Hacker News Reader

sgjohnsonon Why does the U.S. always run a trade deficit?

SDRs exist only on paper. Regular individuals or companies can’t deal in them.

sgjohnsonon Why does the U.S. always run a trade deficit?

Not necessarily. A correspondent bank is simply a bank where the recipient bank has an account in the specified currency. For domestic currencies used only in certain countries, that bank will almost always be in that country. For currencies used globally - not necessarily.

sgjohnsonon Why does the U.S. always run a trade deficit?

> all USD transactions go through US institutions regardless of where those transacting partners are located

This is not true. See: Eurodollar - https://en.m.wikipedia.org/wiki/Eurodollar

sgjohnsonon We can no longer run Microsoft Store on 1809/LTSC 2019

> I'm running current Windows 11 Pro, licenses purchased from one of the markets for under AUD$50

You've probably wasted the 50 bucks. A valid product key a license does not make. Those cheap keys are usually ones for OEM licensing. If that is the case, you do not have a license.

sgjohnsonon We can no longer run Microsoft Store on 1809/LTSC 2019

It's not about performance. It's about not having Candy Crush Saga ads in the Start menu.

sgjohnsonon We can no longer run Microsoft Store on 1809/LTSC 2019

Or you run it because you don't want all the bloat that Windows comes with by default...

My gaming PC runs Windows 11 LTSC.

sgjohnsonon We can no longer run Microsoft Store on 1809/LTSC 2019

> Why doesn't the README file explain what this repository is doing?

It explains exactly what it's doing.

"Microsoft Store package for Windows LTSC."

It provides a Microsoft Store package for LTSC builds, and an install script that allows it to actually work. Windows LTSC builds don't have Microsoft Store preinstalled, and Microsoft offers no official way to re-enable it.

sgjohnsonon Upcoming Windows 11 builds cannot install without internet and Microsoft Account

For Windows 11, all editions (11, 11 Enterprise LTSC, Server 2025) are 24H2.

sgjohnsonon OpenWrt Two Approval

I don’t see how ubiquiti not being open source is relevant here, as the original question was

> Can you recommend Western companies that would be able to produce similar hardware at the same price point?

Besides, I’m yet to see any open source routing software that’s half usable as a complete package. With the sole exception of VyOS, it’s all hot garbage, OpenWRT and pfSense included.

sgjohnsonon OpenWrt Two Approval

https://store.ui.com/us/en/category/all-cloud-gateways/produ...

4x 2.5GbE (one of them even a PoE port)

1x 10GbE SFP+

WiFi 7 with MLO

$279

sgjohnsonon Upcoming Windows 11 builds cannot install without internet and Microsoft Account

You don’t need to use the Server SKU. LTSC exists. It’s basically the Server version, but without any of the Server stuff.

sgjohnsonon In Jail Without a Lawyer: How a Texas Town Fails Poor Defendants

Functionally the same as pleading guilty

sgjohnsonon Italy demands Google poison DNS under strict Piracy Shield law

And what good does that do?

sgjohnsonon Italy demands Google poison DNS under strict Piracy Shield law

> To some extent it is decentralized is it not? No. Everything relies on the root servers, as recursive servers rely on them.

sgjohnsonon Iconography of the PuTTY tools

If Microsoft had instead created a modern alternative for Win32 that was equally performant and bullshit-free, Electron would have never seen the light of day.

sgjohnsonon The Reason Zelenskyy Doesn't Wear a Suit

I guess Musk’s reason for not wearing a suit is because he’s got fuck you money, and also because he has to keep up the tech bro appearance, for Tesla be valued like a car company otherwise.

sgjohnsonon Leaking the email of any YouTube user for $10,000

> Zero-click kernel code execution with persistence and kernel PAC bypass

This is what baffles me about Apple's bug bounty program.

> $1,000,000: Zero-click remote chain with full kernel execution and persistence, including kernel PAC bypass, on latest shipping hardware. As an example, you demonstrated a zero-click remote chain with full kernel execution and a PAC/PPL bypass with persistence on the latest iOS device.

This is easily worth significantly more. You don't even need to sell it to the black market, sell it to all the 3 letter agencies in the world.

sgjohnsonon IP addresses through 2024

> But realistically I'm just one dude with a home network and a few VPSes doing BGP. How many /48s do I need?

Well, if the VPSes are in seperate sites, at least one per VPS, which means at least 2, which means that according to allocation policies, at least a /44. :)

sgjohnsonon IP addresses through 2024

If we measure it in /64s, yeah, it's definitely more than you could ever use.

However, IPv6 space has to be measured in /48s, and IPv4 in /24s, as those are the smallest possible BGP announcable blocks.

With IPv6 there's also an unwritten rule that RIRs will only assign blocks ending on a nibble boundary (with the exception of RIPE and their /29s that they expand by one bit every time you run out).

