zzzcpan

41 ms·

361.
by zzzcpan 7y ago
There is no equivalent of course. I guess people are confused on what jails are. Jails, Solaris Zones, lxc, runC, chroot with namespaces and cgroups are all similar technology that are not solving the same problems as Docker. Docker just us
362.
by zzzcpan 7y ago
Jails are more like runC, container tech behind Docker.
363.
by zzzcpan 7y ago
Not necessarily raw source code, could be a code compiled into an intermediate representation, but it has to have capability-based security deeply integrated into it, like bounds checking is into programming languages.
364.
by zzzcpan 7y ago
It's feasible in the same way bounds checking is feasible. Everything could have a capability token attached to it and checked. Compiler could generate all the language level checks, kernel could do OS level checks. Main program could
365.
by zzzcpan 7y ago
This is absolutely not how it works. CDNs, and Cloudflare in particular, have lots and lots of IP addresses and don't share the same one with all the websites, instead they shard websites to IP addresses, so each website sticks to spec
366.
by zzzcpan 7y ago
DoH + eSNI + TLS 1.3 won't prevent seeing IP sets. See this thread https://news.ycombinator.com/item?id=21340671 and my other comments here. There are only detrimental effects from DoH on privacy, because extra party s
367.
by zzzcpan 7y ago
Beefy cache nodes of any company, not just Netflix, are trivially identifiable.
368.
by zzzcpan 7y ago
So, 95.7% of alexa top million sites are uniquely identifiable just by looking at a set of IP addresses following initial connection. This is why real privacy is hard and DoH is a joke from technical perspective and evil from power perspect
369.
by zzzcpan 7y ago
> With encrypted DNS, Comcast sees that you connected to your DNS provider and Cloudflare, which isn't exactly valuable. Comcast also sees SNI in plain text, sees all the other connections to other IPs for 3rd party resources on tha
370.
by zzzcpan 7y ago
> The biggest problem I've seen at ISPs is the general unreliability of all the ISP-grade networking equipment. I wouldn't generalize so much. It only seems that way, and only in countries where ISP markets are monopolized, bec
371.
by zzzcpan 7y ago
It's possible to extract much much more information [1] than DNS queries for an ISP with off the shelf products, they don't really need your DNS queries for that (yes, DoH people are lying like crazy that it improves privacy). Wha
372.
by zzzcpan 7y ago
> but the nature of a large world is that a car lets you drive 20 miles from point A to point B in a manner that's prohibitive by foot, bike, or train. Not prohibitive to do by electric bike though.
373.
by zzzcpan 7y ago
Capitalism never looked great for most people, it didn't start in 2000, it's a system for the rich to exploit the rest after all. The difference today is that internet is not a top down propaganda machine and people are not as eas
374.
by zzzcpan 7y ago
The more you have to deal with systemd, the more you hate it. I wrote maybe two dozens of unit files at this point and can't take seriously any praise of systemd anymore, I immediately assume such people don't actually do anything
375.
by zzzcpan 7y ago
> none of these VPN providers' business models are sustainable You can fit like a hundred of VPN users into a single cheap VPS server. With current prices for VPN they are anything but unsustainable.
376.
by zzzcpan 7y ago
Well, like hundred years of propaganda starting from the Edward Bernays times convinced generations to accept this broken system of privately owned monopolies, which has this inherent perverse incentive to rent seek with no limit and neglec
377.
by zzzcpan 7y ago
It goes deeper than that. They actually do have plenty of tags in the generated source directly linking to an image, like twitter:image, og:image, image_src, they just don't want you to load the image before you load all their javascri
378.
by zzzcpan 7y ago
> A lot of the code that is loaded supports features that are used by a long tail of users Bounce rate 53% according to alexa. So, majority of imgur users don't appreciate it, do hit cold load, etc. A user probably has to be dozens
379.
by zzzcpan 7y ago
Exactly, it's not that different from 4G and is going to perform pretty much the same, but it will require new phones and will provide an excuse to increase prices for mobile internet plans.
380.
by zzzcpan 7y ago
Entertainment is not really pop culture and is diverse enough these days, thanks to the internet, that you can easily not find a single tv show or a movie to talk about with someone.
381.
by zzzcpan 7y ago
> You foster a team environment when you find ways for every one to care for/after every other one, in the perspective of the group (because the group cares for each part of itself, and each part cares about the group). Basically th
382.
by zzzcpan 7y ago
Imagine something like a pingback attack [1], it can hit you from at least tens of thousands of IPs you don't yet filter, because they are not proxies or relays and will likely exhaust various resources: file descriptor, socket limits,
383.
by zzzcpan 7y ago
> You don't stand a chance against a DDoS and you have to work with your upstream ISP to mitigate some of it. You do. Plenty of hosting companies provide layer 3 and layer 4 DDoS protection and layer 7 is best handled in your softwa
384.
by zzzcpan 7y ago
I'm assuming you also want a simple way to mitigate layer 7 attacks, which is the hard part. You can try something like gathering statistics of /24 IP subnets that make connections to your server and once you detect increase in un
385.
by zzzcpan 7y ago
> Aside from those services, there's no really semi-anonymous way to convert your bitcoin that you obtain from illicit trade into fiat > What I really want to know is how are the larger ransomware operators converting it to fi
386.
by zzzcpan 7y ago
I'm pretty sure most people are unaware of the facts pointed out in the comment. They don't like it, but that's another story.
387.
by zzzcpan 7y ago
> It means children will always be exploited since there’s tons of money to be made. You can thank anti social capitalist system for that. In some countries some people are so desperate to make some money that they are willing to make po
388.
by zzzcpan 7y ago
I'm not sure what your point is. You can get satoshi or any cryptocurrency for that matter anonymously, there doesn't need to be a record somewhere that ties wallets to real people.
389.
by zzzcpan 7y ago
> But the same process happens with social causes. Let’s say vegetarianism or the anti-fur movement Those are not "social causes" and they do exist within the same system. Some corporation hires PR firm to redirect consumption
390.
by zzzcpan 7y ago
This has nothing to do with the "left". Protecting your "brothers" and "sisters" from dehumanized child-killing enemy is the core of all war propaganda.

More ›