I've seen several projects like this, where there is a flurry of activity for a few days, maybe a couple of weeks, and then it is abondoned and doesn't see any more updates. Maybe they got bored of it, maybe the code wasn't actually maintanable (which can easily happen with vibed code), maybe they were just trying to get attention and didn't actually care about the project.
No, it's not. If you really want a NAT there is no reason you can't use a NAT with ipv6. In fact, it can work even better because instead of using a random port for the translation, you can use a random ip address for each connection.
My ISP is only a few years old, but they don't support IPv6 at all. And when I complain about it to support, their response is basically "we don't see the point".
That's actually one indication of how quality has gone down. When I was a kid, I remember a lot of big ticket items would have "lifetime" warranties or 20 year warranties, but these days it's hard to find anything with a warranty of more than a couple years, unless you buy separate "supplementary" warranty, which is really more of insurance than a warranty.
> Open source doesn't mean "anyone can use the source code commercially".
Yes it does. It might have requirements that you release the code for any changes you make to it or link with it. But no OSI (or FSF) approved license prohibits you from using it commercially.
Even before Let's Encrypt was a thing, that is how most DV (Domain Validated) certs were issued. It was just a more manual, more expensive process to do it. GP's point is since the system depends completely on trusing the DNS chain anyway, why not have the registrar [sic. it should actually probably be the registry] act as the CA as well and cut out the middleman, and the need to verify the domain from multiple paths to prevent MitM.
In Physics, if a theory doesn't describe reality, the theory is incomplete. Of course all theories are ultimately incomplete, the goal is to find theories that match reality better than the ones before.
CRLs were a great (ok, maybe just ok) design in the early days when the internet was small and the number of CAs and revoked certificates was small. But it was never going to be scalable. And it has the really big problem of needing to distribute these lists of revocations. OCSP has a different set of tradeoffs.
I think you are interpreting 2 as offering some large amount of money as a prize for discovering a solution. But I think it was meant more as funding a team of mathematicians to work on the problem.
> We do not seek academic credit for the discoveries produced by our internal models.
Sure. But that isn't what they really cared about anyway. They care about notoriety among the general population, and especially among people who decide to pay for their products.
Postgresql uses pages too. The records aren't kept in any kind of order, but the indexes are. So uuidv7 is still useful for postgresql because it means inserts are less likely to be spread across many pages in the primary index.
In my experience the phrase "it couldn't have been designed better to [negative thing]" is typically used, in a sarcastic, and usually exaggerated way, to mean "they did such a bad job, that they couldn't have done [negative thing] better, even if they had been intentionally trying to do [negative thing] (which they weren't)."
It also depends on exactly which version of OpenSSL. We ran similar tests with multiple versions of openssl. Openssl 3.0, which was the version in the official packages of our LTS distro was unacceptably slow. With 3.4, it was still worse than 1.1.1 but the regression was an acceptable level.
It also definitely depends on your hardware, and how you use it. The main source of the performance regression is more lock contention, so it is more noticeable if you have more threads running on more cores.
That isn't really relevant for the tool starting the container. The biggest problem with go here is that it can't natively perform the operations necessary to set up a container, due to the nature of the runtime, so it has to resort to complicated workarounds like a shim in c, and starting spawning from /proc/self/exe instead of forking/cloning.
I understand that's probably how the law works, but it is kind of nonsensical to me that it passively allowing visitors from a country would pull you into their jurisdiction. Requiring you to be responsible for blocking any users to your service from U ensures seems analogous to an author of a book that is illegal/censored in U being required to make sure that no one from U buys the book and takes it back to their country.
Well, they might be able to go against the domain registrars and possibly cloud providers that also operate in the french market. But those companies probably have a bigger expensive legal team, while quadnine is just a little non-profit.