HackerLangs
TopNewTrendsCommentsPastAskShowJobs

jiveturkey

no profile record

Submissions

[untitled]

13 points·by jiveturkey·2 miesiące temu·0 comments

Bypassing DPI with eBPF

bora.sh
1 points·by jiveturkey·2 miesiące temu·0 comments

comments

jiveturkey
·17 dni temu·discuss
looks like a response to https://news.ycombinator.com/item?id=48445834
jiveturkey
·24 dni temu·discuss
> DACs are copper, and they're happy.

Well come on. GP really means category cable (twisted pair copper) is not happy at 10Gb distribution lengths (so-called horizontal cabling, although in a home it may span multiple floors without IDFs). That's kind of obvious context.

DACs are not category cable; they are twinax, short, and bulky.
jiveturkey
·24 dni temu·discuss
JWTs can do that (delegate) and such capability is already well defined.
jiveturkey
·w zeszłym miesiącu·discuss
entropy check, for one
jiveturkey
·w zeszłym miesiącu·discuss
> TL;DR: Don't overthink it, just send a verification email.

pretty bad advice, if taken only as written, without adding more flavor on top.

the major email providers will penalize you if you generate too many undeliverable emails. thus, if you just send a verification email without any pre-validation, it's pretty easy to get into a DoS situation where current/valid users don't get important email sent to them, or that email is significantly delayed, plus incur huge operating cost to resolve the problem.

some form of rate limiting is needed, plus IMHO it's better to use a verifier service or your own heuristic or ML model to test for email validity including valid but fake/spammy/disposable addresses.

sorry, but we are way past the point of being able to have nice things, esp. when we're talking about email.

the "lies" part of the content is great. people do assume all those wrong things. however the TLDR is just wrong, and potentially harmful.
jiveturkey
·w zeszłym miesiącu·discuss
oooh. i have an original. it doesn't have the 'Collector's Edition' etching. Does that make it a fake?
jiveturkey
·w zeszłym miesiącu·discuss
But the chatbots/aggregators do, and they accept the reports as fact.

As is noted in the conclusion.
jiveturkey
·w zeszłym miesiącu·discuss
> Instead of releasing our results all at once, we're going to focus on one report at a time. This approach both prevents individual examples being overlooked and allows us to illustrate the negative impacts of vibe citing on research quality and public trust.

Not to take away from the actually great reporting here, but what they mean is, This approach allows them to milk it for as many clicks as possible.
jiveturkey
·w zeszłym miesiącu·discuss
why is that? you'd run yt-dlp from the same device you generated the cookies on (with a real browser). yt-dlp will have the bare cookie and also be able to refresh the cookie just like the browser.
jiveturkey
·w zeszłym miesiącu·discuss
There was a secondary sale in April.
jiveturkey
·w zeszłym miesiącu·discuss
There's a newish term for this: RLO, Recurring Liquidity Opportunity. These are tender offers at some recurring interval. Even some companies that have a shorter lifespan (say 7 years) offer this.
jiveturkey
·w zeszłym miesiącu·discuss
We are still in the short-half-life phase of GPUs. If a 2x faster GPU is on the horizon, why wouldn't OpenAI already be in line to buy? They aren't buying just 1, they are buying multiple datacenters' worth. So they wouldn't be a low priority, back of the line customer.

A short half-life means you are going to quickly dispose of what you have now, anyway. In fact most current datacenters can't even handle Vera Rubin, so I don't think there's short term risk here.
jiveturkey
·2 miesiące temu·discuss


  BOOBS
age verified
jiveturkey
·2 miesiące temu·discuss
Residents, not just citizens.
jiveturkey
·2 miesiące temu·discuss
Since when does a commission in the EU get to tell the entire World how to treat Personal Data?
jiveturkey
·2 miesiące temu·discuss
Ah! Curse your sudden but inevitable betrayal!
jiveturkey
·2 miesiące temu·discuss
well, you're complaining about an ad.
jiveturkey
·2 miesiące temu·discuss
Liability.
jiveturkey
·2 miesiące temu·discuss
Going off on a tangent, I wish there were more awareness of how this concentrates power to Cloudflare.
jiveturkey
·2 miesiące temu·discuss
Leaked to different parties.

Assuming you don't have ECH, you leak the question (in practical terms) to your ISP, and you leak your question to the DNS provider. With ODoH you plug the latter leak. Plugging that first leak is then still a problem (solved separately) but it's orthogonal to the second.

Even with ECH, where you plug the TLS leak, you have many more holes to plug. IP address might not be shared or might be shared across too few properties, and then traffic profile after the initial connect (to retrieve all the sub-resources) can identify destinations.