kbirkeland

I'm curious what the motivation was to use int instead of uint considering indexes cannot be negative in Go.

Unless you're peering with another stub AS, creating a prefix list for both sides is almost impossible. The current recommendation[0] is to filter inbound on customer links using either IRR or ROA. Unfortunately neither of these are perfect. ROA can be replayed. There are a breadth of IRRs and I'm not quite sure of the validation levels each has. From my experience, they usually allow updates via email with either sender verification or password based authentication.

[0] https://www.manrs.org/isps/guide/filtering/

Internet2 basically provides this service for US research organizations.

You can patch the system and update all binaries with two commands:

  doas syspatch
  doas pkg_add -u

Those along with downlink multi-user MIMO from 802.11ac allowed an AP to send to multiple clients at one time using spatial division multiplexing.

The larger problem with the 2.4 GHz ISM band is the lack of non-overlapping channels along with only one station being able to transmit at a time per channel (in pre 802.11ax). There are only three non-overlapping 20 MHz channels in the 2.4 GHz unlicensed spectrum, where 5 GHz spectrum has about 21 (although some require active radar avoidance).

Dropbox's zxcvbn[1] seems to do a good job of this along with detecting sequences and keyboard patterns.

[1] https://github.com/dropbox/zxcvbn

Comments from yesterday regarding Signal switching to aws for fronting: https://news.ycombinator.com/item?id=16868564

Most public wifi hotspots I've seen are unencrypted, so there'd be no need to do a MitM - just be within range to decode the client and AP transmissions.