Top all-time · #11401
Dan Drown
Personal blog · blog.dan.drown.orgsecuritysystems
Dan Drown writes Dan's notes, a personal blog at blog.dan.drown.org about security and systems. Since 2017, 7 different Hacker News readers have linked it 8 times, most often “Kerberos for Windows, without AD”. It is still writing: the last post was on 2026-09-26, and you can follow it by feed.
Too few sampled comments (5) to say how often HN recommends it.?
Why HN links it
HN readers link this blog for technical posts on time and clock accuracy (NTP, PPS over USB, RTC comparisons) and on Kerberos authentication for Windows without Active Directory.
Summarised by Claude from a sample of 5 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
I wrote down stuff I ran into
Most-linked posts?
- Kerberos for Windows, without AD2 people · 2 mentions · first linked 2021-08-17
What Hacker News says?
I am not sure I follow? I have been using NitroKey Starts with ed25519 and GnuPG for two years without problems? The NitroKey Start is great! I have switched to YubiKeys, since they are more durable and also support U2F/Fido2 and PIV on the same token. But NitroKey's software being open source and upgradable are great features. Note that gnuk also works on Blue Pills. So, if a NitroKey is too expensive for you, you…
Comment linking /gnuk-open-source-gpg-ssh-hardware-key-storage/
on “OnlyKey: Open-Source Alternative to YubiKey”Submitted Measuring asymmetric DOCSIS latency via NTP as a story · 4 points
HN discussionPeople have taken various measurements, such as https://digitalnigel.com/wordpress/?p=3449 https://kloppenborg.net/blog/gps-pps-over-usb/ https://blog.dan.drown.org/pps-over-usb/ Of course, if you only need 'good enough' accuracy, a battery-backed RTC and NTP when you're online will generally be good enough.
Comment linking /pps-over-usb/
on “DIY PTP Grandmaster Clock with a Raspberry Pi”Submitted U2F/FIDO2 based SSH keys on Windows as a story · 3 points
HN discussion"1,000,000 journal entries per second on consumer-grade hardware." Of cause you could just add a few cents more per device hardware to not get a rock bottom clock. Or add a temperature Sensor and start modeling a drift compensation: https://blog.dan.drown.org/rtc-comparison/ Or why reinvent a homebrew version of what looks like PTP IEEE 1588: https://blog.meinbergglobal.com/2013/09/14/ieee-1588-accurat...
Comment linking /rtc-comparison/
on “Three Clocks Are Better Than One”Submitted Kerberos for Windows, without AD as a story · 2 points
HN discussionThat's definitely the most common way to deploy Samba with Kerberos, but I don't think it's strictly necessary: https://blog.dan.drown.org/kerberos-for-windows-without-ad/
Comment linking /kerberos-for-windows-without-ad/
on “Microsoft plans to kill off NTLM authentication in Windows 11”I just discovered Dan Drown's blog and am very impressed by the many technical posts. Posts on NTP are quite good: https://blog.dan.drown.org/tag/ntp/
Comment linking /tag/ntp/
on “Kerberos for Windows, without AD”
