tempnow987

So they don't start getting blocked as spam? For transactional emails deliverability is often CRITICAL.

Oddly, on the cash app thing, I have a very basic username and seem to constantly have folks sending me money, sometimes good amounts. I never use the app, and eventually I hope the money goes back if I don't collect it.

More annoying on email but much less than it used to be - I think more systems require email verification now so a bit less common to get the misdirected order emails etc.

But yes, if I can't unsubscribe - then I block and report spam - even if it looks like transactional email (some is a lead-in to a scam where they will refund you for the "bogus" purchase).

Really the true wonder! Compare this to the US's SLS plans! The budget is mindboggling.

This can't be serious. The number of resources being consumed by web frameworks is absolutely insane, they are built on so many layers. .NET desktop apps the same thing. You need a full windows install, then graphics drivers, then the .NET framework stuff.

This is running in a terminal. The golang tui's are tiny by comparison to apps like office etc and can deploy in much smaller total footprints.

With Apple Store subscriptions I've had good experiences with clarity of the terms which they put in literally the same font as the teaser free trial deal.

You can cancel immediately and use out the free trial in most cases.

Apple also seems to remind me to cancel subscriptions when I delete an app I'm not using that has a small subscription associated I forgot about. They also turn off subscriptions it seems when apps become unavailable.

They also seem to send a notice about a month in advance of any auto renewals, but that may be something I turned on.

They also let me cancel subscriptions without going through the developers own flow / retention game and this is the SINGLE biggest win for me having had to threaten to sue folks both at work (were subscriptions are much higher) and personally.

On non apple products I especially hate the "must cancel at least 60 but no more than 90 days in advance of renewal" terms of service games non-apple subscriptions play, or ones where you have to call in (yes, the same newspapers complaining about apple can make it hell to cancel). This used to be common in copier sales where you'd auto renew for another year after FIVE years unless you carefully calendared and remember to cancel service in time. The problem is with staff turnover etc it's not always easy to keep track of these kind of gimmicks, and often the person you are contacting has also left so you are dealing with national sales departments.

Apple get's crapped on a lot but despite the claims they screw folks over compared to a lot of internet stuff (ads for tech support have bitten my parents, the car warranty deals etc) I have more trust in them then the areas of the internet the FTC etc are managing.

The problem is a fair number don't do this. It's super annoying - why not do an opt-in or even a prompted opt-in to keep this to folks actually using meet maybe based on actual meet usage?

I don't understand how they extracted the key from the HSM. How is this even possible - the vendor of the HSM should be named!

Yep - we've tried most (and have teams and meet FREE).

Jitsi - core functionality issues with video quality tied to network setups perhaps make it a no go.

If you work with a lot of folks for short bits of time everyone knows how to get on and work a zoom call.

Teams has weird permissions issues, consumer vs business teams, and is forced on so many people that they auto close it (reminds me a bit of the IE pushiness which can be a turn off).

Google Meet started auto-adding links to meetings - so most folks ignore a google meet link because they don't think it's a real meeting (and 90% of time it isn't).

Does anyone remember early AWS networking?

- Flat! Yes, you shared with other AWS customers. Was great to make sure security was turned on (you could watch folks scanning internally at least that's my memory). This made it dirt simple, anything could connect with anything, even cross account.

- EC2 instances were the key items in the flat network (they switched to things like interfaces now which add lots of possible complexity - diagram is missing this).

- One private one public IP address (if desired). Simples.

The whole security story with all the layered possible permissions is crazy now. And the org->account model is clunky with a root account login. I think GCP get's this part better with its project model FWIW. That said, I don't discount what AWS provides.

Some timeouts filtering by hospital for me:

'SELECT * FROM `rate` where hospital_id = "XXXXXX" ORDER BY `hospital_id` ASC, `row_id` ASC LIMIT 200;'

Does anyone track the apple criticism for the ipod, the iphone, the watch etc etc?

Apple takes some risks, not everyone is fan, it costs a lot, but they have the money to burn, I don't get why they aren't allowed to try this stuff out.

I'm a fan of two monitors, my main horizontal (though I got one with much more vertical resolution than most 4:3), and one in portrait somewhat to the side.

So many big wins. I can do a zoom screen share on my main window and have notes, private stuff on the side window, I can read documents that often are vertically formatted on the side window.

I do a fair bit of comparing type work where I need a reference index doc on the side, then I got through the individual docs for tieback on the main.

It's game changing to have multiple monitors and particularly have one portrait and one vertical.

My immediate thought was working on a flight. This guy is like he's got some big curved monitor on his flight. No he doesn't, he's hunched over a laptop screen.

If I could work on a flight on a big screen I'd be thrilled. I really don't like the ergonomics of hunching over a laptop screen.

Techcrunch concluded "The price reveal turned any ‘would buy’ in the room into a ‘definitely not’ without hesitation."

Anyways, bookmark the threads of folks calling an Apple product dead on arrival for a revisit in a few years.

The ipod, the iphone, the watch, the airpods... they've had a pretty good record and almost all these have had harsh criticism out the gate (while then going on to absolutely PRINT money for apple).

