Users doing speed tests in CGNAT may be seeing numbers that aren't exactly real for a (still) mostly IPv4 Internet.

This graph even shows them doing step deployments:

https://radar.cloudflare.com/adoption-and-usage/as2860?dateR...

IPv6-only ISPs might hit other issues, though. They have to bridge to IPv4 somewhere.

And even for system services, you can disable SELinux for one service (permissive mode) and leave it enabled for the rest.

This has been the case for more than 10 years, but the damage was done. It's now very hard for users even considering learning the basics (which are not hard).

https://radar.cloudflare.com/adoption-and-usage#ipv4-vs-ipv6

But we have to remember that this reflects the adoption on the client side. With many high profile services still IPv4-only, the fraction of IPv6 flowing on the public Internet might be much lower.

I wonder what incentives are needed to push this forward, because it's not the same incentives as years ago for sure. We've long since exhausted new IPv4 allocations.

Another such example is SELinux, which would have prevented so many vulnerabilities from being exploited, but whose poor UX also caused everyone to disable it at install time.

SELinux's UX was significantly improved many years later, but already too late to change ingrained opinions. There are a lot of ingrained opinions about IPv6 too.

IIRC, a workaround was to prevent Linux from setting this field, or force-reset it on every outbound packet using netfilter.

Comments URL: https://news.ycombinator.com/item?id=45899006

Points: 3

# Comments: 0

Comments URL: https://news.ycombinator.com/item?id=44815851

Points: 2

# Comments: 0

Socialism in Europe is social democracy. The only difference between "socialist" and "social democratic" parties in Europe is how fractionally close to the right or left side of the center line they are.

I think this is something the US really doesn't understand about Europe.

Socialism is about putting people first and making sure no one is left behind by society, which is the opposite of communism (and capitalism).

In fact, US capitalism is much closer to communism regarding societal outcomes (social injustice, power concentration) than European socialism. It is very much possible to be anti-capitalist and anti-communist at the same time .

I much preferred BSG, even though it had plenty of boring "west wing in space" episodes.

Being overt about religion is uncommon, and most religious people are non-practicing.

Many years ago I decided to face the Bogeyman and went from knowing very little about SELinux to writing a policy from scratch in about a month. The policy is simple enough (but realistic) that it might help in the absence of a guide:

https://github.com/carlosefr/kyoto/tree/master/selinux

I used it as an example in a couple of talks, whose slides might also provide additional context:

https://github.com/carlosefr/public-talks/blob/master/presen...

One crucial change for the better was leaving third-party software in a permissive state. From that point onwards, disabling SELinux is cargo-cult sysadmin'ing.

SELinux is not hard if you understand its basic principles. But no one bothers, because SELinux is the bogeyman.

Yes, writing policies means getting knee-deep in macros, and it's hard because many services try to access anything and everything. But almost no one needs to write a policy.

At most you need to tell SELinux that some non-default directory should have some label. That's not hard.

Comments URL: https://news.ycombinator.com/item?id=41092460

Points: 164

# Comments: 49

Cloudflare Radar has a section on Internet quality that can show graphs per country and also at the ASN level. Here's what it shows for Greece:

https://radar.cloudflare.com/quality/gr