phicoh

41 ms·

451.
by phicoh 8y ago
I don't like software defaulting to sending all DNS queries to a large cloud provider. That strikes me as bad for privacy. But I don't understand the network argument. If you are perfectly fine with TLS traffic then insisting on s
452.
by phicoh 8y ago
This summer I was in Wales with a Dutch car. One day we parked the car on the side of a road and went for a hike. When we turned back to the car we could easily see the car from up high. And the weird thing was, there was a van parked right
453.
by phicoh 8y ago
What changed is that diesel is now 'toxic'. For quite a number of years, car manufactures tries to sell diesel as cool. And now that's gone. At the same time, the world outside Germany is not sitting still. If German manufact
454.
by phicoh 8y ago
I assume EU will mandate EV cars in a couple of decades. It wouldn't surprise me if california would do the same. An alternative scenario is synthetic fuels or hydrogen. But so far EV seems to most established solution.
455.
by phicoh 8y ago
It seems to me that for any nerd subject, when talking to someone, within 3 sentences you figure out whether somebody is in or out. No need to look at clothes. At the same time, somebody who knows a lot about a nerd subject is generally res
456.
by phicoh 8y ago
DNSSEC validation has nothing to do with 'servers'. Maybe you want to take a look at, for example, https://getdnsapi.net/ Please stop spreading misinformation. Another example, openssh can locally do DNSSEC valida
457.
by phicoh 8y ago
See RFC 7710 for DHCP, DHCPv6 and RA options: https://tools.ietf.org/html/rfc7710
458.
by phicoh 8y ago
DNSSEC works perfectly fine for securing requests from end-users. Of course you need to link your application with a DNSSEC-validating library. But that's just a small matter of code. Things become slightly more complicated when you ha
459.
by phicoh 8y ago
Europe has a long history of shooting itself in the foot with respect to copyright. No need to blame the EU in this case. Relatively short copyrights are good for culture. You need a common understanding to build upon to produce new works.
460.
by phicoh 8y ago
The discussion is not so much about which encryption technology to use, but on whether browsers should silently redirect DNS traffic to big US companies.
461.
by phicoh 8y ago
Note that DMARC modifies the meaning of SPF. SPF without DMARC protects the envelope-sender and not the From header. With DMARC SPF protects the From header as well. SPF, DKIM, and DMARC maybe useful against fishing. In the long run it does
462.
by phicoh 8y ago
Basically, to make a film 'faster' you capture phonons from a larger area. Or the other way around, film that can resolve very fine details needs a lot of light. Film has a built-in low pass filter. Typically 'sampling'
463.
by phicoh 8y ago
There is a large cost to configure IPv6 because most operators have ignored IPv6, waiting for the IETF to magically get it right. There is very little consensus within the operator community on how to deploy IPv6. The net effect is that the
464.
by phicoh 8y ago
There problem here is two fold: 1) As far as I know, nobody ever wrote down a protocol description, and preferably made an implementation. The devil is in the details. It is very hard to estimate if such a design would actually work. 2) At
465.
by phicoh 8y ago
It is easy enough to criticize the IETF and the wider IPv6 community for the mistakes they made. But as far as I know, nobody came up with a credible protocol that is fully backward compatible with IPv4. So, you can ask the IETF to come up
466.
by phicoh 8y ago
By and large IPv6 is very similar to IPv4, but of course without NAT. For example, at my home I get a /48 prefix from my ISP over DHCPv6 (over PPPoE). Then I assign /64 prefixes to my subnets. After that, hosts pick up addresses u
467.
by phicoh 8y ago
For ad networks, the sensible thing to do is to support IPv6. Then any ISP with CGNAT only has to enable IPv6 to make it work. I have no clue what law enforcement plans to do. Video services use most of the bandwidth. So with youtube and ne
468.
by phicoh 8y ago
There are a couple of reasons: - There are limits to how many devices you can put behind a single IPv4 address. There is the case of Belgium where law enforcement asked ISPs to limit CGNAT to 16 customers per IPv4 address. Obviously for law
469.
by phicoh 8y ago
I disagree. You have to consider network effects. Even if IPv6 was completely perfect, switching on your own doesn't do any good. You need to get most of the network to switch to get the benefits. Given that there is always a cost to s
470.
by phicoh 8y ago
To some extent this is unavoidable. Anything that is 'IPv4-like with larger addresses' is very much incompatible with any IPv4 equipment or setup at the edge. You could design something where the IPv4 could be left unchanged in th
471.
by phicoh 8y ago
There are 3 problems with IPv6 - There is a lot in IPv6 that is different from IPv4. Ignoring if those changes are good or bad, it does make the transition harder. - IPv6 was promoted way before there was demand. To some extent it is good t
472.
by phicoh 8y ago
Mail is very often encrypted in transit. There is a lack of authentication, so a man-in-middle attack is often possible. But passively listening doesn't work. It is not clear how mail should be stored at rest. A mail server at your own
473.
by phicoh 8y ago
In my opinion, a big disavantage of MGRS is that it is based on UTM. These days nobody uses UTM and UTM is hard to grasp if all you are used to is lat/lon coordinates. So the clear advantage of Plus Codes over MGRS is that it is based
474.
by phicoh 8y ago
Maybe you can point to a case where literally the only evidence was the story of the victim? (I would be really scared to live in such a country, that strikes me a a recipe for disaster)
475.
by phicoh 8y ago
At least where I live (The Netherlands) for civil matters it is, as far as I know, about which story the judge finds most plausible. In a criminal case, if the defendant remains silent then it is up to the prosecution to present enough evid
476.
by phicoh 8y ago
Of course judicial systems vary with countries, but I'm not aware of a jurisdiction where only the word of the victim is enough to convict somebody (who denies the act). But maybe there are such places.
477.
by phicoh 8y ago
I'm not a lawyer and not playing one here. In any case, it is my understanding that 'innocent until proven guilty' is part of criminal law. In other kinds of law the burden of proof is lower. Of course these claims have to b
478.
by phicoh 8y ago
It's a different pattern of living. If you mostly use a car then you know about highways, traffic jams, parking, etc. If you mainly use public transports, then you know what places are easily reached that way, when the last train, bus,
479.
by phicoh 8y ago
It is important, because it is very important to have production traffic. If you live in a centralised internet then what those big parties do is important. I don't care what version of SSH any of those big parties are running. Many se
480.
by phicoh 8y ago
I assume that when you say 'virtually none', you are aware that more than 50% of the dot-nl domains (so around 3 million) are DNSSEC signed. Furthermore, more 60% of the DNS queries that reach the servers for the dot-nl zone are f

More ›