So a /44 is on the second smallest nibble boundary, making it the second smallest allocation possible.

sgjohnsonon Backdooring Your Backdoors – Another $20 Domain, More Governments

I read it as a libertarian complaint about governments.

i.e. own real estate? Try not paying the property tax on it, and see who really owns it. :)

sgjohnsonon IP addresses through 2024

/44 is nothing. It’s 16 /48s.

I have a /32 as an individual that I also got no questions asked.

It’s more IPv6 space than I could ever use.

sgjohnsonon IP addresses through 2024

No, it's ARIN that's badly managed.

Capital One would never get a /16 in RIPE.

sgjohnsonon IPv6-only Network based on Jool

I don't think an average home user even knows what a VLAN is.

This, on the other hand, is Hacker News.

sgjohnsonon IPv6-only Network based on Jool

NAT64 covers most of the cases. However, in my homelab experiements I very quickly found out that IPv4 literal addresses are a bit problematic for me.

There are ways to fix that with 464XLAT/CLAT, but I never got around to deploying it.

These days I'm just running dual-stack, with no NAT64. I hate NAT with a burning passion, so adding another layer of stateful NAT is a bit of a net negative in my eyes.

Someday I'll go full IPv6 on my home network with 464XLAT. And then I'll realize that some stupid IoT device or something is not CLAT aware. Obviously there are solutions around that too, but they require an intermediate device.

sgjohnsonon US newspapers are deleting old crime stories, offering subjects a 'clean slate'

I don’t think anybody particularly cares about non-violent misdemeanors, except maybe drug or alcohol offenses.

Felony on your record? Yeah, you’re basically fucked for life.

sgjohnsonon U.S. appeals court strikes down FCC's net neutrality rules

> Dedicated Internet access is a thing, but it's expensive; and I'd argue that even that is oversubscribed if you go far enough up the chain.

The only way to get internet access that’s not oversubscribed is by renting (or pulling your own) layer 0. By that I mean either renting a wavelength between certain PoPs or just pulling your own fiber.

sgjohnsonon U.S. appeals court strikes down FCC's net neutrality rules

You clearly have no idea how the internet works.

The rock bottom rate for IP transit is $60/gbps. None of the infrastructure cost is included here.

And that’s with Hurricane Electric. They are a bit notorious for having probably the worst routing in the industry, but they are also the cheapest in the industry.

https://en.m.wikipedia.org/wiki/Internet_transit

It’s nowhere near as simple as “large fiber pipes capable of accomodating spikes”.

There are very good reasons why hyperscalers are building their own intercontinental undersea fiber networks. So they don’t have to pay for the _extremely_ expensive intercontinental transit.

Last I checked renting a wave capable of doing 400gbps between Amsterdam and New York was close to $80k/mo. A wave is basically a dedicated wavelength of light guaranteed to you and only you.

You don’t want your ISP to oversubscribe? Become your own ISP. Get an AS number. Get your own IP space (both of these can be done on the cheap, /36 of v6 is basically free and /24 of v4 can be had for $100 a month). Get a BGP session with a transit provider. Pay them for transit.

Get IXP links so you have direct access to AWS, Google and Netflix. Save on the transit costs there! But the IXP peerings aren’t cheap and on a small scale will certainly cost more than transit.

Congratulations, you’re now paying $1000 a month for 1gbps guaranteed. It gets cheaper with scale, but scale also increases your infra costs.

Everyone would be on 10mbps if ISPs weren’t allowed to oversubscribe.

I became my own ISP as a hobby (https://bgp.tools/as/200676). This hobby costs me $200/mo, and I don’t have any real transit, just cheapo VPSes in locations convenient for me.

Wanna know what my residential ISP whom I pay €19/mo for 1gbps residential service quoted me for a BGP session at my home on a business connection? €9800 in setup fees, €2000/mo, min. 3 year commitment + transit. Of course that was a “fuck off, we just don’t want to do this” quote, but the only alternative I have here is to pull my own fiber.

sgjohnsonon U.S. appeals court strikes down FCC's net neutrality rules

10gbps transit at the rock bottom rate costs $600/mo.

Please max out the line rate for a month or so straight and then tell me how happy your ISP is with you.

They are banking on the fact that you’re pulling 100mbps at the most, with bursts to 10gbps occasionally.

sgjohnsonon U.S. appeals court strikes down FCC's net neutrality rules

> If Spotify, NetFlix, & Apple music are prioritized over streaming services by other companies

There’s a good reason why this is the case. All the major ISPs essentially worldwide have caching servers for all the major streaming service providers. Those servers sit directly at some PoP for the ISP.

This effectively removes the need for transit. Which is a win/win, for both, the ISP, and the streaming service.

IP transit at scale is not cheap.

Essentially what I’m saying is that it costs your ISP nothing to provide you with Netflix content, but it might be significantly more expensive to provide Disney+, for example.

sgjohnsonon US newspapers are deleting old crime stories, offering subjects a 'clean slate'

Criminal records would include all misdemeanors.

You can get a misdemeanor without ever being arrested. In some cases trivial things like speeding can be a misdemeanor requiring a court appearance.