Hacker Newsnew | past | comments | ask | show | jobs | submit | napkin's commentslogin

Things are complicated. As a policy, I wouldn’t want to encourage grandma to be going to any web site to download software. Grandma should probably stick to the App Store. And personally, I would way rather install github builds than downloads from ‘official’/independently maintained web sites. Especially in the case of free / open source projects, sometimes cash constrained. Security is hard.

I’m not super knowledgeable about modern video players- I do like Infuse, which is in the App Store.


When prompting an LLM service to leak the system prompt, how do you have the faintest idea as to its accuracy?

I‘ve read people say it‘s a difficult challenge for the providers. But aren‘t there some pretty basic strategies? E.g., code pretty near the front of the stack that just does some fuzzy string comparison on all output? They don‘t need to rely on just model behavior…

I imagine it‘s likely that the model is just doing what it‘s good at? Hallucinating a prompt?


The author recommends this add-on- “Auto Tab Discard”- apparently optimising tab memory management. Why wouldn’t the standard distribution adopt it?

I’m reminded of when I used to maintain an epic-sized vimrc, compiled my kernel for a different IO scheduler, etc. The plight of the “power-user” is walking a fine line between tool refinement and over-complication (which in my case can stem from procrastination).

There are many reasons to strive for a minimalist setup, main one being that setting everything up from scratch shouldn’t feel exhausting.

That said… Firefox, with just uBO and a few basic privacy settings tightened, is pretty great.


I think it does. I had over a thousand tabs open on Firefox mobile when I upgraded my phone recently.


Browsers discard tabs by default, but only when your system is running out of memory. You can use Auto Tab Discard to discard all or most tabs automatically after a certain time.


honestly I've just left the extension on. Firefox does natively have this feature now.


But you’ve left out part of the narrative: Developer pushes an App update which purposefully violates the TOS, expecting rejection- having planned in advance to kick off an expensive PR campaign and legal battle.

I don’t deny Apple’s pettiness… Nonetheless, can you provide a different example of why devs are afraid of publicly criticizing Apple?


>I don’t deny Apple’s pettiness… Nonetheless, can you provide a different example of why devs are afraid of publicly criticizing Apple?

Every subscription service should have a banner on their pages saying signing up through iOS takes 30%. Many just disabled signing up.

Of course maybe this isn't the best example since Apple actually made it against their rules to tell users it'd be cheaper to purchase on their site.

Apple's rules undeniably cost end users money. Epic proved it by taking some of that 30% fee and giving it back to the consumer (you got more Fortnite credits buying on Epic store instead of Apple store).

Why people try to defend Apple I'll never understand, my guess is some people who own an iPhone have decided that's 'their team' and who wants to see their team lose? But I'm not sure.


> my guess is some people who own an iPhone have decided that's 'their team' and who wants to see their team lose?

Apple vs Android is Coke vs Pepsi for Zoomers.


> Every subscription service should have a banner on their pages saying signing up through iOS takes 30%.

Why do I as a user need this information? When I'm a on gas station, I don't see banners how much tax or fees I'm paying. I can find this information if needed, but total price is what I'd like to see in the first place.


> Why people try to defend Apple I'll never understand, my guess is some people who own an iPhone have decided that's 'their team' and who wants to see their team lose? But I'm not sure.

Happy to help! It's because some of us are Apple's customers, not Apple's suppliers, contractors or "vendor partners".

We customers like that Apple plays hardball with the people who would otherwise try to fuck us over. Remember that dev a few weeks ago who was giving examples of the "ways that Apple's IAP sucks"? Most of the things he wanted to do were dark patterns that are bad for customers.

If devs have to raise their prices by 15%, so be it. I would much rather that one company has my PII than fifty, anyway.


> Why people try to defend Apple I'll never understand, my guess is some people who own an iPhone have decided that's 'their team' and who wants to see their team lose

It's this. Apple somehow managed to cultivate cult-like behavior in their users, which I've also never understood.


> It's this. Apple somehow managed to cultivate cult-like behavior in their users, which I've also never understood.

Because an iPhone is a status symbol, like a Mercedes, and thus "proves" that you are a better human being. It's literally about people's self-worth.


Because everyone who likes how Apple has made it easy for users to manage their subscriptions and enjoy the overall user friendliness of their products we are thus cultists who just blindly do as we’re told. Maybe some people don’t agree with your views; that doesn’t make them cult followers for having a different opinion.

