I’m a little teapot 🫖

  • 0 Posts
  • 82 Comments
Joined 1 year ago
cake
Cake day: September 27th, 2023

help-circle







  • Why are we tolerating this criminal behavior by corporations?

    Because it’s done in the open and it’s accepted as part of the cost of the device. This is an expected consequence of our adtech surveillance economy where devices are now subsidized because they can harvest data about you, your usage and your behavior to sell on an ongoing basis. We’ve been screaming about these sorts of practices since the late 90s and consumers have just blithered right along with every new and creepy intrusion because they get cheap things and don’t think about the real costs or consequences. And so … Here we are.



  • Interesting that the one has such large capacitors in it. I imagine that is as last-ditch effort to keep the board powered long enough to finish flushing all of its caches in the event of a power failure.

    That’s exactly the point of power loss protection (aka PLP.) As a side effect of not needing to wait for a flush after a write synchronous write workloads are dramatically faster on enterprise drives with PLP.

    Edit: To add a bit of detail - you don’t need to wait for a flush after a synchronous write with PLP because the drive firmware can lie and immediately return from a flush call because there’s enough backup power to complete that flush if the power were cut.









  • I mean, the horror of having to tick a box to use rotating v6 addresses. These are all solved problems, they’re not a flaw worth ignoring the entire ipv6 protocol over. Most major operating systems have moved to stable privacy preserving addresses by default, that’s true, but it’s not all that difficult to turn on address randomization and rotation either. And, hell, if you’re that married to NAT as security just use NAT66 and call it a day, nothing about NAT is exclusive to ipv4.


  • Your firewall should take care of that, it’s pretty rare to be connected directly without one and by default any decent routing package will filter incoming traffic that’s not in the state tracking table. NAT isn’t designed for security, any security benefit it provides is a side effect rather than the intended purpose.

    Edit: check out ipv6 privacy extensions too, there are solutions there that can reduce info disclosure if that’s a concern. You can accomplish many of the same benefits of NAT with v6 features without the downsides that NAT brings.