Hacker Newsnew | past | comments | ask | show | jobs | submit | jaytaylor's commentslogin

(Co-creator here) This is one of the use cases for Leash.

https://github.com/strongdm/leash

Check it out, feedback is welcome!

Previously posted description: https://news.ycombinator.com/item?id=45883210


This is a really neat project .

At my company (StrongDM) we recently open-sourced a tool in this space called Leash: https://github.com/strongdm/leash

By default it runs in docker, and also includes an extra sophisticated macOS-native --darwin mode which goes beyond the capabilities and guarantees of the likes of sandbox-exe, bubblewrap, and in some ways docker. Leash provides visibility into and control over every command and network request attempted by the coder agent. Would appreciate any feedback, and will try to get in touch with the author (Gordon).

Now I'll definitely look into automatically supporting pass-through auth for at least gh cli in Leash - always looking for what folks will find useful.


Interesting! The sandboxing space definitely deserves more attention.

On the other side of the spectrum, we're working on a lightweight approach that augments user namespaces with libseccomp to filter syscalls via BPF.

https://github.com/corv89/shannot


Leash does it via eBPF today. Are you open to a collab?


Absolutely. I’ll send you an email


Have you seen Leash?

https://github.com/strongdm/leash

It even has a --darwin macOS-native mode which goes beyond the capabilities and guarantees of sandbox-exec and bubblewrap.

Full-disclosure: I am one of the authors.



X-Mouse Button Control (XMBC for short) is a handy Windows app to override mouse buttons to do arbitrary other actions on a program/App -specific basis.

https://www.highrez.co.uk/downloads/XMouseButtonControl.htm

However the docs (which are excellent!) were published by the developer as PDF-only, so I did a nice transform to HTML and posted it on my personal website. I will do my best to host it until I'm dead, and also submitted it to TIA:

https://www.highrez.co.uk/downloads/X-Mouse%20Button%20Contr...

https://jaytaylor.com/x-mouse-button-docs/

Forever TIA link: https://web.archive.org/web/20240825203006/https://jaytaylor...

Cheers,

Jay


Years ago I made a Go library called `html2text' just for this:

https://github.com/jaytaylor/html2text/

https://jaytaylor.com/html2text

It takes HTML as input and generates markdown-esque plaintext, with the main focus being to make the plaintext version easy and pleasant to read for human beings. Then using MIME types*, you transmit both the rich html version alongside the generated text/plain version.

This is cool because it makes it easy to respect both rich clients (like Gmail et. al.) as well as command-line or other clients which work better with simple text.

Hope this helps folks have the best of both worlds! :) cheers

* n.b. To ensure this works properly, be sure to use the right MIME headers:

https://stackoverflow.com/questions/3902455/mail-multipart-a...


Yep, I do similar with all emails I send, run the html through a `html2text` transformer and attach that as the plaintext variant of the email.

Now whatever the receiver decides they want to view they can.


Hygroscopic, an interesting new word to me! Thank you :)

> hy·gro·scop·ic

> adjective

> (of a substance) tending to absorb moisture from the air. relating to humidity or its measurement.


compare: hydrophobic


I didn't know the word internecine, it's actually really useful and relevant in many situations, thank you!

> internecine, adj.:

> destructive to both sides in a conflict.


I find myself googling "etymology {word}" a lot recently; here inter is between like in intercontinental, and necine is death like in necrosis.

And inter is apparently the origin of intel, which is topical, and suggests Intelnecine, adj: destructive to all factions within Intel, or any company with a destructive amount of in-fighting.

https://www.etymonline.com/word/internecine


> I’ve often thought about getting together with some friends to pay into a fund to house our websites after we die. I don’t think setting that up would be too hard — the math around insurance policies of this sort is quite simple — I mostly haven’t tried to set something like this up just since it’s a pretty morbid ask. But, if you’d be interested, maybe reach out to me?

> Our ghosts could live forever, if we help each other.

I love this idea and would gladly assist in the effort, let's set it up :)


the year is 2122 and all the "good" (short, memorable) DNS names are owned by ghosts. in the grim dark future, there is only joe_smith_from_minneapolis_born_2055.com


Underscores aren't technically valid in URLs or domain names ;D

That minor implementation detail aside... You make a good point. Perhaps MD5 or SHA256 hashes will become a last resort for domain names? Haha, no.


Or maybe UUIDs...and the typical printed representation of those uses hyphens, which are valid in domain names ;)


DNSv6 will emerge and replace the old DNS system


Previously <https://news.ycombinator.com/item?id=31047818>

-----

From the NearlyFreeSpeech.Net FAQ <https://www.nearlyfreespeech.net/about/faq#Interest>:

> Q: Do I get interest on my deposit? A: No[, but...] We periodically reevaluate this situation, because we think a web account that runs forever purely off of its own interest is a pretty cool idea.

NFSNet also has an interesting part in their FAQ in response to the question If I think services you host are currently unavailable due to lack of funds; is there anything I can do?, they outline a process whereby third-parties can fund a hosted service by creating an account themselves, depositing funds into their own account (NFSNet services are prepaid instead of billed after the fact), and then submitting a manual (but free) request to transfer those funds to the original accountholder based on the service's domain name. I've always thought this was interesting because in theory someone could set up a community, disappear, and then the community could step up to keep it funded long enough for the person to get out of the hospital/be rescued at sea/etc, so long as the infrastructure is solid enough to remain operational without being attended to (not vulnerable to exploits, etc.)

They've also got a policy where if the member who operates the service is a willing participant, they can publish their NearlyFreeSpeech.Net account ID and have donors add funds to cover 100% of service costs via automated transfers. <https://www.nearlyfreespeech.net/about/faq#Lifeboat>


The Klingons were hella cool! Wish I could have appreciated it more as a kid, but at the time (early 90s) I didn't even know what I was looking at or how special it was :D


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: