sambazi

imo the protection is real and a good tradeoff for a research project to become a mass medium (i.e. clients usually don't want incoming connections from the internet[1])

don't get me wrong, i like a global address space as much as the next internet native, but it's not for everyone to pay the price for it and nat makes it easy to opt-out of a large portion of the problem space.

[1] my university used to give public-routed v4 to students connecting their winxp laptop to the network; guess what happend

there is probably a reason that rp_filter defaults to off though

i don't think so because attacker-to-client communication is only used to restore the original nat-mapping.

otoh ap-isolation isn't really a security feature but enhances spectrum efficiency by suppressing client-to-client communication. most wifi's are susceptible to the 'evil twin' attack.

because there are so few of them?

security is never perfect and the bar is rising.

sequence numbers were once considered 'good enough' as prime-factors are today

a lot of ppl thought this would be a good idea at some point

probably the best rationale so far

probably different things, seem my other comment itt

afaik this was done by a modification to the quality-selection algo, not the videos themselfs

seems more like gog/yt shifted bitrate/resolution downwards because pleps demand 4k, and now the "High Definition" version that was good enough for cinemas looks like crap.

microsoft has you covered

it's even posix complaint!111

> Most of the video I see on YouTube these days is in VP9 or AV1. Occasionally some video is still H.264.

can't shake the feeling that most videos at 720p took a hard hit to quality within the last years (or my eyes are getting better)

any deep dives on the topic appreciated

could always ship a static linked ssh_client

> What is vanilla Linux though?

depends; but may i suggest starting at kernel.org then look at 'linux from scratch'/gentoo then maybe slackware; surely not ubuntu

well put

though there is probably a difference between an artistic/artisanal and a forced compromise

> Genuinely this appears to introduce unnecessary friction. After all, if you can trust the government

but if you can't trust the government, the friction is necessary.

> unable to tie together everything about you just because there's no national ID.

SSN anyone?

tracking for advertising can also be seen as a stop-gap measure against surveillance because the financial incentive for quantity corrupts the quality of the data

at some point ppl have to acknowledge the differences between a screw and a nail and that a hammer is just not suited for both

what might have been usually doesn't show up in the books though

> Tbh egress filtering is generally not very useful

i found it sensible to log-drop non-internet traffic (rfc1918, linklocal ...) on internet-facing egress

doesn't take much stress to make starlink exacerbate packet loss levels way above docsis. it's ok for off-grid but not for the majority.

there are meta sim-card that connect to any carrier, pricy though

the aesthetic and authoritative effects of wrist watches cannot be understated

> If you have a smartphone and don't have a raspberry pi or other SBC and have some use for an under powered Linux box then have fun.

thing is, smartphones are the most popular sbc on the planet

> The gig is just too good to miss out on.

the compensation required to keep the boat from rocking must be staggering

and discrimination against us has absolutely soared in the last decades

it's not a public api anymore if you have to auth, but i guess you're right

whatever you have been smoking, i want some

PS: you'd also have to spoof the mac addresses and get a lot of clients to report it, but it could cause some confusion