peanut-walrus

5 ms·

1.
by peanut-walrus 10d ago
IP and Ethernet were developed around the same time and also became the dominant standards around the same time. But they were mostly unrelated, so you had token ring networks running TCP/IP and Ethernet networks running IPX and all so
2.
by peanut-walrus 11d ago
Quite common to run unnumbered IS-IS backbones. Whether this can rightfully be considered a "LAN" is up for debate.
3.
by peanut-walrus 12d ago
Transparency logs. It's mandatory for a cert to be in CT logs for browsers to trust it. Those are public, if this was happening, someone would have noticed already.
4.
by peanut-walrus 16d ago
There is no such thing as unfixable. It's just kicking the can down the road. Look at how email devolved because of the features that made spam "unfixable". I would like dns not to go down the same path, which seems all too l
5.
by peanut-walrus 1mo ago
> The rational soul can be made only by creation. From Aquinas' Summa Theologiae. The argument this article presents does seem very similar. Weirdly, the article itself is very dismissive of religion, while making a similar argument
6.
by peanut-walrus 1mo ago
Because web security has a lot of legacy crap. Such as cookies. Oh you added Domain=foo.com to your cookie? Now marketingvibecodedapp.foo.com can access the cookie from your main domain. What do you mean you thought adding the domain field
7.
by peanut-walrus 2mo ago
In theory, yes, in practice this will currently result in deliverability issues, both for servers which don't speak dmarc and for spam signals. I have tried this :) If this mode of operation was an explicit choice, this would give me t
8.
by peanut-walrus 2mo ago
Missed opportunity to get rid of SPF. What I want to my DMARC policy to say: if someone is sending you an email that claims to be from my domain and it's not signed by one of the keys I have published under my domain, you should reject
9.
by peanut-walrus 3mo ago
Turns out you don't actually need top-tier engineering talent if your only business is selling ads to scammers to prey on the elderly?
10.
by peanut-walrus 4mo ago
It's a feedback loop between governance, social structures and individuals. But out of those, only individuals are the ones with free will who are able to "break" the loop and direct society along a different path. It's
11.
by peanut-walrus 4mo ago
It's your personal toy server, you are optimizing for something entirely different than high availability.
12.
by peanut-walrus 4mo ago
Yup, podman quadlets autoupdate quite nicely. Setting up a local registry mirror with ~3d delay before applying updates is on my todo list. My own service images already have a script that runs daily that pulls latest git updates and builds
13.
by peanut-walrus 4mo ago
I see no reason not to go with a rolling release distro for personal servers. Run all the services in containers and have the base OS auto-update itself as often as it needs. Went with openSUSE MicroOS myself, it updates and reboots almost
14.
by peanut-walrus 4mo ago
I do fight botnets, malware and scams. Criminals flock to any service where they can spread their stuff and appear legitimate. Google, Facebook, Vercel, Netlify, Amazon, Oracle, Microsoft, OVH, etc. In my experience, Cloudflare is not any m
15.
by peanut-walrus 4mo ago
Oh absolutely agreed. Cloudflare becoming a giant internet chokepoint is certainly a real problem. It would be a much better world where ddos protection would not be a needed service or where we it was provided as a public service, rather t
16.
by peanut-walrus 4mo ago
So "big companies only, absolutely no anonymous sign-ups" should be the only ones able to put stuff on the internet without fearing that a random teenager can take your site offline for days just because they're bored?
17.
by peanut-walrus 4mo ago
Articles like these seem to hold a weird belief that Cloudflare does not react to security reports or legal orders? From my experience, they react appropriately and relatively quickly compared to rest of the industry. Could Cloudflare be mo
18.
by peanut-walrus 5mo ago
90% of those sites don't have anything resembling a sysadmin. If they've not already been hijacked by one of the Wordpress vulns or hijacked plugins years ago, they will be now. And absolutely nobody will spend any effort to fix t
19.
by peanut-walrus 5mo ago
Yes. But it's quite an uncommon setup. For IPv6 multiple addresses is the default.
20.
by peanut-walrus 5mo ago
I've always found the most complicated part of IPv6 to be address scopes and source address selection. The fact that one interface can have any number of addresses in different scopes and prefixes complicates things a lot. Another thin
21.
by peanut-walrus 5mo ago
And eventually even a worm will turn.
22.
by peanut-walrus 5mo ago
Yes you can. Fight with clever technical solutions and the politics will follow once the solution becomes common or displays its usefulness. It is in fact the most effective way to fight dumb political issues.
23.
by peanut-walrus 6mo ago
Why the hell is this a name suffix instead of just using subdomains? myapp-123456789012-us-west-2-an vs myapp.123456789012.us-west-2.s3.amazonaws.com The manipulations I will need to do to fit into the 63 char limit will be atrocious.
24.
by peanut-walrus 7mo ago
It sucks so much that there is no standard way of linking additional domains to your main one and inheriting the reputation. Want to set up a new domain for whatever purposes (conference, new product, etc)? Be prepared to spend the first ha
25.
by peanut-walrus 8mo ago
I've always found it weird that CNAMEs get resolved and lumped into the answer section in the first place. While helpful, this is not what you asked for and it makes much more sense to me to stick that in additional section instead. As
26.
by peanut-walrus 8mo ago
I've been a Linux admin for 25 years but up until a few months ago my personal computer has been windows (gaming desktop) or Mac (laptop). I decided to give desktop Linux another shot and I'm glad I did. I was prepared for a lot o
27.
by peanut-walrus 9mo ago
Disagree. If you have an error that NEEDS fixing, your program should exit. Error level logs for operation level errors are fine.
28.
by peanut-walrus 9mo ago
Personally I find just using nftables.conf straightforward enough that I don't really understand the need for anything additional. With iptables, it was painful, but iptables has been deprecated for a while now.
29.
by peanut-walrus 9mo ago
Again, this is a Safari problem, not a passkeys problem. You are literally complaining about missing features in Safari.
30.
by peanut-walrus 9mo ago
So don't use software that forces lock-in (Safari)? Sounds like a you problem.

More ›