Edit: fuck I just got trolled. According to jillyboel profile we are all just fascists. And dang is preventing him from spamming his trolls on HN.


There's no law against you overpaying Apple when you could get more value by going off app. If you want to spend $14 for something that's $10 on Epics website, your welcome to do so. Epic will still get their $10, and you can gift Apple $4 for making it easy to cancel your future subscriptions.


if 3 posts every hour before getting rate limited is spamming sure


And you've left out part of the narrative: the terms that Epic broke were illegal in the state of California. Hooli's contract is thus invalid.

As for different reason, how about this official policy from ~2015:

> If your App is rejected, we have a Review Board that you can appeal to. If you run to the press and trash us, it never helps.

https://web.archive.org/web/20150411105225/https://developer...


Yeah, not arguing the legal specifics. It’s good for Apple to be challenged in court.

But Epic did go out of their way to ‘trash’ Apple in the press. For this and other reasons I can’t generally relate to Epic. (e.g. targeting kids with microtransactions, burning piles of money on Epic Games exclusives.)

I would also not want to do business with Epic


Apple is the primary beneficiary by far of games like Fortnite because they allow and tax them in aggregate, even without Fortnite they offer thousands of games for kids to spend a grand or ten in. The legality of the tactics employed by the gaming industry, that can only occur with the platforms complicity, are being challenged in Europe which is hopefully going to end a lot of these practices and derail both Tims grifting off children and cultivated addicts.

https://www.beuc.eu/reports/game-over-consumers-fight-fairer...


> I would also not want to do business with Epic

So don't put yourself in the position where you have to do business with Epic, like forcing them to use your store to get software on the platform over a billion users use.

Apple could easily just do what various courts have ordered them to do: Open up the ecosystem and allow anyone to distribute apps. This has the added benefit of allowing apple to stop doing business with the entities they don't like, because they are no longer involving themselves in a transaction between the user and the business the user has chosen.

It will also save their executives from a prison sentence if they keep this up.


Yeah, there's no good guys in this fight. Apple may be behaving badly, but Epic broke the terms they agreed to, tried to use the courts to force Apple to change their App Store business model, and even kicked off a public PR campaign trashing Apple... and now they're whining because Apple is not treating them nicely after all that? You went nuclear on Apple, Epic. That's not going to make them interested in having you as a business partner.


Shrug. They can open up the apple ecosystem so you don't need their store and then they can refuse to do business.

Apple put themselves in the position that they have to do business with entities they don't approve of, thankfully the courts are reminding them of this. Soon one or more of the apple execs will wind up in prison.


Yeah, though Epic put themselves in the position of having the gatekeeper of an important part of their business want nothing to do with them, and now they're being whiny babies about it. Both parties suck here.


No, apple is clearly the evil one. They are bullying many, many, many other companies and individiuals in a similar, and often even worse, fashion. Those don't speak up because they're afraid of Apple's wrath. Thankfully Epic did have the balls to stand up, and now various various legal entities are forcing apple to make changes that benefit everyone (except apple).


As a user I love apple products for making payments safe. I can get a refund if the item I bought is not as advertised or I bought it by mistake, I don't need to figure out how to cancel a subscription, it's couple clicks to cancel for any subscription. I don't want apple to allow purchases outside the app as I'm afraid companies will leverage their power to redirect users outside of App Store to bypass those "payment safety" features that do not benefit them and will use fishy tactics to increase their profits.


These are billion-dollar companies using the courts to fight over who gets a bigger slice of the pie. They are not your friends or allies.


I trust Sweeney’s intentions far, far more than I do Cook’s. The man is a bona fide hacker from the trenches and does not hide his true feelings behind a corporate firewall.


Wanna buy a bridge?

When was the last time you heard Sweeney admit they target dark patterns at children?


Not that it's an excuse, but industry darling Gabe Newell has engaged in similar dark patterns since well before Fortnite[1]. Yet, for some reason, there's not a lot of "fuck Newell" people out there.

To be frank, I think this is an issue people only opportunistically care about.

[1]: https://www.forbes.com/sites/jasonwosborne/2023/05/25/how-lo...


Sweeney is an ally to anyone who wants to freely distribute software.


Of course not, but resulting changes to Apple's policy are still a good thing for everyone else. Anything that forces apple to bully other organizations and people less is a good thing.


Epic broke the terms they agreed to, filed the lawsuit, launched an advertising and PR campaign to support it, and continue to make whiny complaints after they got what they asked for, but Apple are the bullies here? I'm not convinced.


Terms that were illegal and thus not binding in many jurisdictions. If I were to write: "By replying to this comment you agree to my Terms of Service which require you to paypal me 10k", you would laugh and disregard it. Same thing.

Anyway, just look at how apple forced their payment service so they can take a 30% cut of every transaction made by any iPhone user. Then they banned price differences between Apple's own payment service and external, cheaper, ones. This forces companies to raise their prices by 30% everywhere. So we're all paying more to fund apple's greed. This is just one example of many, and you have to look beyond the apple vs epic fight since that is just the most public instance. Apple are the bullies.

Apple are involving themselves in business between their customers and companies those users have chosen to use. Apple are the bullies.


Yeah, so like I said, Epic got what they asked for. Why are they still complaining?


Re-read the post we're commenting on please.


> Apple may be behaving badly, but Epic broke the terms they agreed to, tried to use the courts to force Apple to change their App Store business model, and even kicked off a public PR campaign trashing Apple... and now they're whining because Apple is not treating them nicely after all that?

> You went nuclear on Apple, Epic. That's not going to make them interested in having you as a business partner.

this is unfortunately the same language abusers use when their victims try to gain support (pr campaign), seek help (use the courts), or fight back (violate unfair terms)

maybe epic just wants apple to stop abusing them and leave them alone while they interact with their customers on a platform that apple has been ordered several times to open up

not being abused shouldn't require you to "be nice" to your abuser, or to want to be their "business partner"


No one is being abused, you're buying into Epic's emotional advertising campaign.


that is unfortunately also a thing that abusers often say

it is not for you to decide, though

also, I'm not really interested in being the subject of discussion, but if you're going to tell me what I'm doing, at least be right about it: I haven't followed any public statements from either party in the matter; I've only read court documents and rulings; and I have never patronized either company and have no plans or interest to do so. I think that makes me more impartial here.


They couldn't start the legal battle without doing this. They needed to get solid legal standing. So yes, they planned it, but they couldn't easily challenge Apple without getting the rejection.

Your suggestion is that they sit on the sidelines and complain about the situation. That's what plenty of people have done, and it makes no difference.

I'm not a fan of Epic, I don't play their games. They did all this for their own benefit. But it's probably a good thing overall.


a successful PR campaign given now we have court rulings that show apple is an abusive company.

abiding by apple's abusive TOS won't improve developers' situations, you have to stand up to them.


What's abusive TOS? Aren't EPIC TOS abusive where the payments to EPIC are non refundable in many cases or that you don't own your account or that your account can be terminated any second without a notice?

Isn't it a free market where if you don't like TOS you just don't use the product?


Is there evidence Vision Pro production was ‘cancelled’ as opposed to just running its limited course as planned? Are there substantial leaks indicating its successor has been cancelled?


  Early 2024: Apple supplier says planned production cut by 50%
  Late 2024: Apple supplier says cheaper Vision Pro 2 (N109) cancelled
  Late 2024: senior executive moved from Vision Pro to Siri/AI team
  Early 2025: Bloomberg says tethered Apple AR glasses (N107) cancelled
There may be an SoC (e.g. M4/M5) refresh of existing Vision Pro 1 design.


This all doesn’t sound worth reading into. There are other interpretations to supplier leaks. Ditto re: execs moving between teams. Apple AR != Vision Pro. On the flip side Apple is still shipping updates, new content, and selling units. I’ll just wait and see.


It's true that 50% cut in production followed by a halt in production does not mean that Vision Pro development has stopped. A smaller number of employees could continue work and something could be released in a few years, like any R&D project.

In comparison, Meta smart glasses sold 2M units in 5 quarters. Essilor-Luxotica is increasing production to 10M units by the end of 2026. Perhaps to be expected at 90% lower cost than Vision Pro, but those volumes have kickstarted an app ecosystem for smart glasses, which has failed to materialize for the low-volume VisionPro.

If future 2027 Apple AR glasses appear with a subset of VisionOS, they will compete with incumbent products from Meta and Xreal. Some lessons learned and some apps developed for Apple AR could help Vision Pro and VisionOS, if Apple AR gains millions of users like Meta smart glasses.


> Late 2024: senior executive moved from Vision Pro to Siri/AI team

That executive is not having a good time...


