skysight-inc/HackerNews huggingface dataset:
> If I'm on IPv6 there is no NAT and it's basically security by obscurity (not really but port scans would take forever)

That's why firewalls exist. And they work with IPv6.

My ISP gives out an IPv6 address to my Asus, which also picks up some prefixes for allocation via DHCP-PD. This causes my printer pick up an IPv6 address, but it is not accessible to the outside world.

Statefull firewalls still exist with IPv6, so by default connections from the general Internal cannot connect to your 'internal' systems. Hole punching still needs to be done with UPNP/PCP (at least on residential systems; SMB may not want this)

* http://upnp.org/specs/arch/UPnP-arch-AnnexAIPv6-v1.pdf

* https://en.wikipedia.org/wiki/Port_Control_Protocol

The advantage of IPv6 is that you no longer have to have things like STUN, TURN, etc. (Remember Skype super-nodes?) Your client knows its own IP(v6) address, gets the IP address of the other end, and then tells your firewall to allow connections between just those two addresses. Once your session is done the ACL is deleted and you're completely default-blocked from the outside again.

Copy-pasting from a previous discussion a little while ago:

---

An IP connection is started from the 'inside' to the 'outside', and the source-destination tuple is recorded. When an 'outside' packet arrives the firewall checks its parameters to see if it corresponds with an existing connection, and if it does it passes it through. If the parameters do not correspond with anything in the firewall's table(s) it assumes that someone is trying to create a new connection, which is generally not allowed by default, and therefore drops it.

The main difference is that with IPv4 and NAT the original (RFC 1918?) source address and port are changed to something corresponding to the 'outside' interface of the firewall. With IPv6 the address/port rewriting is not done.† Only state tables are updated and checked.

New connections are not allowed past the firewall towards the inside with either protocol, and only replies to connections opened from the inside are passed through.‡

There's no magical security behind NAT: tuples and packet flags are read, looked up in a state table, allowed or not depending on either firewall rule or state presence. The security comes from the state checking.

† It is possible to have private IPv6 addresses using ULA, and then the router/firewall uses NPTv6 to rewrite the prefix (leaving the /64 interface component alone).

‡ Just like with IPv4 (NAT), to allow unsolicited 'new' connections in you have to do do firewall hole punching with (e.g.) UPNP. But by default things are blocked.

---

No-NAT != access from the Internet.
Unexpected things like this are welcome on HN when they're interesting and not closely correlated with other stuff that appears here (https://hn.algolia.com/?dateRange=all&page=0&prefix=false&so...).

https://news.ycombinator.com/newsguidelines.html
(Not GP) Occasionally, but still use poetry.

The issues happen because poetry is strict about version constraints. Pip used to be lax, so some packages could get away with poor/overly restrictive constraints..

Now pip is strict as well, and poetry is also getting a lot more common, so maintainers have had pressure to fix most of these issues.
It has honestly been pretty amazing, looking from Australia, seeing social distancing and mask wearing become partisan issues in the US. They must be some of the most innocuous actions people can take to prevent the spread of infection. Here, even vaccine rates are approaching 90% in most places.
I don't get the problem with Palantir. You can't prevent an organization from using a language in their project can you? The issue as stated seems to be that some people both worked for Palantir and were involved with Rust? Why single-out Palantir? Should anyone remotely related to any defense or surveillance be ostracized? Where does that stops? Who gets to say who is pure enough to be accepted?

I;m sure some will read this as me supporting Palantir, because that's how the Internet works, but I don't and find them unpalatable.

The same goes for travel costs. It seems a delicate issue: do you fund people who are deeply involved in the project and have shown a continued effort, or new members who might drop next week? To the author, the answer seems so obvious, to me it isn't.
Buy a ticket and plane ride to Poland for Lambda Days 2022. Depending on the flight and stay, it would cost close to $800, but you might be able to talk your boss into covering the difference.

https://www.lambdadays.org/lambdadays2022#register
Existing solar thermal plants using nitrate salts, which are stable up to 550 C or so.

NaOH doesn't boil until over 1300 C. The temperature range from melting to boiling is over 1000 C.
Depends on where you live. Here in Baltimore I’ve called about 5-6 times in the past 2 years.
There are some great John Stockwell videos on CSPAN and YouTube.

Here is one on fake news and the CIA:

https://www.youtube.com/watch?v=XibCflWxZuA

John Stockwell on the CIA secret wars:

https://www.youtube.com/watch?v=WTTVdGOHDqg
I'm not advocating that people should use leaded ammunition, so I'm not sure what argument you think you are trying to make? I'm advocating having a bit of empathy for people who don't make tech salaries and buy all their groceries at whole foods. The posted article looks like primarily an anti-gun hit piece, and your reply also reads as an uncharitable take that is placing a lot of blame and responsibility on individuals who, for the most part, are just trying to feed their families.
If you have machines in the network which you don't trust to handle their own incoming connections securely you can block those connections at the firewall, without port or address translation. Ideally you'd put those on hosts on their own locked-down VLAN. NAT (or NAPT) doesn't add any security (see: NAT traversal) and having different internal vs. external addresses significantly increases the complexity of the system—not just the router but applications as well, which are forced to deal with their public addresses and ports differing from the ones they were assigned.
I think as long as the big factors that influence the polarization stays, i.e, big tech, social media, etc, the polarization will stay here.
Ubisoft de-lists overwhelmingly disliked NFT announcement video
Very pleased to see that Sneakers, one of my favourites, is on this list.

It has a ridiculously talented cast, an amusing script, and a terrifically well constructed caper plot.

The McGuffin is (if you'll allow for the demands of a visual medium) not too badly conceived.

Here's reminiscences from Len Adleman who consulted on the math discourse in the film: https://molecularscience.usc.edu/sneakers/

And here's some minor reminiscences from the professionally nerdy actor Steven Tobolowsky (Werne Brandes ... my voice is my passport...): https://slate.com/culture/2012/09/robert-redford-sidney-poit...
SRV records could work for alternative ports, but those websites wouldn't be able to get Let's Encrypt certificates without talking to the API of their DNS provider. ACME does not allow alternative ports to be used for security reasons, so we'll need a solution for that.

Many ports have also been restricted by the browser because you can format malicious HTTP requests to be an DoS vector for certain services, like IRC, which has been abused by malvertisers in the past. Because of this you'd still be working with a whitelist of ports, only extending the problem a bit longer.

I'm not entirely sure what privacy your NAT guarantees for you. Individual devices can already be fingerprinted by their behaviour, so you'd need to run identical software on identical hardware to combat that. If you manage to do that, you're only one Set-Cookie away from unique identifiers anyway.

Because of the refreshing nature of privacy extensions, you can't derive an exact number of devices active on a network. More and more random new addresses become in use over time to the point where you'd need access to your router (which your ISP already has, unless you configure your own) to get a proper count. You can at best get guesstimations, but that's not much different from the result of NAT.

In theory, I agree with you: pasdive fingerprinting IPv6 is easier than passive fingerprinting IPv4 on an ISP scale or larger. In practice, though, I don't think it matters. Someone who has access to all traffic from your network, probably has access to some kind of boundary as well.

If you already install your own traffic collector to NAT everything through so your ISP modem doesn't see your devices, you can do the exact same for IPv6. NAT may be strongly discouraged, but it's still possible using the same techniques.
> A reasonable proposition is for a new cartridge to be designed around an all copper(or steel, whatever) bullet. It would take a lot of time to get adoption, though, unless the military uses it.

The US military has already moved to steel core, lead free projectiles over a decade ago, specifically because of safety concerns about lead contamination. However, steel core ammunition is explicitly illegal in the US, because it's considered "armor piercing".
Yes, it makes perfect sense now, but after looking at the different radius's I will not run to the window when I hear blasts.
Or more likely, towards Edge, by virtue of requiring almost no effort to deploy the same set of extensions in a very similar browser in the hands of a company who doesn't require destroying privacy as much as google does to keep making money.
You also expect to profit disproportionately from onboarding those less fortunate you refer to. How is it fair to them or anyone? Besides the technical limitations of blockchain I find the distribution of rewards grotesque.
I am skeptical of the framing of the original work in the article. If you actually read the original research, it boils down to building a model on willingness to cooperate based on differing views and observing that past a specific point cooperation is no longer possible. This is not uninteresting for the scientist in me, but the kind of large generalization made in the article are simply not supported by the work nor by the authors.

To be fair, the abstract is somewhat asking for it given this:

> Confronted with a deadly global pandemic that threatened not only massive loss of life but also the collapse of our medical system and economy, why were we unable to put partisan divisions aside and unite in a common cause, similar to the national mobilization in the Great Depression and the Second World War?

The world is complex and while trying to model that complexity is an interesting problem, this kind of statement (by a co-author) falls short of my expectations for rigorous scientific communication and vulgarization:

> “If we reach that point, we cannot unite even in the face of war, climate change, pandemics, or other challenges to the survival of our society.”
Yes. Next you'll have to MiTM the DNS over HTTPS. Next in the arms race comes certificate-pinning. Controlling your name resolution will probably remain possible on Linux, but I expect most other platforms will make it exceedingly difficult for "normal" users.

Embedded devices are already "game over". You don't own them (even if you paid for them).

Controlling name resolution on your own network (and MiTM'ing HTTPS) makes you the same as a hostile nation-state actor. We can't have that.
Maybe they tried them and reverted, I do not see them right now.

But I've seen that previously: https://duckduckgo.com/?t=ffab&q=android+gmail+ads&ia=images...
They were documenting the computational model that they used and they did note that it had some predictive success.

Additionally,

“ We see indications of empirical validation in recent events. Prior to 2019, one might have assumed that a global pandemic would bring together those who disagreed on issues for which hot-button righteous indignation was a luxury that could no longer be afforded. Instead, mask wearing became a partisan crest that identified friend and foe on a partisan battlefield. Similar dynamics can be observed in the two impeachment trials of former President Donald Trump. In the first trial, evidence of collusion with a foreign government failed to exert the expected unifying effect. In the second case, an attack on the US Capitol initially elicited bipartisan outrage, followed by a reversal of position among Republican leaders in the weeks leading up to the Senate trial.”
Does someone knows the pro/cons of io_uring vs DPDK in these these one thread per core setup?
IPv4 is perfectly sufficient for your bunker community's LAN.
Where is that evidence?
But rewriting code isn't always a repetitive task. If you're trying it with anything other than a full parser and refactoring toolkit, you risk breaking the code in ways that you don't realize because you're not actually looking.

If you really have written the same code many times, you might be able to get away with a search-and-replace approach, and with a little luck everything you break will get caught by a compiler. But the more different ways you wrote it, the more likely you are to make things worse.

Learning a refactoring toolkit might be a fun project, but it may well take more than just a few hours. Code-that-writes-code is pretty tricky.

As you say, the alternative is also risky. So getting it right may be worth the effort. But in a lot of cases, it will be quite a bit of effort.
The evolution of the meaning is even more obvious in at least one other language: Japanese borrows the English word "smartphone" for those, but uses "denwa" (with its own kanji) for non-smartphones.
IPv6 isn't all that difficult, insomuch as IPv4 is not basic itself. In fact it's probably easier to teach someone with no prior knowledge IPv6 instead of IPv4. "What's the netmask" isn't a question for user endpoints, it's /64. You can still DHCP, you can still hardcode, but the replacement for ARP can also assign you an IP without having to configure external services to make that happen.

The IPv4 header and the way routers work wouldn't allow for a variable address. The source/destination sit in front of variable length extensions and the actual payload. Not to mention it'd be god awful to implement that kind of thing in non programmable level hardware. You could always implement it as an option header but then you've basically invented "v6 over v4" which is already a thing. Of course there is always NAT which v4 endpoints are already used to so this is a non-problem anyways, I've run v6 only at home for years at this point.

A lot of applications break on it sure but that's because a lot of applications are hardcoded with the assumptions about how big the address is not because the address gets put into a container named "v6" instead of "v4 version 2" by the OS.
I hope if Webb will be successfully operating, we'll get significant progress in the question of the life origin. Abiogenesis is predetermined and common.
Depends if healthy hosts are better at spreading, however all this depends on the selection pressures in the short term.

A virus probably doesn’t ‘care’ that much about a 1% host death rate in the short term.
It’s hard to know whether to cache CI or not.

On one hand, without the cache builds can be very slow.

But on the other hand, you’ll see in a lot of projects random commits like “blow away corrupted cache”, which makes you wonder whether building the cache from scratch is an important step of reproducible builds. I personally rather let the builds run longer and be absolutely certain.

Maybe there’s a good middle ground for dev commits vs final merge commits, but unfortunately there’s no machinery in ie GitHub to specify a commit as final before merge.
At this point I am seriously wondering if Mozilla is paid to drive Firefox into the ground.
I had a little inflammation in one of my eyes immediately after my second dose. It went away, I didn’t report it to anyone. It might have been an immune reaction, I might have just gotten something in my eye, everything was better in a few days.

It didn’t seem worth the trouble or expense to try to do anything about it.

That is the kind of underreporting.

A second kind of underreporting is having only very mild symptoms which would only be caught with a timely test.
Assuming you consider the antiwar stance "liberal," the clearest example of this I've seen is a study of the media stories leading up to the Iraq War. 71% of US sources were pro-war, 26% "neutral," and 3% antiwar. When "both sides" were presented, it was pro-war vs pro preparing more for the war.

https://fair.org/extra/amplifying-officials-squelching-disse...
Sure, I did. I've implemented a proper search for a very big companies document and knowledge base. Similar to gmane, which also used xapian. Much better than what I see there. Or with the old google code search
> VAERS records every medical event that happens

This statement is also objectively wrong. VAERS has no data for unreported medical events.
Crucial leap in error mitigation for quantum computers
I'm the founder of Shuffle, and Tailwind CSS is one of the technologies we support:

1. https://shuffle.dev/editor

2. https://shuffle.dev/components/tailwind

3. https://shuffle.dev/setup

The tool is paid, but we have many free components/layouts more than Bootstrap docs.
"What did we learn in school today?"

"Revenge"
Takes awhile to get the creative fictional juices flowing.
Meta question: What statistical methods can be used to combat under reporting of a particular event?
Do this for peoples stock portfolios and you have a good startup idea right there.

Or you could digest financial, health and content consumption data to create a personalized report with action items.

Very promising.
Cool to see an implementation of __pypackages__ support.

Ill still use Poetry, but this could be paving the way for Poetry to work without virtualenvs as well one day.
Mobile Network operators have been quite forerunning with regards to ipv6. That is primarily the driver for ipv6- iOS forcing apps to have an ipv6 backend was a huge driver too for services.
Ok, but please don't bait the community like that. Pre-emptive defensiveness puts a negative torque on conversation.
These kinds of things are sometime useful if you need to quickly hack on a language you don't normally use. If you don't normally use that language then you are not used to the install, the package system, the environment variables and hacks you need to get it to work properly, the troubleshooting decision trees, etc.

I agree if python is your main bread and butter language doing REPL locally (or debugging with VS Code) would be much nicer.
So now we have to add this new postcss thing. Modern web dev is bandaids all the way down.
There's an easy fix. Don't comment on stuff when you don't know what you're talking about. It's pretty simple.

If you want a hint on what's wrong, here's one for you: discourse on the Internet sucks in part because of people such as yourself making "clueless" comments.
Home/consumer use is where IPv6 is at highest adoption. It's businesses that lag behind. Still amazing to see clear 9-to-5 weekday difference between IPv4 and IPv6 traffic in graphs in 2021.
Paradoxically, I've never brought myself to like Lem's science-fiction books, but enjoyed his two non-science-fiction books (one of them even non-fiction):

1. Hospital of the Transfiguration: <https://www.goodreads.com/book/show/251632.Hospital_of_the_T...>

2. Highcastle: A Remembrance: <https://www.goodreads.com/book/show/251630.Highcastle>
Oh well, boo hoo. This feels like one of those woke "Be careful what you say" speech police bullshit. Look at me, I called you "woke", I think I'm plenty left and progressive, but the whole speech policing that seems like done a lot by the left makes me roll my eyes at vast swathes of them.

On a less emotional side, dude used the term "social anxiety", he doesn't seem like he's lacking the cultural know-how. Don't be so condescending towards people... or to put it in your terms, did you ever consider not to be so condescending in your opinions of other people?

Sorry to dang for breaking many rules.
They used Chekoslovakia as an example, as well as climate change.
This is not exactly true. There are many tricks in the NAT traversal toolkit, depending on your configuration it can be fairly simple to work around. In every case where you use NAT, you also use a firewall.

100% of consumer IPv6-capible routers block unsolicited inbound IPv6 by default. It's not something you need to worry about unless you are hosting, and in that case your concerns are the same as if you're using IPv4.
They didn't just, "get away with it", they were promoted to the highest levels of society. "Bloody" Gina Haspel, one of the CIA agents running the torture camps (where she earned her nickname) was promoted by the two subsequent presidents and eventually became head of the CIA! The worst peddlers of WMD/war propaganda in the media were promoted to the highest positions of power. People like Jeffrey Goldberg who is today the editor in chief of The Atlantic. The Chairman of the Senate Committee on Foreign Relations who supported the illegal invasion and rallied support among his fellow Democrats to ensure that a majority of them voted to support it is now President of the United States.

And on the flip side of the coin, one of the people who blew the whistle on US war crimes in Iraq with the release of the "collateral murder" video (among many others), Julian Assange, has been rotting in a UK dungeon for years.
It's because cloud-act and that many company's are not allowed to have their customers data in a US cloud. However Europe has nothing like AWS or Alibaba, Europe and especially Germany is a shitshow par exelance in that regard.
Shia-Sunni, Turkey-Greek, Catholic-Reformation are a few that come to mind. Take a look at Middle East and you would see long standing polarization.. Anti-semitism is also another long standing polarization.

Slavery was abolished, but you still have people flying confederate flags and arguing for slavery (in a more modern rendition)
Slavery was abolished unilaterally, not as a reversal of the political polarization, and it could be argued that although the explicit practice of slavery is no longer polarizing, Jim Crow laws and their modern antecedents such as The Southern Strategy have been continually polarizing in American politics ever since.

https://en.wikipedia.org/wiki/Southern_strategy
This might be a positive. Maybe modern society allows for more diversity of thought?
The site guidelines are clear on this: https://news.ycombinator.com/newsguidelines.html.

HN is one kind of site (the kind where that's not ok) and not the other. I get that not everyone agrees with the guidelines or would design a community to be this way, and that's fine—there's room for many different kinds of community, including many that haven't been created yet. We're going to enforce the rules of this one, though.
something tells me he wouldn't
You are being taken for a ride for this statement:

> Not a narcotic in any sense of the word.
> “If we reach that point, we cannot unite even in the face of war, climate change, pandemics, or other challenges to the survival of our society.”

We no longer have differences in opinion, we have differences of reality. Climate Change, pandemics, January 6th... the list goes on and on now.
With NAT you may need STUN, TURN, ICE, and probably a few more acronyms:

* https://en.wikipedia.org/wiki/STUN

* https://en.wikipedia.org/wiki/Traversal_Using_Relays_around_...

* https://en.wikipedia.org/wiki/Interactive_Connectivity_Estab...

Not sure if that's more or less complicated than already knowing your IP address and 'just' using UPnP/PCP:

* http://upnp.org/specs/arch/UPnP-arch-AnnexAIPv6-v1.pdf

* https://en.wikipedia.org/wiki/Port_Control_Protocol