Apple is sitting on lots of cash and investment with operating cash flow of something like another $100B a year? Why aren't they allowed to take some risks on products like this. Facebook certainly has burnt billions in a similar space.

For example, it's unethical or screened to have an AI answer a question about crime rates and demographics (race / gender).

The answers you get are things like "It's essential to examine the broader context and address the underlying factors contributing to criminal activity." or that crime "is influenced by various factors such as socioeconomic status, education, and access to resources and opportunities." or "It is more useful to focus on addressing social and economic equality for all communities."

You can't actually get things like per capita rates of reported murders by gender/race out of the models or is there some setting / prompt you have to use for these questions?

I'm wondering Bard maybe didn't have this filtered as properly?

Not my experience at all - I was a small account. I was paying for support. They went way outside support scope and seemed to think nothing of it, they should tell customers to pound sand more often probably, but it seemed like they are willing to troubleshoot customer issues pretty thoroughly.

Did have some complaints about some things (classic flat network going away if you started with that had some bumps).

Pretty easy call I think. If you've already been protesting / walking out / going on strike - I think you look for a position at another company, avoid the RTO and avoid the stress of the firing question. I think there were up to 500 employees who were protesting Amazon continuing to carry some of the books they carry.

Otherwise if you have a family and are settled somewhere, I'd wait to find out before moving, then either commute during the week or get a temp spot once you know if you are RTO until kids are out of school where you are and you can plan a move more fully.

They throw bodies because they have them and they are looking to solve a problem.

And they do automate, claims that a service like S3 does not have automation are totally ridiculous, and few other general hosting providers have AWS scale here.

That said, their development pace is crazy, with plenty of partially built solutions -> so yes, until something scales enough to need it I'm not surprised they have sysadmin toil. Reality is even the VMware worlds and other onprem stuff, even when "automated" have plenty of turmoil just staying fresh / current / backed up / secured etc. So that's what AWS is selling.

Just skimmed beginning of article - this article talks about teslas "blowing through stop signs" and the regulators having to recall them for this.

"Blowing through" stop signs was a rolling stop when it was a 4 way stop with all roads at 30MPH or less and no relevant moving cars are people or bikes. The rolling stop never was more than 6MPH, and often much lower (think 1-3MPH).

We have folks blow through stops signs where I live at 35 MPH when others are present, I've got dash cam of this. No action by cops. But teslas roll through at 0.5MPH, and it's end of world. The description by these "journalists" is wildly misleading.

What's weird, there are issues that drivers really really wish would get addressed because they are bad for quality of life and safety. Basic adaptive cruise control / autopilot / phantom braking stuff that seems worse not better from the mobileye days (??? - how is this possible).

Not sure what solution is. Having some kind of better radar, at least one lidar unit to ground truth the vision a bit more? Better mapping and navigation so it can cheat and for example avoid unprotected lefts a bit more?

God, I wondered why these youtubers can't stop with the super long introductions, walkarounds to tell us something basic that could be explained in 2-3 minutes TOPS.

But are we allowed to even discuss the topics - or will folks be burned / punched for even discussing the ideas?

This is not a bad suggestion. HN folks tend to be "anti" - I think that also is in part isolating. So many / most gatherings of folks don't meet the HN purity / behavior / etc standards (church groups / political groups etc).

As a note I went to church every sunday growing up - my parents (not religious) did it for exactly the reasons you described. Because we weren't religious there are some things that aren't a good fit even if its with other kids (confirmation meetings - I was very reasonably asked not to attend after asking questions because I was confused about the whole thing). There is a wide range of religious orthodoxy as well - plenty of mellower denominations.

Google was doing Fuchsia. SUPER cool... but what is the business case there?

They are also ham strung by just not listening to customers it feels like - so I think that impacts traction. You get an 80% solution with simple glaring edges. Thousands ask - please fix this edge, but whoever is driving the product is onto something else it feels like sometime.

Apple's main product lines all seem to make money, have positive margin. Their R&D is speculative as well, but at least too me seem to have a clearer path to product. I would love an apple interface in my car vs whatever the OEM ships in most cases. Even Tesla, with most advanced interface just can't keep it current / smooth / familiar etc the way apple does (music / playlist / etc integrations alone).

EDIT: Sorry - the original writeup / headline wasn't clear or I missed it - this requires guessing a 64 bit number that appears to have been random vs 32 bit sequential. Not sure if things were rate limited but even if not this makes a practical difference.

The product is great. Their security thinking though is pretty bad - they've had a sequence of pretty serious security flaws in what is supposed to be a security related product. The google login stuff is great though so not sure if there are good alternatives.

How much are you paying for this service you need google to fix? I ask because with their paid email products there are a fair number of routes to get help, your admin, then if that doesn't work you can go up the chain... If you are on a free account you may not be (individually) worth a ton to google revenue wise and so support is going to be poor (they have 1.8billion+ ACTIVE gmail users I think - if they increase costs by $5/user, that's a $10B expense. )

Does helping you look like potentially helping a hacker take over an account, recognizing that google deals with totally crazy state level attacks? Google faces some significant liability and risk here.

Would you pay google to make it worth their time to help you (I actually think this should be an option - if a physical in person visit + someones time is what it takes - then google should have some system for $500 + you get to their office somewhere to recover your account)

I've had relatives in this situation. If you do know someone at a large institution with an institutional relationship I think you can sometimes get help - I had a relative go this route, wasn't sure if the IT folks there just figured out how to fix / work within google, or could escalate somewhere to get it addressed.

Because google will worry about reps selling access to account resets - they may REALLY lock this stuff down, so even if a rep wanted to help, they may not be able to (insider attacks a big issue again especially state sponsored attacks).

First, ICMPv6 has more features - and can drive network configuration and reconfiguration. I've seen ICMPv6 stuff for things like discovery, address configuration, PMTU, ARP RARP type stuff, maybe some multicast group management? Where is this in ICMPv4?

"forced to deploy it properly" = giant headache. I'm tired of IPv6 folks saying it's a pain in the neck because it's "proper".

With ICMPv4 if you really needed / wanted, you could basically drop ICMPv4 at the firwall edge (with TCP MSS clamping etc). And the attack space with ICMPv4 coming through I don't think was TOO bad.

When folks say they don't need to filter ICMPv6 for things like RS / RA / NS / NA traffic that seems SO SO sketchy to me.

First of all, can you point me in the direction where I can get a static IPv6 block from AT&T easily so it will "just work"? Or maybe google fiber for IPv6? [1] There is currently more of a shortage of IPv6 (!!) in terms of getting a static block then there is with IPv4 in my experience.

I'm really tired of hearing it will "Just work" - that's proven to be a lie over and over. But I would love to be shown where these major players do their static blocks for ipv6 (having fought this fight for a while).

Are you using comcast? I think they only DYNAMICALLY assign you a 64 - so you can only create ONE subnet on your entire network. Again illustrating the shortage and difficulty in using IPv6. I'd thought /48 would be minimum PD, but that is not the case. Or even a /60? No go. There are workarounds I'm aware of, but this stuff absolutely DOES NOT "just work".

[1] - https://support.google.com/fiber/answer/6136162?hl=en&ref_to...

Always learning something, RDNSS - cool. It always felt silly to have this whole system, and STILL need DHCP to do basic stuff. Glad to hear the ipv6 purists CAN avoid the DHCP server. Practically I think it's here to stay for a bit.

I think privacy extensions are unavoidable - they default on in many places. So I'm leaving them. Some devices actually rotate more often (ie, when connecting to different wifi points even if underlying network is the same, apple seems to generate another new IP). But compared to ipv4 (where you can almost immediately trace from an IP you have in a log to device) -> you need more support in your tooling to do that with IPv6 and privacy extensions.

Some quick questions.

SLAAC seems to introduce insane churn in the IPv6 of end user devices. SLAAC (vs DHCPv6) seems to struggle in fully configuring an end user device (think DNS servers etc.

As someone who has beat my head on the IPv6 thing for a bit before giving up (I tried to go all IPv6), what is the "proper" way to setup a home IPv6 network with SLAAC and not DHCPv6?

If DHCPv6 for some reason is essentially always required, why not let subsume SLAAC for IP address assignments?

Spot on with part 2. Ignore all the folks saying IPv6 is "simple" or works well.

I am absolutely no expert, but could get my head around ipv4, but IPv6 - I always end up running into a fuss. I really wish they'd expanded address space to 64 bits, a few other tweaks, and called it good. Maybe call it IPv5? Is there any chance of doing something like this.

So many things that are so trivial or well known in IPv4 are a total nightmare pain with IPv6. Some quick examples:

Internet service providers will happily give you a block of static IPv4 addresses for a price. ATT goes up to a 64 ip address block easily, even on residential. Almost impossible to get a static block of IPv6 in the US.

Let's say you are SMB, you want WAN failover. With IPv4 this is simple. You can either get two blocks of static for your upstream, and route them directly as appropriate to your servers, or go behind a NAT and do a failover option. Whent the failover happens, your internal network is relatively unaffected.

Now try to do this with IPv6? You can't get your static IP's to do direct routing with, and NPT and anything else is a mess, and the latency in having your entire network renumber when the WAN side flaps is stupid and annoying.

In many SMB contexts folks are very used to DHCP, they use it to trigger boot scripts TFTP, zero touch phone provisioning and lots more, pass out time servers and other info and more. The set of end user devices (printers, phones, security cameras, intercoms, industrial iOT) that can be configured and supported with IPv6 is so poor and the complexity is so high.

Not all ISP's offer prefix delegation to end user sites. Because you have an insane minimum subnet size with ipv6 a lot of things that for example you just need two IPs (think separate network for customer premise equipment) now need a 18,446,744,073,709,551,616 addresses.

The GSE debacle means instead of a very large 64 bit address space we got an insane 128 bit address space. Seriously, how about 96 or anything else a bit more reasonable.

Even things like ICMPv6 - if you just let it through the firewall you could be asking for trouble, but blocking it also causes IPv6 problems. Ugh. Oh, it's simpler than IPv4 they say.