HN user

zinekeller

6,689 karma
Posts266
Comments1,674
View on HN
www.ft.com 1mo ago

UK considers putting age limits on VPNs to help enforce social media ban

zinekeller
9pts2
proceedings.iclr.cc 3mo ago

Beyond Memorization: Violating Privacy via Inference with Large Language Models [pdf]

zinekeller
1pts0
arstechnica.com 3mo ago

Lawsuits, licensing, and royalties are complicating 4K video support in gadgets

zinekeller
7pts0
status.canonical.com 3mo ago

Component "security.ubuntu.com" and a few other components are Down

zinekeller
5pts1
nvidianews.nvidia.com 4mo ago

Nvidia and Global Telecom Leaders Commit to Build 6G on AI-Native Platforms

zinekeller
4pts4
find-and-update.company-information.service.gov.uk 11mo ago

Sinclair Research to be striken off (forced close down by UK gov)

zinekeller
2pts0
www.bloomberg.com 1y ago

Were Americans ever really healthy?

zinekeller
3pts0
devblogs.microsoft.com 1y ago

Meet me here on "Savvyday 29 Oatmeal 94" (2020)

zinekeller
3pts0
www.theverge.com 1y ago

Nintendo will take your Switch 2 offline forever if you use a Mig cartridge

zinekeller
6pts3
every.to 1y ago

The Disappearance of an Internet Domain (2024)

zinekeller
3pts0
asia.nikkei.com 1y ago

NTT Docomo, popularizer of emoji, ends own emoji set after 26 years

zinekeller
5pts0
discourse.osgeo.org 1y ago

An update on the OSU-OSL funding situation

zinekeller
2pts0
arstechnica.com 1y ago

Op-ed: Chips aren't improving like they used to, killing game console price cuts

zinekeller
6pts0
www.bloomberg.com 1y ago

Why are Japan streets devoid of US cars? It's no mystery, theyre not good enough

zinekeller
18pts12
en.wikipedia.org 1y ago

"This image may not be in the public domain in the [US] 9th Circuit"

zinekeller
3pts0
devblogs.microsoft.com 1y ago

Did the Windows 95 setup team forget that MS-DOS can do graphics?

zinekeller
136pts53
devblogs.microsoft.com 1y ago

The more times you use "simply" the more I suspect you dont know that word (2015

zinekeller
3pts0
www.bloomberg.com 1y ago

Walgreens replaced fridge doors with smart screens. It's now a $200M fiasco

zinekeller
89pts103
apnews.com 1y ago

Getty Images and Shutterstock to Merge

zinekeller
1pts1
lists.wikimedia.org 1y ago

The future of RSA certificates and TLS 1.2 at Wikimedia

zinekeller
2pts0
wikitech.wikimedia.org 1y ago

Wikimedia sites are removing RSA support on December 2

zinekeller
3pts0
github.github.io 1y ago

GitHub Pages Is Down

zinekeller
3pts0
www.classicpress.net 1y ago

ClassicPress: A pre-Gutenberg WordPress fork

zinekeller
3pts0
www.itu.int 1y ago

The Republic of Palau Becomes ITU's 194th Member State

zinekeller
28pts18
www.bloomberg.com 1y ago

Sony Joins a Crypto Push in Japan as Calls Grow for Looser Rules

zinekeller
2pts0
www.mozilla.org 1y ago

Firefox 129 Release Notes

zinekeller
2pts1
www.benthamsgaze.org 2y ago

The legal rule that computers are presumed to be operating correctly (2022) [pdf]

zinekeller
124pts104
www.dvdfllc.co.jp 2y ago

DVD Format/Logo Licensing Program will be terminated at the end of 2024

zinekeller
33pts10
scribe.rip 2y ago

Dear Google Cloud: Your Deprecation Policy Is Killing You (2020)

zinekeller
2pts0
archive.today 2y ago

Archive Today (a.k.a. archive.is) seems to be down

zinekeller
4pts3

There should be examples under the links I have added to the original comment. Unfortunately, I cannot give examples that I personally encountered (first, NDA, sorry, second, the ISPs would probably be very incensed to me), but browsing BGP collector sites would probably illuminate you, like this one (https://bgp.tools/prefix/41.189.185.0/24#whois, https://bgp.tools/prefix/41.189.185.0/24#dns) for caching Facebook and other Meta stuff, and this one (https://bgp.tools/prefix/2001:918:ffad::/48#whois) is for Akamai.

Some CDNs (like Cloudflare) use solely BGP anycast steering for routing to the "nearest" server. Other CDNs (like Akamai, Fastly, Netflix, and YouTube) use a hybrid BGP-DNS steering because some ISPs have extremely questionable routing practices.

Unfortunately, if the CDN only rely on BGP steering (or conversely if you are a user who is stuck on an ISP monopoly), there are cases where this is not necessarily the nearest network-wise (or performant network-wise) if there are peering disputes. If the said ISP is a virtual monopoly or (worse) state-sanctioned to collect network "toll fees" (like in South Korea), non-preferred and international routes are (intentionally) congested.*

If you use a third-party DNS, you basically lose this DNS optimization, and ECS does not fully solve this (because sometimes the DNS override are placed only on the ISP's recursive DNS servers). You're basically in a lose-lose position: either use third-party servers and the IP addresses served to you on popular CDNs are in the congested path, or use the often-unreliable and heavily-logged ISP-provided DNS.

* Usually. There are exceptions, but this comment is just a simplification of the complexities of real-life networking (where RFCs and mutual cooperation die out without fanfare).

Edit for further reading: DNS is the new BGP by Geoff Huston of APNIC (https://ispcol.potaroo.net/2023-09/service-routing.html), How LinkedIn used PoPs and RUM to make dynamic content download 25% faster from the old LinkedIn engineering team (Archived at https://web.archive.org/web/20160310065302/https://engineeri...), Wikimedia's mapping of their CDNs (https://gerrit.wikimedia.org/r/plugins/gitiles/operations/dn...)

Without disputing the added latency of CGNAT, the v6-only peering fights (not just the infamous Cogent-HE dispute but smaller regional ISPs peering only on v4) means that there are indeed cases where v6 is worse than v4 in practice. Again, nothing inherently wrong with v6 itself, but peering disputes means bad latency on v6, which means that protocols relying on TCP (like plain FTP, SFTP and rsync) really takes a hit in transfer speeds.

Also there are cases where the ISP didn't bother even optimizing their routing in v6. I understand that some ISPs in Asia (and especially in Japan, where it shows up on ordinary customers in terms like MAP-E and VNEs) have separate backplanes for v4 and v6 (some are legacy reasons, some are business reasons). Guess which one is being devoted more in practice (hint: not the one being devoted more by IETF).

Edit: I thought this was just in Asia, but apparently this is also the case in an ISP in UK (https://news.ycombinator.com/item?id=48618403)

does fork–exec copy all the process's memory

NT: Yes? Why not?

(note that this refers to the Windows NT kernel's operation because it had historically a POSIX emulation layer (NT Personalities), not the modern WSL which is just Linux in a Hyper-V)

Basically, CT did indeed worked as designed, but there was no monitoring by the domain authors (which to be fair there are a dearth of solutions of the time).

On a related note, Let's Encrypt also issued the presumably-interception certificates. This can be possibly something that requires interception at the VPS level (otherwise we already detected the BGP leaks). Presumably, Hetzner was forced to do a raw interception and then redirecting all relevant ports to a middlebox for inspection and CA issuance (and since that the ACME spec is well-defined, they can simply check if the handshake contains the TLS ALPN challenge and then redirect them to special code that will reply with the correct things).

I can see why you thought it was, but "Open Price" in Japan means that the manufacturer has forgo setting the price themselves, unlike the previous policy that the price is dictated by Nintendo (in this case). The wholeseller's price... is simply not disclosed here, there's an NDA on that one (even with other companies such as Sony).

As already stated multiple times here, the CRLF is actually the "correct" way (at least in the telex days, where CR and LF have actual meanings of "Return Carriage to home" and "Feed a new Line"), while the LF-only one is a Unix "hack"/abstraction (which was actually converted back into CRLF if fed to a telex or a terminal). It is not really a surprise that DOS, which was inspired by CP/M, simply copied what was supposed to be a physical signal. This is the reason the ASCII/ANSI code has a BEL indicator for ringing a bell. In short, CRLF is the way to handle newlines at the time that DOS was designed. You will expect that CRLF is the ending because that's how terminals work (unlike with the magicking Unix which smooshes two differing things into a character).

If you are writing a developer suite, whether you're Delphi developing for MS-DOS or Microsoft developing for Apple II, you kinda have the idea of how things should work (because you have the reference book for the platform, not the compiler/language). It is not the assumption that the OS provides abstraction for text - in thise days, everyone just implement it from scratch, really ("code page" was from literal code pages, where each character has a well-defined byte). This is manifested in command-line handling on Windows: the platform convention is that it is just a flat string, and the C runtime determines how to chop that up (MSVC and Intel C has historically disagreed heavily here) The abberation of Windows only having CRLF is because Unix-based designs took over the world: macOS is Unix, Linux was insiped by Unix, *BSD was Unix-derived.

No idea why this is a thing actually

a) It still affects their bottom-line: the issuer might still try to dispute this using a different code despite payment scheme (formal term for Visa et al.) rules, and the merchant targeted is prone for fraud (for example, airlines have been hit with this by exploiting tourists looking for cheaper tickets by offering them suspiciously cheap tickets on seemingly-trustworthy websites by fraudsters and funding them by insecure cards)

b) Misinterpretation of mandatory rules: PDS2 is applicable only for EEA customer - EEA merchant, but some extended it for whole world despite the rules literally dictating the limits

c) Soft friction for encouraging domestic card usage: because of accept-all rules by payment schemes (and no local rules that allowed merchants in a region to reject international payments), this is a way to block US cards by guise of fraud prevention (because international cards are expensive for merchants to process)

I think this is in the sense of needing a modern-ish hardware with VT-x/AMD-V support (instead of the already-contemporary v8086 which is already in use by Windows at this time).

TLDR: you're basically applying the US standard to something that has been released worldwide, and US intellectual property law is known to be one of the most lax when dealing on derivatives (Feist Publications, Inc. v. Rural Telephone Service Co.). Without saying that the original broadcaster/s do not held any copyright (because, of course, there is a reasonable claim for their copyright), there are two good candidates for the Conet Project's case, both hinging on European IP laws.

The first one is the "sweat of the brow" concept, where effort (not originality, or at least not significant originality) is the determiner. Because this was released in 2001, most European jurisdictions (like Britain's "skill and labour" and Germany's Leistungsschutzrecht) still had this concept. Because the collaborators of the Conet Project did exert significant effort here (they didn't just tune, but significantly denoised and made it reasonably intelligible), it could be argued that they held a new copyright on these works. New laws now significantly tilt towards the creativity/originality concept, but this is usually not a retroactive claim.

The second claim (and the reason that I said IP laws, not specifically copyright laws) is that Europe (incl. UK and Russia) has database rights which does not exist under US law (again, Feist v. RTS). Even if the Conet Project release is ineligible for copyright in most European jurisdictions (and I doubt it due to the non-retroactivity of these laws), they can still point out that the curation of the work provided for enforcement of database rights.

There is actually a third claim (although weak), based on the first publication of a recording of a performance (phonogram rights). This also exists under US laws, although I will be sure that the first "publication" is the broadcast, especially if it was also aimed in the US. (This is the reason why "sampling" some music is considered an IP infringement.)

P.S. If you think that US IP laws are bonkers, try to navigate European IP laws (it's not even harmonized inside EU). There's even a "Copyright in Typographical Arrangement" (UK) where even assuming that the text itself is not copyright, scanning the page might put you into a lawsuit (https://cdn.nationalarchives.gov.uk/documents/copyright-typo...)

Since no-one bothered to answer, the way the license was written did not disclaim any warranty. Sure, US jurisprudence might beg that there is no implied warranty, but most jurisdictions would interpret that as having unlimited warranty. In most places, what-you-pay is not the default to warranty claims, but instead focuses on what are the actual damages to the user. Notably, Australian/NZ and EU (especially Germany and Austria) has extremely strong consumer protection laws which also covers software, and WTFPL didn't even attempt to limit liabilities.

NB: For reference, here's the disclaimer for several popular licenses:

MIT:

  THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
GPLv3:
  15. Disclaimer of Warranty.

  THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM “AS IS” WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION.

  16. Limitation of Liability.

  IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

  17. Interpretation of Sections 15 and 16.

  If the disclaimer of warranty and limitation of liability provided above cannot be given local legal effect according to their terms, reviewing courts shall apply local law that most closely approximates an absolute waiver of all civil liability in connection with the Program, unless a warranty or assumption of liability accompanies a copy of the Program in return for a fee.
CC0 (just to drive the point home):
  4. Limitations and Disclaimers.

  (Subsection a (which focused on trademarks and patents) omitted for brevity.)

  b. Affirmer offers the Work as-is and makes no representations or warranties of any kind concerning the Work, express, implied, statutory or otherwise, including without limitation warranties of title, merchantability, fitness for a particular purpose, non infringement, or the absence of latent or other defects, accuracy, or the present or absence of errors, whether or not discoverable, all to the greatest extent permissible under applicable law.

This is not just Azure (although the proprietary bit is true, that's basically souped-up Pluton), but basically most high-end HSMs deployments, including at major could providers (Google Titanium, AWS CloudHSM). There is even a built-in battery to ensure this happens (https://docs-cybersec.thalesgroup.com/bundle/v2.21-cdsp-cm/p...; https://nshielddocs.entrust.com/security-world-docs/hsm-user...).

I have even heard of a major cloud service mandating absurd earthquake-proofing (to prevent any movements inside the datacenter and triggering an HSM reset) but I cannot find any verification regarding this (maybe this is ultimately an urban legend).

What percentage of the population has an ID in a place where it's difficult to get one vs somewhere it is easier?

Not the OP, but except for passports (and passport cards)... there isn't really any federal-level ID in the US (and passport booklets/cards are expensive, just a bit over $100 IIRC).

The nearest equivalent in the state level are driver's licenses, which are also on the expensive side considering the ancillary costs (because it's a driver's license, not just an identification card). This is also the reason why US-centric companies like PayPal, for this exact reason, accepts a driver's license as proof of identification (obviously where not otherwise prohibited by local laws).

Some (New York for example) do have an ID (called a non-DL ID, that's how embedded driver's license is in the US), but most states do not have a per se ID.

What constitutes an ID being expensive?

Developing countries, rather ironically, issue their IDs for free? Okay, indirectly paid by taxes, but there's no upfront cost. The above-mentioned identity documents have a clear cost attached to them.

How is the rest of the world dealing with this problem? Do you think that their democratic processes might be compromised because of it?

Cannot talk about other countries (because there is an ID system and it's not a controversial affair to them), but instead I'll answer with a reflection of the US system.

Unfortunately, American ID politics are hard, mainly due to concerns of surveillance, but I think (only my opinion) because some of them want those historically disenfranchised (even if a fully native-born US citizen) de facto disenfranchised. This means that there is no uniform and freely-issued identification system in the US (or even a requirement to do that at the state level). Unfortunately, this... is a tough nut to crack, politically-speaking.

Because it's SRAM, and therefore it still can lose its electrons because we're working with cells a few atoms thick? The loss is not necessarily in L1 (where it's replaced frequently), but in L3 which now has memory comparable to PCs in the early 2000s (and can have its data "stuck" in the same physical area for minutes).

There is a point though - Mastercard and Visa treats them as "prepaid" credit cards, which are different from both true prepaid cards (as issued in the US), charge cards, and true debit cards (former Maestro and Visa Electron). Again, different regions have different lines for this, especially in Europe.

IIRC, bunq in the Netherlands issues Mastercard "credit cards" (with no "debit" annotation as on true Mastercard debit cards). They're treated as credit cards for Mastercard purposes but are backed by deposits.

Do you know of any other uses for bytes that are not 8 bits?

For "bytes" as the term-of-art itself? Probably not. For "codes" or "words"? 5 bits are the standard in Baudot transmission (in teletype though). 6- and 7-bit words were the standards of the day for very old computers (ASCII is in itself a 7-bit code), especially on DEC-produced ones (https://rabbit.eng.miami.edu/info/decchars.html).