Pup Biru

it was always wild to be back in the day when so many container images were based on ubuntu… was like PLEASE debian is functionally identical here at like 1/10th the base container size!

ah! sorry i misread/misunderstood privacy to mean security in your comment :)

you sir/maam have not seen the netflix talk on using IPv6 for their full internal stack because of inefficiencies allocating IPv4 ranges i’m guessing

many “unused” IP addresses are unused because they’re kinda like having spare parts: if you’re planning on extending your network in the futures, your IP block kinda should reflect your end state (ie the parts you need over time to replace or “build” new hosts)

or for blue/green deployments where it’s likely that at least half the IP range will be used in terms of process, but unused most of the time in terms of reachability

and then there’s weird things with splitting up IP blocks into subnets with a division of 3 (the minimum needed for dealing with net splits etc) - eg across availability zones… there are always “waste” IPs because you can’t divide multiples of 8 cleaning into 3

Of course you can do IPv6 magic that hides IPv6 from the end device, but nobody understands how that magic works.

it’s not magic… it’s a firewall, and it works pretty much exactly the same as a NAT: a whitelist of IP and port combinations

there are duplicate machines that share programs

yes… that’s why every machine has its own IP address… so that they can both use the same port and you don’t have to connect to crazy bullshit like https://myhomerouter.example.com:8443/

no instead you yell the IP address and they spend 30min trying to debug why they can’t ping it or even get ICMP packets through and then you realise you yelled the private IP address and they were on the wrong side of the NAT

publicly addressable does not mean publicly routable… your router would still not arbitrarily connect untrusted external devices to internal hosts

NAT has the property of a firewall only as an implementation detail. replacing NAT with an IPv6 firewall in the router is an upgrade in every conceivable way

i kinda love that this explanation is so much more complex not because it adds nothing but precisely because it adds a lot of realism: NAT is actually just far more complexity and processing

in the real world we actually use distribution centers and loading docks

because we can pass packages in bulk between large distances… in routing, it’s always delivery boys: a single packet is a single packet: there’s no bulk delivery, except where you have eg a VPN packing multiple packets into a jumbo frame or something…

the comment you’re replying to is only providing an analogy: used to explain a single property by abstraction; not the entire thing

we can have staff specialise in internal delivery

but that’s not at all how NAT works: its not specialising in delivery to private hosts and making it more efficient… it’s a layer of bureaucracy (like TURN servers and paperwork - the lookup tables and mapping) that adds complexity, not because it’s ideally necessary but just because of limitations in the data format

routers still route pretty much exactly the same in IPv6 direct or NAT, but just at the NAT layer public IP and port is remapped to internal addresses and ports: the routing is still exactly the same, but now your router has to do extra paperwork that’s only necessary because of the scheme used to address

NAT is not much different to a firewall though… just because the address space is publicly routable does not mean that the router has to provide a route to it, or a consistent route

NAT works by assigning a public port for the outgoing stream different to the internal port, and it does that by inspecting packets as they go over the wire: a private machine initiates a connection, assign an arbitrary free port, and sends that packet off to the router, who then reassigns a new port, and when packets come in on that port it looks up the IP and remapped port and substitutes them

that same process can easily be true in IPv6 but you don’t need to do any remapping: the private machine initiates a connection, and the router simply marks that IP and port combination as “routable” rather than having to do mappings as well

if i found out someone was using a voice changer in an interview, that’d be a massive red flag for me

i’m actually okay with something like this, assuming it doesn’t give useful identity information but instead gives unique tokens to services (that can’t be used for tracking an individual - which is the real problem with these age laws)

i think a system like this should be in place for pretty much all identity verification: banks, real estate, etc… where they can verify identity without the need for an identity document (scans of which can be mishandled, give more information than necessary etc). really, it kinda has to be government-led because they’re the arbiters of official identity to start with, and i wouldn’t want to have to have all my identity proofs in 4 different company systems

ephemeral digital tokens is more secure, more private, and simpler for everyone involved

i’d love to see linus revoke twitters license to use linux somehow

source code? i don’t think you know what you’re talking about… it’s called a prompt

SLASH

ESSS (emphasis because hate it)

right? like at the time we had YUI and then bootstrap came along as a breath of fresh air

i think that’s very valid re cloudflare… i’d probably consider them “core internet infrastructure” at this point unfortunately

same with google: gsuite is just too easy and has a load of data (same arguments as o365)

yeah i certainly thought about linux in there, but im just not sure it’s viable for company-wide use… again, users are not all technical and “forcing” a platform on them that has a kinda hodge-podge of user experiences and isn’t something they’re used to think wouldn’t end well

i do think however that the EU has the resources to invest into a really great linux workstation platform to compete with windows: an easy SSO system to replace AD (heck perhaps some cool AF system that uses OAuth so you can use existing web SSO?!), management like group policy, easy interfaces for things like network file sharing, fleet management, etc and design a really slick user experience

it could be amazing, but users are stubborn so it would have to be amazing i think

for creative cloud, my default is to say the affinity suite (no idea where they’re based, but they’re at least pay once and get a download: subscriptions can’t cut them off so less risk), but it’s mac and windows only… perhaps the EU could do an apple and have them onboard as a “launch partner” with their new cool linux-based distribution

gimp is getting better, but really i don’t think it’s there yet - especially the UI. inkscape is the same but further behind, and i don’t event know of an alternative to indesign

davinci resolve is a great alternative to premiere and after effects, but afaik blackmagic is US-based… it does run in linux though so supports this EU-OS. the free version also has just a download and AFAIK no dial-home, and their paid version is pay once and download a package and you’re good to go … can’t remember how the license works? it might dial home to validate, or it might just be an algorithmic key… even most professionals wouldn’t need the pro version though TBH (unless you’re exporting 8K or doing some intense effects and AI filtering/fixes etc)

i think in general my critique of a lot of the FOSS alternatives are all kinda the same: they lack polish and ease of use, which isn’t super difficult to fix… they have great bones, and with a concerted effort from entities not looking solely for direct profit i think they could really get off the ground as real alternatives… i’m just not sure for regular users they’d accept them as they are right now (but wouldn’t it be so cool for the EU to spin off a whole distro with clean branding, management, interfaces, and a FOSS productivity and creative suite that was branded, skinned, and followed well thought out design patterns)

i’d say microsoft is the biggest threat because they hold a lot of critical data… if oracle snuffs out of existence, companies can probably migrate reasonably easily (don’t get me wrong there would be gnashing of teeth but alternatives exist), CRM there are EU alternatives (ERP, whilst different, is i think a superset of this and yall have SAP which is german) which tend to throw money at companies wanting to switch, adobe… i mean, they don’t really hold business critical data - it’d be disruptive, but not catastrophic if they disappeared

microsoft however hosts huge amounts of business critical data - email, one drive, sharepoint, office, and of course windows: it’s easy to say that email migration is easy, foss alternatives exist for all of this, but the data is particularly problematic and getting users to embrace a whole suite of new systems is pretty difficult

you need to know css to use tailwind because it’s basically style= on everything: it’s css with extra steps