TZubiri

9 ms·

121.
by TZubiri 2mo ago
I agree that there is no technical difference in the original ipv4 standard. There is one in the og tcp standard though. Server, listening, ports are well known, and they uhh listen. Might be semantical, but it's in the spec. Listening
122.
by TZubiri 2mo ago
>Training on the eval puzzles is cheating / “training on test” No this is false. “Training on test” specifically means training on the labels of test data. The labels were not trained on. I disagree, but i agree that training with a
123.
by TZubiri 2mo ago
>Personally I think today's frontier models can be beat by training from scratch You mean for a specific usecase? Also aren't frontier models trained 'from scratch'?
124.
by TZubiri 2mo ago
An interesting use case, a kind of personal server, presumably FTP. Still not my cup of tea, but I think that the threshold of acceptable hacks is much higher for personal usage, there's no right or wrong, because it's as much a u
125.
by TZubiri 2mo ago
But is it materially different? Or is it a difference in quantitative increase of likelihood of the exploit? The thesis "everything hackable" will be hacked, and with the advent of hacking LLMs, the boundary between criminal hacki
126.
by TZubiri 2mo ago
Yeah, but to the extent that the server is useful, it needs to be exposed to the internet. If you make your tailscale available to the internet through tailscale, you are still weak to external attackers, putting a VPN in the middle doesn&#
127.
by TZubiri 2mo ago
IPv4 in China must be complicated, I would probably look into IPv6 if I were based in China, or China specific protocols, or perhaps there's some IP addresses that China has embargoed and reserved for their own? Such that inside China
128.
by TZubiri 2mo ago
Is the phone more used for inbound or outbound? Calling the phone seems fun, but I wouldn't want to get in the way of a bunch of people standing in line to make a call, or use it for emergencies.
129.
by TZubiri 2mo ago
>Unlikely to be a hack, more likely to be a misconfiguration or update sent incorrectly. Are these materially different? Assuming that there wasn't a literal command to turn off all freezers, from an organizational, non criminal per
130.
by TZubiri 2mo ago
I see it now, it's a bundle of both the practical and security aspects. I think the security aspects serve mostly as a marketing tool, potentially serving users who truly need a VPN. But if I see a user that exposes a server without a
131.
by TZubiri 2mo ago
Quite legitimate, a common use case of VPNs, an L3 encryption tunnel to provide virtual LAN access. It's kind of a hack usually, but it might work as a second redundant layer of security (the other usually being HTTPs, and in the case
132.
by TZubiri 2mo ago
>Counting the cost of creating the company so you can actually deal directly with a NIC? No, the question was taking the price that the NIC sells the IP blocks at. Understanding that in order to get 1 IPv4 address you will be buying from
133.
by TZubiri 2mo ago
> Yes. My ISP will rent me a single IPv4 address for $10 per month. At that price point you can get a small vm, but if you have a dedicated server you want to use on-prem, 10$/mo seems like a reasonable price. > Or I can use DHCP
134.
by TZubiri 2mo ago
If you are thinking of launching your own TLD, or second level tld, or effective TLD (like vercel.app). I suggest being creative instead of making yet another TLD with the standard checkbox rules. If your TLD is location based for example,
135.
by TZubiri 2mo ago
Do you have any example where leasing an ipv4 block from a NIC directly costs more than 5$ per IPv4 address per year?
136.
by TZubiri 2mo ago
You are describing the product technically, but I find how it is used more important. Do you use it? What do you use it for? If empirically most users use it to host a server on a machine with firewalled IP, then that's more descriptiv
137.
by TZubiri 2mo ago
>"that the vm can use my home connection for certain traffic. " Huh. Why are you doing this, is the datacenter IP being (rightfully) blocked by some service to avoid abuse? Is your usecase breaking some services ToS? Certainly
138.
by TZubiri 2mo ago
Or just use an ipv4 address. It works I swear
139.
by TZubiri 2mo ago
Related comment from another thread https://news.ycombinator.com/item?id=49454785 > Even more ironic is that NAT got normalized as a security feature — “your devices are hidden!” — which is one of the things that made pe
140.
by TZubiri 2mo ago
>If you use Omarchy, the most important takeaway is simple: update to 4.0.1. More like, don't use Omarchy, or vibecoded Operating Systems. Running a descriptor into a shell command is laughably sloppish.
141.
by TZubiri 2mo ago
That's the whole raison d'etre for CloudFlare, it was originally a DDoS protection layer, which, as the article mentions, is the final form of malicious traffic, being distributed and hard to attribute traffic to an identity. If y
142.
by TZubiri 2mo ago
I mention litecoin specifically, it was developed right after BTC ASICS started dominating, and the LTC goal was for hardness to reward consumer hardware rather than ASICS, it was briefly successful until LTC ASICS were developed.
143.
by TZubiri 2mo ago
If I recall by browsing the docs, there's a lot of fine grained client control over the blocking params. Which makes sense since the main product of cf is bot blocking. So you can definitely block by IP, by fingerprint, both or neither
144.
by TZubiri 2mo ago
There's a winner takes all (monopoly) dynamic, if everyone uses your product, you can share the ip banlists between customers.
145.
by TZubiri 2mo ago
It goes beyond mirrors, it's just something criminals have been doing since forever, to abuse all websites.
146.
by TZubiri 2mo ago
I thought we learned this with Litecoin, it works only as a novelty factor, nothing fundamental. When the reward to abuse crosses a certain threshold, a determined party will come along and completely dominate it.
147.
by TZubiri 2mo ago
Same problem we've been having for ages. Using shared ip banlists is the best solution so far, like cloudflare. Sure maybe they hit your server for 5 seconds and then desist, but they'll attack someone else, and they'll event
148.
by TZubiri 2mo ago
Au contraire, playing blindfold is removing a tool, depending on nothing but your mind. Vibe coding is the opposite, not just depending on the chessboard, but depending on a couple of Gflops to even think. Blindfolded programming would be t
149.
by TZubiri 2mo ago
As someone who is just now learning about burning man, it reminded me a lot of Fight Club (1999). And it turns out the author belonged to some of the clubs behind it, namely Cacophony Society/Suicide Club. There seems to be a bunch of
150.
by TZubiri 2mo ago
Dalton Caldwell and Michael Seibel have talked about a similar phenomenon applied to YC and startups in general. It seems that early on it was a weird and nonconformist career move, but now it has become something that is done out of the sa

More ›