HNHacker News
TopNewBestAskShowJobs

sgjohnson

2,656 karma · joined August 8, 2018

submissionscomments
sgjohnson··on Retirement savings simulator
Why can’t I put planned death before the retirement age?
sgjohnson··on How does Linux NAT a ping?
"25 years" is not fair. There was no immediate need for IPv6 for anyone 10 years ago, so it should be no surprise that it's not at 95% currently.

Now there is.

sgjohnson··on How does Linux NAT a ping?
https://www.google.com/intl/en/ipv6/statistics.html 45% (and growing) of all traffic to Google is IPv6. Hardly "floundered". It's just that most major ISPs in the developed world have so many IPv4 addresses they don't care that much about IPv6 yet.

Now, try starting a new ISP without CGNAT (which will lead to a garbage experience for everyone) or IPv6. You'll have to spend literal tens (if not hundreds) of millions just on IP addresses alone.

sgjohnson··on How does Linux NAT a ping?
> By definition NAT will maintain state which is translation table.

Stateless NAT is also possible, but then it has to be 1:1. Which has it's purpose, but is rarely used.

A practical example would be with IPv6 if your ISP doesn't allocate you a static prefix. Stateless NAT would allow you to use a /64 from the private range of fd00::/8 in your local network which the router would translate to your globally unique /64. No state needed, because there would be as many IPs available in your LAN prefix as in your GUA prefix. All it would do would be translating fdxx:xxxx:xxxx:xxxx:1234:1234:1234:1234 to 2yyy:yyyy:yyyy:yyyy:1234:1234:1234:1234 and vice versa.

I've also done stateless NAT on IPv4. When you request more IPs from some cloud providers, they assign you a bunch of /32s, not a proper subnet, virtually requiring you to run a cloud router.

sgjohnson··on Grave flaws in BGP Error handling
> BGP isn’t perfect but we made it this far and I think it does a pretty good job for handling ~75K autonomous systems.

Absolutely not. To me, it's a miracle that the internet even works.

sgjohnson··on Grave flaws in BGP Error handling
A small Brazilian network yesterday hijacked half the internet too, including several of my own prefixes, all of whom have IRR and RPKI set up.

https://bgp.tools/as/266970?show-low-vis#prefixes

[bgp.tools Alert] for AS200676 A hijack on 2a06:a005:2730::/44 from AS266970 (NET WAY PROVEDOR DE INTERNET DE CACOAL LTDA) has been detected (based on your address policy you have configured)

[bgp.tools Alert] for AS200676 A hijack on 2a0a:6040:b1f4::/48 from AS266970 (NET WAY PROVEDOR DE INTERNET DE CACOAL LTDA) has been detected (based on your address policy you have configured)

[bgp.tools Alert] for AS200676 A hijack on 2a0a:6040:b1f1::/48 from AS266970 (NET WAY PROVEDOR DE INTERNET DE CACOAL LTDA) has been detected (based on your address policy you have configured)

[bgp.tools Alert] for AS200676 A hijack on 2a0a:6040:b1f0::/48 from AS266970 (NET WAY PROVEDOR DE INTERNET DE CACOAL LTDA) has been detected (based on your address policy you have configured)

BGP is a complete mess.

sgjohnson··on macOS 13.5 no longer allows setting system wide ulimits
> .... and if SIP is turned off?

You lose Touch ID & Apple Pay

sgjohnson··on How the iMac Saved Apple
Ah, yes. The cheesegrater. Another timeless design.
sgjohnson··on How the iMac Saved Apple
> It's very long lifetime.

It’s also a timeless design. The 2008 unibody MacBooks look like they could have been made brand new yesterday, with the only giveaways being the I/O and the bezels on the display.

It’s safe to say that the design will almost certainly (reasonably) never get old.

sgjohnson··on Microsoft continues right to repair about face, makes its hardware easier to fix
> I want accounts that arent linked to my hotmail so fully offline accounts should be the default, zero ads to buy office. Zero preinstalled garbage apps. Let me buy a Windows Pro for Devs license that comes super stripped down, even Cortana is fully removed. I want no distractions from my work with preinstalled garbage.

A version of Windows like that exists, but you can’t buy it.

It’s called Windows 10 Enterprise LTSC 2021 (21H2).

Howver, there’s a free evaluation version available from MS. If you’re really that interested in it, I’m sure you’ll figure out how to promote that “evaluation” version to “retail” and then kms activate it.

I’m daily driving it. And loving it.

sgjohnson··on YouTube-Dl Site Goes Offline as Hosting Provider Enforces Court-Ordered Ban
Microsoft has largely stopped giving a fuck about piracy of their consumer products.

py-kms is freely available on GitHub, and so are Windows Activation Tools.

While arguably py-kms doesn’t violate anything, as it’s a cleanroom implementation of the KMS server, Windows Activation Tools definitely does.

Either way, MS could eradicate all of those repositories, they aren’t doing it.

sgjohnson··on The Collapse of the EV SPACs: Another One Goes Bankrupt, Others on the Verge
> By prohibiting them from listing,

And you've killed SPAC as a concept.

sgjohnson··on Amazon has more than half of all Arm server CPUs in the world
> Windows on ARM for servers has been a bit of a pipe dream and joke

Arguably Windows for servers is a joke in itself. What can it do, besides Active Directory and Exchange, that Linux can't?

(I know LDAP exists, but let's not pretend that AD isn't superior in almost every way imaginable)

sgjohnson··on How to stop the “login with Google” pop up window?
> Has anyone put together a resource - or better yet, an automated service - for migrating away from Google (Gmail in particular)?

1. Set up a new mailserver/register an email somewhere else; 2. Google Takeout your existing data; 3. Redirect all your incoming mail from GMail to your new email address; 4. Change over the email address of all services you use.

sgjohnson··on What if Archive.today published torrents of its datasets?
This is definitely an exception, not the norm.
sgjohnson··on What if Archive.today published torrents of its datasets?
In theory yes, but we’re talking about such a massive dataset that archive themselves would have to seed it forever anyway. But yes, in theory, if there would be a lot of seeders for it, this would be a non-issue, however I highly doubt that there are enough people interested in seeding a petabyte worth of archives. It’s certainly less than people who are willing and able to keep a local copy.

And if you did that with a consumer ISP, they would terminate you as a customer very quickly. At which point you’ll have to pay cloud provider for traffic, or a T1 network for IP transit (alongside colocation fees and actually putting a server in a datacenter and all that).

sgjohnson··on What if Archive.today published torrents of its datasets?
> Bandwidth is dirt cheap these days

Not at scale. 50TB per month is nothing. That’s 151mbps. Most transit providers will be okay with a 10% commitment, so this is a gigabit port which is like $60-300/mo.

Assuming 50 people would download the 1PB archive from the provider, that would require at least 151gbps of bandwidth, rounded up to 200gbps, at the cheapest transit provider (HE) this is still at least $12k/mo for transit alone.

Is that dirt-cheap for a non-profit? I’m not sure.

sgjohnson··on Serial murders have dwindled, thanks to improved technology
Yes, technically murder would be hard to prove in such a scenario if it was a crime of passion, but I don’t see how being charged with vehicular manslaughter lets you get away with it.

“I didn’t see them” is not the “get-out-of-jail-free” card when it comes to manslaughter.

sgjohnson··on Linux surpasses the Mac among Steam gamers
Only now? Considering how Apple has neglected gaming, and especially considering that most Mac games on Steam are 32-bit, which no macOS version released within the past 4 years can even run?

And 42% of that is Steam Deck...

It's a little bit disappointing, to be honest.

sgjohnson··on AWS to begin charging for public IPv4 addresses
> Does anyone have experience switching a small personal site to IPv6 only in 2023?

Trivial. Just put Cloudflare in front of it.

sgjohnson··on AWS to begin charging for public IPv4 addresses
> There is nothing wrong with ipv4 in the LAN

Asides from potential address conflicts, should your work VPN space overlap with your LAN subnet, for example.

sgjohnson··on AWS to begin charging for public IPv4 addresses
Good. Anything that pushes people towards IPv6 is good news.

They should have charged more. $3.50/mo per IP for their average customer is going to be a completely insignificant amount of money.

sgjohnson··on AWS to begin charging for public IPv4 addresses
I have a /24 of v4 just so I don’t have to run NAT at home. My Apple Watch has a real, globally unique IP address.

Is this valuable use of IPv4 space? I think yes.

sgjohnson··on AWS to begin charging for public IPv4 addresses
> You can't buy/sell/trade "ASN blocks". The only people handling "ASN blocks" are the 5 RIRs (APNIC, RIPE NCC, ARIN, AfriNIC and LACNIC) and IANA.

You absolutely can sell ASNs or ASN blocks, just like you can sell IPs.

Want to sell an ASN? Ask the buyer for money. When the money is in your account/escrow, transfer the ASN to them. Get money. Sale complete.

But that’s besides the point, this has got nothing to do with ASNs.

sgjohnson··on SpaceX punched a hole in the ionosphere
> because HFT's provide no value at all to the everyday person

If you participate in the stock market at all, you indirectly benefit from HFTs lowering the bid/ask spread and therefore getting a better price. Now matter how insignificant, but the benefit is there.

Of course if we're dealing in millions, not thousands, then the benefit is more pronounced, but a couple of cents here or there still make a difference.

At the very worst HFT firms are a net neutral.

> "make lots of money at the expense of mainstreet investors"

Can you elaborate on this further? I don't see how HFTs make money at the expense of mainstreet investors. HFTs make money on the expense of inefficiencies, therefore making the markets more efficient.

sgjohnson··on SpaceX punched a hole in the ionosphere
HFTs provide a lot of value to everyone by providing a lot of liquidity and reducing bid/ask spread giving a fairer price to everyone.

> If a company is valuable now, it'll be valuable in 5 minutes.

That’s not necessarily true.

sgjohnson··on Google is already pushing WEI into Chromium
Yeah but then you also have to think about all the jobs that would be lost.
sgjohnson··on Google is already pushing WEI into Chromium
And if they prohibit it, Google will just pay a several billion dollar fine. At the end of the day, it's just a cost of doing business. Something like an extra 2% tax raise or something. Whatever. Dividend time.
sgjohnson··on Man found guilty of child porn because he ran a Tor exit node
I know the guy. No, it’s not a parody.
sgjohnson··on Show HN: Use DNS TXT to share information
It doesn’t expand the IPv4 space in any way, shape or form.
← PreviousPage 15 of 34Next →