HNHacker News
TopNewBestAskShowJobs

kijeda

638 karma · joined May 5, 2010

https://kimdavies.com
submissionscomments
kijeda··on The days of .dev domains for testing code are over
Never had a chance? The rules that would allow this kind of allocation were debated publicly and strenuously for many years in Internet governance circles, with many iterations of drafts and public comment periods. Some of those rules specifically governed which domains should be disallowed because they would have impact on existing utilization, as well as those that needed to be reserved for technical reasons.
kijeda··on DC's I-66 express lanes debut with $34.50 toll, among the highest in U.S
Wasn't it HOV only prior to this? Isn't it adding a new capability for single drivers to use it that didn't exist before?
kijeda··on American Airlines Accidentally Let Too Many Pilots Take the Holidays Off
It seems like the inverse of the Ryanair situation. There, they needed their pilots to take vacation en masse to remain in compliance, here they need pilots to not take vacation.
kijeda··on Petition for Smarter Infrastructure
Or not. That seems like an awfully large generalization based on one city whose airport rail service hasn't had much time to establish itself.

Counter examples: In London I'll take the Heathrow Express over the alternatives because it is a much more compelling option to get to downtown London. Recently in Johannesburg the airport rail took me to the airport in 14 minutes where as a car would take 90 minutes in commuter traffic. In Germany, I've seen people commute half way across the country every day on high-speed rail because it opened up opportunities to work that didn't exist before.

kijeda··on “Avoid Buying New Domain Extensions” Says Electronic Frontier Foundation (EFF)
The .io domain has been around since the 1990s. It is well established.
kijeda··on Taking control of all .io domains with a targeted registration
_ASCII_ ccTLDs are always two letters. There are ccTLDs in other scripts that are of variable length (.ไทย, .ελ, .укр, .한국 etc.)
kijeda··on Taking control of all .io domains with a targeted registration
.SU is actually the only former country with a TLD still delegated, and quite a few have been removed. In recent years .AN, .TP, .YU, .ZR have been phased out representing former countries.
kijeda··on Taking control of all .io domains with a targeted registration
IANA allows delegation of country-code TLDs for all countries and territories represented in the ISO 3166-1 standard.

The thing to bear in mind is this standard is used for a number of different purposes historically that has informed territories and other "non"-countries being added.

For example, it is used by postal services for routing physical mail. A lot of far flung island dependencies are coded individually because their mail wouldn't route through their mother country but through other ports.

The addition of "EU", while not a country, reflected the needs of the "EUR" currency code when the Euro was introduced (the first two letters of ISO 4217 currency codes are derived from the ISO 3166-1 standard).

kijeda··on Area code 710
No, but I do work on what is considered critical infrastructure.
kijeda··on Area code 710
I have a GETS account that uses this area code. You are given a credit card sized reference card with your PIN number to activate it.

There is also another service called WPS for cell phones where you get priority just by prefixing your number with *272, the only catch there is your specific phone needs to be enrolled.

kijeda··on Shitty url shortener, emoji and ai powered
Perhaps this is relevant, and was released just this week by ICANN: https://www.icann.org/en/system/files/files/sac-095-en.pdf

"Finding 1: Emoji are disallowed by the IDNA standard; domain names with emoji will not be accepted or processed consistently by applications.

Finding 2: Emoji are not required by design, standard, or convention to be visually uniform (one code point displayed the same way in all circumstances) or visually distinguishable (different code points displayed in ways that permit them to be disambiguated regardless of context). As a result, a user will be exposed to problems of confusability and accessibility. Different code points that are rendered the same or one code point that renders differently to different users will lead to inconsistent results depending on the display or rendering technology used.

Finding 3: Emoji modifiers and “glue” arrangements allow for a potentially much larger set of composed multi-codepoint symbols with even greater rendering variation and potential for ambiguous interpretation.

Finding 4: A fundamental property of the DNS is that it is an exact-match lookup service. For a given query, either there is a single name that matches or there is no match. When two domain names are identical in appearance except for ordinary typographic style variations (which, at present, have no equivalent for emoji), but have different underlying code points, they identify two different DNS domains.

Finding 5: It is unrealistic to expect that just because a code point is included in Unicode, it should be used as part of a domain name."

kijeda··on BBC Says It May Contact Your Boss If You Post Comments It Finds Problematic
Seems like this is just a clumsy way of simply saying they are going to contact the administrator of the domain your account is associated with (which may be your employer, school, etc.)
kijeda··on Root Zone Database
I don't think it is an attempt to conceal their identity, if you look at the details of the registrations you can see these are all operated by Donuts (http://donuts.co). Perhaps it is facilitate management and future adjustments to their portfolio.
kijeda··on APFS does not normalize Unicode filenames
Incidentally, your theoretical system is exactly how the DNS stores domain names.
kijeda··on UK to follow US flight ban on laptops
Possibly a thinly veiled way of getting back at gulf state airlines for their business model?

https://www.washingtonpost.com/news/monkey-cage/wp/2017/03/2...

kijeda··on Programmers are confessing their sins to protest a broken job interview process
http://www.news.com.au/travel/travel-advice/travellers-stori...

There have been others come to light since, but this was two weeks ago.

kijeda··on Programmers are confessing their sins to protest a broken job interview process
Wasn't this in reaction to the story that Homeland Security had asked the question to a programmer entering the US? I don't know how this was extrapolated to a broken job interview process.
kijeda··on Time Is Running Out for NTP
I thought NTP was a protocol, not a piece of software. Is the article conflating them, or is there only one single implementation of it that everyone relies upon?
kijeda··on The Sad State of HTML Email Input Fields and IDNs
Because a Latin-only Internet disenfranchises billions of people who are confortable with other writing systems?

IDNs will take years to be pervasive, just like Unicode before it, because it is a painful upgrade to something designed in a different era. It doesn't mean the endeavour isn't worthwhile.

kijeda··on CA Comodo used broken OCR and issued certificates to the wrong people
There is. There is a relatively new IETF standard called RDAP that provides JSON-structured WHOIS data responses (i.e. https://tools.ietf.org/html/rfc7483) along with automatic discovery. ICANN is working on making it a mandate for gTLDs to support it.

It is already supported for IP address lookups by all 5 regional Internet registries.

kijeda··on Can you explain the ICANN transfer?
The 1997 white paper that triggered the creation of ICANN sums up the thoughts at the time:

"From its origins as a U.S.-based research vehicle, the Internet is rapidly becoming an international medium for commerce, education and communication. The traditional means of organizing its technical functions need to evolve as well. The pressures for change are coming from many different quarters:

* There is widespread dissatisfaction about the absence of competition in domain name registration.

* Conflicts between trademark holders and domain name holders are becoming more common. Mechanisms for resolving these conflicts are expensive and cumbersome.

* Many commercial interests, staking their future on the successful growth of the Internet, are calling for a more formal and robust management structure.

* An increasing percentage of Internet users reside outside of the U.S., and those stakeholders want to participate in Internet coordination.

* As Internet names increasingly have commercial value, the decision to add new top-level domains cannot be made on an ad hoc basis by entities or individuals that are not formally accountable to the Internet community.

* As the Internet becomes commercial, it becomes less appropriate for U.S. research agencies to direct and fund these functions."

kijeda··on Can you explain the ICANN transfer?
This doesn't make a whole lot of sense. Sure, anyone can create their own root zone. I can create my own .com zone too and point my resolver to it instead. But what use is it if it doesn't contain useful entries that point to things I want to access? What use is it if all the parties underneath it aren't sending me updates to the zone?

Someone has to do that job for it to all work. Do the managers of the hundreds of TLDs around the world contact you to update your version? No, they send them to IANA.

The IANA's job is simply to be the authoritative repository of unique identifiers and associated configuration data — TLDs, IP addresses, port numbers, MIME types, etc. You are free to use your own bespoke IP addressing scheme, port numbers and MIME types too, but don't expect to be able interoperate with anyone else.

kijeda··on Can you explain the ICANN transfer?
In operational practice, very little will change. The staff who perform the IANA function of managing the DNS Root Zone etc. will continue to do the same job, although those staff will now work in a separate subsidiary of ICANN. One operational change will be NTIA, an agency of the Department of Commerce, will no longer be required to authorize every change to the root zone in advance.

In addition, ICANN the organization will have new accountability measures that will allow the community to challenge decisions it makes. It provides new powers like spilling its Board under certain circumstances.

One of the main drivers to change the current setup is NTIA's role above is seen as undue US government influence in what should be a purely technical operation by many. Over the years some have advocated fundamentally altering how ICANN works (like moving it to the UN) because of the US Government's influence. By transferring the primary oversight role to the multi-stakeholder community (users, business, non-profits, etc.) who have always really driven ICANN's decisions anyway, it is hoped that that criticism will go away and pressure to fundamentally alter how it works will dissipate.

kijeda··on Ask HN: What TLD do you use for local development?
.local is reserved, but not for delegation in the root zone. RFC 6762 reserves it for Multicast DNS on a local network.
kijeda··on Amazon and Starbucks pay less tax than sausage stall, says Austria
Maybe it has changed recently, but an interesting factor is the Austrian Starbucks have been run by an Austrian master franchisor, not by the company.
kijeda··on The DNSSEC master key securing DNS is about to change
It is going to be 2048-bit RSA, same as the existing. It was considered rolling the key for the first time would be complex enough that tracking the effects of an algorithm change as well probably should wait for a future opportunity.
kijeda··on The DNSSEC master key securing DNS is about to change
Ceremony attendees don't leave with part of the signing key.

Despite the folklore around these ceremonies that there are 7 people with "the keys to the Internet", those seven only retain a metal key that is used to access a safety deposit box in the ICANN/IANA facility, each of which contains a smart card of which there is an "m-of-n" configuration to activate HSMs containing the actual key.

kijeda··on The DNSSEC master key securing DNS is about to change
That depends on how you define a client. If you're a Comcast customer, for example, they are performing DNSSEC validation for you transparently. Recursive resolvers on most Linux distributions have DNSSEC validation by default.

One school of thought is to migrate DNSSEC from relying on validating resolvers sitting within the network provider, and moving it closer to the edge, in web browsers and so forth. Not much of that has happened to date.

kijeda··on The DNSSEC master key securing DNS is about to change
The keys are stored in a FIPS 140-2 Level 4 HSM.
kijeda··on The DNSSEC master key securing DNS is about to change
The new root zone key signing key will be generated at the next key ceremony. At the ceremony after that, the "same" thing won't happen, rather, the key generated will be replicated to the second site. Operational changes using the key won't happen until the key is confidently stored at both locations.
← PreviousPage 2 of 5Next →