Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
toast0
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
24 ms
·
541.
▲
by
toast0
5mo ago
That's pretty good, but what about with the fishing controller?
542.
▲
by
toast0
5mo ago
Dropping fragments is a pretty normal thing to do in a lot of places. If you have a stateful firewall, you can't tell if a fragment is viable until you reassemble it, and reassembly is unreasonably expensive, so dropping fragments it i
543.
▲
by
toast0
5mo ago
Windows clients don't request the MTU from dhcp either, so that's also fun. After hitting broken pmtud enough, I resolved to make a browser based test, and eventually I did. http://pmtud.enslaves.us/ But that woul
544.
▲
by
toast0
5mo ago
I'm pretty sure Google's WebRTC doesn't respond to icmp needs frag (but it does have a better default size), and I'm guessing webrtc-rs doesn't either. Seeing the icmp in tcpdump might have raised some alarms. WebRT
545.
▲
by
toast0
5mo ago
> Two door vehicle variants have absolutely died off in the market and I’d say with good reason. People looking for a four door will walk away from a two door, and people looking for a two door will grudgingly accept it? Because either
546.
▲
by
toast0
5mo ago
> Americans refuse to buy vans I don't know that that's true. Van popularity comes and goes. So does van manufacturing. When van sales are high, we get more makes, when sales slump, some of the exit. People who buy vans don
547.
▲
by
toast0
5mo ago
If you title and register your kei car in washington (where you can register it, usually) and keep it and drive it in California (where you can't register it), there's a chance some officer who hates kei cars is going to find it a
548.
▲
by
toast0
5mo ago
Yeah, not gonna happen for a homelab. Need to be a big company so that it might be worth spending the money.
549.
▲
by
toast0
5mo ago
Has he broken Medicare or VA health more than it already was? I'll acknowledge he's playing games with Medicaid eligibility, but is he messing with the administration of care?
550.
▲
by
toast0
5mo ago
I went through the deeds the other night. The first transfer from Bland to Texas Parks and Rec Foundation had a restriction to be held in trust for a city park (or for parkland or something). The transfer from tp&r to williamson county
551.
▲
by
toast0
5mo ago
Public healthcare in the US can work. Most seniors on traditional Medicare like it. Make that available to more people, and bob's your uncle. I propose allowing buy into medicare at 5 years before regular eligibility. And a long phase
552.
▲
by
toast0
5mo ago
You can mix and match. For work, I run a conferencing server ... packet processing runs in one thread per core, out of band signalling runs in async on a separate pool of threads. It used to all be async, but using threads for packet proces
553.
▲
by
toast0
5mo ago
If the DNS takeover is limited in scope, the legitimate owner wouldn't be able to query it. CT addresses scoped attacks by making all webpki trusted certificates public knowledge. You would want something similar with DANE.
554.
▲
by
toast0
5mo ago
The problem with changing banks to search for a ux you like is that it's not easy to see the ux before you've invested in signing up. My main bank changed their UX not too long ago, and I liked the old one better, but the banks I&
555.
▲
by
toast0
5mo ago
It's not that high of a requirement. The sub-CA is allowed to self audit. But the original CA does have to check a percentage of certificates issued by the sub-CA. So that's not going to be free. But it might be possible to do i
556.
▲
by
toast0
5mo ago
> The problem with our current SSL PKI, as so very many people have pointed out over the years, is that any CA is allowed to issue valid certificates for any domain name. There have been proposals to use X.509 extensions to remedy this,
557.
▲
by
toast0
5mo ago
You'd have to do something like pre-publish in DNS, submit to CT which verifies that it's in DNS before logging. And the CT could rate limit on domain name or something to reduce abuse.
558.
▲
by
toast0
5mo ago
Not really. They just have to convince an existing CA that cross-signing their CA won't make Google and Apple mad. Cross-signed roots are common. Just takes money and maybe audits, but it's the same audit they'd need to get i
559.
▲
by
toast0
5mo ago
I don't subscribe for my personal domains, because who cares, but when I was in charge of certificates for something important I subscribed to notifications from several providers to make sure I didn't miss anything. I would like
560.
▲
by
toast0
5mo ago
> Some people have this insane idea that somehow the CA has some secret which either they minted and sent to the CA, or the CA minted and gave them a copy and so the US government could get this secret with a subpoena LetsEncrypt certain
561.
▲
by
toast0
5mo ago
I'm not really in favor of DANE, because DNSSEC is such a mess ... but. Certificate transparency is nice. Browsers could require it for DANE certificates, just like they require it for current Web PKI certificates. The people control
562.
▲
by
toast0
5mo ago
> During these contractions, the work never shrinks. That only works so much. If a team goes from 3 people to 1 person, that's probably doable... you're leaving out a lot of communication. But from 6 to 1, you're going to
563.
▲
by
toast0
5mo ago
Well yeah, if you have the option of where to build your system, it makes sense to put a system where the math works best. There are many reasons why San Diegans were building more solar systems than Bostoners, insolation and utility rates
564.
▲
by
toast0
5mo ago
Time value of money scales with the value too, though. I just wanted to make the math easy. If you the system costs half, and delivers half the savings annually, the ROI is the same. If the system costs half and saves a little less annually
565.
▲
by
toast0
5mo ago
Great. As if telecoms can be trusted with customers' id. AT&T left my name, address, social security etc in an improperly secured database for others to have, and they tried to open accounts with it; they had retained the informati
566.
▲
by
toast0
5mo ago
I don't get it... system costs scale pretty closely with number of panels. If a $X system covers 100% of your use, a $X/2 system probably covers 50% of your use. Ignoring time value of money, if the $X system saves you $X / 5
567.
▲
by
toast0
5mo ago
Why do you need to assume 100% generation??? It's all about the all-in cost of the system vs the reduction in utility bill. If your system runs 20% of your usage, it still has whatever ROI it has. Building to cover 100% usage isn'
568.
▲
by
toast0
5mo ago
A 5 year ROI on a system that should last at least 20 years isn't an investment to feel better about yourself. It's a way to save money. Three years ago, I was paying about $0.12/kWh, now it's about $0.22/kWh and in
569.
▲
by
toast0
5mo ago
Very few flights end without a landing.
570.
▲
by
toast0
5mo ago
I don't understand your message. Live Nation and Ticketmaster are a single entity. It's like Comcast and Xfinity (but with different corporate history). People complaining about Ticketmaster are complaining about Live Nation too.
More ›