CKN23-ARIN

43 ms·

61.
by CKN23-ARIN 8y ago
The cost of an IP address has risen 3x in those 5 years. It now costs $5500 for a /24. This is a barrier to entry for some, and will become a barrier to entry to more as prices continue to increase.
62.
by CKN23-ARIN 8y ago
Notably, this is only a problem for WPA2-PSK, not WPA2-Enterprise. But, fair enough -- this does render my first suggestion unsuitable.
63.
by CKN23-ARIN 8y ago
Many ways to do this. Make the password widely-known. Announce it over the intercom. Post it on the walls. Offer both encrypted and non-encrypted SSIDs. The non-encrypted SSID could even just be a captive portal with instructions to conn
64.
by CKN23-ARIN 8y ago
This Sounds Too Good To Be True That’s exactly what I thought when I read about the launch of Gmail exactly 15 years ago today. Is this supposed to make me less suspicious?
65.
by CKN23-ARIN 8y ago
(YC '19)
66.
by CKN23-ARIN 8y ago
It is your money being spent, in both cases. Labor is entitled to all it creates.
67.
by CKN23-ARIN 8y ago
They could have done this locally, just for their authoritative servers, without trying to force their ideas about ANY on the rest of the Internet.
68.
by CKN23-ARIN 8y ago
If Google didn't use a monorepo, it would have been much harder for these employees to keep tabs on Dragonfly-related code.
69.
by CKN23-ARIN 8y ago
For reference, the path observed by BGPMon was: 11039 The George Washington University 46887 Lightower Fiber Networks I, LLC 6939 Hurricane Electric LLC 4134 China Telecom Backbone 4134 China Telecom Backbone 4134 China Teleco
70.
by CKN23-ARIN 8y ago
A few "legacy" address holders in the ARIN region have managed to hold on to legal ownership. https://www.internetgovernance.org/2012/09/22/its-official-l... But it's true that newcomers these
71.
by CKN23-ARIN 8y ago
Again, there is no hard requirement that all packets in a flow take the same route. Keeping the TCP state machine POP-local when running anycast TCP is exposing a buggy TCP implementation to the Internet. I understand that it is desirable
72.
by CKN23-ARIN 8y ago
That's what caused the issue to surface, but the root cause is offering a stateful service over anycast. There is no hard requirement that you ECMP flows consistently. Spraying may be sub-optimal, but it must be accepted. I do agree
73.
by CKN23-ARIN 8y ago
TL;DR: Incapsula, Imperva, Sucuri, Fastly, and likely others are using anycast incorrectly.
74.
by CKN23-ARIN 8y ago
I'd offer Mastodon as a healthier example of somewhere Twitter/Facebook refugees can turn. I'm sure there are some federated instances that harbor the type of toxic behavior you describe, but on a well-moderated instance, th
75.
by CKN23-ARIN 8y ago
Or, those with the time, money, and know-how can do these things today, so that others that they are sympathetic to will have more options available to them when they are shut off tomorrow.
76.
by CKN23-ARIN 8y ago
From a blended mixture of peers and transit providers, such that a termination of service from any one peer does not take the network offline.
77.
by CKN23-ARIN 8y ago
It is possible to start your own hosting company. It is possible to start your own domain registrar. It is possible to start your own ISP.
78.
by CKN23-ARIN 8y ago
HTTP challenges do not offer meaningfully increased resistance to MitM over DNS challenges, and require measurements from multiple vantage points just as much as DNS challenges do.
79.
by CKN23-ARIN 8y ago
On my webserver (http-01 challenge type). Fresh hostname. Fresh VM. Fresh certbot install.
80.
by CKN23-ARIN 8y ago
To test this, I just now acquired a Let's Encrypt cert using `certbot certonly` while tailing the logs. I received only a single request, from 64.78.149.164. The cert was issued. They did not appear to take a second measurement.
81.
by CKN23-ARIN 8y ago
Why is it that the CA can expect no tampering? It seems to me that it would not be hard for certain classes of attackers to MitM a CA.
82.
by CKN23-ARIN 8y ago
That's funny, I thought "Andromeda" was Google's network virtualization stack. https://www.usenix.org/system/files/conference/nsdi18/nsdi18...
83.
by CKN23-ARIN 8y ago
Less NAT means less household/workplace/etc-level traffic mixing means less plausible deniability for users.
84.
by CKN23-ARIN 8y ago
From the HTTP response headers: Last-Modified: Mon, 09 Nov 2009 22:21:44 GMT
85.
by CKN23-ARIN 8y ago
The transfer market is still viable. I bought my /24 from https://www.ipv4auctions.com/