Top all-time · #3103
Flameeyes's Weblog
Personal blog · blog.flameeyes.euprogrammingsystems
Flameeyes's Weblog is a personal blog at blog.flameeyes.eu about programming and systems. Since 2010, 25 different Hacker News readers have linked it 41 times, most often “Flameeyes' chip'n'pin card analysis”. It is still writing: the last post was on 2026-07-03, and you can follow it by feed.
Too few sampled comments (12) to say how often HN recommends it.?
Why HN links it
HN readers link Flameeyes's posts on Linux and open-source build tooling, including Autotools, shared libraries, ccache, containers, and GnuPG/YubiKey agent setup. Commenters call a few of these posts good guides.
Summarised by Claude from a sample of 12 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
This Time Self-Hosted
Most-linked posts?
- Flameeyes' chip'n'pin card analysis2 people · 2 mentions · first linked 2014-04-19
What Hacker News says?
> There are a few walled gardens with great payment experiences (the App Store, Amazon) I'm of a different opinion: Amazon is much stricter than other online merchants, and they don't give you meaningful errors when something goes wrong with your billing. When I was back in europe, I had to rely on a relative's credit card to make a payment, since my debit card was being refused. Now that I'm travelling in the US, t…
Comment linking /2014/04/my-time-abroad-chip-n-pin
on “Bitcoin: the Stripe perspective”Submitted Distributions are becoming irrelevant: difference was our strength and liability as a story · 97 points
HN discussionReally good article, but if you're going to bundle libraries, PLEASE provide a way to make configuration fail if you can't get to the system copy. A lot of projects (libgroove included) will try the system copy and then fall back to the bundled copy if the system one wasn't found. That's nice for users (maybe), but it's a pain for packagers. If the packager just happens to have one of the dependencies installed, the…
Comment linking /2009/01/bundling-libraries-for-despair-and-insecurity
on “My Quest to Build the Ultimate Music Player”Submitted Why I do not like Hugo as a story · 82 points
HN discussionI Would love to migrate 50+ KVM VMs to LXC-Containers, but there seem to be some problems left with security[1][2]. I cant wait to get my hands on Docker, but I lack the SELinux knowledge to secure everything the 'proper' way. Is LXC (and therefore Docker) really ready for Production yet? Edit: Formatting. --- [1] http://mattoncloud.org/2012/07/16/are-lxc-containers-enough/ [2] https://blog.flameeyes.eu/2010/06/lxc-…
Comment linking /2010/06/lxc-and-why-it-s-not-prime-time-yet
on “How is Docker.io different from a normal virtual machine?”Submitted Does your webapp really need network access? as a story · 8 points
HN discussionLike all things, it's not a panacea: https://blog.flameeyes.eu/2010/07/debunking-ccache-myths-red... Of course, if you're rebuilding the same code over and over it can be a net win, but -in the comments- it is mentioned that the obvious things -that one might end up doing somewhat frequently in C/C++ development- invalidate the cache.
Comment linking /2010/07/debunking-ccache-myths-redux
on “Stop looking at HN and go work that thing you promised yourself you'd work on”Submitted I'm not an happy maintainer working with CMake as a story · 5 points
HN discussionIn case anyone wants to know, this is my go-to recommendation for "getting started": http://www.lrde.epita.fr/~adl/autotools.html . Extremely thorough, and shows how all the different pieces work together. I'd read it anyway, even though you've got started. It's very, very good. I've also found Diego Pettenò's "Autotools Mythbuster" to be quite good: http://www.flameeyes.eu/autotools-mythbuster/index.html . His old…
Comment linking /tag/automake
on “Google releases snappy, the compression library used in Bigtable”Submitted FOSDEM and its dangerous IPv6-only network as a story · 4 points
HN discussionTo add to this, couple of good guides on using GPG Agent forwarding: - https://blog.flameeyes.eu/2016/10/gnupg-agent-forwarding-wit... - https://www.isi.edu/~calvin/gpgagent.htm (Mac OS) I broke my head recently trying to get this to work recently. The error was in 2 different gpg binaries that ubuntu ships with. Using gpg2 instead of gpg gets it working.
Comment linking /2016/10/gnupg-agent-forwarding-with-openpgp-cards/
on “Guide to Using YubiKey as a SmartCard for GPG and SSH”Submitted Is Firefox really that bad? (2009) as a story · 4 points
HN discussionhttp://blog.flameeyes.eu/2009/04/22/shared-object-version Perhaps upstream is doing some magic. Like applying patches to the distros official version and making sure it's compatible before distributing a binary.
Comment linking /2009/04/22/shared-object-version
on “Glibc vulnerability allows any user to get root access”Submitted The subtlety of modern CPUs, or the search for the phantom bug as a story · 4 points
HN discussion> All this for the possibility of interposition? Yes, it seems so. The impact is there for this little-known and little-used feature. Instead of optimising for the common-case scenario where the symbols are not overridden, the ABI optimises for the corner case. It also looks like PIE+PIC is required if you want a secure system with ASLR: < http://blog.flameeyes.eu/2009/11/02/the-pie-is-not-exactly-a... . Flameeyes (…
Comment linking /2009/11/02/the-pie-is-not-exactly-a-lie&
on “Sorry state of dynamic libraries on Linux”Submitted Making money with Free Software development as a story · 4 points
HN discussionI'd say ssh keys generally don't have 2fa. A passphrase doesn't really turn a ssh-key into 2fa. It's still really only "something you have (access to)": the plaintext of the private half of the key. Granted, you can use ssh-keys with tokens -- my recommendation is to use encrypted ssh-keys paired with a recent[1] openssh server that allows stacking OTP on top, for 2fa with the RequiredAuthentication-directive (well,…
Comment linking /2013/03/openssh-6-2-adds-support-for-two-factor-authentication
on “KeyBox: A better way to SSH”Submitted Ruby-NG: Code of Horror as a story · 4 points
HN discussion> Joe GNU/Linux User has just downloaded and untared this package. Regular users are not supposed to install software like this. The only sane way to administer a distribution is to make sure everything passes through the official package manager. This leaves the developers and package maintainers to deal with autotools and I don't hear them complaining (very loud[1]). Autotools is simply good enough for the job and…
Comment linking /tag/autotoolsmythbuster/
on “Stop the autoconf insanity – Why we need a new build system (2003)”Submitted Flashing a Kindle Fire with CyanogenMod as a story · 3 points
HN discussionRegarding -Werror, its considered by some to be bad practice for releases [1]. [1] https://blog.flameeyes.eu/2009/02/future-proof-your-code-don...
Comment linking /2009/02/future-proof-your-code-dont-use-werror
on “LibreSSL 2.0.1 Released”Submitted The challenge of training new developers as a story · 3 points
HN discussionThat interesting question was asked on Stack Overflow, and closed as off topic. ( http://stackoverflow.com/questions/13170334/reading-entropy-... ) A comment says that cat is consuming the entropy, not reading the file. An answer links to ( https://blog.flameeyes.eu/2011/03/entropy-broken ) which says "starting a process consumes entropy" but otherwise didn't seem to have an answer. (But I only skimmed.) This thread…
Comment linking /2011/03/entropy-broken
on “Ensuring Randomness with Linux's Random Number Generator”Submitted Problems with Hugo as a story · 2 points
HN discussionSubmitted Project health, and why it's important – shellshock afterwords as a story · 2 points
HN discussionSubmitted What's wrong with Gentoo, anyway? as a story · 2 points
HN discussionSubmitted GNU is actually a totalitarian regime as a story · 2 points
HN discussionSubmitted Apple's Biggest Screwup : OS X Server as a story · 2 points
HN discussionSubmitted Debunking x32 ABI myths as a story · 2 points
HN discussionSubmitted Why underlinking is a bad thing as a story · 2 points
HN discussion
