HackerLangs
TopNewTrendsCommentsPastAskShowJobs

jiveturkey

no profile record

Submissions

[untitled]

13 points·by jiveturkey·vor 2 Monaten·0 comments

Bypassing DPI with eBPF

bora.sh
1 points·by jiveturkey·vor 2 Monaten·0 comments

comments

jiveturkey
·vor 17 Tagen·discuss
looks like a response to https://news.ycombinator.com/item?id=48445834
jiveturkey
·vor 24 Tagen·discuss
> DACs are copper, and they're happy.

Well come on. GP really means category cable (twisted pair copper) is not happy at 10Gb distribution lengths (so-called horizontal cabling, although in a home it may span multiple floors without IDFs). That's kind of obvious context.

DACs are not category cable; they are twinax, short, and bulky.
jiveturkey
·vor 24 Tagen·discuss
JWTs can do that (delegate) and such capability is already well defined.
jiveturkey
·letzten Monat·discuss
entropy check, for one
jiveturkey
·letzten Monat·discuss
> TL;DR: Don't overthink it, just send a verification email.

pretty bad advice, if taken only as written, without adding more flavor on top.

the major email providers will penalize you if you generate too many undeliverable emails. thus, if you just send a verification email without any pre-validation, it's pretty easy to get into a DoS situation where current/valid users don't get important email sent to them, or that email is significantly delayed, plus incur huge operating cost to resolve the problem.

some form of rate limiting is needed, plus IMHO it's better to use a verifier service or your own heuristic or ML model to test for email validity including valid but fake/spammy/disposable addresses.

sorry, but we are way past the point of being able to have nice things, esp. when we're talking about email.

the "lies" part of the content is great. people do assume all those wrong things. however the TLDR is just wrong, and potentially harmful.
jiveturkey
·letzten Monat·discuss
oooh. i have an original. it doesn't have the 'Collector's Edition' etching. Does that make it a fake?
jiveturkey
·letzten Monat·discuss
But the chatbots/aggregators do, and they accept the reports as fact.

As is noted in the conclusion.
jiveturkey
·letzten Monat·discuss
> Instead of releasing our results all at once, we're going to focus on one report at a time. This approach both prevents individual examples being overlooked and allows us to illustrate the negative impacts of vibe citing on research quality and public trust.

Not to take away from the actually great reporting here, but what they mean is, This approach allows them to milk it for as many clicks as possible.
jiveturkey
·letzten Monat·discuss
why is that? you'd run yt-dlp from the same device you generated the cookies on (with a real browser). yt-dlp will have the bare cookie and also be able to refresh the cookie just like the browser.
jiveturkey
·letzten Monat·discuss
There was a secondary sale in April.
jiveturkey
·letzten Monat·discuss
There's a newish term for this: RLO, Recurring Liquidity Opportunity. These are tender offers at some recurring interval. Even some companies that have a shorter lifespan (say 7 years) offer this.
jiveturkey
·letzten Monat·discuss
We are still in the short-half-life phase of GPUs. If a 2x faster GPU is on the horizon, why wouldn't OpenAI already be in line to buy? They aren't buying just 1, they are buying multiple datacenters' worth. So they wouldn't be a low priority, back of the line customer.

A short half-life means you are going to quickly dispose of what you have now, anyway. In fact most current datacenters can't even handle Vera Rubin, so I don't think there's short term risk here.
jiveturkey
·vor 2 Monaten·discuss


  BOOBS
age verified
jiveturkey
·vor 2 Monaten·discuss
Residents, not just citizens.
jiveturkey
·vor 2 Monaten·discuss
Since when does a commission in the EU get to tell the entire World how to treat Personal Data?
jiveturkey
·vor 2 Monaten·discuss
Ah! Curse your sudden but inevitable betrayal!
jiveturkey
·vor 2 Monaten·discuss
well, you're complaining about an ad.
jiveturkey
·vor 2 Monaten·discuss
Liability.
jiveturkey
·vor 2 Monaten·discuss
Going off on a tangent, I wish there were more awareness of how this concentrates power to Cloudflare.
jiveturkey
·vor 2 Monaten·discuss
Leaked to different parties.

Assuming you don't have ECH, you leak the question (in practical terms) to your ISP, and you leak your question to the DNS provider. With ODoH you plug the latter leak. Plugging that first leak is then still a problem (solved separately) but it's orthogonal to the second.

Even with ECH, where you plug the TLS leak, you have many more holes to plug. IP address might not be shared or might be shared across too few properties, and then traffic profile after the initial connect (to retrieve all the sub-resources) can identify destinations.