Hacker Newsnew | past | comments | ask | show | jobs | submit | timokoesters's commentslogin

Here is an official response from the Bundeswehr (German):

https://www.bundeswehr.de/de/organisation/zahlen-daten-fakte...


It's ridiculous that the German government now has to officially state "Please ignore the letter of the law, we didn't mean it that way."

That is the main problem with it. It shows the incompetence of our legislative procedures.

Hey, look who doesn't understand how the laws are made now.

This document is an Internet-Draft (I-D). Anyone may submit an I-D to the IETF. This I-D is not endorsed by the IETF and has no formal standing in the IETF standards process.

https://datatracker.ietf.org/doc/draft-thain-ipv8/


Yes, and assuming it will not become popular, this will expire / not renew in 6 months.

It’s also worth noting that the author is affiliated with a company based in Bermuda. So it doesn’t feel like it comes from a legitimate institute. For all i know this was vibe-written by an AI in an afternoon.


"Founded in 1998, One Communications Ltd. (formerly KeyTech Limited) is a diverse telecommunications holding company. Its subsidiary companies specialise in cellular voice, high-speed internet, subscription television and data solutions for both residential and corporate customers.

In 2014, One Communications Ltd. began a series of strategic mergers and acquisitions in order to position itself competitively in an industry driven by technological change. The Company acquired internet, cellular and cable television companies in both Bermuda and the Cayman Islands. These transactions have transformed One Communications Ltd. into a robust triple-play service provider with the networks and data access infrastructures needed to meet the demands of ever-growing bandwidth consumption. Through its operating subsidiaries, the Company is positioned as the leading full-service telecommunications provider for corporate and residential customers in both Bermuda and Cayman.

The operating subsidiaries of One Communications Ltd. are Logic Communications Ltd. (trading as One Communications), Bermuda Digital Communications Ltd. (trading as One Communications), Cable Co. Ltd., and WestTel Limited in the Cayman Islands (trading as Logic)."

https://onecomm.bm/investors/

Why not discuss the contents of the draft and why it's awful. The fact that the author works for a telecom provider in a small country does not by itself mean much. Perhaps the proposal has been trialled there

Need more facts (cf. speculation)


The draft may suck for various reasons but One Communications appears to be a "legit" telecom provider servicing Bermuda

https://bernews.com/2016/11/video-two-into-one-equals-new-un...


nothing says legit like DBA corps based in the Caymans

$0.02 is that it's Palantir, maybe Meta. OAuth on every packet kills anonymity forever.


I must be missing something, why aren't their legitimate institutes based in Bermuda?

I believe Bermuda is a tax shelter country, which means people and companies register there to hide identity and income from the nations they live and do business in. Because of that, the vast majority of businesses registered in bermuda are not legitimate institutions - they are shell companies defrauding their home nations.

And the home nation's governments defraud their people with unnecessary wars, wasteful spending, unpayable debt, and excessive inflation. There comes a time when paying less tax is the right thing to do.

I can think of few groups as likely to support wars than the ultra rich, but if you are very wealthy and don’t like your tax dollars going to military spending just invest in lockheed or raytheon and get it all back as dividends. War spending doesn’t justify tax fraud, unless you’re also out on the protest line when a new war breaks out.

As the top tax rates fell, from 90% in 1950 to under 40% now - the use of tax shelters increased. So unless your “comes a time” is referencing pre 1915 USA, this isn’t a valid justification.

If inflation is the issue, keep your money in a different currency.

I just don’t see actions from the very rich (the ones using tax shelters) that back up your justifications.

I think it’s simply the collapse of any kind of cohesion between the wealthy and the nation in which they live. Or put another way: I’m rich, i shouldn’t have to pay for stuff i don’t use!


Why are you even defending this practice? It's something very wealthy people do, they're not your everyday citizens conscious about how their taxes go.

They evade taxes for financial reasons, not moral reasons.


"All RFCs are first published as Internet-Drafts (I-Ds). All RFCs have been I-Ds, but not all I-Ds become RFCs."

"A well-formed RFC starts with a well-formed Internet-Draft."

https://www.rfc-editor.org/pubprocess/

For example, here is the Internet Draft for IPv6 which eventually became RFC 2460

https://www.ietf.org/archive/id/draft-ietf-ipngwg-ipv6-spec-...

Why not discuss the I-D itself. Many drafts are garbage but simply being a draft does not by itself tell us about its likelihood of becoming an RFC or standard


I thought this is how it works for most software. What are the exceptions to this rule?

Markdown has a lot of weird choices and works best for longer documents.

Check out my "Advent of Markdown" where I go through surprising markdown behavior: https://mastodon.social/@timokoesters/115643467322561173


Do you have advice for building up this network for graphics development? I'm a Master's student building a custom rendering stack with wgpu and it's difficult to meet people interested in specific skills like rendering.


If you’re in a big city, there are likely meetups locally for game devs (usually amateurs but a few professionals show up)

If you aren’t in a location with meetups , the best bet is finding online game dev communities.


Markdown has a lot of weird choices and works best for longer documents.

Check out my "Advent of Markdown" where I go through surprising markdown behavior: https://mastodon.social/@timokoesters/115643467322561173



I'm the author of the spec issue this blog post is based on: https://github.com/matrix-org/matrix-spec/issues/852

In my implementation for the Conduit Matrix server, the /sync order is used for everything. The timeline is just one list that grows on one end for incoming events and on the other end for backfilled events.

I think it's important that the message order does not change, because that's very difficult to communicate to the user.


A few years ago, I started writing a Matrix client library for Kotlin. At one point, I had to make an API decision based on how messages are ordered. When I found this issue, I subscribed to it and planned on continuing with my library when the spec was clarified. Given how foundational this spec unclarity is, I thought it wouldn't take too long.

Well.


One idea of mine was to continue when Matrix 2.0 would be stable. Might still have some time.


Oh that’s neat (TIL), am also working on a HS that also does this [1].

Not only does it feel like the most correct (I don’t think there is a perfect) behaviour for the user but also makes implementation much simpler. Synapse has a LOT of ordering foo and magic in the code I still don’t fully understand and I’ve gone fairly deep into synapse at times for work.

[1] https://github.com/Beeper/babbleserv


I often hear complaints about DNS. How secure is it in practice and why are there little efforts to fix it?


Not especially, but most websites are protected by TLS, so the problem that DNS is insecure is less of a problem. It's mainly a coordination problem, you have up get a lot of people on board to design a new DNS-SECure, and then everyone would also have to adopt it. Which they did (create DNSSEC, that is), but it has not seen the desired adoption. The other one is DoH, DNS over https. It's not without issue either though. So there are efforts, it's just a hairy coordination problem.


For TLS certificates, the certificate authority has to look up IPs to verify the domain. So the security is still based on DNS, right?


Security is based on a combination of:

* The integrity of registrar accounts that are the root of trust for most DNS zones (this was, last I checked, the overwhelming source of DNS corruption attacks),

* The security of one or more DNS lookups, depending (some CAs, like LetsEncrypt, do multi-perspective lookups), and

* The WebPKI Certificate Transparency system, which tracks the issuance of all certificates that Chrome and Mozilla will accept in a public ledger.


Multi-perspective issuance corroboration is required starting in March of 2025 for CAs following the CAB/F Baseline Requirements

https://cabforum.org/working-groups/server/baseline-requirem...


you can get certificates for an IP, but they're rare. How it generally works is the DNS server says Google.com is at w.x.y.z IP address, your browser talks to that, it gives you a certificate, (skipping a few cryptography steps for simplicity,) you computer checks the certificate coming from Google.com as being valid, without checking w.x.y.z, and then encrypts your connection and shows the green lock icon.

If the DNS server is bad, it'll return e.v.i.l as the IP, your browser will talk to that, but it can't give a certificate that your computer thinks is valid. so your protected from accidentally logging in to a fake bank website, but also you can't access the correct bank website, so there's still a denial of service problem.

The certificate authority (CA) that gives out the certificates has to verify you own the domain that you're asking for the certificate for. One method is to look up the IP, but as that's problematic if they get the wrong IP, they usually check that from multiple places all over the world.


You can find many professional fonts in https://news.ycombinator.com/item?id=36793029, but almost all of them require expensive licenses or even monthly fees. swisstypefaces.com licenses include all formats with unlimited usage for a one-time fee.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: