jcalvinowens

6 ms·

91.
by jcalvinowens 7mo ago
Don't ignore endianness. But making little endian the default is the right thing to do, it is so much more ubiquitous in the modern world. The vast majority of modern network protocols use little endian byte ordering. Most Linux file
92.
by jcalvinowens 7mo ago
Anything that uses system-resolved is probably doing DNSSEC validation by default. It's becoming much more common. Additionally, as I mentioned, openssh itself has support for validating the DNSSEC signature even if your local resolver
93.
by jcalvinowens 7mo ago
You can also address TOFU to some extent using SSHFP DNS records. Openssh supports checking the DNSSEC signature in the client, in theory, but it's a configure option and I'm not sure if distros build with it.
94.
by jcalvinowens 7mo ago
> I suspect that bugs are reported faster than they are written, so we could in fact be purging a long backlog (and I hope so). It's hard for me to imagine how this wouldn't be true. This isn't the "new normal"
95.
by jcalvinowens 7mo ago
I think not: > Note that the domain separator does not appear in the eventual serialization (which would waste bytes), since both signer and receiver agree on it via this shared protocol specification. But saying it's about wasting
96.
by jcalvinowens 7mo ago
I'm not saying it doesn't matter. It just clearly doesn't matter enough on modern common non-tso CPUs enough to motivate anybody to add the compiler support. The history of the whole thing is very interesting.
97.
by jcalvinowens 7mo ago
On the other hand, I can think of a lot of things I've seen done and done myself because they were "obviously" beneficial, which turned out to make no difference or be slightly harmful when I rigorously tested them. Finding
98.
by jcalvinowens 7mo ago
I was just curious if you'd benchmarked it. I've always guessed it makes no measurable difference for packet rates achievable on a residential internet connection, but never bothered to check.
99.
by jcalvinowens 7mo ago
I feel very much the same way about debugging: it is through the process of repeatedly being slightly wrong that I come to actually understand what is happening. Sometimes an LLM can shortcut me through a bunch of those misunderstandings. I
100.
by jcalvinowens 7mo ago
Consume is dead. Long live acquire! But seriously, it is interesting how C++ is completely abandoning the concept. My handwavy understanding is that on some more specialized hardware acquire is substantially more expensive than consume.
101.
by jcalvinowens 7mo ago
How much does disabling early_demux actually matter? I do this too, but honestly I've never tested what difference it makes. I've always found fq_codel to be good enough for gaming through my router. But I have a 10gbps uplink.
102.
by jcalvinowens 7mo ago
I recommend replacing hostapd with an enterprise access point plugged directly into an ethernet port on the router. Most support VLAN tagging based on SSID, so you can still set up different subnets and firewall rules for the different SSID
103.
by jcalvinowens 7mo ago
There's a whole section on that: https://www.open-std.org/jtc1/sc22/wg21/docs/papers/2024/p27...
104.
by jcalvinowens 7mo ago
The "erroneous behavior" redefinition for reads of uninitialized variables is really interesting: https://www.open-std.org/jtc1/sc22/wg21/docs/papers/2024/p27... It does have a runtim
105.
by jcalvinowens 7mo ago
I've never heard of an end user ISP that would announce and route a customer owned block of addresses. They'll all give you a static allocation, but it will be in their block. Maybe if you were a huge customer they could do it
106.
by jcalvinowens 7mo ago
> Er, isn't that just manual static assignment, then? Not SLAAC? Haha no, much dumber than that: I boot the machine, get the permanent SLAAC address it comes up with, put that in the static table, and re-run the script to generate t
107.
by jcalvinowens 7mo ago
You can use both, but I've never found a good reason to at home. The DHCPv6 option for specifying an NTP server might be a good reason to... but even Linux machines ignored it when I tried. Maybe in five years :)
108.
by jcalvinowens 7mo ago
Oh I see. You're supposed to use mdns, but I haven't actually done that yet, it's sort of the last thing on my list. Mine is all static. I run a bind9 forwarder for DNS, and KEA for dhcp4. I have a little list of machines&#x2
109.
by jcalvinowens 7mo ago
Heh, fair enough. I picked it because it makes me laugh when I have to type it (say it in Elmer Fudd's voice). I don't actually type it very often.
110.
by jcalvinowens 7mo ago
It's was a rhetorical question, he doesn't own it. And it takes much less than sixty seconds to figure that out: $ whois 2602:fed2:7e02:: ... NetRange: 2602:FED2:: - 2602:FED2:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF CIDR:
111.
by jcalvinowens 7mo ago
You can specify the DNS server in the router advertisements. This is how you do it in radvd.conf: interface enp2s0f1 { AdvSendAdvert on; AdvManagedFlag off; AdvOtherConfigFlag off; IgnoreIfMissing on; prefix :
112.
by jcalvinowens 7mo ago
Don't use DCHPv6 at home. I tried: you will hate your life, lots of stuff doesn't support it. Android specifically has zero support for it, google says it never will. Use SLAAC. It just works.
113.
by jcalvinowens 7mo ago
Interesting. Honestly I like having control over it, that would annoy me. I deliberately change the DUID in dhcpcd to force my public addresses to change every so often.
114.
by jcalvinowens 7mo ago
Typically it's similar to ipv4, they try to assign the same address/prefix for the same MAC/DUID. The most common reason to lose your addresses is replacing your router. Hopefully new routers allow you to set the dhcpv6 DUID
115.
by jcalvinowens 7mo ago
Do you actually own that /48? The problem with using the globally routable addresses internally is that your public /48 might change in the future, and and that will force you to change a bunch of internal stuff. I have my router
116.
by jcalvinowens 7mo ago
With bind9 you can limit each server to being able to set the TXT record for the specific cert it needs: https://news.ycombinator.com/item?id=47066072
117.
by jcalvinowens 7mo ago
I thought they meant a "two phase" service where the two phases are 120 degrees out of phase instead of 180, like an apartment fed with two poles of a 208V wye with 120V to neutral/ground, which is balanced. If it's just
118.
by jcalvinowens 7mo ago
I just meant I spliced the line cord, adapters don't exist. It was an easily accessible NEMA 10-50 outlet, so we simply unplugged it when we weren't actively using it, because of the obvious fire hazard of a 16awg line cord on a 5
119.
by jcalvinowens 7mo ago
> but you only get the safety benefit on three phase equipment. The wye ground is beneficial even if there are no three phase loads, because the line-ground voltage is 1/sqrt(3) and you can use cheaper switchgear. The 3-phase altern
120.
by jcalvinowens 7mo ago
How? The assert() has no special significance to the compiler at all, it's just code. Usually it's just an empty macro for non-debug builds. I guess you could define your assert() use [[assume]] in C++ for non-debug builds... but

More ›