Hacker Newsnew | past | comments | ask | show | jobs | submit | sva_'s commentslogin

You exposed your redis publicly? Why?

Edit: This is the kind of service that you should only expose to your intranet, i.e. a network that is protected through wireguard. NEVER expose this publicly, even if you don't have admin:admin credtials.


I actually didn't know I had. At the time I didn't properly know how docker networking worked and I exposed redis to the host so my other containers could access it. And then since this was on a VPS with a dedicated IP, this made it exposed to the whole internet.

I now know better, but there are still a million other pitfalls to fall in to if you are not a full time system admin. So I prefer to just put it all behind a VPN and know that it's safe.


> but there are still a million other pitfalls to fall in to if you are not a full time system admin.

Pro tip: After you configure a new service, review the output of ss -tulpn. This will tell you what ports are open. You should know exactly what each line represents, especially those that bind on 0.0.0.0 or [::] or other public addresses.

The pitfall that you mentioned (Docker automatically punching a hole in the firewall for the services that it manages when an interface isn't specified) is discoverable this way.


Thanks, didn't know about this one.

LSD is a powder/crystal (a salt). People just don't consume opioids orally, usually. There's something similar though: skin patches, since (other than LSD) fentanyl can be absorbed through the skin.

In context, we're talking about pills cut with fentanyl, in which case it is often consumed orally, mixed in at a very small concentration compared to the other ingredients.

Powedered drugs like cocaine mixed with fentanyl are even more horrible, since there is absolutely nothing to keep the concentration of fentanyl homogeneous throughout as it is handled.


Blotters.

You can get more than double that battery time with an ARM

Once you cross the ~7h battery range the cons of having to use apple hardware and software is too much to bare.

But then you need Apple hardware and MacOS.

I think they mean snapdragon hardware?

Right, that works if you don't also need very high performance.

Anecdotally I can say that I was just in Boston for the holidays and the immigration officer was the most chill out of the 3 times I visited.

But yeah the prices are crazy.


Has it happened this year?

Because now you're required to list all of your handles on any social media you had in the last 5 years and any email you used in the last 10.

This applies even for visa waiver countries as of 2026.

This makes me nervous because I have been critical of the US on some topics regarding the news or geopolitics (e.g. the recent events in Venezuela).

But even admitting the us is a sane country protecting the right to speech, there are 0 chances I remember all my emails (I don't even remember all the clients I worked with but gave me an email) or reddit/forum accounts.


I went there about 3 weeks ago. It was asked of me but only optionally, and I didn't do it.

The Canadian border guards are still significantly more aggressive than the US ones

The Canadian ones have to deal with Americans that don't realize the second amendment doesn't excuse forgetting there are firearms in your vehicle

That's why the American side presumably has "Don't forget about your guns" signs, while I can vouch for the Canadian side having "Don't forget pot isn't legal down there" signs.

The former is much more dangerous to officers than the latter, and justifies a more aggressive response IMO


No. To private entities (news outlets) who, according to this law, get to decide what websites to ban without a court order or any due process

The exact same thing is implemented in Germany already (DNS-level block), and I did not see Cloudflare CEO rage posting on Twitter about it.

"you must block things in germany after it goes through a formal government process" versus "you must block things globally even for places not subject to italian law because an italian media company doesn't like it"

There's more than a subtle difference betweeen the two.


Has Germany tried to fine Cloudflare over it?

Because the German law only harms Germans, whereas the Italian law in question demands global bans.

I'm in Germany and Cloudflare DNS doesn't Block eg Annas Archive for me, while my ISP does. I also don't reckon Germany tried to fine Cloudflare yet. So what is your point?

Additionally to the much larger IP space, you also have larger headers and additionally extension headers which make deep packet inspection computationally much more expensive if you consider the scale

They can also be a machine that might add a non-negligible amount of mineral oils and possibly other stuff to your food. The guideline to use should be that the ingredient list should be as short as possible. If it has more than 5 ingredients, that's already incredibly suspicious in my opinion. The problem is that some stuff (like a mineral oil contamination) doesn't even have to be declared on the ingredient list.

For example, normal simple bread should only have 4 or maybe 5 ingredients.


This is my personal approach too. I stock things with fewest number of ingredients. Example that comes to mind: RXBar might be UPF but there’s not much in it. Compared to your average name brand protein bar or granola bar.

The other downsides of both sugar and in particular glutamate are that you'll find other foods less sweet or having less depth of flavor (umami), so you'll be more likely to go for the processed options.

FWIW, in my Galaxy S23U I can put 2 physical SIM and 10 eSIM.

But only two lines are active at the time.

The same is the case with pixels, never at least.


Indeed, the website transfers 1.18mb (compressed) to deliver 6.7kb of text. Kind of ironic.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: