yoursunny
yoursunny
Comments
-
Braised beef heart with broccoli and enoki mushroom
-
My BeagleBone Black has been running SETI@home for two years. I have Raspberry Pi 3B and 4B. It overheats if I run SETI@home. Folding@home download page doesn't seem to have ARMv7 or ARMv8 clients. People needs to start writing everything in Go so it's portable to every platform.
-
I've been running SETI@home since 2006, on my laptop, BeagleBone Black, and Android phones. Now what am I going to do with all the spare CPU power? If I mine coins, I'll have to pay taxes.
-
Followed. Twitter username is same as this. How do we know @uptime ’s secret number isn’t part of a hash collision attack? The fact that this number is concatenated at the end is especially suspicious. Next time, incorporate NIST Randomness Beacon. Choose a future timestamp, and use the beacon output at that timestamp as…
-
Named Data Networking is the future. It's just like global CDN, but more secure and don't need addresses. You just need to rewrite all apps.
-
I want to apt purge nano but there's no apt.
-
One question is how does sensor devices know the IP and port of the server. Putting them in the configuration would make it difficult to change VPS provider. Getting “fixed” IP isn’t going to help if you want to switch VPS provider, unless you own the IP. The answer: DNS SRV record. The SRV record contains both IP and port…
-
IETF says you can use global IP multicast. It'll take some effort to ask ISP to actually enable multicast through.
-
This feels like the timeshare machine in university department. If you have compilers, etc, installed, it can be useful for education. Or, you can setup a batch system and let people submit (virtual) punch cards, which would be fun.
-
It's normally called a "forwarder". "router" is an alias. See here: https://github.com/usnistgov/ndn-dpdk
-
If you need more cores, choose a CPU with more cores or a dual-socket machine. Don't use the fake cores created by Hyper-Threading. Also, disable Virtualization as it's another performance bottleneck. I'm building a router with content caching capability. The bottleneck was Ethernet adapter, so we get 100Gbps adapters. The…
-
Everyone should disable Hyper-Threading. It causes the two threads in a core to compete with each other on L1 and L2 caches. Today the bottleneck is memory access, not number of instructions. Thus, Hyper-Threading makes programs run slower.
-
I have Cascade Lake with hyper-threading and virtualization turned off. Do I need to worry? Intel is no longer the best. Xeon has only 48x PCI3. EPYC has 128x PCI4, although I couldn't find a motherboard with more than four 16x PCI4 slots.
-
If I receive such a box, I'll run Go programs only. Go only depends on kernel, and doesn't even need libc. Go can run on any Linux distribution, as well as FreeBSD. To access the machine and install Go, I'll request the following to be preinstalled: * dropbear or other sshd * sftp-server * tar * xz * git (good to have)…
-
Yes, but digest is for acceleration and does not have to be unique. Even if two names hash to the same digest, the forwarder can still operate correctly. It's just like collision resolution in a hash table. In IP, if two nodes have the same routable address, disaster happens.
-
Our collaborator is working on FPGA acceleration. The basic idea is, hardware can compute a digest of the name prefix, and query forwarding tables with the digest(s). Digest computation is possible in hardware because its computation complexity is bounded by packet length.
-
No, NDN self-learning is incompatible with LANtastic. Read how it works in my dissertation: http://hdl.handle.net/10150/625652
-
When I build a site for a client, I let them email me every article they want to post, and then charge them per thousand characters and per picture upload. If they want pictures inserted in the middle of article instead of at the end, it's a surcharge. This was 2006. There was no git. I login to my CMS and paste the Word…
-
Yes, you can name your data packet anything you want. However, routing announcement is restricted by certificates. To announce /com/yoursunny , you need a certificate of that name prefix. Without it, you can't pretend to be me, and requests to my website cannot get to your node (in a global network, see next paragraph for…
-
Don't use WordPress. Static site generators are better because all your contents are safely on GitHub before it even reaches your hosting server. Your local git clone and the GitHub repository are backups of each other. Don't forget to commit NGINX configure file into git as well. If your host deadpools, rebuild the site…
-
There's no future in address based systems. IPv9 was developed and still ran out of addresses. https://tools.ietf.org/html/rfc1606 The future belongs in a purely name based system, in which every packet carries a name (of any length), and routers deliver packets directly by name. You'll never run out of addresses again…
-
I have TunnelBroker on OpenWrt home router and I requested a /48 following online guides. I found each of my devices takes about four addresses. Am I wasting too many addresses? Should I release the /48 and go back to /64?
-
When you have only serial console access and no network, but you need some packages, it's possible to "upload" files via console. * Download file to your laptop. * Base64 encode the file. * Use cat to paste the Base64 into a text file on the server. * Base64 decode the file. This needs base64 command on the server. If you…
-
I don't block traffic from China. A quarter of my readers are in China, and I have many pages written in Chinese. I believe in an open and free Internet. Thus, I don't plan to block anyone unless I'm being attacked.
-
My laptop has Windows 10 2020H1. Through Windows Subsystem for Linux, I have: * Ubuntu 16 (on WSL1) for website and software development. * Debian 10 (on WSL2) for compiling OpenWrt packages. On-prem servers are Debian 9 or 10 (armhf), depending on when I installed each node. VPS servers are either Ubuntu 18 or Debian 10,…
-
I also have nginx on 80 and 443. I moved Asterisk to 15060. Someone keeps trying different SIP passwords, wanting to make long distance calls. My passwords are randomly generated so they can't succeed, and I only have $1 long distance credit. I changed port because Asterisk log file fills the disk every 3 days and then the…
-
Bandwidth aren't born equal. Singapore routes that can reach China directly cost more than routes without China peering.
-
I have no firewall, no SSH port change, no fail2ban. I just disabled password login. Why am I not hacked? Or, am I already hacked but I don't know?
-
CodeSandbox uses Node 10. I need Node 12. RunKit does not support: * import ES Modules. * "nightly builds" from GitHub or tarball. * TypeScript.
-
Bingo. If I allow editing package.json, one could import a package in which the post-install script contains malicious code, which will be executed on the server. Locking package.json, on the other hand, would severely limit the usefulness of a playground. I'll have to think how to run Webpack in the browser. It's a safer…
-
How to do nasty stuff with Webpack? If Webpack config cannot be changed, user can't execute arbitrary code on the server, right?
-
I never change SSH port, but I disable password authentication. Virmach support complains about this every time. If the server is for idling, the best command to ensure security is: sudo shutdown -h now
-
I don't want the second IPv4 address because it does not work in KVM, but it'll cost $5 "custom downgrade fee" to remove it. I don't want the first IPv4 address either, but ColonCrossing has no IPv6.
-
* Time travel to Black Friday 2018. * Order Virmach $3.99/year 384MB VZ6. * Fast forward to May 2019. * Delete ifconfig because it's deprecated in favor of ip. * IPv4 address disappeared! Open ticket, and the support gives you a second IPv4 address so you can "backup your data". They never take it back, and deleting the…