Hacker Newsnew | past | comments | ask | show | jobs | submit | evilmonkey19's commentslogin

I have been using Typst for creating notes and it is an awesome tool. I use it to create notes on welding for my students. It makes my life so much easier compared to badsoft and its not-word-ing (you understand me).

Personally, i feel it is complicated because ISPs are highly afraid of trying it. I understand that such novel technology would be risky to use. But after 20+ years there are still many countries, like Spain, which are barely using it. After that much time has passed, it is already well battle-tested. At this point, you don't want to make the move either because you are too afraid of anything or you have commercial reasons.

I believe Telefonica has reasons to not use IPv6... Although in the long run is turning to be a bad decision. Look at digi :p


I think they are not afraid, they just see 0 reasons to

without IPv6: everything works already, your customers can access any website

with IPv6: ...what are the benifits to them? they still have to provide IPv4 to customers or do some ipv6 to ipv4 translation to make sure ipv4 websites still work

(I've never worked at an ISP so my opinion might be useless)


There are some reasons, which is why you do see IPv6 use increasing. IPv4 exhaustion means that almost all mobile (and in some countries landline) internet connections have to access the IPv4 internet through Carrier Grade NAT. ISPs have to buy the equipment to operate these and pay for their maintenance, and they have to do so in proportion to how much traffic is stuck on the IPv4 internet. At a certain point making the necessary investments to send more traffic over IPv6 end-to-end becomes a better bet than continuing to maintain a growing CGNAT stack.

The tough part is that while ISPs can largely control whether their mobile and residential users have IPv6 available they can’t really do so for their business users, let alone arbitrary website operators they have no relationship with. So the reality is that everyone is going to have to maintain both 4to6 and 6to4 basically forever. But as it becomes less common it’ll no longer need to be especially fast or efficient and the costs to operate it will come down.


> I think they are not afraid, they just see 0 reasons to

This is a big part of it. Apart from extra addresses, it offers remarkably little benefit in terms of networking features from an operational management perspective. It sounds like it should be better when you look at the features, but, in actual operation the features don't really offer that much.

Further, there's the general problem that for some reason the network equipment manufacturers seem to think that because you don't frequently need NAT that now you don't need to have a stateful firewall just always on by default on a network edge device.

Plus the general confusion among tech neophytes that NAT itself is offering actual security features, so that a stateful firewall is a downgrade. This is such a fundamental misunderstanding that you can't even communicate with a person that believes it to be the case. I fear that this confusion will remain with us for decades. I'm sure me even mentioning it will spawn a whole thread of people vehemently disagreeing, because there is always at least one.

This is coupled with the fact that the addresses are just ugly. Like, I'm sorry, but unless you're exactly an electrical engineer, the IPv6 addressing scheme is difficult to remember. IPv4 has the same problem -- the magic numbers are only easy to remember if you have memorized the binary values, too -- but it's really only a handful of things to remember in comparison. Hex values are just not as easy to read or remember compared to decimal numbers. So even though IPv6 isn't harder to use, it feels like it's much harder to use.


IT and telecom tend to have an ultra conservative if it’s not broke don’t fix it attitude. It won’t get deployed until enough customers ask for it or it’s required for something important.

That's because they actually get paid for providing a reliable service, not for ipv6.

Access to only half the internet isn't exactly a reliable service. None of china, none of africa, only half of europe, none of south america....

Those are regions that have a lot of v6 support alongside v4, not v6-only.

Most v4 support is through a gateway. You can't tell the user's IP address from the wrong side of the gateway, for example - only the gateway's address. The user isn't on v4, the gateway is.

Yeah, so you still reach the user, it's just probably less efficient than the all-v6 route.

Edit: Oh, you mean if they want unsolicited inbound traffic? Sure, but that's only a thing for services. I mean you can have a default-allow firewall to home devices but really shouldn't.


it’s the cost of dual stack. The transition from ipv4 to dual stack to ipv6-only goes from low cost, high cost, moderate cost.

There is little value to run dual stack.

Find me a business that would like to spend a lot of money on something of little value.


Personally, myself I have been greatly impacted by this measures. Several services of mine were unavailable because LaLiga said so. No notification, no justification, they block and that's all. It has been a shame since the beginning.

What would it look like if you sued La Liga for using their lawful blocking power in a way that injured you?

I don’t know that this would work that well given Spain is civil law, not common law

(Disclaimer: I don't know the first word about law)

But I have been thinking about this quite a lot recently (mostly because I get angry at the power states sometimes have over individuals). Would the distinction really matter in this case?. I would think that in a "civil law" contry things could be even worse for the aggressor


It depends on the law in question. Civil law typically requires that the plaintiff's cause of action and desired remedy be defined in the relevant code or statute. This doesn't mean the average person is powerless; every civil code I know of will let you file a lawsuit for breach of contract, for example. I have no knowledge at all of Spanish law, though, so I have no idea who has grounds to sue whom and under what code. If a similar situation happened the US, you'd probably file a lawsuit against Cloudflare, the ISPs, and the relevant sports league and sort it out in court.

You would do the same in a civil law country, sue the sports league and ISP. State that an "unlawful act" happened (blocking your service) and claim damages due to loss of traffic and the extra work it caused you.

But is it actually an unlawful act? A judge decreed that La Liga can demand the blockage of certain IPs. La Liga demanded the blockage of certain IPs. Does the fact that it had an unintended consequence on others somehow make it illegal?

