Top all-time · #13731
Tom Hacohen
Personal blog · stosb.com/blog · on HN as tasnprogrammingsecurity
Tom Hacohen writes stosb, a personal blog at stosb.com about programming and security. Since 2015, 5 different Hacker News readers have linked it 20 times, most often “Explaining My Configs: nftables”. It is still writing: the last post was on 2026-05-05, and you can follow it by feed.
Too few sampled comments (3) to say how often HN recommends it.?
Why HN links it
HN commenters link Tom Hacohen's posts on nftables firewall configuration and signed web pages, cited in threads on iptables, Mastodon security and browser-based verification of encrypted apps.
Summarised by Claude from a sample of 3 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Tom Hacohen's Website
Most-linked posts?
- Explaining My Configs: nftables2 people · 4 mentions · first linked 2016-12-13
- Advanced Git Commands You Will Use2 people · 2 mentions · first linked 2017-12-28
- /blog/signed-web-pages/2 people · 2 mentions · first linked 2019-10-22
What Hacker News says?
Meta / WhatsApp have developed their own solution for the whatsapp web client (whatsapp is end-to-end-encrypted): https://engineering.fb.com/2022/03/10/security/code-verify/ it takes the form of a browser extension the user downloads that will tell the user if the javascript code is what it is expected to be. it checks this by verifying the code's expected hash with an endpoint hosted by Cloudflare. Whatsapp can pub…
Comment linking /blog/signed-web-pages/
on “Show HN: 1-FPS encrypted screen sharing for introverts”Submitted Hunting Down Dirty Memory Pages as a story · 45 points
HN discussionI recently switched to nftables on Linux and the syntax is great, you should give it a go. I wrote a blog post demonstrating my server configuration. Shameless plug: https://stosb.com/blog/explaining-my-configs-nftables/
Comment linking /blog/explaining-my-configs-nftables/
on “pfSense: Open source network firewall distribution”Submitted Running letsencrypt as an Unprivileged User as a story · 7 points
HN discussioniptables is terrible, but nftables is great and mostly available. I wrote a post about my nftables config a while back. Plug: https://stosb.com/blog/explaining-my-configs-nftables/
Comment linking /blog/explaining-my-configs-nftables/
on “Cloud Firewalls”Submitted Advanced Git Commands You Will Use as a story · 5 points
HN discussionI wrote about doing the same thing in 2016[1], crazy to think that we STILL don't have IPv6. 1: https://stosb.com/blog/using-an-external-server-and-a-vpn-to...
Comment linking /blog/using-an-external-server-and-a-vpn-to-escape-nats/
on “Locally hosting an internet-connected server”Submitted Explaining My Configs: OpenVPN as a story · 4 points
HN discussionThat's really weird. I haven't used nftables, but I'm planning to do so the next time I upgrade my router. https://stosb.com/blog/explaining-my-configs-nftables/ makes it look nearly as pretty as pf. Is there something under the hood that's awful?
Comment linking /blog/explaining-my-configs-nftables/
on “Iptables Tutorial 1.2.2”Submitted Using OpenPGP Keys for SSH Authentication as a story · 4 points
HN discussionSeems like a technical ad for their product. If the thread model includes malicious admins then all bets are off as admins can change both server-side and front-side code. Some measure of security could be achieved using browser extensions (c.f. Mailvelope or https://stosb.com/blog/signed-web-pages/ ).
Comment linking /blog/signed-web-pages/
on “Taking Mastodon security to the next level”Submitted Explaining My Configs: sshd_config as a story · 3 points
HN discussionThis is how I've been doing it: https://stosb.com/blog/using-openpgp-keys-for-ssh-authentica... Slightly different as I generate a PGP key on the computer and then load it to the Yubikey, which means I can have backup keys with the same secret keys. I never really got "touch to use" working though, if anyone knows how to do it with GPG keys I'd really appreciate it!
Comment linking /blog/using-openpgp-keys-for-ssh-authentication/
on “Hardware Touch, Stronger SSH”Submitted Recovering Data From A Corrupt tar Archive (2018) as a story · 2 points
HN discussionSubmitted Explaining My Configs: ssh client as a story · 2 points
HN discussionSubmitted Retaining History When Moving Files Across Repositories in Git as a story · 2 points
HN discussionSubmitted Advanced Git Commands You Will Actually Use as a story · 1 points
HN discussionSubmitted Explaining My Configs: nftables as a story · 1 points
HN discussionSubmitted Reducing the Performance Impact of Debug Code in C Libraries as a story · 1 points
HN discussionSubmitted Secure Your letsencrypt Setup with acme-tiny as a story · 1 points
HN discussion