Hacker Newsnew | past | comments | ask | show | jobs | submit | J-Kuhn's commentslogin

But... this doesn't work for SSH, which is the problem here?

SSH has ProxyCommand which accepts the %h template.

Provided your users will configure something a little - or you provide a wrapping command - you can setup the tunneling for them.


> five networks: Meta, Akamai, Google, Netflix, Amazon (I don’t know there is a decent name for these but i’ve been calling them the The “Magna” networks)

At a time when Meta was Facebook, there were FANG (Facebook, Amazon, Netflix, Google) and FAANG (with Apple), but it seems to be more used in a finance context.


In short, you have to choose the hill you want to die on.


The compiled binary is.

The source code is... AGPL licensed? But not the admin tools. They seem to be licensed under the Apache License 2.0.

--------

Yeah, good luck. Contact your lawyer.


AGPL and Apache are both open source licenses. So I’m not getting what the confusion would be as an end user, who won’t be modifying the software or packaging it for sale.


They're both FREE software licenses, which is more.

https://www.gnu.org/licenses/license-list.html


> Yeah, good luck. Contact your lawyer.

Why? The intent seems pretty clear and they're legally allowed to do this because all contributors signed a CLA.


Explain please. This interests me and I'm extremely curious about what you mean.


Combining source code under different licenses into one product is a nightmare.

You have to follow the AGPL "no additional restrictions" clause while also following the Apache License, and the Apache License might have require you to follow additional restrictions.


Honestly this has never been an issue for me, sure I have had to explain the limits of the licenses and check that I understand them. I guess it depends on your use case, so I am still uncertain when this has become a problem for you.


The de-facto leading IRC indexing site is netsplit.de

Compared to that, IRC driven looks more modern.


Yes, but you would be surprised how many people want to change static final fields for various reasons - be it testing, or other things.

When telling those that it doesn't work, and that it can not work without violating the semantics of the JVM, they will wave their hand and say "look, it does work here". And it looks like, yes, if the stars align in that specific constellation, it may work.


Also a part of why Singletons are the black sheep of the Patterns family. They’re nasty during bootstrapping and hell during functional testing.


We know that we build a house out of cards:

https://xkcd.com/2347/


A conference wlan with google engineers attending might be more impactful.

Complains by them? Won't fix (Intended behavior)


I agree, IPv4 has its problems. That is why we transition to IPv6.

Dual Stack doesn't "solve" anything. You still run IPv4. With all the downsides, especially every machine will still need an (RFC 1918) IPv4 address.

(Microsoft is running out of their internal 10.0.0.0/8: https://www.arin.net/blog/2019/04/03/microsoft-works-toward-...)

The goal of the IPv6 transition is to disable IPv4. NAT64+DNS64 or 464XLAT allows us to disable IPv4 on devices before the entire internet is ready.


I would love full transitions to be easy enough to work. DNS64 breaks DNSSEC without updates to the spec, so that's not going to fly for me today. A competent DNS configuration would fail to resolve my IPv4 domains at the very least (though all of my public domains have an AAAA record, obviously). The only solution is to do DNSSEC validation at the DNS64 level which in my opinion defeats the purpose of DNS security all together.

For internal networks, IPv6 seems like an obvious choice. If you already have company wide subnets, you may as well set up some ULAs/GUAs and use IPv6 internally. Full IPv6 may be better but people worry about adversaries mapping internal networks for some reason so NAT66 may be necessary to placate those fears.

The problems you still keep around by using some kind of dual stacking (DS-Lite being the cheapest) ensures compatibility with servers and entire countries that haven't even begun upgrading their networks yet. You incur the IPv4 penalty, for sure, but only towards services that don't have IPv6. This provides an incentive for the world to move on without breaking existing infrastructure entirely.


> DNS64 breaks DNSSEC

Yes, it does. While in theory you could "undo" the translation and verify against the re-synthesized A record, nobody is going to do that.

464XLAT shifts the "make an IPv6 address from an IPv4" to the CPE or even end device (Apple Devices are known to work well with 464XLAT). For this the device discovers the prefix, and if software wants to make an IPv4 connection, it sends it to the NAT64 using the prefix + IP. DNS64 would be no longer needed.


Things got better with newer windows versions.

* Userland printer drivers (that don't bring down the machine if they have a bug)

* Mandatory driver signing...

Nowadays I can run my machine 24/7 without any crashes. Which would be unthinkable back in the day.


Back in the day, your uptime was a source of pride. So much so that I remember using samurize to display my PC’s uptime right in the desktop… my Linux workstation of today isn’t impressed at all.


12:50:37 up 1224 days, 53 min, 6 users, load average: 0.00, 0.03, 0.00

Not desktop tho, my home router/server :)


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: