kortilla

14 ms·

331.
by kortilla 9mo ago
I don’t know what to tell you dude. Back in 06 as an admin for campuses where more than half of the machines were XP pre service-pack 2, NAT was 100% used as a security feature. For public WiFi networks and labs where we couldn’t control so
332.
by kortilla 9mo ago
you missed the part about an ACL. You’re whole shtick depends on a bad implementation of routing rules. What you’re describing would happen if NAT were completely disabled. You’re just describing an open router
333.
by kortilla 9mo ago
Organic is literally throwing out a ton of modern technology that makes farming scalable and able to sustain the population at its current numbers. Organic was never about sustainability, so I’m not sure why you think that’s against convent
334.
by kortilla 9mo ago
The thread is about not knowing anyone at all who thinks AI is plagiarizing.
335.
by kortilla 9mo ago
Im not sure why you’re digging in this way. The marketing material is clearly making security arguments. Whether or not you agree with them is entirely irrelevant because the statement was that NAT was marketed as a security feature.
336.
by kortilla 9mo ago
“if it protects 99.999% of attackers from reaching you but not this one specific attacker in this one case of misconfiguration, it’s not providing security”… Dude, that’s a really shitty take and this is why people that do care about securi
337.
by kortilla 9mo ago
No, the router will only forward it with specific implementations that don’t isolate routing tables between the external and internal. Or an easier approach is just a stateless ACL on the external interface. Neither are a stateful firewall.
338.
by kortilla 9mo ago
I don’t think you understand symmetric NAT. Requiring an entry in the port address translation table to propagate a packet is not the same thing as a stateful firewall. You absolutely can have a port address translation implementation witho
339.
by kortilla 9mo ago
No, you cannot get a connection to the device. It’s an un-routable block of RFC 1918 addresses.
340.
by kortilla 9mo ago
I’m not sure you understand how NAT implementations work. I recommend you setup a basic iptables NAT set of rules on linux to reflect what a home router does (masquerade) with ip forwarding enabled. The inbound packets from the internet are
341.
by kortilla 9mo ago
That makes no sense. If a packet comes into a public IP to a session that doesn’t exist, there is nowhere to forward the packet onto. The public IP belongs to the router. If the packet was going to a private RFC 1918 address, there wouldn’t
342.
by kortilla 9mo ago
> Since there's no way for anyone on the Internet to know which machine on the corporate network is using a Class C address at any given time, it's impossible to establish a telnet or FTP session with any particular device. Thi
343.
by kortilla 9mo ago
> NAT is not for security, it does not provide security. It’s not for security but it absolutely does provide security and pretending otherwise continues to harm discussions. I have a pile of ipv4-only IoT devices that have no firewalls
344.
by kortilla 9mo ago
NAT slipstreaming depends on confusing fragmentation assemblers and application aware parsers. Those exist in firewalls as well. It’s not NAT specific.
345.
by kortilla 9mo ago
They aren’t yet because the big providers that paid for all of this GPU capacity aren’t profitable yet. They continually leap frog each other and shift around customers which indicates that the current capacity is already higher than what i
346.
by kortilla 9mo ago
Can’t use a truck for towing and can’t drive it off of the road is pretty restrictive.
347.
by kortilla 9mo ago
The thing you’re missing is that it isn’t a $200 difference. Auto loans above $1k/mo are becoming common now vs the $400 for something “affordable”. Since people don’t have large down payments, the monthly rate scales beyond linearly t
348.
by kortilla 9mo ago
Literally any other country offering anything better than nationalization
349.
by kortilla 9mo ago
Low effort reply?!? Did you see the comment it’s in reply to? It’s completely substance free complaining about Elon in a thread about Starlink.
350.
by kortilla 9mo ago
They have a monopoly on sat-only market, but that isn’t really big enough of a market to support their growth goals. They want to eat all wireless providers Internet as well.
351.
by kortilla 9mo ago
Yes, I understand you rolled your own. I was just pointing out what that general class of software was called in case others reading the thread were interested in seeing what’s involved with managing bare metal.
352.
by kortilla 9mo ago
The vast majority of people using date time libraries don’t need to represent dates before 1980 or dates after 2036. It doesn’t mean you just bury your head in the sand and ignore a pretty critical part of how time representation works.
353.
by kortilla 10mo ago
Delta leases a big portion of its fleet, which makes your example pretty bad.
354.
by kortilla 10mo ago
It’s not “niche” if you do things synchronized to GPS timestamps. (i.e. a significant portion of telecom, a bunch of electrical grid stuff, etc). Anything using GPS as lock references to synchronize stuff that needs to be aligned to the mil
355.
by kortilla 10mo ago
The lack of const means having objects as arguments is pretty dangerous
356.
by kortilla 10mo ago
No, the touchpad alone puts it way above every laptop I’ve tried
357.
by kortilla 10mo ago
The issue is that gentoo isn’t very popular in the industry. If it catches on with a few well funded tech companies, then it’s easy to get $10k or so from each one in sponsorships at conferences.
358.
by kortilla 10mo ago
Do you consider educating people “manipulation”?
359.
by kortilla 10mo ago
This is sometimes called bare metal as a service. Ironic is an open source project in this space if people are curious what this looks like.
360.
by kortilla 10mo ago
No, this is wrong and it’s why academia is failing. IP addresses show up everywhere when you are working with both TCP and HTTP. Sockaddr is all over sockets programming, IPs show up in HTTP headers, etc. They absolutely care about the unde

More ›