HN user

maxmouchet

758 karma

Working on IP geolocation at ipinfo.io.

https://www.maxmouchet.com

Posts27
Comments61
View on HN
orbstack.dev 3y ago

OrbStack · Fast, Light, Simple Docker and Linux for macOS

maxmouchet
3pts0
github.com 3y ago

Open source, cross-platform, low latency, user-mode tablet driver

maxmouchet
91pts7
messybeast.com 4y ago

How Intelligent Are Cats? (2004)

maxmouchet
257pts281
github.com 4y ago

A Google Earth Engine tool for identifying satellite radar interference

maxmouchet
3pts0
abarry.org 5y ago

Sequencing DNA in our extra bedroom

maxmouchet
6pts0
github.com 6y ago

Semshi: Semantic Highlighting for Python in Neovim

maxmouchet
2pts0
longhorn.ms 6y ago

Experience Longhorn

maxmouchet
2pts0
alexmeub.com 7y ago

Windows 98 Icons are Great (2015)

maxmouchet
553pts354
twitter.com 7y ago

Misunderstood parameter impacts correctness of bioinformatics workflows

maxmouchet
1pts0
github.com 9y ago

Automated ML using genetic programming

maxmouchet
3pts0
www.nature.com 9y ago

Mobile-phone signals bolster street-level rain forecasts

maxmouchet
14pts0
witrack.csail.mit.edu 9y ago

Vital-Radio: Smart Homes That Monitor Breathing and Heart Rate

maxmouchet
1pts0
github.com 9y ago

Show HN: Control your MacBook lights using Swift

maxmouchet
2pts2
www.destroyallsoftware.com 10y ago

Boundaries – Gary Bernhardt (2012)

maxmouchet
2pts0
www.psc.edu 10y ago

High Performance SSH/SCP – HPN-SSH

maxmouchet
2pts1
www.commitstrip.com 10y ago

CommitStrip – Daily Life of a Web Agency

maxmouchet
2pts0
www.theverge.com 10y ago

What happened to Apple design?

maxmouchet
9pts1
0pointer.net 10y ago

Introducing Sd-Event: The Event Loop API of Libsystemd

maxmouchet
56pts51
github.com 10y ago

Language Integrated Quantum Operations

maxmouchet
1pts0
github.com 10y ago

Pythran: A Python subset to C++ compiler that takes advantage of SIMD

maxmouchet
51pts20
www.antipope.org 10y ago

Why Microsoft Word Must Die

maxmouchet
3pts0
github.com 10y ago

SSH Bad Keys

maxmouchet
4pts0
www.birchtree.me 10y ago

What If You Used iOS 9's Low Power Mode All the Time?

maxmouchet
70pts62
www.wikileaks.org 11y ago

Espionnage Élysée

maxmouchet
16pts1
autodeskresearch.com 11y ago

Project Dreamcatcher

maxmouchet
1pts0
github.com 12y ago

Show HN: Net::Ops - Automate network devices configuration with Ruby

maxmouchet
1pts2
news.ycombinator.com 12y ago

Ask HN: How can I be more productive by using my browsing-related data?

maxmouchet
1pts0

I've reused the LGL (Large Graph Layout) algorithm used by The Opte Project [1,2] with more recent and comprehensive (multipath) traceroutes in 2022 [3].

I've also played a bit with an interactive visualization of the graph by using map tiles [4].

[1] https://github.com/TheOpteProject/LGL

[2] https://github.com/maxmouchet/minilgl (cleaned-up version of the code)

[3] https://www.maxmouchet.com/internet-viz/

[4] https://github.com/maxmouchet/internet-visualization

Bogus announcements are probably filtered by your upstream(s) (see [1] for a common list of filters).

IP-to-ASN mappings are typically built from route collectors [2,3] that peer with various networks and receive their announcements. AFAIK route collectors don't filter anything and it's easy to find bogus announcements (e.g. private ASNs) in the data.

I can't find 4294967296 from a quick glance at the latest RouteViews data but I can find other private ASNs. For example AS7594 - AS2764 - AS4294901866 for 210.10.189.0/24 seen by the route-views.perth collector.

I don't know what kind of filtering iptoasn.com is doing but at work (ipinfo.io) we do filter bogus origins, as well as a bunch of other things like RPKI/IRR-invalid routes and hyper-specific prefixes (> /24 or /48) [4].

[1] https://bgpfilterguide.nlnog.net

[2] https://www.routeviews.org/routeviews/

[3] https://www.ripe.net/analyse/internet-measurements/routing-i...

[4] https://hyperspecifics.io

Another solution is to use an MMDB (“MaxMind DB”) file [1] which is essentially a binary tree + deduplicated values (same as idea 3.1).

There are several free ASN MMDBs [2,3] but you can also build your own MMDB files from any Prefix->Value mapping with the mmdbwriter library [4] or a CLI tool built on top of it like mmdbctl [5].

Assuming the ASN MMDB is fully loaded in memory, it would use around 60MB.

[1] https://maxmind.github.io/MaxMind-DB/

[2] https://dev.maxmind.com/geoip/docs/databases/asn/

[3] https://ipinfo.io/products/free-ip-data-downloads

[4] https://github.com/maxmind/mmdbwriter

[5] https://github.com/ipinfo/mmdbctl

(I work for IPinfo, but there are lots of other companies offering MMDB files).

I can't speak for AWS specifically, but in my PhD thesis [1] I found a bunch of such examples by using RIPE Atlas probes. Essentially looking for pairs of probes where the RTT between probe A and probe C is larger than probe A-B + B-C.

Now there are some issues with this methodology (all common issues with ICMP/RTT measurements + traffic was not really routed through the "relay" probe), but such pairs do exist.

[1] https://theses.hal.science/tel-03666771/document (see page 84 for an example; if you can read French :-))

Nice achievement but always a bit disappointing that those records are based on throwing more money at the problem, rather than new theoretical grounds, or software improvements (IIRC y-cruncher is not open source).

Hosts with randomized addresses are likely to have auto-generated PTR records, or none at all, so for the purpose of rDNS resolution those are not a big issue.

And that’s a detail, but SLAAC as in RFC4842 is deterministic. The randomization is introduced by the privacy extensions in RFC4941.

DNS Toys (2022) 3 years ago

It works by querying a specific DNS resolver (dns.toys):

  dig +short TXT mumbai.weather @dns.google
  # NXDOMAIN
 
  dig +short TXT mumbai.weather @dns.toys  
  "Mumbai (IN)" "30.90C (87.62F)" "45.90% hu." "clearsky_day" "15:30, Sun"
  "Mumbai (IN)" "28.10C (82.58F)" "56.00% hu." "fair_day" "17:30, Sun"
  ...

It's a bit disappointing that OrbStack is not open source, but it works really well.

In my experience (co)lima was already an improvement over Docker Desktop in terms of reliability and background resource usage, but OrbStack is even more lightweight. I also do a bit of low-level networking development and Docker Desktop was rewriting some fields of the IP packets (besides NAT translation) which was annoying. It works seamlessly here.

It still has the same VM memory usage issue as other tools (Linux page cache taking more and more memory over time and not releasing it to the host), but they claim it will work correctly once a bug in Virtualization.framework is fixed: https://twitter.com/OrbStack/status/1645782250116505600

One downside of using tailscale cert, or LE for "private" records is that it writes the domain name in a public Certificate Transparency Log [1]. So make sure that the name doesn't contain any sensitive information.

An alternative is to issue wildcard certificates with LE, so that the subdomains names are kept private.

[1] https://crt.sh/

I agree, and programmers (at least on HN) seems to prefer minimalist and/or retro interfaces.

However I'm pretty confident that if I show such an interface to non technical people, they will feel that it doesn't look nice, compared to whatever proprietary app they use on their phone, Windows/Mac, ...

I personally don't use Word nor LibreOffice (I use mostly LaTeX), but if we want free software to become more popular, there must be a focus on the design.