unethical_ban

Joined 13 years ago

Karma
11,208
Submissions
6,240
Member since
Mar 27
Infosec.
View on Hacker News

Recent submissions

Comment · 1 day ago
A cultural issue that many organizations face. Same reason most large companies have an infosec department that runs separately from IT.
Comment · 1 day ago
BBC America shows a lot of Trek, if I recall correctly. I'm shocked that Paramount doesn't have it for VOD on their streaming service. Are they suppressing it, think they can make more money selling the media, or are they afraid it could cannibalize their other Trek ventures?
Comment · 2 days ago
It's definitely a slight learning curve (a few days at most for basic understanding and troubleshooting). I can't speak to complexities like routing protocol configurations.

But goodness, the infinite-subnets-of-same-size glitch is so amazing. I see companies all the time that struggle to subnet their sprawling enterprise. Different subnet sizes everywhere, fragmented networks, subnet migrations to try to defragment, so on.

Many orgs are so short-staffed and staffed with mediocre talent that they spend their days fighting fires and keeping their flawed current practices operating just well enough to keep the lights on and not cause outages or security breaches. Things like "optimizations" and "redesigns" of the IP stack, even in 2026, would be a 5-10 year journey without a dollar sign benefit attached to it. So they limp along until the transition is seamless and necessary or monetarily desireable.

Comment · 2 days ago
Drown the government like a baby in a bathtub, eh?
Comment · 2 days ago
Yep. IPv6 should be thought of as 2^64 subnets, each with "enough space for everyone" within each subnet.
Comment · 2 days ago
From my readings and limited experience, it's two things.

First, IPv6 in the 90s and 00s is different from IPv6 today. Various extensions and standards have been added that make IPv6 administration easier than it was in the early days. I want to say RDNSS is one of them. Background: one of v6's early selling points was SLAAC, where DHCP could be disposed of and endpoints would auto-configure their own IPs in accordance with the network announced by a router. Problem is, without DHCP, there was no way to get DNS, and DHCPv6 wasn't widely deployed/it was discouraged... so how does one get a DNS server automatically? RDNSS came around to announce DNS servers from the router directly.

TLDR: Early IPv6 sucked more than today.

Second, it's simply a chicken-and-egg problem, particularly at the consumer network level. User-friendly IPv6 router configurations are still rare for home routers, and ISPs have simply dragged their feet. At this point, if we're going to have government mandating all manner of things for consumer products, we should be mandating IPv6 support on home routers and that ISPs delegate at least a /60 to each customer.

Comment · 2 days ago
I do not excel at this, but that's why it's important to continue normalizing activities that protect our freedoms, even if they seem inconvenient on their face. Shops should accept cash, people should use cash, people should expect and demand privacy. Laws and judicial interpretations are often based on the public's expectation of certain services and rights.
Comment · 2 days ago
Season 1 had a great premise with some missed expectations around the significance of some plot elements. Season 2 was exceedingly "meh", with an exception for the end of the last episode which made me tear up. Season 3 was pure memberberries, and if you accept that then it is fun.
Comment · 2 days ago
It's meme-y, but if you know, you know. Whenever I see or even watch the line, I instantly hear the Picard Song.
Comment · 2 days ago
So logical flaws can't be patched without hardware replacement? Software isn't fundamentally unsafe. We're in a gap era where the capability to discover bugs is greater than the response time and pre-emptive hardening of software written without AI assistance. This gap will eventually get smaller.
Comment · 2 days ago
Patents aside, h265 from my reading is almost universally better than h264. My understanding which could be wrong is that for a given quality h265 will always be smaller, and particularly for >1080p it's recommended. Hardware support has been around since at least the Shield days (2019) so that shouldn't be an issue. Only use h264 if you are needing to hw-decode on really old hardware.

AV1 is the future/present: Fully open standard, better than h265. Only downside is hardware support: You need hardware made in the last few years.

Comment · 2 days ago
It would be extraordinarily simple to remedy this: Require by law the technical ability to physically disable all remote communication to and from a vehicle, and prohibit any remote communication requirement from the core functions of a vehicle.

An operator should be able to use their vehicle with zero remote software use. No smartphone requirement, no onboard radio requirement. This may mean that certain features like FSD or navigation tools are disabled for safety reasons, but there are plenty of useful safety features that do not require live updates.

From a privacy and utility perspective, this is a no-brainer. Second, as a software security layperson, I think this would largely eliminate any "sleeper cyber sabotage" security concerns that are cited for prohibiting Chinese vehicles.

---

Given how obvious this seems to me, I'm confident that we're really banning Chinese EVs for economic reasons.

Comment · 2 days ago
Most of those are states with low seat counts. But to quote me from a sentence above, "gerrymandering is bipartisan".

Rucho v Common Cause, a case brought against both Dems and GOP that would have rightfully declared partisan gerrymandering an unconstitutional deprivation of voting rights, was shot down by a Conservative court. Democrats campaign on ending gerrymandering, Republicans do not. Trump demanded the recent escalation in gerrymandering by explicitly calling for political re-drawings to give Republicans more seats, and Republican governors complied. The calls to de-escalate and ban the practice federally have (almost) entirely come from Democrats.

Comment · 3 days ago
They're right. Of the listed grievances, only gerrymandering is a bipartisan issue, and even then only Conservatives have fought to preserve and expand its use.
Comment · 3 days ago
I don't think Linux is any worse than Windows at this point. Distros the burden of supporting every machine ever made while Windows gets pre-installed support by vendors. However, consumer Windows on my relative's HP laptop is absolutely horrendous experience. Online accounts, popups from crapware, constant ads in all the built-in apps.

Meanwhile my Windows install can't see either of the wifi devices, even when I try to install drivers from the manufacturer. CachyOS autodetects everything and it just works.

So, not pretending, I have fewer issues on multiple devices right now with CachyOS and Fedora than I do with Windows. If my relative had any capacity for learning new hotkeys, I'd already be wiping his machines and putting Kubuntu LTS on them.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton