similar to the one I’ve described in this post. Assuming author meant key rotation, Protonmail[1] offers automatic key rotation by using CNAME that alias…
This reminds me of an article [1] I read a few years back which utilised OpenALPR. [1]: https://www.freecodecamp.org/news/how-i-replicated-an-86-mil...
If credit is not required, looks like a public domain thing. CC0 [1] is one, there are also some other public domain licenses [2]. [1]: https://creativecommons.org/publicdomain/zero/1.0/ [2]:…
The decision was made before the release of Blake3. The article did mention the algorithm is no longer hardcoded (hence the ability to support both SHA1 & SHA256). This means it's possible to transition to Blake3 (or…
Startpage shows more relevant local results for me, it's essentially a proxy to Google search. DDG supports redirect to Startpage by using "!s".
acme.sh is maintained by ZeroSSL. https://github.com/acmesh-official/acme.sh#2%EF%B8%8F%E2%83%...
Cloudflare has been offering SSH CA-based authentication for more than 2 years [1], I wrote a guide back in feb '23 [2]. The announcement is more about offering new features, such as more granular user control.…
Image CDN primarily offers image resizing, especially useful for responsive images. It has a sizable market, both Cloudflare and AWS offer image processing service, see also major players like Cloudinary and Cloudimage.…
If "orthodox" means "vpn traffic cannot be established through third-party cloud infrastructure", then tailscale and any other cloud-hosted ZTNA solutions wouldn't be accepted in that kind of enterprise.
SSH protocol does not protect against weak configuration, e.g. password authentication without brute force mitigation. Zero-trust can be misconfigured too, so it depends how well either of them is configured.
The manual mentions it includes EasyEUICC hash in an ARA-M slot, so it should work. ARA-M does not apply to OpenEUICC; as a system app, it can work with any esim. https://www.sysmocom.de/manuals/sysmoeuicc-manual.pdf…
JMP SIM Manager is a rebadged version of EasyEUICC available on f-droid. JMP resells eSIM card and usb reader from https://www.estk.me/product/
for anyone new keepassxc, do check out the auto-type feature. you can trigger it (through keyboard shortcut) to type TOTP digits.
On Android, to unlock Keepass database secured with Yubikey, an alternative to Keepass2Android+ykdroid is KeePassDX[1] + Key Driver [2]. Both USB and NFC are supported. [1]:…
I'm using xmlstarlet in Alpine as a bare minimum way to scrap a webpage in CI pipeline.
I'm using these FF addons CanvasBlocker and Spoof Timezone to spoof UA and timezone. I checked vytal.io and it shows those addons can't fully spoof web worker method. I usually use https://browserleaks.com/javascript to…
I think the most useful feature of modern filesystems (e.g. ZFS & Btrfs) relevant to desktop usage is the ability to create snapshot. Software store can automatically take a snapshot before add/remove/upgrade apps; if…
The diagonal combines light and dark themes' screenshot. Light: https://postimg.cc/BPW3vwJN Dark: https://postimg.cc/dkZvwKcL
AFAIK this is a wrapper of worker_threads API. https://github.com/tuananh/camaro utilises this for multi-threading processing of XML input. Hexo (static site generator) is attempting to utilise this library…
Hetzner managed nextcloud costs $12/month (https://www.hetzner.com/storage/storage-share?country=us).
I have a .onion running on ipv6-only host and it's been working fine for the past few months. Relevant torrc configs: HiddenServicePort 80 [::1]:8080 ClientUseIPv4 0 ClientUseIPv6 1 ClientPreferIPv6ORPort 1
I'm using Statically (https://statically.io/) which offers screenshot API so thumbnail can be generated automatically. In my blog template, I use the following snippet: <meta property="og:image"…
There is an existing f-droid version of Maps.me [1] and this looks like a separate effort. Despite having access to the source code, map hosting is a non-trivial problem [2]. [1]: https://gitlab.com/axet/omim [2]:…
This project's logo reminds me of Metricon [1], an Australian construction company. https://metricon.azureedge.net/Metricon/media/metricon/about...
[1] generates ico, png and svg. you may want to remove some favicons from the generated HTML snippet; in my brief testing, Firefox loads both png and svg, while Chrome loads ico. [1]: https://realfavicongenerator.net/
> ...email providers to try deploying a key management strategy similar to the one I’ve described in this post. Assuming author meant key rotation, Protonmail[1] offers automatic key rotation by using CNAME that alias…
This reminds me of an article [1] I read a few years back which utilised OpenALPR. [1]: https://www.freecodecamp.org/news/how-i-replicated-an-86-mil...
If credit is not required, looks like a public domain thing. CC0 [1] is one, there are also some other public domain licenses [2]. [1]: https://creativecommons.org/publicdomain/zero/1.0/ [2]:…
The decision was made before the release of Blake3. The article did mention the algorithm is no longer hardcoded (hence the ability to support both SHA1 & SHA256). This means it's possible to transition to Blake3 (or…
Startpage shows more relevant local results for me, it's essentially a proxy to Google search. DDG supports redirect to Startpage by using "!s".