> But the moment two sites share the same address range, you have an ambiguity that IP routing cannot resolve.
Writing PF or nft rules to NAT these hyper-legacy subnets on the local side of the layer3 tunnel is actually super trivial, like 20 seconds of effort to reason about and write in a config manifest.
Like written the article, a device on the customer site is required. At that point you might as well deploy a router that has a supportable software stack and where possible sober IP instead of legacy IP.
.
I have been running IPv6-only networks since 2005 and have been deploying IPv6-only networks since 2009. When I encountered a small implementation gap in my favorite BSD, I wrote and submitted a patch.
Anyone who complained about their favorite open source OS having an IPv6 implementation gap or was using proprietary software (and then also dumb enough to complain about it), should be ashamed of themselves for doing so on any forum with "hacker" in the name. But we all know they aren't ashamed of themselves because the competency crisis is very real and the coddle culture let's such disease fester.
There is no excuse to not deploy at minimum a dual-stack network if not an IPv6-only network. If you deploy an IPv4-only network you are incompetent, you are shitting up the internet for everyone else, and it would be better for all of humanity if you kept any and all enthusiasm you have for computers entirely to yourself (not a single utterance).
I won't name the 2 large telecoms I know, that don't support IPv6 being used by customers - if you get L2VPN, L3VPN, other typical services etc. it will be IPv4-only. Of course you can buy a wave and do whatever you want with it :-)
Support for IPv6 is notoriously bad in residential modems. They can barely run IPv4. In an enterprise, you can do it properly. But here we are stuck with the junk the ISP gave out. Customers don't care. You have to work with what you've got.
>Support for IPv6 is notoriously bad in residential modems.
No? Over here at (South) East Asia we have been deploying IPv6 for nearly a decade now. The users are getting their IPv6 connectivity. Before someone jumps out and shouts SeCuRiTy: the firewall is enabled by default.
I am not saying the support is perfect. I know some people moan about lackluster IPv6 configuration in many routers. But for 90% of residential internet users (who care about pretty much nothing but the ability to watch YouTube and browsing social media), it damn sure is.
> or you have a child or family member in one of our concentration camps
I must be one of those comfortable and oblivious tech workers because I don't know about any concentration camps in the US. So you'll have to tell me what this is about.
I believe this[0] article shows the other side of that door. To clarify, I believe the seeming lack of justice system involvement is what chafes for most.
There aren’t Nazi-style extermination camps in the U.S., but an extermination camp is just a subset of concentration camps. There are large-scale immigration detention facilities, with 60k+ people on any given day, where tens of thousands of people are held without criminal trials. Enforcement often targets identity proxies like race, accent, neighborhood, sweeps up citizens and legal residents, uses expedited deportations with effectively suspended habeas, and operates with extremely limited judicial oversight and blatantly ignores judicial rulings.
These are concentration camps, or at least so close that I’m rhetorically OK with it. All of the famous concentration camp programs of history started the same way. And there’s always an excuse for why “no no no, our program is different, these people are illegal, we have to operate like this (suspended legal rights and oversight) to stop the bad people, it’s not targeted by race/religion/etc it’s just the bad people all happen to be like that…”
This may come as a shock to someone stuck in a radical far left bubble but people who are not either a citizen of one of the several states or not a citizen of the federal government (nor both) are not parties to the agreement that is the constitution.
"concentration camp" isn't a root command line term to people with critical thinking skills.
Anyone who is neither a state citizen or federal citizen and does not have a valid VISA (or some equivalent) is an unlawful invader.
Again, this may come as a shock to someone stuck in a radical far left bubble, but most Americans' sentiment, the Americans who are busy raising their families, the ones who actually pay all the taxes that pay to house and feed all of these unlawful invaders stuck in limbo is: they are lucky we don't just kill them all.
I know it's shocking to those stuck in a radical far left bubble, but it's the reality. The state governments and federal governments were formed to protect what the founders wrote: "our posterity". Not every third world rando who shows up for the gibs Biden promised rather than fix their own country.
If you want to be effective in your activism, try to avoid "rhetorical correct" terms. Those terms only work on a particular lower class and only piss off the people with critical thinking skills because it comes across as trying to bullshit them in a malicious way (which it is).
There’s always an excuse. “They” are always unlawful invaders. “They” are always a danger to our children and our posterity. “They” are always not deserving of the same rights as “us”. The excuse is always “justified” in the eyes of fascists and people fooled by their rhetoric.
Hemingway was right when he said “There are many Americans who are fascists without knowing it.”
The Sig P320 that an agent took off of him went off while it was in a federal cop's hand. This is the same Sig P320 that the US Army rejected and was mass recalled for going off on its own.
Unfortunately, when the shot went off he was still fighting with them, actively resisting and not complying. Fighting with federal cops like that is a good way to get killed. He played a stupid game and won a stupid prize.
BS! You can clearly see/hear on the videos that the agent fires the first shot. You've claimed that Alex' weapon went off as if this was a fact. There is no evidence for this whatsoever. Otherwise the DHS would have included it in their report.
Make the data available through bit-torrent and IPFS. Redirect IPs that make excessive requests to response only kilobytes in size "use the torrents and IPFS".
As an SRE, the only legitimate concern here could be the bandwidth costs. But QoS tuning should solve that too.
Supposedly technical people crying out for a journalist to help them is super lame. Everything about this looks super lame.
Perfect. Now all they need to do is set up the redirect.
Every bot is doing something on behalf of a human. Now that LLMs can churn out half-assed bot scripts every "look I installed Arch Linux and ohmyzsh" script kiddie has bots too.
Bots aren't going anywhere.
"Use the web the way it was over 10 years ago plox" isn't going to do it.
If you aren't on a high talent density team comprised of people you have learned you can trust, assume the worst because far too often the original author didn't know why either.
In 2014 and 2015 I was able to make some great things happen because of the people (mostly former Sun people) in the #smartos and #illumos IRC channels on Freenode. They were very helpful. Maybe this is because I put actual thought and effort into my questions and didn't waste their time with stupid questions (ones already answered in documentation or found in mailing lists).
Writing PF or nft rules to NAT these hyper-legacy subnets on the local side of the layer3 tunnel is actually super trivial, like 20 seconds of effort to reason about and write in a config manifest.
Like written the article, a device on the customer site is required. At that point you might as well deploy a router that has a supportable software stack and where possible sober IP instead of legacy IP.
.
I have been running IPv6-only networks since 2005 and have been deploying IPv6-only networks since 2009. When I encountered a small implementation gap in my favorite BSD, I wrote and submitted a patch.
Anyone who complained about their favorite open source OS having an IPv6 implementation gap or was using proprietary software (and then also dumb enough to complain about it), should be ashamed of themselves for doing so on any forum with "hacker" in the name. But we all know they aren't ashamed of themselves because the competency crisis is very real and the coddle culture let's such disease fester.
There is no excuse to not deploy at minimum a dual-stack network if not an IPv6-only network. If you deploy an IPv4-only network you are incompetent, you are shitting up the internet for everyone else, and it would be better for all of humanity if you kept any and all enthusiasm you have for computers entirely to yourself (not a single utterance).