Hacker Newsnew | past | comments | ask | show | jobs | submit | more visualphoenix's commentslogin

If the remote host is trusted, you just forward the gpg-agent over ssh to your remote host.


Sorry, I think I missed something because the article doesn't mention GPG at all. How can you make a webauthn client defer to gpg-agent?


When GPG is your ssh agent, you can use RSA or ed25519 keys stored on a smartcard (like a Yubikey) to authenticate via SSH.

It's generally preferable to use a `-sk` key type, though, by which the remote server can essentially enforce that you're using a smartcard and not a normal keypair backed by a file.


Sure, I understand how to authenticate to my remote machine with a smartcard (and already do use this setup). I'm wondering how to authenticate to resources (over HTTP) from my remote machine while using webauthn.


Just -D 8080 on your SSH connection and use the local SOCKS5 proxy to tunnel all local web traffic via remote machine.


If it’s true that Flemming Rasmussen hand edited every beat of the drum track, that explains the statistics and consistency.


IIRC those rumors were post Flemming and started in the Bob Rock era.

And Justice For All was his last album at the helm and that was 1988 still to early to do that sort of thing digitally (ProTools came out in the early 90s) and no one is hand cutting tape for each beat. Even the Black Album is still early for that level of manipulation in 1991.

Which isn't to say he didn't use a click or many many takes and tracks to help ...


Back in the pre-digital era that this was recorded in, I think this would have been impractical.

Today, every piece of pop music, at least, is quantized to the point where the accuracy is perfect, but also sterile of feeling, as discussed in any number of Rick Beato videos.


It'd be interesting to find out how many times they practiced that song before recording it. It's hard to overstate how much time and attention people had before ubiquitous cell phones and internet.


While I’m unsure if this was true of Master of Puppets, I recall hearing an anecdote about And Justice For All…

When the engineers first rewound the master tapes for Justice they thought the tape was being shredded because the tape machine was making a very strange noise. When they stopped to take a look, they saw thousands and thousands of tiny tape edits. Apparently that was key to how Flemming Rasmussen got the drums so locked in. Hand editing and splicing every beat.

The sound the engineers heard that they thought was the tape shredding was the sound of all of those hand edits flying over the tape head.


I doubt this for 2 reasons:

- It would be incredibly laborious, and the possibility you'd mess the tape up and require another "good take" from a performer is way too high. You can do a few splices; you can't do 1000s of them.

- You generally can't do this w/ drums because of cymbals.


Might sound incredible, but I have no reason to doubt my source: my father mixed AJFA.


Can you please ask him why he removed Jason's bass guitar! (Sorry, I had to.)


My dad’s ex-partner tells his version of a story about it: https://m.youtube.com/watch?v=lmFgeFh2nlw

Tldr: band was mourning cliff’s death and giving newsted grief.


that's a bs story made up to shit on Lars


Lars is an incredible drummer.


Cool story! Feeding context back into the 0 shot is the hotness. I’ve had a lot of success with that.

Curious what other (easier) ways you found to accomplish the same effect?


I used https://eshop.macsales.com/item/Addonics/ADSAIDE/ to upgrade some Glyph drives to ssd when connected to a g5 audio rig a few years ago


Yup. That’s how networking basically worked for Army of Two. We only sent controller input over the network. Everything else was deterministic.


That was more or less the case for Starcraft 1 as well.

It made for incredibly funny replay of matches if you happened to own a newer version of the map, as the game starts to diverge from reality and enter some parallel universe where players do nonsense actions and movements.


Just showing my appreciation for Army of Two. It was a cheesy, weird game, but my friend and I loved playing it regardless. The online multiplayer worked great!


Isn’t the situation of preserving local file modifications covered in the Debian handbook[0]? You simply drop a config for apt to not overwrite files you’ve changed…

  /etc/apt/apt.conf.d/local

  DPkg::options { "--force-confdef"; "--force-confold"; }

[0] https://debian-handbook.info/browse/wheezy/sect.package-meta...


The problem is that during first install you can't configure the system user id range, so they'll start at 100. Later you decide to increase that to 150 for whatever reason. Even later, an apt-get upgrade upgrades a system package that owns a user in the 100-149 range. The upgrades process includes setting up the user again. User setup sees that the user exists but isn't in the system user range, this is presumably interpreted as a security risk and so fails the upgrade.

As a result the minimum system user uid is in practice not able to be increased without breaking upgrades.


users != conf files.



In the past I’ve used a certificate authority for ssh setup as one nice way to stop the proliferation of ssh keys. The other route is to use one hardware key fob with a gpg identity on it and use that as your global method of access.


Same. Imho it’s the best solution we have right now.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: