sulandor

9 ms·

91.
by sulandor 2y ago
> The biggest challenge for implementing this will probably be figuring out how to block inbound connections but keep outbound connections working. nah, there's connection tracking for that. ctstate new srcip <amazon-set>
92.
by sulandor 2y ago
yes, but not impossible and it comes with other problems
93.
by sulandor 2y ago
"value added and removed here"
94.
by sulandor 2y ago
YES!!!! Usable ebay interface - very nice! would be great to have a filter for country of origin/shipping
95.
by sulandor 2y ago
yes, linux also is a good example of a student project that addressed a lot of enterprise-level use cases
96.
by sulandor 2y ago
not paywalled on my end
97.
by sulandor 2y ago
you mean like curl, samba or sqlite?
98.
by sulandor 2y ago
> more plentiful than ever and accelerating. sounds like a good thing at first
99.
by sulandor 2y ago
most applications don't run over icmp so it is indeed sensible to not use it as a default.
100.
by sulandor 2y ago
true, most computers don't run windows though. anyways, the type of packet does not really matter.
101.
by sulandor 2y ago
true, the type of packet does not really matter. my apologies if this misconstrued my point about the lacking quality of the article.
102.
by sulandor 2y ago
sounds like you made what most ppl seek and probably grown enough as an engineer as to invest more in yourself. like pickup new 'hobbies' or meet interesting ppl
103.
by sulandor 2y ago
seems like clickbait traceroute uses udp to a high-port for discovery, not icmp-echo.
104.
by sulandor 2y ago
imho the method is sound and consequences are separate topic
105.
by sulandor 2y ago
probably worlds colliding some ppl view "internet service" similar as access to drinking water, which some countries have legal obligations for and the public sentiment would be very much against you if you deny it to any stranger
106.
by sulandor 2y ago
opt-out is a bandaid, not a solution
107.
by sulandor 2y ago
tl;dr not much but it's a start
108.
by sulandor 2y ago
it's not specific to anything but humans, which are ridden with vile stuff. just turn off any discovery and suggestion features
109.
by sulandor 2y ago
difficult to sell that diplomatically though
110.
by sulandor 2y ago
seems concerning although the result would probably be similar if he drew it by hand
111.
by sulandor 2y ago
germany had really nice internet until a few years ago but yea, it's very annoying
112.
by sulandor 2y ago
true it's an annoying precedent besides the tech-support labor of folks like us trying to fix it.
113.
by sulandor 2y ago
"residential proxy" providing such a service (-network) is a popular monetization option for all kinds of useless crapware. this is very useful, but even more shady than regular vpn providers.
114.
by sulandor 2y ago
> But then the problem is how it was implemented not the dns blocking or redirecting functionalities on themselves.. redirection and managing your horizons aside, my objection lies with the use for content blocking, because it is the wro
115.
by sulandor 2y ago
well, there is certainly a lot to be said for efficiently checking boxes. just wanted to point out that dns-level blocking introduces a discrepancy to a shared truth, which creates problems and is hence more costly than it might appear.
116.
by sulandor 2y ago
> The only context in which it is potentially "evil" or malicious is when people unknowingly get things blocked or redirected to the wrong things. that was kind of my point; dns-infrastructure should not knowingly give wrong an
117.
by sulandor 2y ago
i guess we are both right. thx for the clarification
118.
by sulandor 2y ago
dns more or less was infrastructure for the last 30 years. nobody cared. the fact that for-profit shops wanted a piece of the intelligence within made it surface and now the webheads are shitting on it like there is no tomorrow
119.
by sulandor 2y ago
it's a practical argument as soon as someone else has to use it
120.
by sulandor 2y ago
see my other comment itt more or less about trustworthy infrastructure

More ›