benjojo12

I vouched for this to avoid it dropping off due to being flagged, since it didn't seem to be directly breaking the rules

Previous Discussion :)

https://news.ycombinator.com/item?id=22364830

It's said that some people even put milk, hot water, and then tea bags! We are a weird lot.

Author here -- before I made this I did the exact thing as you!

For this bit flip to work it would have to happen before it was handed down to the actual resolver, since on the wire this flip would just cause a invalid parse of the DNS label

The point was to say, if you are in a DC environment and have ~1ms access to a Stratum 1 NTP server, then you can use that, if you are on DSL/DOCSIS etc, then it's likely required to use GNSS/PPS sources

Needs a (2000) on the title

Flash is still used in animation and other bits, despite its web presence disappearing

I have armbian loaded on it, the OS (other than the debain base) is DIY, but armbian has templates for common stuff (that I've never tried because I just use sshfs)

I've got one! It took a while to ship because it got wedged in the middle of the COVID supply chain and shipping meltdown, but now that I have it it's a solid device, massive upgrade from the 4

I figured it out, the apex goes to parking page, the WWW goes to the actual blog.

This link goes to a domain parking page for me

This runs Linux "inside" of DOS, allowing you to exec Linux i686 binaries "inside" of a DOS terminal

I put inside in quotes because how this actually works is quite amusing (and apparently is actually how Windows 95 also works)

There is a good chance it's just https://dev.maxmind.com/geoip/geoip2/geoip2-connection-type-...

EDIT: This appears to have died, now that the content servers for quakejs have died. My servers are no longer starting anymore :(. For those reading on later, there was peak of 10 on both servers just before it went down

  ioq3 1.36_GIT_4f7d7bf-2014-02-01 emscripten- Feb 23 2014
  ----- FS_Startup -----
  Error: Failed to download and parse manifest, Couldn't load 
  http://content.quakejs.com/assets/manifest.json. Status: 500

---

Giving that at the time of viewing, the multiplayer servers are down, have some of mine:

http://www.quakejs.com/play?connect%20185.230.223.84:27967

http://www.quakejs.com/play?connect%20185.230.223.84:27966

You will want to:

Go into settings via esc and set your name, and maybe also turn the game down, it's quite loud by default. Maybe also mouse sensitivity too.

> One of the nice things about IPSec is that it's a standard. There's a reasonable chance that two endpoints written by separate parties will be able to communicate.

Having deployed IPSec between vendors, this is only "sorta" true. IPSec can be an immense fiddle to actually get running between two vendors for the first time.

One of the other issues when using IPSec between vendors (or even just be default) is that the actual overlapping ciphers/hashes that are supported or even just work are normally the lowest possible.

> Are there fundamental advances in the design?

First party roaming makes dealing with mobile and CGNAT much nicer, anyone behind a IPSec VPN on a home CGNAT network will have a bad time (often it won't connect at all)

Finally. It's code base is actually pretty small, allowing sane audits to take place. In my eyes thats a huge win. People who have seen the sheer size of strongswan or openvpn might appreciate wireguard in comparison.

Fragments are very hit or miss on the internet, https://blog.cloudflare.com/ip-fragmentation-is-broken/

Locally you can set your MTU to larger than 1500, but if you (generally) try and send a packet towards the internet larger than 1500 it will be dropped without a trace, or it will be dropped and an ICMP message will be generated to tell your system to lower the MTU. Assuming you have not firewalled off ICMP ;)

As a handy feature on Linux at least, you can set your MTU to 9000 locally, and then set the default (internet generally) route to have a MTU of 1500 to prevent issues:

ip route add 0.0.0.0/0 via 10.11.11.1 mtu 1500

This is for ASN/IP whois, there is not sanctioned way of privacy/guard there, other then having a generic NOC line/email

To quote the link in my reply to you:

> Buypass Go SSL

> It is free! Issued in Scandinavia based on the industry standard ACME.

I posted a diff showing the patch you can use to switch go's crypto/acme/autocert to use it.

The CA does sell paid SSL product, but they also have a free ACME endpoint that issues 6 month certs.

Here is an example of what one of the certs look like: https://crt.sh/?id=2075589060

There is a 2nd ACME free CA these days based in Norway: https://www.buypass.com/ssl/products/acme

I used it on a pervious post to test it out and it seemed to be fine: https://github.com/benjojo/you-cant-curl-under-pressure/comm...

It was actually 20 pounds for 10 ish, so it comes out even cheaper.

Sadly it seems that was just a stroke of luck, since I can't find anyone else selling them anywhere near that cheap now

Is this a clone of ipinfo.io?

PIN's are 4 digits in the UK. Hashing them (even with a per user salt) would only produce 10k possible hashes. To have anything that was difficult to brute force would also just not practical on CPU constrained mobile devices.

Yes, https://blog.cloudflare.com/monsters-in-the-middleboxes/

Much like Class E space, too many systems would black list these IP's for them to be widely usable.

I use F5 and it's been genuinely useful seeing where my own blog posts come up! Thanks to the creator for making it

He was [likely] using his ISP's or Other providers resolvers, Large bursts of queries are very annoying to deal with, and are very rarely legit ( and more software going wrong )

It's very common to rate limit querying down to some low number to protect the rest of the customers using it

Tor moved to a longer address space because the short one is 1024 bit RSA

That looks like smokeping