<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: cyberax</title><link>https://news.ycombinator.com/user?id=cyberax</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Mon, 19 Oct 2026 20:09:13 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=cyberax" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by cyberax in "Europe EV sales rose 70.3% in September, 32.6% of market share"]]></title><description><![CDATA[
<p>You can have completely autonomous systems.<p>Also, really? You think that Internet-facing software in inverters is a big deal?</p>
]]></description><pubDate>Mon, 19 Oct 2026 18:55:12 +0000</pubDate><link>https://news.ycombinator.com/item?id=50156403</link><dc:creator>cyberax</dc:creator><comments>https://news.ycombinator.com/item?id=50156403</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50156403</guid></item><item><title><![CDATA[New comment by cyberax in "Alternatives to animal testing are finally taking off"]]></title><description><![CDATA[
<p>Animals are NOT cheaper. Pharma companies do everything to avoid animal testing.<p>For most drugs the only reasonable test animals are mice and rats. And they LOVE to naturally get cancer and other diseases, so you need to use large groups to get even a semblance of statistical significance.<p>Oh, and don't forget that it takes a lot of time to run the tests. And time IS money for pharma.</p>
]]></description><pubDate>Mon, 19 Oct 2026 18:07:33 +0000</pubDate><link>https://news.ycombinator.com/item?id=50155769</link><dc:creator>cyberax</dc:creator><comments>https://news.ycombinator.com/item?id=50155769</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50155769</guid></item><item><title><![CDATA[New comment by cyberax in "DeepSeek search and fetch – $0.75 per 1000 successful requests"]]></title><description><![CDATA[
<p>Which ones of the search providers listed in this thread use ethical indexing and not outright DDoS?</p>
]]></description><pubDate>Sun, 18 Oct 2026 19:35:00 +0000</pubDate><link>https://news.ycombinator.com/item?id=50144525</link><dc:creator>cyberax</dc:creator><comments>https://news.ycombinator.com/item?id=50144525</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50144525</guid></item><item><title><![CDATA[New comment by cyberax in "Codex Desktop continuously generates Crashpad pending dumps"]]></title><description><![CDATA[
<p>> I built a little browser-based tool from what it discovered, and I use it to run my HDR photos through to format them correctly for instagram and it works a treat.<p>I was kinda expecting: "And when my agent built a perfect clone of Instagram and social-engineered all my contact list to join"</p>
]]></description><pubDate>Sun, 18 Oct 2026 05:38:41 +0000</pubDate><link>https://news.ycombinator.com/item?id=50138209</link><dc:creator>cyberax</dc:creator><comments>https://news.ycombinator.com/item?id=50138209</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50138209</guid></item><item><title><![CDATA[New comment by cyberax in "Dam removals are bringing fish back across the northeastern United States"]]></title><description><![CDATA[
<p>It's overstating it. Salmon is spawning in the upper river, but it's not returning in sufficient numbers.<p><a href="https://www.elwha.org/wp-content/uploads/2026/01/Spatial-Spawning-Distribution-of-Elwha-Chinook-2012-2025.pdf" rel="nofollow">https://www.elwha.org/wp-content/uploads/2026/01/Spatial-Spa...</a><p>> While annual estimates of the proportion of hatchery-origin natural spawners (pHOS) were initially 94-97% during and immediately following dam removal (2014-2019), pHOS declined to 82-85% during 2020-2024 (Weinheimer et al. 2022, WDFW unpublished).<p>And the absolute numbers are also not that great.<p>Elwha dam removal was a no-brainer as it was entirely useless. But it does cast doubt on the efficacy of larger dam removal projects, they are not necessarily going to result in automatic recovery.<p>WA is also spending about $10B on improving culverts on smaller streams. So far this hasn't resulted in meaningful effects on salmon runs. These moneys would be much better spent on other environmental projects.</p>
]]></description><pubDate>Sat, 17 Oct 2026 23:14:32 +0000</pubDate><link>https://news.ycombinator.com/item?id=50136057</link><dc:creator>cyberax</dc:creator><comments>https://news.ycombinator.com/item?id=50136057</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50136057</guid></item><item><title><![CDATA[New comment by cyberax in "Dam removals are bringing fish back across the northeastern United States"]]></title><description><![CDATA[
<p>To add a bit of a negative: dam removal has far less success in salmon restoration. The Elwha dam removal resulted in no native salmon runs. All the salmon in Elwha are still raised in hatcheries (they have clipped fins, so that's easy to track).<p>The biggest success so far was in the Klamath River watershed.</p>
