simon_vetter

6 ms·

1.
by simon_vetter 10y ago
They're doing dual stack, not ipv6-only with nat64/dns64.
2.
by simon_vetter 10y ago
Requiring all apps to work on ipv6-only DNS64/NAT64 networks will let Apple do without 464xlat entirely, as no ipv4-only app will be left on the app store.
3.
Show HN: file.pizza - WebRTC p2p file sharing webapp(file.pizza)
4 points by simon_vetter 11y ago|1 comments
4.
by simon_vetter 11y ago
> Even if it existed, it would bring very little value to the users, as operating a radio device with modified firmware on public networks without recertification is prohibited in most jurisdictions of the world and privacy concerns in c
5.
by simon_vetter 11y ago
This. At least, if you're not ready to accept incoming v6 connections (which really isn't hard to do), use connection tracking to let outbound v6 through and add the necessary icmpv6 accept rules. ufw comes pre-installed on ubuntu
6.
by simon_vetter 11y ago
I'd strongly recommend against using ftp in 2015. sftp [1] should do everything that ftp did in with a good level of security (encryption, server authentication and key based user auth). It uses ssh as transport protocol which means th
7.
by simon_vetter 11y ago
> * via Raspbmc, which I just found out has apparently ceased to exist... Try OSMC [1], it's a massive improvement over Raspbmc and is being developed actively. Works like a charm. If I'm correct, the main Raspbmc dev went over
8.
by simon_vetter 11y ago
This is fairly common, if not ubiquitous. Use key-based authentication, disable password auth in sshd_config and install sshguard.
9.
by simon_vetter 11y ago
That's only a management interface tho, the modem will still happily forward ipv4.
10.
by simon_vetter 11y ago
what icebraining said: use a nat64+dns64 at the edge of your network and make all your endpoints ipv6 only. If you're an ISP, you could probably put multiple nat64 boxes in the core so that all your customers benefit from it and can gr
11.
by simon_vetter 11y ago
This. Running dual stack networks is harder and more expensive to manage, secure and troubleshoot. The faster we get to single stack ipv6 only, the better.
12.
by simon_vetter 11y ago
iOS8 has been reported to be dual stacked (v6 + v4 addresses) on the cellular side of things on Verizon and a bunch of other (mostly European) networks. What Apple did with iOS9 is improve its address selection algorithm to prefer ipv6 in a
13.
by simon_vetter 11y ago
Add the score of the duplicate (being deleted) to that of the original story, and keep the highest rank of the two?
14.
by simon_vetter 11y ago
Implementing other protocol handlers into existing web browsers and operating systems would be a good start IMO. Taking ipfs/ipns [1] as an example, having handlers inside web browsers would allow people to link from http[s]:/&#x2
15.
by simon_vetter 11y ago
hulbee.ch uses an invalid security certificate. The certificate is only valid for the following names: *.hulbee.com, hulbee.com
16.
by simon_vetter 11y ago
I would recommend sshguard [1] as a fail2ban replacement. It does much of what fail2ban used to do out of the box and has supported ipv6 for a long, long time. It is packaged in debian, ubuntu and probably other major distros these days. [1
17.
by simon_vetter 11y ago
From the placement of the LEDs and the board's relative size compared to your hand, I'm assuming that this is the main board of the device. Coming off that board, I see two large wires (red and black) running to a battery connecto
18.
by simon_vetter 11y ago
> Anything that is moving, distracting This. It's really hard to stay focused on an article or piece of text longer than a few sentences with flickering images, autoplaying videos (with sound), and recently those pesky javascript ov
19.
by simon_vetter 11y ago
I've used a Time Capsule just fine in bridge mode when cabled to a CPE sending out router advertisements. If you use it as a bridge, you might want to make sure the TC firewall is disabled (or at least lets multicasts through).
20.
by simon_vetter 11y ago
On the contrary, there are advantages in having your apps/clients support ipv6 even if your backend is not ready to offer v6 connectivity: 1) your app/client will work just fine on ipv6-only networks with NAT64 gateways, making fo
21.
by simon_vetter 11y ago
Same experience here. Servers get ordered, racked, provisioned and left powered on waiting for a sysadmin to make use of them... which quite often doesn't ever happen, because team priorities change over time, people move on/get f
22.
by simon_vetter 11y ago
Note that he could be living in a jurisdiction where the law provides better protection for electronic communications (email being one of them), thus preventing his ISP from reading/analyzing/reselling his emails.
23.
by simon_vetter 11y ago
icmp in ipv6 does much more than its ipv4 counterpart and most importantly: 1) L2 address resolution (neighbor discovery), which ARP used to do in ipv4, 2) full network autoconfiguration (global scope addresses, default route(s), DNS resolv
24.
by simon_vetter 11y ago
Any decent size transformer (or AC motor) in or near your house would hum at 60Hz (plus a bunch of harmonics). The big one on that utility pole down the street seems like a perfect candidate.
25.
by simon_vetter 11y ago
You can disable their http/https/telnet interfaces and stick to ssh with key auth for administrative tasks. That alone should help. Also, they come with upnp and other unnecessary daemons disabled which greatly reduces their attac
26.
by simon_vetter 11y ago
"We collect information from you when you register on our site. When registering on our site, as appropriate, you may be asked to enter your name, email address or other details to help you with your experience." [1] "We do n
27.
by simon_vetter 11y ago
I'd argue that facebook is as big a threat as gmail, especially when you see how younger generations use it to communicate. Also, keep in mind that facebook tracks and collects your moves all over the internet (hint: look for the littl
28.
by simon_vetter 11y ago
Use these services as tcp load balancers and terminate SSL on your backends. Using a LB to offload SSL termination might seem like a good idea (you save a bit of CPU, really not more than a few percent in practice), but you expose your cust
29.
by simon_vetter 11y ago
have a buildbot/jenkins set up which runs your test suite on a buildslave automatically when you push to a git branch? I would still run my editor locally (your pick. I use vim almost exclusively).
30.
by simon_vetter 11y ago
If your hostname is dual stacked it only checks for ipv4 afaik.

More ›