ay

32 ms·

301.
by ay 12y ago
SYN-ACK which does not get retransmitted, advertises a zero window and does not have options looks like some implementation of SYN cookies. A nice (and useful in some cases) hack but a violation of the TCP spec, which is why it is disabled
302.
by ay 12y ago
So the chipTAN generator reads the details of the transaction optically, and then you just confirm them ? Pretty clever. On my chipTAN (Belgium, ING) I have to enter the number by hand (part of the account# of recipient, amount). On the pos
303.
by ay 12y ago
"Out of the box these home routers all come with the same subnet" - if the customer has any way to change the router LAN subnet, this does not matter. Someone will put it to 10.x.x.x. My cable modem came from ISP with a default lo
304.
by ay 12y ago
Less chances to overlap with the RFC1918 address in a home network ? (a silent assumption here is that the CPEs are user-configurable in any way). Or just that they had historically some 10/8 space already used elsewhere in the network
305.
by ay 12y ago
At the same time, beware of "helpful" lower layer protocols. Mobile wireless stuff (EDGE/3G) is going to great lengths to avoid dropping packets, so if you get conditions right (moving train in the areas with poor coverage is
306.
by ay 12y ago
Arguably "expect this to fail X% of the time" is a more robust approach - because in-order delivery or zero-loss situations are then simply best cases that "just work". But you can not make work what you can't test.
307.
by ay 12y ago
Actually your https://github.com/justincormack/rumpuser-xen was the original inspiration for me :-) Back when I started (sometime in May), rump did not run on "bare metal" yet, so I decided to reinvent a bicy
308.
by ay 12y ago
Can't edit the old answer, so adding a new one... I found this: https://code.google.com/p/lualisp/ - could be fun to get it atop. I'll see next time when I am in the mood for hacking on it.
309.
by ay 12y ago
I've grabbed the missing routines from musl libc (and culled some parts of the Lua standard library for the sake of reducing the number of requirements, e.g. io.*), and used venerable Doug Lea's malloc for memory allocations. The
310.
by ay 12y ago
On the topic of experimental OSes: https://github.com/ayourtch/ayos a little experiment of my own to see what happens if I put Lua on bare metal (currently KVM-only) in x86_64 mode. Lots of fun to toy with, though it d
311.
by ay 12y ago
When outputting to terminal, "-l" can be a very useful switch if one pipes the output through other utilities. This becomes especially necessary when the packets matching a filter slowly trickle in - i.e. precisely the use case wh
312.
by ay 12y ago
Very nice! A feature idea: would be cool to have a level with "increased difficulty/realism" with just one degree of freedom - the sail. In real world you can not turn the vessel on a whim. And the next level, make the wind g
313.
by ay 12y ago
Re. edgenet: it looks to be overlapping with serval https://play.google.com/store/apps/details?id=org.servalproj... - I wonder why not contribute to that project rather than building from scratch ?
314.
by ay 12y ago
Looks like the patched version and the pre-patched version show the same version, or am I being stupid and missing something ? ayourtch@mcmini:~/bash-patch$ ls bash_4.2-2ubuntu2.2_amd64.deb bash-builtins_4.2-2ubuntu2.2_amd64.deb
315.
by ay 12y ago
Hit "search", search for "Rain man", watch the movie. How is this a "channel" ?
316.
by ay 12y ago
Is the parent comment a sarcasm ? If not - then it's completely incorrect description of how Netflix works. They have one month for free - so you can check for yourself how exactly it functions, before commenting. (disclaimer: I&#x27
317.
by ay 12y ago
Very nice to meet you! Totally agreed on the residential ISPs loving PVLANs. And thanks for your work with deploy360 and helping to get better information to people !
318.
by ay 12y ago
Couldn't find your email in profile - drop me an email at ayourtch at gmail / cisco dot com. It's too raw to just be dumped on the web, and I'd be curious to hear from a few folks doing this as a "day job" abou
319.
by ay 12y ago
An aside: whether to allow the randomized addresses or not is a choice available today with no protocol changes whatsoever. A network admin can turn off the "A" bit on the prefix in the router advertisements and turn on "M&qu
320.
by ay 12y ago
Both yours and tedunangst example (SSH) have one important commonality which is not present in IP: they become immediately available to two parties as soon as these two parties upgrade. With IP, all the intermediate nodes need to upgrade to
321.
by ay 12y ago
...and thanks to the knobs for being able to workaround the day1 bug uncovered just this year in at least one of the widely used vendor's server implementations while getting the fix. But yes, with just 2 parties involved into any inst
322.
by ay 12y ago
If you are genuinely interested in answer to this question, you will like the below eBook that answers that question fabulously. http://www.internetsociety.org/deploy360/blog/2013/12/free-e... It's
323.
by ay 12y ago
You're right, DOCSIS has nothing to do with it. The "classic" rationale to choose multicast over broadcast was to try and limit the amount of time to process NDP traffic vs. the time the hosts have to process the ARP broadcas
324.
by ay 12y ago
On "still leaves thousands (if not hundred of thousands) of collisions", here's some research: "In 2010, Eckersley demonstrated that benign characteris- tics of a browser's environment, like the screen dimensions an
325.
by ay 12y ago
By no means there's any doubt in MIT admins' competency. Just that by reading the encounter, I feel sorry for the cards they've been dealt with, so to say: 1) a s/w hang for which there was no way to advance in a getting
326.
by ay 12y ago
Can you use the UUIDs ? If you talk install, then with most of today's PXE ROMS first thing you want to do is to bootstrap into iPXE to get IPv6 support. That gives you also the support for pulling in your install via HTTP, with passin
327.
by ay 12y ago
Depending on software, you might just listen for the DAD upon bootup or the service advertisements, of which any host today emits plenty... On the topic of the IPv6 implementation testing per se: https://www.thc.org/thc-ipv6
328.
by ay 12y ago
Yes and no. Quite a few large environments use SLAAC and they work just fine (though I work for cisco so a bias is quite possible ;-). But there's certainly something specific to MIT's setup that makes it melt down in such a spect
329.
by ay 12y ago
++. A small nit to add: IPv4 did not have 1+ multicast groups per every host. That's a dramatic difference in terms of capacity on the middle-gear which escapes if one thinks of IPv6 as "IPv4 with bigger addresses".
330.
by ay 12y ago
"effectively an active /64". Comcast folks did a ton of testing with the CPEs, and very very few could ask for anything than an active /64, that's why this qualifier :-) There's active (and pretty cool) work in

More ›