Hacker News new | past | comments | ask | show | jobs | submit | jadedtuna's comments login

If SSH is already being used, can't one just create an SSH tunnel to forward the login?


Something akin to ssh agent-forwarding ("oauth-forwarding"?) is really needed. And it needs to be integrated similarly well like support for jumphosts.

Haven't seen anything like this, I'll try to bring this up with the openssh folks.


Curl can connect over unix domain sockets and ssh can forward them, I feel this would be a decent way to forward authentication as access control rules would apply to the sockets.


Possibly redirect to localhost:<port> where the port is one forwarded over ssh could do the trick?


My SSH usage has multiple servers (staging, dev, etc..) and multiple clients (laptop, desktop). Some of those connections are going through jumphosts.

Setting up SSH tunnel would be possible, but a major pain, as every source/dest combination will need to have its own port, and every signin should specify the port number.

Compared to the current system, which prints a URL in terminal which I just need to click, it would be a major usability regression.


Some login requires Identity and access management (IAM) with a web interface only, if such gateway exists, a CLI tool would have to give user a link to open oneself I guess?


ssh -D ftw


AllowTcpForwarding no ftl


eh if you have shell access anyway this is easy to circumvent.


"If" is a good word. The setting above is usually being used in environments where network security is a bit paranoid, so shell access won't help against lack of a hole through the firewall somewhere in-between, unless there's a way to use avian carriers.


The thread we are in is talking specifically about using cli tools on a remote machine, so that’s why I mentioned it. If you have that you don’t need a hole in the firewall.


I've had exactly the same issue before. The only way I could resolve it was by "confirming" my phone number. I didn't have a phone number connected to that account, but Google helpfully let me confirm it anyways (i.e. it just accepted the phone number as proof of me being me, despite never seeing that phone number before).


I feel like this phone would benefit from having a larger battery. 950 mAh is not bad considering there aren't any battery-draining apps, but having around 3000 mAh would make this more attractive as a sort of device one always carries with.


I'm probably missing something but I don't understand where the 1-2 days number comes from; just for comparison: I have a 'dumb' phone which when used only for occasional calls and texts lasts about 3 weeks. I have an e-reader which gets used daily for about an hour and lasts like half a year on that charge (ballpark, it's so long it's impossible to remember). Both have batteries in the same range as this phone, how does it get such low numbers?

One factor could be that the 'light usage' mentioned (which really should be explained imo) includes hours of playing music, but still, 1-2 days is not a lot then?


Yeah I'd assume they're saving a lot of battery usage on the display. I would think long battery life would be one of the biggest upsides of this device, but they went with a smaller battery and thus advertise "1-2 days of 'light' regular usage", which really isn't blowing out any current smartphones. I just wonder if you're using it to listen to music throughout day via bluetooth, how much is that smaller battery going to bite you?


I’m using one for that exact purpose. Lasts a week on stand-by, 2-3 days of light music listening.


You use a light phone? Do you like it?


Gave it to my kid. I bought it under the premise it would have maps, Uber and other useful services, but it took over a year for even the music app to be added (and you can even add songs via usb).

It’s not usable as a daily phone at all. It was a nice idea but by the time the software is complete there will be much cheaper e-ink tech around.


* can't add songs via USB


For me, this was the true dealbreaker as otherwise, this ticks a lot of boxes for me. It seems like such a clear cost saving move without any benefit to the customer and makes the already steep price unbearable.


I would say the difference is, standard library goes through mode scrutiny/checks before an update is released.

This of course depends on the library in question, as some non-std libraries are certainly subjected to more checks than others.


Raspberry Pi 4 has up to 8GB of RAM and a 1.5GHz CPU, but your point still stands. Even with those specs it won't provide a fully smooth desktop experience.


If I understand correctly, that would still require information to be transmitted to the server, ergo copyright infringement.


Which information? The server is then not reproducing/transmitting/redistributing the content, only indices into the content. I don't see why this would be copyright infringement.


Hacker news is not a good place to get legal advice. Best to ignore anyone offering it. Talk to a lawyer for legal advice.


Sure, it's not, so do not take it as advice, especially not ultimate advice. However, I find the inevitable intellectual shutdown when discussing matters like this even more repugnant and unwarranted.


This comment is so poignant it should be part of the site guidelines.


Off-topic, on Mathpix' site, the image of a Mac contains a battery icon. Didn't know they now make Mac's with battery backups :)


Pretty sure Apple made the same mistake on iMac boxes.


Off-Topic.

Could you elaborate on commuting by plane? Do you go to work every day? How long does it take? Why did you decide to work that way?


I live in Northern Ireland, which is part of the UK but not on the island of Great Britain. The company I work for is based in Belfast (capital of NI), and we bid for government contracts. For example, the government client that I'm currently working with is the DVSA (responsible for driving tests and roadworthiness tests), and the DVSA office I'm working out of is in Nottingham, which is a city on Great Britain, meaning I have the Irish Sea between me and the office I work in.

I fly out from Belfast to Nottingham at around 07:00 on Tuesday morning, and I fly home to Belfast around 20:00 on Thursday evening. Tuesday and Wednesday nights are spent in hotels in Nottingham.

From locking my front door behind me in Belfast to sitting down at my desk in Nottingham it takes around 3h30m. Thursdays are killers though, I don't get in my front door until at least 21:30. So depending on meetings, on Thursdays I frequently end up being on the go from 08:00 to 21:30, which isn't too much fun.

I ended up working this way basically because the company I work for bids for almost exclusively central government projects, and I can't think of any central government agencies that aren't based in England and therefore a flight away.

I first started doing this when I was at university and doing a year-long placement, at the same company I'm currently full-time for.

I was asked if I fancied flying back and forth, and as a 20-year-old, the prospect of getting flown around; staying in nice hotels; getting £5/£10/£30 for breakfast/lunch/dinner every day; and extra pay due to having to fly every week was quite attractive.

Currently 22-years-old and the constant flying got old pretty quickly, but I like where work and I like working on government projects that affect millions of UK citizens' lives.


Do you mean ban human drivers in urban areas or in general?


he means ban humans. period . fullstop.


Video demonstration of the Meltdown attack was just taken down: https://www.youtube.com/watch?v=RbHbFkh6eeE due to "violating YouTube's policy on spam, deceptive practices, and scams."


Thanks for pointing that out. I've escalated internally to have the video restored.

Edit: the video has been restored.


"I've escalated internally" wow almost as cool as "I called the POTUS and the TSA thing is fixed now"!! Kudos and thanks


Thanks a lot!


It's odd that the "LEARN MORE" isn't actually a link.


Yes it is. It redirects to the Knowledge Base. Check your adblockers.

edit: huh that's weird that so many people are getting an error, it works for me across two browsers on both Linux and Windows


Tried with and without uBlock Origin in Chrome, and with no adblocker in Edge, and it's black & white with the "learn more" text but no link. IE renders it correctly as a link.

Edit: Sorry for being off-topic, but here's a comparison - https://postimg.org/image/fhb9vlmt1/


I don't have any adblockers. I'm using Firefox. It's not a hyperlink for me, it's plain text.


Not a link for me either. Even with uBlock and Ghostery turned off.

Chrome - Mac OS X Sierra


Just tried with vanilla Chrome and it's still not a link.


mirror?


This tweet has a GIF of the original YT video: https://twitter.com/misc0110/status/948706387491786752


Can you put it on vimeo?


Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: