vbernat

France has 90% FTTH coverage in 2025, with 60% of households over 1 Gbps. One of the incumbents, Free (my employer), deployed P2P fibers in very dense areas but is switching to P2MP for economic reasons (and because this was not a competitive advantage). It's unclear to me if Switzerland plans to achieve this coverage with P2P. What looks great in Switzerland is not that each household has four dedicated fibers to the CO, but that Swisscom has responsibility for these fibers. In France, we have competition between operators for both services and infrastructure. In very dense areas, each building can have its own infrastructure operator (with an obligation to share); in less dense areas, this is by district (with an obligation to share); and in rural areas, this is a subsidized network (with an obligation to share). The downside is that there are "mutualisation points" where each ISP can go to plug or unplug subscribers, and they become a mess (https://img.lemde.fr/2020/06/04/300/0/900/600/1440/960/60/0/...).

BTW, I am also disturbed by AI-generated images. The ones with the three workers laying cables look highly unrealistic and made me pause for a couple of minutes, wondering if they lay cables that way in Germany. The ones about how households are connected to CO look like you get multiple 720-fiber cables to the same household.

What the article does not say is that if you don't have a recent enough version, by default, Go automatically downloads a more recent toolchain. So, for most users, this is transparent.

However, this behavior can be disabled (for example, when building for a Linux distribution).

I'm the author. This demonstrates how Zsh's flexibility allows you to trigger a calculator, such as Numbat or Qalculate, using the '=' alias, without running into quoting issues.

From the code, this does not seem to be true anymore. It falls back to the current model if no small model is identified with the current provider. https://github.com/anomalyco/opencode/blob/9b805e1cc4ba4a984...

The idea is that all the rendering is done server-side. So, the user always get a full page.

No, this is done by paying app developers to bundle some random SDK. Search for Bright Data.

From the photos, it does not look like the fibers themselves are damaged. You should check the error rate on both sides. If it is 0, the not optimal values of your speedtest are not related to your fiber. If it is not 0, the more likely issues are in order: connectors to clean (buy a cleaning pen), bend radius somewhere, faulty optics, then the fiber. You can also pay a professional to run an OTDR on your fiber. It would show where the fiber is degraded.

I am using something like this on Linux:

    bwrap --ro-bind /{,} --dev /dev --proc /proc --tmpfs /run --tmpfs /tmp --tmpfs /var/tmp --tmpfs ${HOME} --ro-bind ${HOME}/.nix-profile{,} --unshare-all --die-with-parent --tmpfs ${XDG_RUNTIME_DIR} --ro-bind /run/systemd/resolve/stub-resolv.conf{,} --share-net --bind ${HOME}/.config/claude-code{,} --overlay-src ${HOME}/.cache/go --tmp-overlay ${HOME}/.cache/go --bind ${PWD}{,} --ro-bind ${PWD}/.git{,} -- env SHELL=/bin/bash CLAUDE_CONFIG_DIR=${HOME}/.config/claude-code =claude

This now looks very complex.

This would enable a lot of attacks.

It's odd to always say "Hashicorp, an IBM company". Looks like they want to assign blame.

I did try Pulumi a while back, but the compatibility with Terraform modules was not great, so I've switched to CDKTF, which can handle unmodified modules. Dunno if I'll switch back to Pulumi or just use OpenTofu directly.

If the attribute says "encapsulate this", dropping just the attribute will create a blackhole as you will attract traffic that should be encapsulated and packets following this route will be dropped it if not.

Just added it.

Author here. I agree this is an important feature for a CA. I'll try to add it.

Another lightweight option is tio.

The article is surprisingly inconclusive. From my understanding, the easiest way is to use the <video> tag with mp4.

He mentions this adapter: https://www.amazon.fr/Club3D-CAC-1087-DisplayPort-4K120Hz-8K.... With DSC 1.2, you should get 8K at 60Hz.

That's not the case for this website. It is fully responsive.

A bit late, but this is an AS-SET. When a prefix is sent to a non-confederation peer, the sequence of sub AS is replaced by the (public) confederation AS. Therefore, you should not see AS confederation sequences in the wild.

I have something similar with this short Python script:

https://github.com/vincentbernat/i3wm-configuration/blob/mas...

Same as for application/json I suppose: this is a structured format to be processed by an application, not by humans directly.

I am using Linkchecker: https://github.com/linkchecker/linkchecker/

Unfortunately, many web servers will block bots, either immediately or after a few requests.

Add "reddit" to the search query.

There is an implementation with an extension: https://github.com/MarcJHuber/event-driven-servers/wiki/TACA.... But I don't know if there are any supported clients.

Another possibility would be to use CA certificates for authentication and only TACACS+ for authorization and accounting. Juniper now supports CA certificates. Cisco may in 10 years.

Not on IOS XR: https://vincent.bernat.ch/en/blog/2020-syncing-ssh-keys-iosx.... The commands you mention are for NXOS.

Client. OpenSSH 8.4 has SSH_ASKPASS_REQUIRE that allows one to always invoke SSH_ASKPASS, notably when run from a terminal (previously, it was only invoked when there was no terminal to prompt the password).

What about: this is now somewhat builtin into SSH, so you don't need an additional tool (or more accurately, this additional tool could be far simpler and more robust).

Author here. I don't claim sshpass is "broken by design". I claim it is brittle as it relies on the detection of a password prompt. passh author has several examples here: https://github.com/clarkwang/passh/blob/master/sshpass-broke....

There are not many network vendors. Check the link in the first footnote for an example how Cisco, the leader in the field, makes it difficult to deploy SSH keys. This is getting better. For example, Juniper (another network vendor) now supports SSH certificates.