donnachangstein

FWIW I wrote that post with no aggression intended. I suspect you may be overanalyzing things. Have a Coke and a smile, Dan.

Unfortunately, if my manner of speaking directly is breaking the site guidelines, then I'm afraid my values are incompatible with posting here.

I hope you didn't expend too much energy digging through my post history looking for transgressions. Though I do think it's funny the post that got me yelled at was the post insulting pit bulls.

Remember to not throw the baby out with the bathwater. Many of my posts were highly upvoted. I bid you good day.

I never said Ben wasn't talented. He's very talented. I like Ben.

That said, they are leagues apart. It's like claiming Eric Clapton is as good as a guitarist in some shitty bar band.

Perhaps you're not familiar with who Brian was and what he's done.

Ben is a hipster Elton John. To put him in the same league as Brian is insulting.

People bringing their pet dogs into grocery stores is an especially egregious societal ill. It's a major problem in places like Seattle where dogs outnumber children.

I once watched a woman hold her little dog over the glass at the pizza bar in Whole Foods. Was waiting for the dog to drop a free sausage link onto the pizza below.

Placing dogs into shopping carts is another one. Dogs rub their dirty buttholes on the same surfaces where you later place your fruits and vegetables.

> and maintaining a dedicated three stage filter spout next to my kitchen faucet costs me approximately nothing

Calling bullshit on this one. I have one, it's positively wonderful, but the filters are expensive and per the manufacturer's recommendation you're supposed to change them all simultaneously. So when one times out, they all time out. This runs approximately $150 a year minimum depending on usage.

> but do people brew green tea or good coffee with tap water?

I use filtered tap water (under-sink type) which removes most of it.

A lot of the higher end coffee makers like Keurig have built-in filter cartridges in the water tank.

Most commercial coffee maker setups I've seen (hard-plumbed) in offices have a filter attached to the plumbing behind the appliance.

Water can be safe/potable and taste terrible, and vice versa.

> But hey, at least it's not bottled water, which is basically tap water that has been put in a single-use plastic bottle and trucked across the country.

Everyone acts like bottled water is evil until there is a water crisis, then it's the lifeline.

Globally routable doesn't mean you don't have firewalls in between filtering and blocking traffic. You can be globally routable but drop all incoming traffic at what you define as a perimeter. E.g. the WAN interface of a typical home network.

The concept is frequently misunderstood in that IPv4 consumer SOHO "routers" often combine a NAT and routing function with a firewall, but the functions are separate.

> Can anyone explain to me if there is any way to determine whether an inbound IPv6 address is "local"?

No, because it's the antithesis of IPv6 which is supposed to be globally routable. The concept isn't supposed to exist.

Not to mention Google can't even agree on the meaning of "local" - the article states they completely changed the meaning of "local" to be a redefinition of "private" halfway through brainstorming this garbage.

Creating a nonstandard, arbitrary security boundary based on CIDR subnets as an HTTP extension is completely bonkers.

As for your application, you're going about it all wrong. Just assume your application is public-facing and design your security with that in mind. Too many applications make this mistake and design saloon-door security into their "local only" application which results in overreaction such as the insanity that is the topic of discussion here.

".local" is reserved for mDNS and is in the RFC, though this is frequently and widely ignored.

> Sure - a destination is "local" if your machine has a route to that IP which isn't via a gateway.

Fantastic. Well, Google doesn't agree

The proposal defines it along RFC1918 address space boundaries. The spitballing back and forth in the GitHub issues about which imaginary TLDs they will or won't also consider "local" is absolutely horrifying.

Can you define "local network"? Probably not. Most large enterprises own publicly-routable IP space for internal use. Internal doesn't mean 192.168.0.0/24. foo.corp.example.com could resolve to 9.10.11.12 and still be local. What about IPv6? It's a nonsense argument fraught with corner cases.