icedchai

14 ms·

1. 361.▲
   by icedchai 7mo ago

   My comment still seems relevant? Do frequent commits to correct mistakes imply more "value" than infrequent, but well tested, commits, or what? I don't think it is a reliable signal.
2. 362.▲
   by icedchai 7mo ago

   I think we'd be surprised how much address space is actually wasted, not announced or routed. I have my own /24 that I registered back in the 90's. It is, in fact, routed and announced globally. I know several "early Int
3. 363.▲
   by icedchai 7mo ago

   I wouldn't trust "commit counts." The quality and content of a "commit" can vary widely between developers. I have one guy on my team who commits only working code that has been thoroughly tested locally, another gu
4. 364.▲
   by icedchai 7mo ago

   Yes, I agree, it's not apples-to-apples... but we're talking orders of magnitude in CPU, RAM, and "GPU" power.
5. 365.▲
   by icedchai 7mo ago

   The bloat is pretty incredible. Consider my Amiga 500 could resize windows without lag on a ~7.1 mhz 68000 and 512K of RAM, almost 40 years ago.
6. 366.▲
   by icedchai 7mo ago

   I've been using SSH since 1996 and I've never once seen anyone actually verify a public key manually like that. If they can MITM your SSH server, why can't they MITM your internal web site? In common practice, TOFU is type &q
7. 367.▲
   by icedchai 7mo ago

   I remember almost all of mine, including /24 and /16 blocks from several former employers!
8. 368.▲
   by icedchai 7mo ago

   What about device like those Chromecasts which don't even have firewalls? The only real solution would be to bring your own hardware firewall / access point and connect it as a client off the hotel wifi. Who is really going to do
9. 369.▲
   by icedchai 7mo ago

   I don't even bother with split-horizon. My internal hosts are in public DNS under a subdomain.
10. 370.▲
    by icedchai 7mo ago

    It sounds like that one may have been the result of a "lawful intercept", so perhaps not necessarily BGP hijacking. If you have legitimate control of the ASN/network, it's not a hijack.
11. 371.▲
    by icedchai 7mo ago

    I assume this is sarcasm.
12. 372.▲
    by icedchai 7mo ago

    Most public wifi has client isolation enabled for this reason. Firewall or not, you can't communicate with other clients.
13. 373.▲
    by icedchai 7mo ago

    Once you have control of the destination, you could get a valid SSL certificate with Letsencrypt or whatever.
14. 374.▲
    by icedchai 7mo ago

    In my experience, you are "responsible", regardless. It doesn't matter who wrote the code originally.
15. 375.▲
    by icedchai 7mo ago

    The licensing section gave it away for me.
16. 376.▲
    by icedchai 7mo ago

    30 years. I remember when Netscape 2.0 was released.
17. 377.▲
    by icedchai 7mo ago

    Many years ago I wrote my own "cloud instance bootstrapper" that would pull a tar off of S3 based on EC2 instance tags / metadata, untar it, then run a script. I never got into Ansible and I hated having to rebuild AMIs for m
18. 378.▲
    by icedchai 7mo ago

    There were routers, just no T3 (45 megabit) capable routers.
19. 379.▲
    by icedchai 7mo ago

    I agree VLAN hopping is not possible without misconfiguration but it still is a "concern" for some. I also make extensive use of VLANs on my home network. If you're trying to push close to a gigabit up and down simultaneously
20. 380.▲
    by icedchai 7mo ago

    Yes, but some folks are wary of using the same physical port for external and internal traffic. Fears of "VLAN hopping" remain, even if unfounded. Also, you'll hit a performance wall since you are sharing a single gigabit por
21. 381.▲
    by icedchai 7mo ago

    If you had v6, they'd probably also reassign your IPv6 prefix delegation, too. Also, v6 supports "privacy extensions", essentially randomizing the host portion of the address and periodically rotating it, so it is not accurat
22. 382.▲
    by icedchai 7mo ago

    You know your external IPv4 address rarely changes and also basically linked to you too, right?
23. 383.▲
    by icedchai 7mo ago

    All the time, especially on LinkedIn.
24. 384.▲
    by icedchai 7mo ago

    This makes me feel old. I remember getting a 486 (DX4/100) in mid-1994, the Pentium was still too expensive!
25. 385.▲
    by icedchai 7mo ago

    I've been running authoritative and caching DNS servers since the 90's. BIND is still my go-to because I am familiar with it.
26. 386.▲
    by icedchai 7mo ago

    1) To encourage good security practices in the event of compromise or technical improvements. Original '90s "export approved" SSL certificates were only 56-bits. If sites still used those today, they could be easily cracked.
27. 387.▲
    by icedchai 7mo ago

    I've worked with large "enterprises" that refuse to use the easy-to-automate certificate services, including AWS Certificate Manager. They would rather continue to procure certificates through a third party, email around keys
28. 388.▲
    by icedchai 7mo ago

    They don't offer the 512 gig RAM variant anymore. Outside of social media influencers and the occasional AI researcher, the market for $10K desktops is vanishingly small.
29. 389.▲
    by icedchai 7mo ago

    I can't wait. Now I can screw up DNSSEC and take out my entire domain in the process.
30. 390.▲
    by icedchai 7mo ago

    Based on my personal experience with security theater and its many talented actors, yes.