It doesn't have to be an unlawful act. You can recover damages for a lawful act.

Here's France, the Platonic embodiment of European civil law:

> To get damages, you must compile a file that gathers all the elements that make it possible to determine that your damage is compensable

> You must demonstrate that you are the victim of harm: [snip]

> In order for your damage to be repaired, you must also determine:

> - A fault, negligence or infringement committed by another person

> - And that your injury occurred as a result of that fault, negligence or breach.

> Example :

> A person walking down the street hits you because he is looking at his phone. You fall and you break your arm. So you are suffering bodily harm that was caused by the negligence of the person who shoved you. It was precisely this negligence that led to your damage, because if the person did not hit you, you would not have fallen. You can therefore ask him for damages.

( https://www.service-public.gouv.fr/particuliers/vosdroits/F1... ; note the banner saying "This page has been automatically translated. Please refer to the page in French if needed.")


Judges aren't perfect and just because they decree something, doesn't mean that the remedy implemented by the ISPs isn't also a violation of some law or regulation. Normally this would be handled by yet another court case, possibly going to a higher court to decide if there are contradictions or conflicts.

The law is no stranger to "damned if you do, damned if you don't" scenarios.


I mean, really, the appropriate avenue is for the legislature to clarify law, which is the subject of the article

Do they not have a charge of "tortious interference with business" in civil law like in common law? It's where one company just goes out of their way to fuck up your business for no good reason.

A very expensive lawsuit that, even if successful, will result in a difficult to enforce judgment?

What's difficult about enforcing a judgment against La Liga? They're as public as it's possible to be.

They have deep pockets for dragging this on much longer than you can afford it.

I doubt that will work outside of the U.S.A.

I think it’s a universal tactic. Maybe it’s even more extreme in the US (what isn’t), but you can drag court proceedings on pretty much anywhere there are courts and legal costs.

Might they appeal?

The legal system in many countries is very, very different from that is the US (or UK).

> No notification

What ISP? I'm using Vodafone and if I accept the insecure connection (because of mismatched certificate), I get served the notification. You don't get that?


Why would you ever accept a mismatched certificate? Even assuming that you think your ISP has no nefarious plans, are you going to be able to rigorously confirm it's their certificate? At that point you've bypassed all the mechanisms in your browser that do this heavy lifting for you.

Erm, where is the danger in a mismatched certificate, if all I want is to get some noncritical information from a blog or something?

Local privilege escalation in your browser is a danger. They can also abuse any privileges you gave to the website, such as camera and microphone.

Why would I give a "random blog" access to my camera or microphon?

And how can a wrong certificate lead to local privilege escalation?


Why wouldn't you? Your computer is not gonna be hijacked by it, and you want to see what shit your ISP is now up to.

Obviously I don't do my banking like that...


Presumes you're using the ISP's DNS and not custom servers or DoH.

Bit hard to get notified by the ISP if you effectively try to side-step the way they notify you, don't you think? Also bit weird to blame them for that.

If I recall correctly, if you try to access the IP directly you get the same notification. No football game on right now though so cannot check.

Edit: In fact, I'm not sure they do DNS filtering at all actually, it may be just based on IP, can't remember off-hand, considering the collateral damage, I'd say IP blocks mainly.


ISPs have your contact information, and they can also put up notices on their own website. Hijacking somebody else's website with forged replies isn't "the way they notify you," it's a man-in-the-middle attack, and users shouldn't be trained or encouraged to accept it.

> ISPs have your contact information, and they can also put up notices on their own website.

So whenever you see "Connection Refused" your instinct is to go to your ISPs website?

I also don't think it's "hijacking someone's website", then it'd be global, instead it is a man-in-the-middle attack, serving different traffic than the user intended.


Hijacking secured connections to inject a payload that doesn’t actually come from the source is not a legitimate form of notification - it’s a malicious infrastructure attack.

Have you tried using this in prod? Or at least in a home-lab working?

Congrats to the Zed team! I really like your editor and it works surprisingly well, althought there are a few rough edges still with the python experience.

The debugger in Python FastAPI and mainly Django is not working as expected. Hopefully soon will be fixed.


Top new features in containerlab:

- Start/stop/restart selected nodes (--node flag) — no need to nuke the whole lab. (Limited to single-container nodes, veth links, etc.)

- Per-node credentials in topology files — set defaults, per-kind, per-group, or per-node. Most specific wins.

To me those are huge wins!


Last weekend happened as well :/

https://news.ycombinator.com/item?id=47480926

The situation every weekend is getting worse and worse. Honestly, I cannot understand how any goverment who wants freedom for its citizens can allow to block internet access to a whole country only because a private football company asks for it. I guess LaLiga is the 4th statement in Spain...

A probably will get even worse the situation with Fastly entering the equation: https://www.fastly.com/press/press-releases/fastly-and-lalig...


Another week, due to football we cannot access several services. In this case, I was doing a server maintainance and I was trying to upgrade the Caddy image. I cannot because as football is more important, we all get block :/


Pies it means "foot" in spanish


Plural - “feet”


'a dog' in polish


Just for the record: I wanted to see your content, but I couldn't because in Spain when there's football they block most websites to "avoid illegal football IP lists"... LaLiga can block anything they want without any restriction, even you website which I doubt about it. I can barely navigate... I will read it later tomorrow. This why you might see 0 traffic from Spain.


I read about this a few months back (I think someone posted a link to a Reddit discussion about it). It's so bizarre!


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: