matrix2003

ah - gotcha! Yep. OpenBSD is big on the least-privilege principle, Which IMO is why it's pulled out into a separate daemon that only has the permissions and visibility to do what it needs.

SLAAC is basically an IPv6 alternative to how DHCP works. With IPv6, you can either use DHCPv6 (ISPs deliver Prefix Delegations and Normal Addresses this way) or SLAAC (How one typically gets an IPv6 address on a LAN or route from a Link-Local address on an ISP).

Hopefully that's clear as mud ;) I would encourage you to go check out IPv6 if that was the intent of your original question. It actually makes more sense after you dive in, and can be pretty neat.

ULAs (Unique Local Address) are one often-overlooked part of which I'm an advocate.

For a laptop, you should feel pretty comfortable running -current :)

It's actually very, very stable compared to how other OS's development usually goes.

At least for my ISP, SLAAC installs a default route and uses link-local addresses to route traffic (I actually didn't know this would work until I tried with OpenBSD 7.6). This allows the PD LAN subnet to be routed out to the internet.

YMMV!

edit: I may be slightly misunderstanding, and it might not be needed. Regardless, my router can now ping internet addresses while running slaacd.

Not even local privilege escalation, though! I remember a couple notorious remote exploits being centered around ICMP ping. You're right that they are far less common.

On my routers, this is the first release I have not needed to run 3rd party software for core functionality.

dhcp6leased is now included to handle IPv6-PD, and if your ISP supports SLAAC, slaacd is included as well for your WAN interface. I still have my fingers crossed for DHCPv6 normal address delegation, but it's a great step!

What’s wrong with the brand-name AV engines and security controls shipped with the OS? To me, it’s mostly just a lack of trust on the part of management.

All the major desktop OS have AV engines built by excellent teams. I do trust this more than McAfee or Norton. I also trust it not to take my machine down as much as CrowdStrike.

That’s the difficult thing about high uptime with internet-connected devices. I remember watching uptimes go to astronomical numbers on netcraft, today all I can think about is how unpatched those systems must have been.

I’m of the opinion that 3rd party security software is malware. If it isn’t today, a future acquisition or enshittification ensures that it will be.

Most of these counter-drones would start out dumber rather than leaping to the end state.

A megaphone is pretty loud and doesn’t require kilowatts. Sure it’s directional, but it would be good enough in a sweep pattern to trigger sleeper drones. That would necessitate triangulation and counter-countermeasures.

Welcome to the arms race! Lockheed Martin is hiring!

The higher rate gets you oceanic use, which is a big benefit of iridium.

You are correct that it can be $50, but AFAIK that’s a different plan that is land or near-land only.

The laser interlinks have been turned on.

> Would be nice if there was an actually affordable, programmable Iridium device.

I remember reading about this a while back, but doesn’t SpaceX offer some kind of IoT modem for a low cost (not the Starlink dishes)

Depending on how you look at it, Starlink can be incredibly cheap compared to Iridium. It’s still not cheap from where I’m sitting in my clapped out Honda Civic, though.

Edit: I think $250 for 50GB of truly global data. I can’t do the math right now, but it seems like a better deal at face value.

Oh, nice.

Mine isn’t image-based, but I rolled my own CDN using S3 as a backend, Lambda/DynamoDB for some metadata stuff, and Cloudfront as the CDN (so yeah, I didn’t roll my own CDN, I just implemented all the backend upload/admin stuff).

The great part is that it’s stupid cheap for a hobbyist, and Cloudfront has a generous free tier. I can also always swap that part out if it becomes too expensive.

All good points! I did not realize military units were dedicated to this.

I’m personally saddened by all the artifacts destroyed recently in the Middle East over ideological differences.

I’m actually not sold on my argument, but was rather playing devil’s advocate.

I can’t help but feel that all future generations should have the opportunity to learn from artifacts as well, but I’m saying that from a Western perspective.

I have no idea how one should fairly choose a custodian or determine what “stability” really means.

Maybe as humans touch all corners of the globe, we just accept that historical artifacts are ephemeral things and enjoy them while they last.

I know some of the museums aren’t the right place to keep some of the artifacts, but I also feel that in general they have been good stewards.

My counterpoint is wondering how many would have been destroyed by ISIS or civil unrest in some of the less stable regions of the world.

Ha! Whoops!!

I misinterpret 23andme results and believe I have a horrific genetic condition. I then delete my data, commit suicide, and my family sues the company.

I’m not saying this is what they are worried about, but it could be something along those lines. I work in big finance, and there is a LOT of regulation around data retention, and it’s a lot more nuanced than people think.

Should we be allowed to delete the data? Absolutely. This will likely be a hallmark case setting president for the future.

I’m just curious - if you were to try making a decentralized currency as a fun project, what mechanism would you use instead?

I’m someone who doesn’t really use it, but was fascinated with it before “blockchain” became a buzzword.

edit: proof-of-work. I have been out of the loop for years :)

My next question is are there downsides to proof-of-stake, and why has bitcoin not moved towards it?

Eh - I actually like developing on OpenBSD first, because of restrictions like this. If it runs on OpenBSD, you are likely to have fewer bugs around things like malloc.

OpenBSD is also really good about upstreaming bug fixes, which is a good thing. Firefox used to be a dumpster fire of core dumps on OpenBSD, and many issues were uncovered and fixed that way.

If you like RabbitMQ, check out NATS!

I can’t speak to the new version, but it comes with support for even more messaging patterns out of the box.

We already have some pretty horrific and documented/accessible bioweapons.

This gets into the philosophy of restricting access to knowledge. The conclusion I keep arriving at is that we’re lucky that there don’t appear to be many Timothy McVeighs walking around. I don’t think there is a practical defense from people like that.

Thanks for that explanation. I haven’t been able to keep up.

How is this different than launches at Canaveral or elsewhere? Don’t those pads also have water deluge systems and service a variety of liquid fueled rockets?

I largely agree with the parent comment. As of the series 7, charging became a non-issue since it’s so fast. It was painful before that.

And don’t _dare_ compare the charging situation to the touch bar. Let’s just all agree that was an abomination.

I think information might be the wrong word, but there is a big attention component.

IMO big tech is also a small part of the US sector (I’m not in big tech). The US idolizes FAANG, but there are a heck of a lot of other companies out there.

edit: Yes they do employ a ton of people, but most people I know don’t make those salaries.