Hacker News Reader

Comment by Animats | Hacker News Reader

It was worse than that.[1] One can was opened by cabin staff on an American Airlines flight. They weren't sure what it was, so they assumed the worst, a bomb. The plane made an emergency landing.

They'd succeeded in angering a customer who bought millions of cans a year.

[1] http://archive.is/gsl4f

View on HN

"a flight attendant who couldn’t pour the liquid out of a Coke Magican suspected it had a bomb in it."

I don't blame them for being on edge considering the Pan Am Flight 103 bombing was barely more than a year old and fresh on everyone's minds.

Being on edge is fine but landing the plane and traumatizing everyone on board because flight attendants are unfamiliar with a dud can of coke? Why would the attendant immediately assume there was an inside job to blow up the plane? Did they instead think a random passenger rigged a can of coke and slipped it into their beverage cart before the flight? If you were on that plane, you just had otherwise legitimate figures of authority telling you that you are likely to blow up and have your life ended at any moment for however many minutes it took to land and disembark.

Good grief. Just thinking about this for a minute makes it clear that they shouldn't have prematurely landed the plane. This is an example of the "zero tolerance" mindset that ignores all collateral damage in pursuit of some goal which is often unobtainable (safety).

I don’t think it’s an unrealistic assumption. If somebody can sneak a device into the lavatory then why couldn’t they sneak a device into the beverage cart right next to the lavatory?

https://en.wikipedia.org/wiki/Philippine_Airlines_Flight_434

To anyone on 1.1.1.1 who can't resolve archive.is, add this line to your hosts file:

151.106.9.30 archive.is

Ugh, why can't 1.1.1.1 resolve archive.is?

Because archive.is uses DNS load balancing based on EDNS information which includes a user's IP address, and returns invalid results if that information is not present, while cloudflare's DNS hides EDNS information out of respect for the user's privacy.

Previous discussion: https://news.ycombinator.com/item?id=19828317

Notably they return invalid results for queries without EDNS information from only Cloudflare.

Is Cloudflare's implementation somehow different, or is it an explicit blacklist of some kind?

They blacklist Cloudflare for petty reasons

Alternatively, nextdns.io can anonymise the EDNS client subnet so you can browse sites like archive.is without giving out a real ip address.

Perhaps cloudflare could do something similar.

It seems silly to give out fake information to work around a stubborn site with a vendetta. I think it makes sense to provide a distinction between no information and information instead of providing incorrect information.

Can’t they just send phony information that indicates the region the resolver is in?

1.1.1.1 doesn't provide EDNS information, and the archive.is admin has decided that dealing with dns queries without this field is difficult/annoying and simply returns an invalid result.

That's not accurate, they use the information to combat abuse.

EDIT: Why the downvotes?

Do you have a pointer to how they use it to combat abuse? All I've ever read from the archive.is people is that they use EDNS to return geographically-close machines.

Regardless, it's a PITA and I've been avoiding archive.is links for a while now because of it.

I'm not sure I should say, but there are people who use legal means to take down their own material and cause trouble to archive.is. The DNS thing is to avoid leaking the servers' location, roughly.

To offer an honest answer to an honest question:

Coming to this a couple of hours later I don't perceive what you're saying to be any different to the parent. 'Difficult/annoying to deal with' could easily match 'used to combat abuse'. An assume-good-faith reading of both of these looks the same to me. I'd guess you were downvoted for the "That's not accurate" bit.

I think this is more of a “yes and”, and you could have brought it up that way rather than as a “No”.

Reply on news.ycombinator.com