HN user
3 vpn segments:
1. foss, p2p-only, no server or intermediate nodes to trust (rayfish)
2. foss, brokered if necessary with all nodes self-hosted (openziti, nebula, some wireguard variants)
3. non-foss, mix of p2p and brokered, host some of the nodes yourself (openvpn, myriad of wireguard variants/wrappers like tailscale, headscale, netbird, netmaker)
why is #3 so much more popular?
yes, openziti includes a full mesh, programmable overlay. agree not all apps need that.
the closest comparison is openziti:
+ iroh and openziti can both be app-embedded
+ so the app developer embedding in their service is a good use case for both
+ openziti is used for services in which scale and security are critical
+ whereas iroh allows participation from parties which don't have any prior relationships - which can be very convenient
there are many paths towards ROI and ruin. but towards ROI:
+ LLM-powered robotics, autonomous, IoT, smart manufacturing
+ LLM-powered biotech, healthcare, genetic engineering, medicine
+ Recursive model improvement
+ Multiply the # of devs (software truly eats world)
+ Exponential increases in model performance / cost decrease (algorithms, power, infra, chips, architectures, etc.)
and the US govt often helps facilitate gambling during downturns so we could see even more direct and indirect promotion of the problem. examples:
+ in stagflation of 70s/early 80s - states create state-run lotteries to help fix their budgets
+ 2008 great recession - states legalize casinos to recover lost tax revenue and prevent folks from traveling out of state to gamble
+ C19 - states fast track the legalization of mobile sports betting and online casinos to secure immediate tax revenue
my instinct is open source is part of the answer. the market monetizes with differentiation on the open source base, support, hardware, etc. vibrant enough market = the foss is secure (always a relative term) and continues to evolve, partially paid for by the companies who are monetizing
Absolutely. Easier said than done, but the best security is structural security - as near to invisible for end users as possible. This needs to be the goal, imo, even if not fully achievable.
Nobody is going to mass-produce a 50-year-old oak. And nobody is going to conjure trust, or quality, or community out of a weekend sprint.
absolutely although i wonder how different 'trust' is in the culture of tomorrow? will it 'matter' as much, be as cherished, as earned over the fullness of time?
i suspect it is a pendulum - and we are back to oak trees at some point - but which way is the pendulum swinging right now?
NYC aqueduct from the Catskills is wild too, especially if you like the effect on NYC pizza and bagels.
Great articles have been written on the engineering but I like this one from 1909 showing the perspective of the time:
The Rowan County Commission meeting included a rare sight, County Chair Greg Edds standing in front of the dais addressing the audience after public comment (something he had never done in his 12 year history according to the article).
articles like this makes me wonder - does the "AI" in "AI data center" amplify concerns beyond 'normal' concerns around commercial and residential real estate development projects?
on one hand, i feel it is partially the media reporting on it more than in the past, but then these articles and anecdata about meetings like this across the country make me feel there may be other differences?
note - in the article, the data center wasn't even on the agenda, nor is a deal in place and yet the unprecedented discussion:
“I want to be clear about this, so watch my lips. There is no data center deal,” Edds said. “We have made no offers on any data centers. No data centers have made any offers to us. We are not speaking to any data centers.”
That’s juicing growth. Facebook style
yes, the sycophant noted by Om, but also:
+ asking you (prompting the human?) to keep the convo going in very specific ways
+ seemingly more personalization each day
both unfortunately crowd out the long tail which LLMs might otherwise help us explore, but of course the algorithms prefer putting us in positive feedback loops in echo chambers we like (and are conditioned to like)
very cool and well done.
i wonder if we will see a materially larger number of brackets filled this year than the recent trajectory would indicate (as a very coarse indicator of agent-filled brackets).
n=1 but they help me hit flow states. almost like they provide 'context' before x, helping me to 'prepare' (or be ready?), filter out the noise, focus. similar in group setting - shared context.
i suppose could be 'placebo' but would it matter if the result is what i want, and i can't easily attain it other ways?
i do feel it is somewhat of a self-fulfilling prophecy - i am essentially practicing something so getting better at it. not enough reason though to 'practice' an alternative, at least for me personally.
OpenZiti (Apache 2.0):
what i meant is this may be a good real world litmus test. i dont claim to know if there are differences or not between her word and actions - i have not followed her closely. but i always like 'tests' like this for heads of media orgs as free speech (Free Speech) imo needs to be the backbone of those orgs
this is nice in the site source:
Looking for hints in the console? That's the spirit! But the real challenge is in Fiu's inbox. Good luck, hacker.
(followed by a contact email address)
we'll need more facts but if there is substance to this then the reaction from Bari Weiss (now cbs news editor-in-chief and a long-time public advocate of free speech) and team will be interesting.
Congrats on progress.
These are differentiating from most VPN and zero trust:
+ fully self-hostable open source
+ avoid ACL complexity (default closed architecture)
+ sovereign identity-based
OpenZiti is similar in those – how do you compare and contrast the two since very few others share those differentiators (I am an OZ maintainer)?
hopefully it will spread - many open options, from many entities, globally.
it is brilliant business strategy from China so i expect it to continue and be copied - good things.
reminds me of Google's investments into K8s.
the quoted text above is from the OP's article - your point is interesting though
good point although built for humans > built for AIs is likely true for a while
The Theory of Constraints states that every system has a bottleneck, since without one, it would operate infinitely fast, which is impossible.
If we believe the AI-influenced system will be faster, more prolific and more experimental (cheaper experiments), then it seems human attention and the rate at which humans can change (individually, processes, tools, teams, etc) becomes the bottleneck.
In that system, the designer and PM functions become more important in addressing that bottleneck - in producing solutions to best overcome those bottlenecks?
networks: openclaw-restricted
agree - when code is increasingly difficult to control, take control of the network.
but how to do the "openclaw-restricted" network itself in practice?
48% compared to microsoft at 26% (last week) and aws at ~21% (expected) is impressive.
of course gcp is the smallest of the three but not small as it approaches $20B.
do the #s track with what HN community has seen in comparing the three largest hyperscalers in function, pricing, reliability, etc?
IF we develop beyond earth...then AI, robots and connectivity will likely be huge parts of it.
+ spacex already is the best way for many payloads to get to space.
+ starlink is already the best low orbit based connectivity solution.
+ x is already a great way to train virtual world AI.
+ tesla (and its robots) is a great way to train physical world AI.
+ space takes big $ and talent - this combo would have both.
the IF at the top is just that. but feels like an interesting convo for this crowd.
Looks good, congrats on progress.
are OpenZiti, Headscale, Nebula the 3 closest?
great resource here (no affiliation) for HN community:
there is at least one community-managed flake to connect a NixOS machine to an OpenZiti overlay network, but i don't think there is an official NixOS module yet:
github.com/rochecompaan/openziti-nix
if your focus is trying it rather than distributing consistent versions to many folks, you can also use the ziti-edge-tunnel binary, define a systemd service and add identities (a given app or device can belong to (n) OpenZiti overlays via (n) different identities).
for the private networking problem, openziti (apache 2.0) is now integrated with Nix:
Claude will be able to leverage these capabilities to extend its reach across the cloud and add more value in enterprise use cases
100%. even more robust if paired with an overlay network which provides identity based s3 access (rather than ip address/network based). else server may not have access to s3/cloud resource, at least for many enterprises with s3 behind vpn/direct connect.
ditto for cases when want agent/client side to hit s3 directly, bypassing the server, and agent/client may not have permitted IP in FW ACL, or be on vpn/wan.
i should have been more clear - you have the option:
+ e2ee via netfoundry's zero trust products
+ non-e2ee via netfoundry frontdoor