Hacker News: xnyanta

New comment by xnyanta in "We can no longer run Microsoft Store on 1809/LTSC 2019"

xnyanta — Tue, 13 May 2025 15:52:39 +0000

Just install using the "English (World)" locale.

New comment by xnyanta in "TLS certificate lifetimes will officially reduce to 47 days"

xnyanta — Wed, 16 Apr 2025 16:51:01 +0000

I have automated IPMI certificate rotation set-up through Let's Encrypt and ACME via the Redfish API. And this is on 15 year old gear running HP iLO4. There's no excuse for not automating things.

New comment by xnyanta in "Itch.io Taken Down by Funko"

xnyanta — Mon, 09 Dec 2024 15:19:04 +0000

I am happily using them for all of my domains they support. The problem with Cloudflare registrar is that they flat out don't support many domains/tlds.

New comment by xnyanta in "Malaysia started mandating ISPs to redirect DNS queries to local servers"

xnyanta — Sat, 07 Sep 2024 05:44:43 +0000

DoH will prevent government from hijacking your query in the first place. These blockades are only possible because of DNS being clear text and suceptible to MITM

New comment by xnyanta in "HDMI Forum rejects AMD's HDMI 2.1 open-source driver"

xnyanta — Fri, 30 Aug 2024 16:38:33 +0000

Speak for yourself but I'd rather have LPCM surround audio than deal with proprietary formats like Dolby Digital and DTS which are the only way to get surround without using eARC over HDMI.

This has literally nothing to do with any kind of sound bar, toast0's reply to your original comment explains the situation in detail.

New comment by xnyanta in "HDMI Forum rejects AMD's HDMI 2.1 open-source driver"

xnyanta — Thu, 29 Aug 2024 12:27:26 +0000

>it's not that hard to run an audio cable back from the TV to an audio receiver

Wait until you find out that many consumer sound bars (Sonos comes to mind) only support the latest and greatest digital audio formats over eARC.

New comment by xnyanta in "HDMI Forum rejects AMD's HDMI 2.1 open-source driver"

xnyanta — Thu, 29 Aug 2024 12:23:37 +0000

So true, I picked up the Samsung G80SD "Smart Monitor" and the deciding factor was literally just that it supports eARC, allowing me to use my Sonos Beam soundbar with my computer and supporting compressed audio formats like Dolby Atmos.

To make things even worse, this monitor supports sending back the ARC audio over DisplayPort, but only in stereo. If I use HDMI between the monitor and the computer, I get all of audio channels.

New comment by xnyanta in "Do You Need IPv4 Anymore?"

xnyanta — Thu, 11 Apr 2024 00:33:04 +0000

If you want your devices on your LAN to have publicly routable IP addresses, by definition they need to be GUA. I think you just mis-understand what end-to-end connectivity means.

Your "WAN" is a small transit subnet between your router and your ISPs, while the "LAN" is the actual public ip space you will be assigning to your end devices.

>If an address is publicly routable, what's "LAN" about it?

Routable or not, it's LAN because it's in your network behind your router. It's just an identifier.

New comment by xnyanta in "My MacBook Setup (the 2024 version)"

xnyanta — Sat, 17 Feb 2024 15:09:50 +0000

Pretty sure nix-darwin + its homebrew integration could set up 99% of this with a pull of your configuration repo and a single installation command.

New comment by xnyanta in "Samsung extends Android and security updates to 7 years"

xnyanta — Thu, 18 Jan 2024 13:22:46 +0000

Samsung Internet is a really good browser though, definitely my favorite on Android

New comment by xnyanta in "Kubernetes Needs an LTS"

xnyanta — Tue, 05 Dec 2023 05:45:14 +0000

This was my immediate though while reading thr article. Why should the kubernetes authors be burdened by having to maintain an LTS release.

That should be Red Hat's job, just like they do with RHEL.

New comment by xnyanta in "Kubernetes Needs an LTS"

xnyanta — Tue, 05 Dec 2023 05:35:26 +0000

You definitely don't need to drain your nodes. I have never drained my nodes on my peronal cluster and just update and restart the control-plane components.

The procedure is more of a cloud-ism where people don't upgrade their nodes in place but rather get entirely new nodes.

New comment by xnyanta in "Exploiting the iPhone 4"

xnyanta — Tue, 03 Oct 2023 19:49:07 +0000

Super interesting read, definitely nostalgic. Are you planning to further expand gala's functionality to use a different exploit to gain persistence in the exploit chain for an untethered jailbreak?

New comment by xnyanta in "AWS Customers Cannot Escape IPv4"

xnyanta — Fri, 22 Sep 2023 13:39:01 +0000

>norms

More like it gets rid of band-aids

New comment by xnyanta in "AWS Customers Cannot Escape IPv4"

xnyanta — Fri, 22 Sep 2023 13:33:19 +0000

I see this at work, being within such a customer. People driving these mandates barely understand IPv4, let alone know what IPv6 is. They're software developers after all, not CCIEs.

There's nothing preventing you from having a private network using unique address space that's either blocked from accessing the internet via a firewall on a router or just plain not even routed. You could even use ULA networks with stateless prefix translation to avoid using GUA addressing for your private network.

The sad part is that IPv6 support is abysmal on every cloud so just migrating to it imposes serious limitations as addressed by the blog author.

New comment by xnyanta in "AWS Customers Cannot Escape IPv4"

xnyanta — Fri, 22 Sep 2023 13:28:24 +0000

Same thing for IPv6, but instead of assigning a new singular IPv6, you assign a new subnet with millions of IPv6 addresses.

New comment by xnyanta in "PSA: Intel Graphics Drivers Now Collect Telemetry by Default"

xnyanta — Mon, 07 Aug 2023 13:50:06 +0000

You can still use alternate front-ends to "shadowplay" like OBS replay buffer.

New comment by xnyanta in "DisplayPort: Taming the Altmode"

xnyanta — Sun, 06 Aug 2023 06:03:42 +0000

Unfortunate, DSC works fine on apple silicon. I did notice displayport-related regressions on my old 2015 mac way before big sur though, Apple's track record is not great.

New comment by xnyanta in "Does Cloudflare’s 1.1.1.1 DNS Block Archive.is? (2019)"

xnyanta — Wed, 02 Aug 2023 15:07:10 +0000

Doesn't really change anything for the end-user that wants to access the website and is bummed that it doesn't work. There might be politics in the way but all they care is that it doesn't work.

New comment by xnyanta in "Does Cloudflare’s 1.1.1.1 DNS Block Archive.is? (2019)"

xnyanta — Wed, 02 Aug 2023 15:02:59 +0000

Continent-level information doesn't exist. EDNS Client Subnet doesn't send a location, it sends a subnet. Its "location" then has to be looked up in geolocation databases which may or may not be accurate. There's no subnet that will map to a continent.