Hacker Newsnew | past | comments | ask | show | jobs | submit | kebolio's commentslogin

https://www.passwordstore.org/

command-line, encrypts passwords with gpg, synchronises using git and by default only copies the password to the clipboard and automatically wipes the clipboard after a minute


This is what I've used for quite a while. It's not the fanciest, but it is simple and easy to use.

For backup, I use duplicity to encrypt my .password-store and all other private files. I have it spit the output to my dropbox folder so it syncs automatically.

This keeps what sites I have passwords for hidden from the outside world.

I've looked a little into keeping the entire .password-store folder encrypted locally until I try to use it, but I guess I'm not paranoid enough for the hassle.


Last time I checked this it would store metadata about the passwords in plain text (file and directory names). Did that get fixed yet?


This "issue" has been fixed with the pass extension 'pass-tomb' that keep the whole tree of password encrypted inside a tomb

See https://github.com/roddhjav/pass-tomb


has nothing to do with apparmor.


HEADLINE: easier, simpler package creation and building

DESCRIPTION: on distros like arch, to a lesser extent void and even gentoo, writing package definition files (PKGBUILDs, ebuilds, templates) is relatively straightforward; in contrast, i don't even know where to start with finding, editing and building debian packages. i think they're built from source packages but beyond that i have no clue. i think visibility of documentation could help here, if not more radical changes to be more similar to the arch/gentoo workflow.


Indeed. Typical scenario, I have software X that can follow such a process:

    tar xfvz foo
    cd foo
    ./configure --prefix aze
    make
    make install DEST_DIR=qsd
I want to package this to save build and deploy time as well as increase reliability. It should be downright trivial to:

    1. find the info explaining me how to do this
    2. understand it
    3. effectively do this
Debian fails even starting with step 1. Even if you manage to go through step 2 with some hair left, step 3 is insane compared to the mentioned alternatives.

This does not even involve step 4 (contributing the package back if it's not for internal use)


I'm totally with this. Simplified build process will help people adopting newer/custom packages into stable releases. Better if a package can be generated from single definition file. Even Redhat has a simpler build system that relies on package "spec" files. The current workflow resembles the one in Redhat, but is more verbose and, well, dirty.


And if you dig down deep you'll find that Debian packages most of the time don't even support the features the manpages claim (e.g. building with debug info or custom CFLAG's)


firmware support involves supplying the binary blobs that the driver needs to upload to certain peripherals like intel wireless cards.

personally i would like to see non-free software kept out of the main disc images but the images including firmware being more visibly advertised and it made clear on the download pages what hardware requires it and who needs it.


So the firmware for a certain WiFi card is the same, no matter if you use Linux or Windows of MacOS? And it is provided by the manufacturer of the Hardware?

And some WiFi cards works out of the box with Debian? Is that because the manufacturers of those cards provided the source of their firmware or because open source alternatives have been written by somebody else?


There are a few models that don't need a firmware blob or where the manufacturer provided source code for it (mostly pre ac Atheros chips).


firmware is specific to chipset and are binary blobs supplied by the manufacturer. ath9k-supported and generally realtek cards don't need firmware; theo de raadt noticed the culture difference between american vendors like intel and broadcom who leave the functionality to the firmware so they can be first to market, and chinese vendors like realtek who take their time to best fit customer needs


Slightly disconcerted that the first thing webdevs are rushing to do with wasm is to port massive language runtimes to it, continuing the web tradition of piling shit upon shit upon shit. Personally believe that this is totally the wrong idea; compilation or transpilation from intermediate forms is far more interesting and sensible in my view


Sure when targeting the web with software that doesn't exist yet I would definitely write that in JS. However, if there is a well-tested crypto library that has 300.000 lines of well-tested C code and that I can use without too much pain by transpiling it to JS I'd always prefer that to writing my own implementation in JS. In that sense transpiling is a great way to reduce redundancy by allowing to use code in different context. Concerning the intermediate form: I'm a big fan of model driven development but I think our tooling for it isn't good enough yet, so until someone invents a description language that is really powerful enough to describe let's say a crypto library and then generate code from that in various languages I think transpiling from one concrete language to another is still a better option.

BTW a lot of the power of Python, Ruby and JS comes from the interface these languages provide to existing C/C++ codebases, and I assure you that the binding code to make this work is often far from pretty. As end users we don't care about this though as long as it works.


It's not like people are planning on using these in production. It's just some fun hobby projects that are useful for, say, online Python tutorials and stuff.


Well actually, I would. But not for webapps.

There's a fairly large class of scientific computing oriented apps where having a widely deployed and fast VM with CPython compatibility would be fantastic. Python (for better or worse) has a large library of open source computational libraries, but shipping an embedded CPython VM is a pain. As an example, I helped advise an undergrad working on a program to calculate collagen fiber orientation for biomedical research labs. Figuring out cxfreeze or other Python packaging systems took longer than writing the actual app.

Unfortunately JavaScript doesn't have broad scientific library support and grad students in non-CS fields don't always have the time to become versed enough in C/C++ to create a usable app. So CPython & associated C libraries ported to wasm could be quite useful... This could apply to R programs as well.

Re: grandparent, just because a project offends your sense of purity doesn't mean it isn't surprisingly valuable for others.


You can sell GPL software under all the terms of the GPL, but the users can redistribute it under freedom 0, 2 and 3. You can mitigate this by being a single source of development and offering support.


hmm the .jp international clique really does spread far and wide...


Capitalism is why we can't have nice things in the first place. Capitalism precludes news media from reporting fairly and accurately rather than pander to their advertisers. Another example: want cheap fast internet? Too expensive to run fibre even though these corporations are making profits that run into billions and none of the US giants will have this so-called "common carrier" policy.


It's not "capitalism", it's human nature. We like cheap stuff. And the bystander effect. It's free online, so someone else will surely solve it, pay for it, fund it, support it, etc.


Yes, it is to do with "capitalism" and the product of a society geared towards making money instead of making cool stuff. It isn't immutable, there are better ways of doing things, but then again that's beyond the scope of the argument. :^)


No, it's not. Capitalism is private ownership of capital, which means there's a whole lot of economic activity generated by thinking about what to invest in, which is just a blind optimization process.

Society could harness it for good or bad. We have cheap applied science things (microprocessors with radios and amazing magically touch sensitive displays without ugly cords with endless content and ability to just call each other anywhere* on the planet), and we have of course things like the great firewall of china (and turkey and so on) which do deep packet inspection, enabled by very similar technology companies.

But it's immutable. You can't choose the second best thing. Because that just means your preferences and thus your utility function values underdogs above topdogs, hence you'll see those as the best. It's just tautological. And sure, we'll probably climb out of this hole eventually, but maybe with things like patreon and co: http://alternativeto.net/software/patreon/ (for example AdBlock + Flattr seems like a good solution to the advertising hell)

Furthermore, just to talk about the original point of "capitalism is killing quality news" ... are you sure? I mean there are still quality news outlets, and there will be, but the problem is that people don't read them. And bias. Even if you could sign up to be a journalist and magically get a fixed income if at least 10 000 people are reading your stuff, there would be a lot more crazy/spam out there. _Because_ people are people, they cheat, they like easy solutions, they are greedy. They prefer easy explanations, they prefer silver bullets, they prefer gods and guns for law and order even if we know that education and equality is the answer.


Capitalism is exactly why you have nice things. Someone figures out what people want, how much they will pay, and then they go about providing it. Others catch on and compete and everyone benefits.

What is happening here is that too many bench warmers are trying to make excuses for why there are enough subscribers to the site. After all, all these people how can't they get a paltry 25k.

Simple, not that many people really know about their site and of those apparently the bulk just don't care. Maybe the content isn't really that interesting. Call a spade a spade.

then throw in, there is just such a wealth of information out there that it is easy to get lost and any one trying to sell stuff is going to have to work very hard to get noticed and even harder to make the sell.

Greed doesn't require capitalism, it occurs about any place where someone has stuff other people don't and where government leadership plays off the feelings of jealousy, income differences, and racial differences. Greed requires politicians who are more quite capable of telling you someone else has stuff you don't have and it is not fair or that you deserve stuff for free... provided you vote for them


Corporatism, not capitalism.


What's the difference? Capitalism is always going to end up with consolidation, monopolisation and anti-user practices.


Capitalism is all about competition.

The magic of capitalism is happening in China right now. You have hundreds of manufacturers making everything, driving prices down.

In the US, we're more like a command economy in many ways. We have these huge sectors like healthcare and defense that are 100% top down procurement and probably represent 30% of the economy. Another 8% of the economy is financial services, which is mostly a small cartel with direct government supports.

The telecom situation is the same thing. The corporate idiots bake out risks and the US turns into a dinosaur. Lots of real innovation will start happening in Asia.


Don't get where people get the idea that Wales are agitating for leaving the Union. Wales is more legally entrenched than any other of the constituent countries of the UK and also majority voted to leave the EU.


Yep. But I anticipate the Plaid vote will head rapidly upwards – not to SNP levels, but 25% territory.


LLVM is a compiler toolkit, used by, for example, Clang for C/C++/Objective-C, Rust, and various libraries like Mesa.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: