<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: jcgl</title><link>https://news.ycombinator.com/user?id=jcgl</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Fri, 17 Apr 2026 04:56:09 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=jcgl" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by jcgl in "IPv6 traffic crosses the 50% mark"]]></title><description><![CDATA[
<p>Without knowing exactly what happened here, it could be hundreds, dozens, or zero other such vulnerabilities.<p>The usual convention for configuring listening interfaces usually involves listing IP addresses or interface names. There's very little room for misconfiguration here, although it's possible. More likely to be a bug in Snapcast (it's almost certainly not an issue in the Linux kernel).<p>Moreover, this general problem (i.e. configuring listening interfaces) is not/should not be different between IPv4 and IPv6. So introducing IPv6 should not™ incur any additional risk at this level.<p>But as said, it's hard to get more concrete without knowing exactly what happened in your case.</p>
]]></description><pubDate>Thu, 16 Apr 2026 19:31:49 +0000</pubDate><link>https://news.ycombinator.com/item?id=47798339</link><dc:creator>jcgl</dc:creator><comments>https://news.ycombinator.com/item?id=47798339</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47798339</guid></item><item><title><![CDATA[New comment by jcgl in "IPv6 traffic crosses the 50% mark"]]></title><description><![CDATA[
<p>I don't see how this generalizes into a security hole caused be lack of IPv6 knowledge. It just sounds like a random bug in Snapcast (great program!). If a user configures a program to only bind to loopback, but the program binds to other interfaces as well, that's a bug in the program.</p>
]]></description><pubDate>Thu, 16 Apr 2026 16:50:02 +0000</pubDate><link>https://news.ycombinator.com/item?id=47796150</link><dc:creator>jcgl</dc:creator><comments>https://news.ycombinator.com/item?id=47796150</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47796150</guid></item><item><title><![CDATA[New comment by jcgl in "Backblaze has stopped backing up OneDrive and Dropbox folders and maybe others"]]></title><description><![CDATA[
<p>> Linux file locking is to put it mildly, deficient.<p>Since the introduction of flock on Linux, how bad is it really though? I don't see why one would need kludges like filename.lock. Though of course flock is still an "honor system" as you put it.</p>
]]></description><pubDate>Wed, 15 Apr 2026 08:10:24 +0000</pubDate><link>https://news.ycombinator.com/item?id=47776078</link><dc:creator>jcgl</dc:creator><comments>https://news.ycombinator.com/item?id=47776078</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47776078</guid></item><item><title><![CDATA[New comment by jcgl in "Backblaze has stopped backing up OneDrive and Dropbox folders and maybe others"]]></title><description><![CDATA[
<p>A specific implementation (OneDrive) doing something dumb doesn't invalidate the entire paradigm though. Things work just fine elsewhere (Dropbox, Google Drive, Nextcloud, and Seafile are all solutions I've had good experiences with).</p>
]]></description><pubDate>Wed, 15 Apr 2026 01:22:01 +0000</pubDate><link>https://news.ycombinator.com/item?id=47773536</link><dc:creator>jcgl</dc:creator><comments>https://news.ycombinator.com/item?id=47773536</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47773536</guid></item><item><title><![CDATA[New comment by jcgl in ""Negative" views of Broadcom driving VMware migrations, rival says"]]></title><description><![CDATA[
<p>Doesn’t VMware have Tanzu, a container-based offering? Why not keep trying to adapt?</p>
]]></description><pubDate>Sat, 11 Apr 2026 10:32:54 +0000</pubDate><link>https://news.ycombinator.com/item?id=47729334</link><dc:creator>jcgl</dc:creator><comments>https://news.ycombinator.com/item?id=47729334</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47729334</guid></item><item><title><![CDATA[New comment by jcgl in ""Negative" views of Broadcom driving VMware migrations, rival says"]]></title><description><![CDATA[
<p>But they were a mature company. Why would growth be the expectation?<p>Note: I’m not asking for the Reddit armchair kvetching about the evils of modern capitalism and the failings of line-must-go-up. I’m wondering why, when serious financial decision-makers are involved, it makes sense to blow something up rather than steadily take profits over time, even if those profits aren’t always going up.</p>
]]></description><pubDate>Sat, 11 Apr 2026 10:32:10 +0000</pubDate><link>https://news.ycombinator.com/item?id=47729331</link><dc:creator>jcgl</dc:creator><comments>https://news.ycombinator.com/item?id=47729331</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47729331</guid></item><item><title><![CDATA[New comment by jcgl in "LittleSnitch for Linux"]]></title><description><![CDATA[
<p>OpenSnitch seems to do this just fine? Unless I’m misunderstanding your point. Connections seem to just block until I take an action on the dialog. Now, if an application itself has specified a short timeout (looking at you, NodeJS-based stuff), that obviously doesn’t help. But for most software it works great.</p>
]]></description><pubDate>Thu, 09 Apr 2026 08:07:44 +0000</pubDate><link>https://news.ycombinator.com/item?id=47700621</link><dc:creator>jcgl</dc:creator><comments>https://news.ycombinator.com/item?id=47700621</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47700621</guid></item><item><title><![CDATA[New comment by jcgl in "LittleSnitch for Linux"]]></title><description><![CDATA[
<p>I’m not aware of flatpaks specifically having th capability to run system software, daemons, etc. Some other immutable packaging formats should be able to (systemd-sysext at least, and snap iirc).</p>
]]></description><pubDate>Thu, 09 Apr 2026 08:04:33 +0000</pubDate><link>https://news.ycombinator.com/item?id=47700606</link><dc:creator>jcgl</dc:creator><comments>https://news.ycombinator.com/item?id=47700606</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47700606</guid></item><item><title><![CDATA[New comment by jcgl in "IPv6 is the only way forward"]]></title><description><![CDATA[
<p>> See perhaps OPTION_IA_TA (Temporary Address):<p>I was unaware of this, so thanks. Sounds like it addresses (pun intended) my concern.<p>> How does DHCPv6 hold back IPv6-mostly? First, most clients will send out a DHCPv4 request in case IPv4 is the only option, in which case IPv6-mostly can be signalled<p>It's not the signalling that's the problem--it's the configuration of the CLAT which requires SLAAC, afaiu. This is in fact the subject of the latest IPv6 Buzz podcast episode: <a href="https://packetpushers.net/podcasts/ipv6-buzz/ipb197-slaac-and-the-end-of-dhcp/" rel="nofollow">https://packetpushers.net/podcasts/ipv6-buzz/ipb197-slaac-an...</a></p>
]]></description><pubDate>Thu, 09 Apr 2026 07:40:15 +0000</pubDate><link>https://news.ycombinator.com/item?id=47700462</link><dc:creator>jcgl</dc:creator><comments>https://news.ycombinator.com/item?id=47700462</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47700462</guid></item><item><title><![CDATA[New comment by jcgl in "IPv6 is the only way forward"]]></title><description><![CDATA[
<p>> except Android<p>That alone is significant.<p>Furthermore, DHCPv6 holds you back from various desirable things like privacy addresses and (arguably even more importantly) IPv6 Mostly.</p>
]]></description><pubDate>Wed, 08 Apr 2026 00:43:31 +0000</pubDate><link>https://news.ycombinator.com/item?id=47683242</link><dc:creator>jcgl</dc:creator><comments>https://news.ycombinator.com/item?id=47683242</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47683242</guid></item><item><title><![CDATA[New comment by jcgl in "IPv6 is the only way forward"]]></title><description><![CDATA[
<p>ARP-schmarp. That doesn't matter to almost anyone who doesn't need to go deep into the network.<p>But yeah, SLAAC's paradigm of moving assignment logic into the node (away from network infra like in DHCP) is definitely a stumbling point.</p>
]]></description><pubDate>Tue, 07 Apr 2026 23:33:18 +0000</pubDate><link>https://news.ycombinator.com/item?id=47682691</link><dc:creator>jcgl</dc:creator><comments>https://news.ycombinator.com/item?id=47682691</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47682691</guid></item><item><title><![CDATA[New comment by jcgl in "IPv6 is the only way forward"]]></title><description><![CDATA[
<p>I think your summary is really great. One of the better refutations I've seen about the "what about v4 but longer??" question.<p>However, I think people do get tripped up by the paradigm shift from DHCP -> SLAAC. That's <i>not</i> something that is an inevitable consequence of increasing address size. And compared to other details (e.g. the switch to multicasting, NDP, etc.), it's a change that's very visible to all operators and really changes how things work at a conceptual level.</p>
]]></description><pubDate>Tue, 07 Apr 2026 23:25:45 +0000</pubDate><link>https://news.ycombinator.com/item?id=47682630</link><dc:creator>jcgl</dc:creator><comments>https://news.ycombinator.com/item?id=47682630</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47682630</guid></item><item><title><![CDATA[New comment by jcgl in "IPv6 is the only way forward"]]></title><description><![CDATA[
<p>> 3. History has shown that upgrading network backbone hardware (in particular) is incredibly difficult through a process that's been described as "ossification", which is a nice description. Basically, network relays and routers wanted to avoid security issues and decided to discard things they didn't understand.<p>What makes you suggest that it's backbone hardware that is the problem? It's largely enterprise customers and tier 3 providers that don't really do IPv6 afaics.</p>
]]></description><pubDate>Tue, 07 Apr 2026 21:03:42 +0000</pubDate><link>https://news.ycombinator.com/item?id=47681345</link><dc:creator>jcgl</dc:creator><comments>https://news.ycombinator.com/item?id=47681345</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47681345</guid></item><item><title><![CDATA[New comment by jcgl in "IPv6 is the only way forward"]]></title><description><![CDATA[
<p>Right, the variable-length thing was my point. That's fine when you're dealing with byte slices that you scan through incrementally. But it's not fine for packets and OS data structures that had their lengths fixed at 32 bits.</p>
]]></description><pubDate>Tue, 07 Apr 2026 21:00:23 +0000</pubDate><link>https://news.ycombinator.com/item?id=47681312</link><dc:creator>jcgl</dc:creator><comments>https://news.ycombinator.com/item?id=47681312</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47681312</guid></item><item><title><![CDATA[New comment by jcgl in "IPv6 is the only way forward"]]></title><description><![CDATA[
<p>Yep. Translation technologies like NAT64 and company basically as good a job as can be hoped for. And they're quite good nowadays!<p>But to stick with the ASCII->UTF-8 comparison: how would you have done the transition if you had to stay within ASCII's size of 7 bits?</p>
]]></description><pubDate>Tue, 07 Apr 2026 19:56:14 +0000</pubDate><link>https://news.ycombinator.com/item?id=47680560</link><dc:creator>jcgl</dc:creator><comments>https://news.ycombinator.com/item?id=47680560</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47680560</guid></item><item><title><![CDATA[New comment by jcgl in "Age verification on Systemd and Flatpak"]]></title><description><![CDATA[
<p>Look up systemd-userdb (the systemd component that added this field). Like the sibling comment said, this <i>is</i> basically equivalent to adding a GECOS field. A totally optional field.</p>
]]></description><pubDate>Sun, 05 Apr 2026 07:23:42 +0000</pubDate><link>https://news.ycombinator.com/item?id=47647009</link><dc:creator>jcgl</dc:creator><comments>https://news.ycombinator.com/item?id=47647009</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47647009</guid></item><item><title><![CDATA[New comment by jcgl in "Age verification on Systemd and Flatpak"]]></title><description><![CDATA[
<p>Because someone came with a pull request for this; this additional field was meant to support a feature in something <i>else</i> they were working on (an xdg portal). It was a simple PR that addressed a need that the programmer had. And it was accepted.</p>
]]></description><pubDate>Sun, 05 Apr 2026 07:21:27 +0000</pubDate><link>https://news.ycombinator.com/item?id=47646995</link><dc:creator>jcgl</dc:creator><comments>https://news.ycombinator.com/item?id=47646995</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47646995</guid></item><item><title><![CDATA[New comment by jcgl in "U.S. is burning through Tomahawk cruise missile stockpile"]]></title><description><![CDATA[
<p>Is it some sort of well-known fact that Xi has some egotistical need to build some kind of strongman legacy? I’m no expert, but the China that he has built is one of extreme competence and long-term thinking. It’d seem contradictory to compromise that for some flashy but ultimately unhelpful actions.</p>
]]></description><pubDate>Sat, 04 Apr 2026 11:00:21 +0000</pubDate><link>https://news.ycombinator.com/item?id=47637945</link><dc:creator>jcgl</dc:creator><comments>https://news.ycombinator.com/item?id=47637945</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47637945</guid></item><item><title><![CDATA[New comment by jcgl in "Axios compromised on NPM – Malicious versions drop remote access trojan"]]></title><description><![CDATA[
<p>Appreciate the nit. Had no idea that Flask wasn't production-grade. Yeesh.<p>I really don't miss this part of the Python world. When I started on backend stuff ~10 years ago, the morass of runtime stuff for Python webservers felt bewildering. uWSGI? FastCGI? Gunicorn? Twisted? Like you say, missing batteries all the way down, presumably due to async/GIL related pains.<p>Then you step into the Go world and it's just the stdlib http package.<p>Anyway, ranting aside, batteries included is a real thing, and it's great. Python just doesn't have it.</p>
]]></description><pubDate>Wed, 01 Apr 2026 21:19:03 +0000</pubDate><link>https://news.ycombinator.com/item?id=47606692</link><dc:creator>jcgl</dc:creator><comments>https://news.ycombinator.com/item?id=47606692</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47606692</guid></item><item><title><![CDATA[New comment by jcgl in "Slop is not necessarily the future"]]></title><description><![CDATA[
<p>Yeah, the field of software engineering has come a long way since then. But just because previous <i>implementations</i> of the analysis phase were flawed doesn't mean that the phase itself was flawed.</p>
]]></description><pubDate>Wed, 01 Apr 2026 08:24:14 +0000</pubDate><link>https://news.ycombinator.com/item?id=47598296</link><dc:creator>jcgl</dc:creator><comments>https://news.ycombinator.com/item?id=47598296</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47598296</guid></item></channel></rss>