]]></description><pubDate>Sat, 17 Oct 2026 21:46:59 +0000</pubDate><link>https://news.ycombinator.com/item?id=50135452</link><dc:creator>cyberax</dc:creator><comments>https://news.ycombinator.com/item?id=50135452</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50135452</guid></item><item><title><![CDATA[New comment by cyberax in "Dam removals are bringing fish back across the northeastern United States"]]></title><description><![CDATA[
<p>> You actually want to restore the river to be more resilient as the earth warms, fish returning empowers many other parts of a river ecosystem.<p>Dams can make rivers more resilient.</p>
]]></description><pubDate>Sat, 17 Oct 2026 21:41:24 +0000</pubDate><link>https://news.ycombinator.com/item?id=50135411</link><dc:creator>cyberax</dc:creator><comments>https://news.ycombinator.com/item?id=50135411</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50135411</guid></item><item><title><![CDATA[New comment by cyberax in "RFC8950: Announce IPv4 with an IPv6 next-hop"]]></title><description><![CDATA[
<p>> I’d say it’s a perfectly reasonable assumption. Why? In practice most mobile carriers (notably T-Mobile USA likes to discuss it) are entirely v6 only, with 464XLAT at the edges.<p>Carriers have their own specific challenges. Like not having enough private or even squattable IPv4 space for the voice circuits.<p>> If mobile carriers can do it, and support $billions of devices, it does work, and works well.<p>Mobile devices are actually pretty much the best case for IPv6. The phone environment is standardized and highly controlled. And yet some telecoms still don't provide end-user IPv6, even when the voice circuits use IPv6.<p>> No one should be using NAT with v6 except in extremely limited circumstances. NPT is not NAT, the host portion of the network and, more importantly, the port do not change with NPT.<p>This is really a distinction without difference. In practice, SOHO border routers have to be stateful to provide meaningful security for UDP-based protocols like SIP or QUIC.<p>> That is effectively how it works, they can coexist together, but it is significantly simpler to only use one.<p>The socket API still doesn't allow this. You have to implement Happy Eyeballs on the app level.<p>> I do agree with you on the ULA priority though. Was a moronic decision to place that below v4, likely again, a lack of imagination on their part.<p>If you want to look at politics, this was a compromise. There was a strong faction of "network fundamentalists" in the IETF that had a vision of a transparent end-to-end network with global addressing. So that a lightbulb in China could connect to a toaster in the US at will. So they resisted anything that could promote locally isolated networks.<p>But most of the IETF had a clue and actual operational experience, so they pushed for things like the ULA and PI space for IPv6. So we got these compromises that don't work well as a result.</p>
]]></description><pubDate>Sat, 17 Oct 2026 19:36:15 +0000</pubDate><link>https://news.ycombinator.com/item?id=50134343</link><dc:creator>cyberax</dc:creator><comments>https://news.ycombinator.com/item?id=50134343</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50134343</guid></item><item><title><![CDATA[New comment by cyberax in "RFC8950: Announce IPv4 with an IPv6 next-hop"]]></title><description><![CDATA[
<p>It does have the effect of requiring you to follow the upstream ISP's numbering system. So if they switch the prefix, you have to follow.<p>And it's more of the "it's the thought that counts" thing. Multihoming was considered to be something rather exotic and mostly a requirement for ISPs or large companies.</p>
]]></description><pubDate>Sat, 17 Oct 2026 03:50:35 +0000</pubDate><link>https://news.ycombinator.com/item?id=50127741</link><dc:creator>cyberax</dc:creator><comments>https://news.ycombinator.com/item?id=50127741</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50127741</guid></item><item><title><![CDATA[New comment by cyberax in "RFC8950: Announce IPv4 with an IPv6 next-hop"]]></title><description><![CDATA[
<p>Again, in practice the packets with _any_ IPv6 extension headers are unusable when traversing the public Internet: <a href="https://blog.apnic.net/2022/10/13/ipv6-extension-headers-revisited/" rel="nofollow">https://blog.apnic.net/2022/10/13/ipv6-extension-headers-rev...</a><p>The issue is that the extension headers can be used for nefarious purposes, such as hop-by-hop routing. So your fast hardware-based border routers might be EH-agnostic and transmit packets to your core network. And then a helpful Linux box that implements all of IPv6 in software would reflect the traffic right past your firewall.<p>Implementing the EHs in hardware is expensive, as you need to do conditional checks. So routers just drop them.</p>
]]></description><pubDate>Sat, 17 Oct 2026 00:18:49 +0000</pubDate><link>https://news.ycombinator.com/item?id=50126503</link><dc:creator>cyberax</dc:creator><comments>https://news.ycombinator.com/item?id=50126503</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50126503</guid></item><item><title><![CDATA[New comment by cyberax in "RFC8950: Announce IPv4 with an IPv6 next-hop"]]></title><description><![CDATA[
<p>Not really. Believe it or not, but the initial plan for IPv6 was to NOT have the PI blocks at all. Everyone was supposed to use PA (Provider Aggregated) blocks.<p>The needs for dual-homing and failover were completely glossed over in the IPv6 design, and the IETF has not acknowledged these needs even to this day.</p>
]]></description><pubDate>Sat, 17 Oct 2026 00:11:06 +0000</pubDate><link>https://news.ycombinator.com/item?id=50126456</link><dc:creator>cyberax</dc:creator><comments>https://news.ycombinator.com/item?id=50126456</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50126456</guid></item><item><title><![CDATA[New comment by cyberax in "RFC8950: Announce IPv4 with an IPv6 next-hop"]]></title><description><![CDATA[
<p>IPv6-only is not a reasonable assumption for the next 10 years or so. Networks must support IPv4 for the reasonable future in some form, just because of a huge amount of V4-only IoT devices with long expected lifetimes.<p>But anyway, ULA vs. GUA preference is mostly an academic question. In practice, you can just squat on an unused IPv6 range and avoid the precedence issue.<p>The deeper problem is that the solution to IPv6 problems appears to be NAT. And we're switching from IPv4 to avoid NAT. And you'll need a stateful firewall for IPv6 anyway (it's a recommendation for SOHO, there's an RFC for it, too lazy to dig it up now).<p>I'm stubborn, so my house now has its own ASN, a PI block, and a DIA connection to two ISPs. Which is the only NAT-less way to achieve my goal.<p>> One of the other comments around here about not providing a “migration plan” does have a lot of truth to it. If, 30 years ago, they envisioned 464XLAT and made it part of the default features a v6 capable router should have, I bet v4 would be long dead (or nearly there) by now.<p>464XLAT (and its evil twin IPv6 RD) were envisioned in the early 2000-s. Along with about 20 various "migration plans". They all missed the point, though. Some people are still missing it.<p>The key to migration has never been some form of tunneling. The key to migration is making IPv4 and IPv6 coexist side-by-side, in other words, the Happy Eyeballs algorithm. It should have been reified to the TCP level in the late 90-s. So that applications could just do: `connect("somehost.com", 80)` and transparently get either an IPv4 or IPv6 connection, depending on whichever one works better locally. Other operational headaches like the ULA priority would have surfaced much earlier then.</p>
]]></description><pubDate>Sat, 17 Oct 2026 00:04:26 +0000</pubDate><link>https://news.ycombinator.com/item?id=50126427</link><dc:creator>cyberax</dc:creator><comments>https://news.ycombinator.com/item?id=50126427</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50126427</guid></item><item><title><![CDATA[New comment by cyberax in "Tesla Roadster"]]></title><description><![CDATA[
<p>Perhaps they use liquid nitrogen and then just allow it to boil off inside the tanks? This would give them a safe and easy way to quickly recharge the tanks for testing.</p>
]]></description><pubDate>Fri, 16 Oct 2026 22:33:24 +0000</pubDate><link>https://news.ycombinator.com/item?id=50125665</link><dc:creator>cyberax</dc:creator><comments>https://news.ycombinator.com/item?id=50125665</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50125665</guid></item><item><title><![CDATA[New comment by cyberax in "RFC8950: Announce IPv4 with an IPv6 next-hop"]]></title><description><![CDATA[
<p>> Have the router issue ULAs only and let the router do stateless NPT (network prefix translation) only.<p>This is an option, but ULAs are ranked _below_ IPv4 in address selection preferences. So your network will essentially operate in IPv4 mode: <a href="https://www.ietf.org/archive/id/draft-buraglio-6man-rfc6724-update-03.html" rel="nofollow">https://www.ietf.org/archive/id/draft-buraglio-6man-rfc6724-...</a><p>Moreover, some devices will refuse to connect to IPv6 GUA with ULA addresses altogether.<p>> Yes, your local devices will use the ULA to attempt to connect to Internet destinations if that’s the only v6 address they have. It works fine.<p>You're half right. The devices will work fine because they won't be using IPv6 at all.<p>As I said, IPv6 is a recursive WTF.<p>How do I know that? I made a personal goal to create a dualstack demo network that is fully standards compliant and supports the bare minimum functionality that I would expect from a SOHO network. So far, I keep finding new and exciting breakages on every level.</p>
]]></description><pubDate>Fri, 16 Oct 2026 21:32:46 +0000</pubDate><link>https://news.ycombinator.com/item?id=50125055</link><dc:creator>cyberax</dc:creator><comments>https://news.ycombinator.com/item?id=50125055</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50125055</guid></item><item><title><![CDATA[New comment by cyberax in "RFC8950: Announce IPv4 with an IPv6 next-hop"]]></title><description><![CDATA[
<p>In practice, nobody uses IPv6 for printers, so it'll work just fine over IPv4.<p>I used a printer as an example of a local device, it can be any other device: a smart lightbulb, a TV you're casting to, a SIP phone, etc. And I used Android as an example of a device where you can't easily change the source address selection preference.<p>What is more shocking is that this problem has been known for three decades, yet somehow nobody cared enough to fix it. And it's far from the only issue.</p>
]]></description><pubDate>Fri, 16 Oct 2026 20:18:25 +0000</pubDate><link>https://news.ycombinator.com/item?id=50124004</link><dc:creator>cyberax</dc:creator><comments>https://news.ycombinator.com/item?id=50124004</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50124004</guid></item><item><title><![CDATA[New comment by cyberax in "RFC8950: Announce IPv4 with an IPv6 next-hop"]]></title><description><![CDATA[
<p>I explained the problem in a sibling post on this thread.<p>But you want a more complex challenge? Here you go!<p>You have a small business office that has two Internet uplinks for redundancy. You want to balance the load across them and failover broken links.<p>This can be done with literally zero setup with IPv4.</p>
]]></description><pubDate>Fri, 16 Oct 2026 19:57:55 +0000</pubDate><link>https://news.ycombinator.com/item?id=50123731</link><dc:creator>cyberax</dc:creator><comments>https://news.ycombinator.com/item?id=50123731</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50123731</guid></item><item><title><![CDATA[New comment by cyberax in "RFC8950: Announce IPv4 with an IPv6 next-hop"]]></title><description><![CDATA[
<p>No, they are not fine. Their design means that the router needs to know all possible extension headers to just be able to route the packets. Oh, and you also have to do offset-chasing in the hardware fastpath.<p>As a consequence, IPv6 with extension headers are just dropped by routers in the public Internet.</p>
]]></description><pubDate>Fri, 16 Oct 2026 19:36:02 +0000</pubDate><link>https://news.ycombinator.com/item?id=50123409</link><dc:creator>cyberax</dc:creator><comments>https://news.ycombinator.com/item?id=50123409</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50123409</guid></item><item><title><![CDATA[New comment by cyberax in "RFC8950: Announce IPv4 with an IPv6 next-hop"]]></title><description><![CDATA[
<p>> My router advertises both the public prefix from my ISP and a ULA prefix for internal LAN connections<p>You'd think so, but you'd be wrong. If you have a GUA and a ULA, and the printer has both a GUA and a ULA, then your host is going to prefer the GUA when connecting to the printer.<p>So when a router withdraws a prefix, it's possible for your computer to still have a (stale) GUA while the printer only has a ULA. Whoops, and your printing is broken.<p>There is an RFC in review that would fix this: <a href="https://www.ietf.org/archive/id/draft-ietf-6man-rfc6724-update-23.html" rel="nofollow">https://www.ietf.org/archive/id/draft-ietf-6man-rfc6724-upda...</a> . It'll likely be approved in 2027, so you'd be able to use ULAs some time in the 2030-s once it trickles down.</p>
]]></description><pubDate>Fri, 16 Oct 2026 19:31:51 +0000</pubDate><link>https://news.ycombinator.com/item?id=50123331</link><dc:creator>cyberax</dc:creator><comments>https://news.ycombinator.com/item?id=50123331</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50123331</guid></item><item><title><![CDATA[New comment by cyberax in "RFC8950: Announce IPv4 with an IPv6 next-hop"]]></title><description><![CDATA[
<p>> There's nothing wrong with ipv6<p>Sweet summer child...<p>There's EVERYTHING wrong with IPv6. It's a recursively bad protocol. From the basic header design (extension headers, wtf) to the "human management" layer ("why should we deploy IPv6 if it actively _breaks_ stuff?").<p>As an example, try to design a standards-compliant IPv6 network where you can reliably print from an Android phone if your Internet connection goes down and the router withdraws the prefix. It's trivial with IPv4 and _impossible_ with IPv6.</p>
]]></description><pubDate>Fri, 16 Oct 2026 18:20:58 +0000</pubDate><link>https://news.ycombinator.com/item?id=50122261</link><dc:creator>cyberax</dc:creator><comments>https://news.ycombinator.com/item?id=50122261</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50122261</guid></item><item><title><![CDATA[New comment by cyberax in "Apple routed a graphite pipe through the iPhone Duo's hinge to dissipate heat"]]></title><description><![CDATA[
<p>Just upgrade to macOS 27.</p>
]]></description><pubDate>Fri, 16 Oct 2026 17:06:09 +0000</pubDate><link>https://news.ycombinator.com/item?id=50121133</link><dc:creator>cyberax</dc:creator><comments>https://news.ycombinator.com/item?id=50121133</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50121133</guid></item></channel></rss>