yrro

5 ms·

31.
by yrro 11mo ago
Why isn't this flagged during the MOT?
32.
by yrro 11mo ago
Of course it impedes observability. With IPv6, I can see the IP addresses of the containers that connect to a service. With IPv4, I get (at best) the IP address of the container host, thanks to NAT. Are you also afraid of port forwarding? H
33.
by yrro 11mo ago
Indeed, a host should be able to request a /64 via DHCPv6-PD and split that between millions of container networks. But you can't do that on Hetzner (or anywhere else).
34.
by yrro 11mo ago
In practice this can be made to work but a networking expert can probably explain better than me why splitting a prefix into chunks smaller than a /64, and assigning them to virtual networks within a host is a bad idea. In Hetzner&#x27
35.
by yrro 11mo ago
It's not safer: it impedes observability.
36.
by yrro 11mo ago
The purpose of a network is to allow any two consenting parties to communicate. IPv4 cannot deliver that if either party has an RFC1918 address. NAT is a foul perversion of this foundational principle of the Internet Protocol.
37.
by yrro 11mo ago
Routable != routed. If your containers have a Global Unicast Address then it's possible to look at connetion logs and figure out which container made a particular request, for instance.
38.
by yrro 11mo ago
I love Hetzner. That said their IPv6 support is poor. A server gets a /64 only, if you want a /56 (allowing 256 container networks) then you have to pay €15. As for virtual networks: they only support IPv4! At least they're n
39.
by yrro 11mo ago
And here's me still using OpenShift routes... :)
40.
by yrro 11mo ago
trust but verify
41.
by yrro 11mo ago
Oh, that's a shame!
42.
by yrro 1y ago
The accursed bindweed: https://images.wur.nl/digital/collection/coll13/id/193/rec/1
43.
by yrro 1y ago
I'd like to see an updated edition too.
44.
by yrro 1y ago
No, that was allegedly Cotswold District Council, who refute Clarkeson's portrayal of events: > A spokesperson for Cotswold District Council said: "We absolutely refute that any of the officers or councillors involved in workin
45.
by yrro 1y ago
Sustainable Energy Without The Hot Air has a rough estimation of the amount of energy we can generate from offshore wind. https://www.withouthotair.com/c10/page_62.shtml 16 kWh/day/person for shallow offshore
46.
by yrro 1y ago
Yup. > A solar farm that could have powered “all the households in Witney” has been refused permission by West Oxfordshire District Council. The application, by Ampyr Solar Europe, was for a site at Curbridge, south of Witney. The planni
47.
by yrro 1y ago
The neat thing about the US is that governments are overthrown regularly by automatic operation of law: 12pm on the 20th of January 2028, in the case of the 47th president. I'm sure you know this but I feel everyone needs to remind the
48.
by yrro 1y ago
Add Apple to the list of collaborators who need to be punished once the regime is overthrown.
49.
by yrro 1y ago
Have a look at the SSD Statistics page of the device statistics log (-l smart). This has one "Percentage Used Endurance Indicator" value, which is 5 for three of these disks, and 6 for one of them. So based on that, the drives sti
50.
by yrro 1y ago
I've had this sequence of quotations from various classic cyberpunk stories burned into my mind for the last 30 years. The slow zoom into the disembodied head on the cover of Neuromancer, while the visual and audio effects increase in
51.
by yrro 1y ago
But now that's not CSV. It's CSV with some kind of ad-hoc header...
52.
by yrro 1y ago
I would like to hear Amazon answer the same question under oath. https://aws.eu/
53.
by yrro 1y ago
It looks like FILE is not opaque in glibc. Create a translation unit that includes <stdio.h> & declares a FILE variable and it compiles fine. For comparison, create a translation unit that declares your own struct (but does not pr
54.
by yrro 1y ago
If I received an email like that I'd reply with an invoice.
55.
by yrro 1y ago
Does O_EXCL work with linux USB devices?
56.
by yrro 1y ago
https://www.freedesktop.org/software/polkit/docs/latest/polk...
57.
by yrro 1y ago
> For some reason, instead of only applying its contents to the user environment for the child process like any sane person would do, they are trusting its values for the library calls in the privileged parent itself. The only safe way t
58.
by yrro 1y ago
Well put, but it's a shame this comment is the first thing I read, rather than comments about the tool itself!
59.
by yrro 2y ago
Any packages with "Essential: yes" (run 'apt list ~E' to see them) are required on any Debian system. Additionally, the 'build-essential' pulls in other packages that must be present to build Debian packages vi
60.
by yrro 2y ago
That's a great site. Finally I think I understand WTF Lenovo mean by "IPMI over Keyboard Controller Style (KCS) Access"

More ›