HackerTrans
TopNewTrendsCommentsPastAskShowJobs

h43z

no profile record

Submissions

ImageMagick: From Arbitrary File Read to File Write in Every Policy

pwn.ai
1 points·by h43z·3 bulan yang lalu·0 comments

Show HN: Localhorst – Websites Hosted in the Browser

localhorst.43z.one
3 points·by h43z·7 bulan yang lalu·2 comments

A Replacement for the Mouse in Linux

github.com
5 points·by h43z·11 bulan yang lalu·0 comments

A small change to improve browsers for keyboard navigation

b.43z.one
207 points·by h43z·11 bulan yang lalu·68 comments

Ask HN: Are SSH keys with passphrases considered 2FA?

3 points·by h43z·11 bulan yang lalu·1 comments

How to Fix Firefox's Find-in-Page for Keyboard Navigation

h.43z.one
1 points·by h43z·12 bulan yang lalu·0 comments

How Deep Will Bots Crawl?

deep.43z.one
2 points·by h43z·12 bulan yang lalu·0 comments

Enhancing Firefox's Find-in-Page for Keyboard Navigation

h.43z.one
3 points·by h43z·12 bulan yang lalu·0 comments

comments

h43z
·bulan lalu·discuss
Today frontier models became Groypers.
h43z
·7 bulan yang lalu·discuss
Right click, view source?
h43z
·7 bulan yang lalu·discuss
Firefox is really in a sad state. The politics, ideology is getting worse and the tech is still bad. Kind of crazy that they waste everyones battery and cpu https://b.43z.one/2025-02-12/

Am I the one who is crazy and nitpicking here?
h43z
·7 bulan yang lalu·discuss
Did I understand that correctly that I will be able to get a certificate for an IP?
h43z
·11 bulan yang lalu·discuss
I recently wanted to find out which company crawls the deepest. The openAI bot was the most thorough one, it followed 405 links [1].

[1] https://deep.43z.one
h43z
·11 bulan yang lalu·discuss
Doesn't feel like much of an explanation to me.

  # UMASK is the default umask value for pam_umask and is used by
  # useradd and newusers to set the mode of the new home directories.
  # 022 is the "historical" value in Debian for UMASK
  # 027, or even 077, could be considered better for privacy
  # There is no One True Answer here : each sysadmin must make up his/her
  # mind.
h43z
·11 bulan yang lalu·discuss
Can someone explain why we are still using a umask of 022 in ubuntu and debian?

Would it really be so hard to make that switch to a more privacy focused umask?
h43z
·11 bulan yang lalu·discuss
The span one is the important one though as most of the modern web does not use <button> anymore.
h43z
·11 bulan yang lalu·discuss
I don't see it working on firefox for buttons but on chrome. Both don't work on other html elements (div,span,..).
h43z
·11 bulan yang lalu·discuss
I used to use vimium (and tried similar extensions) but it always scared me how big the codebase was for most of the popular extensions. In the end I came up with a tiny extension for just the things I need https://github.com/h43z/jkscroll
h43z
·11 bulan yang lalu·discuss
This works on links and buttons in chrome. In firefox just on links. In both it doesn't work for other html elements.
h43z
·11 bulan yang lalu·discuss
The links yes, but what about buttons or other html elements?
h43z
·11 bulan yang lalu·discuss
Do I understand this correctly that the server here is only needed to make sure the secret it's only read once?
h43z
·12 bulan yang lalu·discuss
If you want to navigate websites more with your keyboard I created a dead simple extension. All it injects is this tiny snippet into each site.

    addEventListener('keydown', event => {
      if(event.key !== 'Enter')
        return
    
      elementWithSelection = getSelection().anchorNode?.parentElement
    
      if(!elementWithSelection)
        return
    
      elementWithSelection.click()
      getSelection().empty()
    })
This allows you to use the native CTRL+f and / search basically like the ' search.

The ' search let's you "click" on links by pressing enter.

The snippet let's you do the same for the other searches too so you can navigate the modern web where often navigations and actions are behind buttons and sometimes even divs (not just links). Unfortunately you can't activate those without this little hack.

The extension will be available at https://addons.mozilla.org/en-US/firefox/addon/click-on-sele... soon (after mozilla approves).

I use this trick in a slightly bigger extension too https://github.com/h43z/jkscroll/blob/main/content-script.js...
h43z
·12 bulan yang lalu·discuss
Oh it's like any other. Then just add another one!
h43z
·12 bulan yang lalu·discuss
Do I understand that correctly that in order for logs to rotate you have to reboot?
h43z
·tahun lalu·discuss
The only obstacle here appears to be the psychological issues of the maintainers themselves. I know it maybe hard to say "fuck off" but they will have to learn to say that to stop being exploited.
h43z
·tahun lalu·discuss
What does this have to do with the issue here? A website can just connect to 127.0.0.1 , no DNS needed.

I think what you are thinking of are dns rebinding attacks.