She may help schedule realigment with reality, https://appleinsider.com/articles/25/01/24/apple-intelligenc...

> Across Vorrath's many high-profile Apple projects, she has been known for keeping work on schedule, and for implementing rigorous bug testing. Consequently, her move to the Apple Intelligence and Siri team is likely to be because the project needs to be given more impetus.


(SWIM’s experience with Silk Road):

For LSD there existed a third-party forum, where a group of (supposedly) vendor-neutral, unaffiliated individuals would purchase samples from vendors, send them to private or state-sponsored labs around the world and publish/discuss the results (often with online links to lab results).

Yes, of course vendors could have also attempted to infiltrate these forums. But as enough of these functions were provided by/for the community, the profit incentive tilts. If you ran a vendor account on the Silk Road, your effort was better spent maintaining/improving good infosec and mail/postal security. Some techniques they developed were quite innovative, the professionalism was evident.

Ross’s story is fascinating and tragic- as everything that’s said for and against his character is generally true. Silk Road was built on naive yet admirable ideals. It fostered a special community, some of which really did reflect those ideals. He got in over his head, and really did try to have someone killed.

Though, the details on that latter point are a bit more complicated- authorities had infiltrated Ross’s inner circle- the motive and the ‘hitman’ himself were fictional. Ross still took the bait though, which is pretty damning. Until that point, they weren’t sure they had a sufficient case on him.


Is that why they never prosecuted the attempted murder? It sounds like entrapment.

That's the point people don't seem to be getting about anonymous reviews- if the review is more costly than the value it provides the seller, they won't do it, and it's fairly easy to make that the case. A separate enthusiast forum where the reviews are from people with a long history of high effort engagement is a good example of that. That's basically the idea behind crypto as well- making false transactions is more expensive than the value it could return.


The truth is no one knows why they didn't bring those charges, or the real details behind the evidence or what happened in those interactions. It's pretty much shrouded beneath things like: -DOJ released some details and screenshots, but -the FBI agents who were involved in investigating this topic were like arrested for stealing bitcoin from silk road or something, so their work is hard to find credible -general lack of clarity as to the identity of the person running silk road at the time this happened


>It sounds like entrapment

The law is murky and seems to hinge on the court's opinion on whether the person who committed the crime would have had they not been influenced by an officer. The police being the ones to start the conversation doesn't rise to the level of entrapment. The police deceiving you into wanting to commit a crime may rise to the level of entrapment if the courts find you wouldn't have done it otherwise (the example I found that illustrated this best was "Hey there's a warehouse full of valuables let's go rob it" isn't entrapment but "Hey this guy said he's gonna kill your kid you need to kill him first" probably does absent any reason to believe you would have killed him without being deceived first). My guess would be that the grey area, plus the relative ease with which they were able to secure a life sentence for the other charges, is why the murder-for-hire charges never went to trial.


> the example I found that illustrated this best was "Hey there's a warehouse full of valuables let's go rob it" isn't entrapment

Literally entrapment.

Like you said, it hinges on if you would have committed the crime without encouragement from the police.

A trap car is not entrapment. You walking past a trap car, checking if the door is unlocked and then going for a joyride / stealing it means you convinced yourself to do this crime.

An undercover policeman telling you he's seen an unlocked car, and "just take it for a spin, for the hell of it"? That's entrapment.


https://en.wikipedia.org/wiki/Hampton_v._United_States

>By a 5–3 margin, the Court upheld the conviction of a Missouri man for selling heroin even though all the drug sold was supplied to him, he claimed, by a Drug Enforcement Administration informant who had, in turn, gotten it from the DEA. The majority held that the record showed Hampton was predisposed to sell drugs no matter his source...The case came before the court when the defendant argued that while he was predisposed, it was irrelevant since the government's possible role as sole supplier in the case constituted the sort of "outrageous government conduct" that Justice William Rehnquist had speculated could lead to the reversal of a conviction in the court's last entrapment case, United States v. Russell.[2] Rehnquist was not impressed and rejected the argument in his majority opinion.

Here's one where the government said "Hey you should sell this heroin that I gave you" and the conviction was upheld because "the record showed Hampton was predisposed to sell drugs no matter his source." So no, the simple act of an undercover cop asking you if you'd like to commit a crime isn't entrapment on its face.


> In late February 1974, Hampton and a DEA informant known as Hutton were playing pool at the Pud bar in St. Louis when Hampton noticed the needle marks on Hutton's arms. He said he needed money and could obtain heroin to sell. Hutton responded that he could find a buyer. After the conversation, he called his handler, DEA agent Terry Sawyer, and reported the proposal.

It was under his own will, the DEA just supplied him the means to do so.

It's basically as if I was in a seedy bar and spot a pistol on an undercover agent, and I tell them I know an easy spot to rob near the bar. Then the undercover agent gives me the pistol, asking for 20% of the take. It only turns into entrapment if I was talking about money problems and the undercover agent would have told me robbing a nearby convienence store could be an easy solve to my money troubles.


My understanding is that they did not charge him with the attempted murder because it was later found that both parties/witnesses (other than Ross) later turned out to be corrupt and financially benefitting from the situation (keeping his murder payment for themselves) and the Silk Road in general.

It made the situation...messy, to say the least.


Entrapment requires some coercive/persuasive force by the government to push you to commit the crime, the government is allowed to setup entirely fake scenarios and let you choose to do a crime.


The above person claimed "the motive was fictional" which sounds coercive?


Not that it's a perfect source, but reddit lawyers used to describe the difficulty of proving entrapment by laying out two requirements: (1) you wouldn't have committed the crime if the instigator wasn't law enforcement, and (2) you only committed the crime because the instigator was law enforcement. One or the other is not enough. Like an 'if and only if' deal.

If you aren't aware that it's an LEO urging you on, I don't see why you should be able to argue impropriety. You made the decision as if it were real and would have real consequences.


Not really - entrapment is narrower.

If someone comes to you and offers you a fictional job to illegally move a lot of drugs for cash and you agree - that's not entrapment, you agreed of your own accord. That the whole thing was a fake setup is not materially relevant.

If you first refuse, and then the undercover officer says "if you don't do this we'll come after you and kill your family" and then you agree under duress - that's entrapment.

It has to be something that's compelling you to do something you would not have done otherwise. Presenting you with the option to make a bad choice is not itself enough because had the situation been real you would have done it.

On one hand I'm sympathetic to Ross in that I can empathize with his youthful ideals and ego that drove the marketplace, but I also think he genuinely would have authorized that person be killed had it been real and people are in prison for a lot less. His market was also a lot more than drugs iirc.

I find his supporters downplaying the assassination bit irritating - I suspect they do it because they know it's the least defensible bit and they can argue it on technicality. I think it'd be better if they just accepted it.

I also think he's very unlikely to commit another crime now that he's out, but still - a lot of people are in prison for a lot less.


Depends a lot on the exact setup. He still chose to try to hire a hitman allegedly. The standard is fairly high, "that man is informing on you" isn't entrapment, without knowing a lot of details it's hard to know and it's rarely actually entrapment.


The worst part is that it doesn't even appear to be the case that the government set up the scenario in which Ross bought murders


Built on naive yet admirable ideals? Special community? It was the world’s largest drug market, selling things like fentanyl in large quantities. What admirable ideal is this?!


You really cannot stop illicit drug use. A hard approach to prohibition not only makes people less safe, it’s a massive waste of spending. On just a pragmatic level- Fentanyl and analogues are by weight hundreds of times more potent than morphine. How do you even effectively stop that from getting across borders? Silk Road provided a brief counterpoint, and ideally wouldn’t have had to exist. The ideals it represented were more broad- for drug regulations/spending that focus on safety, and respect individual rights / bodily autonomy (ofc limited to not harming or endangering others).


> How do you even effectively stop that from getting across borders?

One idea that springs to mind: if a person starts up an anonymous, online marketplace for that activity, imprison him forever.


The Silk Road represented a tiny fraction of illicit drug revenue per country. Some report-skimming would indicate less than a single digit. A series of more profit-oriented darknet markets replaced it. I don’t know what the costs were associated with its takedown but they must have been enormous. I doubt it became large enough for cartels to care much, but the effect of shutting it down is certainly good for them.

I don’t personally hold the opinion that Ross Ulbricht shouldn’t have been pursued according to the law- or support his pardon- or even that darknet drug markets should exist! I’m also not really interested in crypto.

However I strongly believe that a completely different approach to drug laws & regulations is necessary to make people safer and reduce crime.


Oh, I like that, tough on crime! It's a novel idea. I wish the Nixon and Reagan administrations had thought of that a few decades ago, maybe if they did we could be witnessing the brilliant effects of that sort of policy today!


Amazing idea! After all, giving long term prison sentences to drug dealers, and even drug users, has totally eliminated drug use, it's not like it has exploded over time...


Just him though? Just the first guy and not all of the numerous people that started clones after, were tried and all received much less punishment?


Separating the drugs from the adjacent crime and problems that come with an illicit industry by finding a way to make it run kinda like normal business seems pretty admirable to me.


>What admirable ideal is this?!

That adults should be able to buy and sell whatever the fuck they want?

And that the government should not get a say, or even a cut?

I don't necessarily fully agree with that, but for sure it's an ideal, and has been expressed many times (e.g. by libertarians).


I have some delightful “medicine” for you to buy.

It’s cheaper than the alternative, though, if there is rat poison in it, there is nothing you can do!

Caveat Emptor is a shit way to run a society. It incentivizes the sociopaths.

Both Hippies and Libertarians fail to understand that if your organizational principles don’t account for sociopaths, they will take over and ruin everything.


>It’s cheaper than the alternative, though, if there is rat poison in it, there is nothing you can do!

Sure there is, I can take you to court.

>Caveat Emptor is a shit way to run a society. It incentivizes the sociopaths.

Bureaucracy and nanny states do that too.

>Both Hippies and Libertarians fail to understand that if your organizational principles don’t account for sociopaths, they will take over and ruin everything.

I don't think the latter are against locking people up. Or executing them even!

And the former, I dunno, perhaps they handle them Midsommar style!

Not to mention the issue is quite solvable: sellers can sell whatever, but need to specify the contents and whether they match a specification (e.g. same contents as aspirin). If you want to buy rat poison drug or heroin cut with sawdust, it's on you.


> Sure there is, I can take you to court.

Courts can do very little to remedy the harm of dying from rat poison. They can address, in an imperfect way, the incidental harm your death by rat poison causes to other people, but, I think most people would strongly prefer not to die of rat poison, than to die of rat poison but have their dependents compensated financially for the loss of their future income, etc.


Who will enforce such a rule?

Speedrunning the history of civil society the dumb way.

Law is the history of transgressions against the public good.


“This is a struggle between the children of light and the children of darkness, between humanity and the law of the jungle.“ (* deleted tweet by Netanyahu)

https://web.archive.org/web/20231017165958/https://twitter.c...

Top-down messaging like that certainly doesn’t strengthen whatever ‘policy’ is


I’ve been maining an M4 iPad Pro for a few months now since frying my laptop (which ran Linux) while travelling. There’s a lot to love about it.

Sadly, one discovers dozens of minor bugs and annoyances, that are mostly specific to doing productivity/dev work.

For example, when I use Cmd-Tab to switch tasks, there’s a ~ 1/20 chance that the Cmd key will become ‘soft-stuck’. That is, I’ll start typing and the OS will act as if I’m holding down Cmd, often messing with my browser or active project. I have to tap Cmd again to ‘unstick’ it. It’s not a hardware issue- An Apple store has already replaced the keyboard for me, and the problem persists.

I guess no one at Apple dogfoods the iPad for productivity? Which is sad, because here this thing is! It exists! Productivity features have been at least added to iOS!

On the plus-side, I’m getting deep into doing sound synthesis / music production in iOS. The ecosystem is kind of exciting. I spend most of my time inside Audulus (Max/PD-like data flow/DSP) - it is criminally underrated, and so much fun.

I could really go on about the pros and cons but will refrain. It’s just such a mixed bag.


I primarily use an iPad pro. Hardware-wise, I think it’s a superior paradigm. Most of the time I’m using it with the magic keyboard. I love that if the keyboard is damaged, it’s totally removed from the device.

We don’t need to talk about the OS!


A less finnicky approach would be binding to 0.0.0.0, then configuring incoming firewall policy. By default deny, then allow SSH through wireguard network. Or by default allow then deny SSH through public network.


I like that idea a lot. I may start doing that.


if you want to get fancy and/or over engineered you would use systemd templated units to setup [email protected] and a ListenAddress in the config listening on %i. Then you could bring up sshd@(expectedip).service for each expected IP

.. but that doesn't gain all that much tbh.if anything the only hesitation I'd have on listening to * and relying on firewall rules is if the service comes up before its configured. but exposing sshd isn't even that bad


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: