devicenull

I'm not really seeing a vulnerability here. The entire IPv4 internet is scanned probably hundreds of times a day. Was anyone really counting on IPv6 addresses being longer to add security?

http://www.internetsociety.org/deploy360/blog/2015/02/ipv6-s...

I'd argue that the end networks really aren't the best place to be implementing this. If the big transit providers (Level3, NTT, etc) started enforcing it, it would significantly reduce the effectiveness of spoofed traffic pretty much overnight.

> The main reason DDOS attacks exist is poor security and lack of cooperation between ISPs. Lack of adequate security on desktops (usually Windows) makes it possible to build large bot networks.

These days it's the hundreds of thousands of misconfigured NTP servers, recursive DNS servers, and various other protocols being abused for reflection attacks.

Granted, it still requires that the attacker have the ability to spoof packets, but preventing that requires even more time investment and has very little benefit to the ISP.

See https://news.ycombinator.com/item?id=9884345

I don't have a diesel, but it sure sounds like I do!

Yea, I have a 2015 Jetta which is why I was curious. I wonder if this explains why my car sounds really weird for the first few minutes of running.

I'm wondering how this is going to be implemented.. it doesn't seem like a thing that's really fixable here.

How about sites that let you remove someone else's free speech? Cloudflare provides services for those too (DDoS-as-a-service).

It's just noVNC connecting to qemu. This is a pretty standard feature, it's just gluing together a couple pieces of open source software.

> As another example, I had a check engine light on my car. It was ~$500 to check the code fault and replace a sensor.

You can get OBD2 readers for not very much money (<$20), which would have let you read the code.

> The Smog Free Tower draws in dirty air from the sky and captures ultra-fine smog particles by using innovative, patented ion-technology. The Smog Free Tower uses little electricity and is safe.

Oh boy. There's basically no discussion of the actual tech they're using here, which isn't really confidence inspiring.

No IPv6? Guessing not, as your website doesn't even use it.

Is the starter even going to crank before the computer is running? Old cars, sure I can see this working.

> if it’s ever about to reach the point that it’ll no longer be able to start your car, it’ll just turn itself off. Your lights will fade out and the radio will go quiet — but once you turn the key, everything will spring right back to life, no jump start required.

How does that work? If the battery stops providing current to prevent itself from being fully drained, you're not going to have power to the car's computers to actually start anything.

I'd love to know where those per-AS latency graphs come from.

Edit: Oh, from RIPE ATLAS!

> Can somebody make me understand why ipv4 assignments along with their requests are not made public?

What do you mean? With any of the RIR's you can get it down to a specific company. With ARIN, you're supposed to be able to get it down to a particular customer. What more information do you want?

Releases is not the proper word here. It should be 'US DoD starts using 11.0.0.0/8'. Nowhere in that thread does it say the subnet is being released back into the generally available pool, just that it's started to be routed.

> You can even have it AWS where it will get automatic updates with almost no effort: https://cloud.torproject.org/

I guess you didn't click on your own link....

> As of May 8, 2015, the Tor Cloud project has been discontinued.

> this also touches ext4 driver so that it always handles ext3 filesystems

So, not nearly the news you'd expect it to be.

The upstream router doesn't care, but the closest router to your server needs a mapping between IPv6 address and MAC address.

At the edge, the last router before your server has to have a mapping that a single particular IPv6 address maps to a specific MAC address. You can't really condense this down to a single entry, because any given switchport might have multiple MAC addresses active (think of the case where you have a dumb switch attached to your router, and 20 servers attached to that dumb switch. You're looking at 20 different mac addresses, so no way to condense that down to a few entries).

Even a /64 is more then enough to blow up a router at this point. The /48 just makes it a lot more likely that that will happen.

The simplest solution here is to route the entire /48 at a specific IPv6 address. This brings you back down to a couple table entries, but requires that your customer configure things properly.

Router hardware cannot keep up with any real number of IPv6 addresses. You'll quickly overflow router tables if you try to use even a tiny fraction of that /48 at once.

For example, Cisco Nexus 9000 can deal with 30k IPv6 neighbors. Once you cross that, things start blowing up.

This isn't really a limit for the backbone routers, because they're all dealing with routes, not individual IPs (they know that 2001:DB8::/32 goes to peer A, which only consumes one routing table entry). It's only a provide when you get to the network edge.

Reverse DNS is a pretty big issue. You're not going to actually deliver any email without valid reverse DNS.

No, KVM has had virtio (paravirtualization) for quite some time now.

Paravirtualized KVM uses virtio devices rather then emulated devices. So, instead of a virtual e1000 device, you'll see a virtio-net device. Performance gains are very, very significant.

Actual paper: https://securelist.com/files/2015/06/The_Mystery_of_Duqu_2_0...

> The startup violated the T&C of ADP

Here's a fun question... Did Zenefits ever agree to the TOS?

No, Cobaltix was hired by the people who bought 51% of the movie studio

> To protect my commercial plugin from disassembling I've developed my own PHP encoding system (zencrypt) that worked in 100% of all hosting accounts.

100%? eval() is pretty commonly disabled for security reasons.

It's not nearly as stable as Putty though. It crashes for me a couple times a week (mainly when connecting to routers)

You may have also been hitting this: http://en.wikipedia.org/wiki/Bufferbloat

I wouldn't put a lot of faith into what front-line tech support says. They'll often outright lie to you to get you off the phone.