Hacker News: TuxPowered

New comment by TuxPowered in "An update on GitHub availability"

TuxPowered — Tue, 28 Apr 2026 14:22:56 +0000

The availability of GitHub is still at 0% - it can't be reached over IPv6.

New comment by TuxPowered in "OpenBSD: PF queues break the 4 Gbps barrier"

TuxPowered — Thu, 19 Mar 2026 22:31:44 +0000

> not fully compatible with OpenBSD one

The OpenBSD NAT and scrub syntax, and af-to are available in FreeBSD 15.

New comment by TuxPowered in "A most elegant TCP hole punching algorithm"

TuxPowered — Sun, 15 Mar 2026 12:03:04 +0000

Even with IPv6 you still might have stateful firewalls allowing only for outbound connection at both ends (e.g. a CPE a.k.a. “WiFi router”) and to establish communication you’d need to punch a hole in those firewalls.

New comment by TuxPowered in "Redox OS has adopted a Certificate of Origin policy and a strict no-LLM policy"

TuxPowered — Tue, 10 Mar 2026 13:27:51 +0000

> just like almost all transportation is done today via cars instead of horses.

That sounds very Usanian. In the meantime transportation in around me is done on foot, bicycle, bus, tram, metro, train and cars. There are good use cases for each method including the car. If you really want to use an automotive analogy, then sure, LLMs can be like cars. I've seen cities made for cars instead of humans, and they are a horrible place to live.

Signed, a person who totally gets good results from coding with LLMs. Sometimes, maybe even often.

New comment by TuxPowered in "Days since last GitHub incident"

TuxPowered — Thu, 11 Dec 2025 19:15:05 +0000

It should always be at 0, because GitHub is unreachable over IPv6, which in 2025 should be considered an incident.

New comment by TuxPowered in "Moving from OpenBSD to FreeBSD for firewalls"

TuxPowered — Tue, 25 Nov 2025 16:16:11 +0000

I did traffic shaping per user for a few hundred users on 1GHz Pentium III on Linux. It can be done just fine.

New comment by TuxPowered in "An eBPF loophole: Using XDP for egress traffic"

TuxPowered — Fri, 07 Nov 2025 18:12:37 +0000

> On what's now almost 10 year old hardware, we could drop 44Mpps of a volumetric DOS attack and still serve our nominal workload with no impact.

Was filtering done with pf, ipfw or some custom firewall?

New comment by TuxPowered in "Knocker, a knock based access control system for your homelab"

TuxPowered — Wed, 22 Oct 2025 11:36:54 +0000

> How do you avoid this

IPv6 of course.

> or is it just not important

Port knocking not a security feature anyway.

New comment by TuxPowered in "It seems like the AI crawlers learned how to solve the Anubis challenges"

TuxPowered — Sat, 16 Aug 2025 11:31:44 +0000

Making my web resources IPv6-only has solved the problem for me. I don’t consider this a solution for ever, but for now it’s apparently way too modern or complicated for the A-so-called-I companies.

New comment by TuxPowered in "I couldn't submit a PR, so I got hired and fixed it myself"

TuxPowered — Sat, 02 Aug 2025 10:17:57 +0000

So that’s the only hope to get MRU tab switching in Chrime - get hired at Google?

New comment by TuxPowered in "Why are banks still getting authentication so wrong?"

TuxPowered — Tue, 13 May 2025 21:24:14 +0000

Is this another incarnation of Sofort? Fortunately nobody is forced to used the former nor the later, you can either pay with card or just make your own SEPA transfer from any bank in Europe.