Earlier quoted context omitted.
Great point and totally off-topic, but I wonder if there is someone who reads the NY Times each and everyday in full.
When you go to an all-you-can-eat buffet, do you eat all you can, or just until you are full?
Millions of the Pentagon’s dormant IP addresses sprang to life on January 20
201–210 of 257 posts
Re: Millions of the Pentagon’s dormant IP addresses sprang to life on January 20
#202Earlier quoted context omitted.
I've tried subscribing to a few news sources, including WaPo, but I can't handle the political agendas (right, left, or any of it). I've had better luck with subscription based aggregators, but nothing exciting enough to want to plug one in particular. Always looking for new options to try.
I think the key question isn't which political agenda they have, but whether they report facts or opinions. In that regard, WaPo is pretty good but you can still do better: https://www.adfontesmedia.com/static-mbc/
Re: Millions of the Pentagon’s dormant IP addresses sprang to life on January 20
#203Earlier quoted context omitted.
And furthermore, public sentiment (and therefore elections) are decided by what the main sources of media determine is the most important news. Example: Cops have shot a thousand people a year for several years in a row (maybe a decade). About 300 of those each year have been black, which is a disproportionate amount by some measures. However, it is nowhere near the biggest problem in our country even for black peopl…
I agree with some of your post but I also think that reducing it to body count is sidestepping just how differently police treat black communities. Cops have done horrible things to every race, they are especially aggressive with black people.
Notice that I’m talking about the behavior of individuals in those communities and not the communities themselves.
Take the Daunte Wright incident. No he shouldn’t have been shot but he did exhibit behavior that reasonably merited police attention (unlicensed weapons, outstanding warrant for failure to appear, Facebook photos of himself brandishing weapons and large wads of cash typical of a gang member). Furthermore, how much have friends and family provided social pressure for him not to do such things? Either a community polices itself or it lets things reach the point where things rise to the level that attract a police presence.
https://ucr.fbi.gov/crime-in-the-u.s/2018/crime-in-the-u.s.-...
Not saying the police can’t do better. They certainly can, but they are largely in these communities trying to protect a community that is largely made up of law abiding black people from a small number of criminals victimizing that community.
Re: Millions of the Pentagon’s dormant IP addresses sprang to life on January 20
#204Earlier quoted context omitted.
why?
Its incompatible with IP v4, has a stupid addressing scheme, it requires new router hardware and software for isps to buy and nobody is using it because of all the aforementioned issues.
Screw DNS. Screw the recommendation to stay away from IP's. If it's important enough to be on the network, it's important enough to have a static IP.
Re: Millions of the Pentagon’s dormant IP addresses sprang to life on January 20
#205Earlier quoted context omitted.
why?
Because ipv6 is hard and NAT works well enough.
If your ISP doesn't provide it, get one that does. They should allocate you a /56 by default per connection, if not something larger like a /48 if you have multiple locations.
Subnet the /48 for each connection, subnet each /56 into /64 subnets. reserve one of the /56's for site-to-site if needed.
Done.
Re: Millions of the Pentagon’s dormant IP addresses sprang to life on January 20
#206Earlier quoted context omitted.
why?
Its incompatible with IP v4, has a stupid addressing scheme, it requires new router hardware and software for isps to buy and nobody is using it because of all the aforementioned issues.
Re: Millions of the Pentagon’s dormant IP addresses sprang to life on January 20
#207Earlier quoted context omitted.
or maybe ask the question regarding why we're not all running ipv6.
why?
Re: Millions of the Pentagon’s dormant IP addresses sprang to life on January 20
#208Earlier quoted context omitted.
In our case, we were setting up VPN tunnels to a partner, who for some reason required that the addresses on our side should (appear to be) public IP addresses. So we couldn't use 10/8 or 192.168/16 in (that part of) our network. They didn't actually need the addresses to be routable from the public internet (that was the whole point of the VPN). I think the requirement was really a way of making sure they were uniqu…
There's also 172.16/12 :) But yeah I agree. If you're running a VPN for a large company it's kinda hard to avoid such conflicts. In my work we use 10.0.0.0/8 but of course some people use the same at home even though 192.168/16 is way more common. In general I find 172.16/12 the least common in the field.
Re: Millions of the Pentagon’s dormant IP addresses sprang to life on January 20
#209Earlier quoted context omitted.
I suspect there are a decent number of network engineers who think it's funny to use DoD IPs for their internal network, especially given what their logging system will probably tell them by default. If you drive around with a WiFi stumbler running, you'll run into networks with names like "UTAH DATA CENTER" and "SIPRnet", etc for the same reason.
The main reason (I've done this at a bank previously) is when you need to ensure you don't overlap with other internal IP (RFC1918 was represented everywhere and routeable internally) and when you're trying to dodge 99% of your engineer's default Docker configs to reduce support request load. In that case there's never any chance it'll be needed by people using the public internet there, and never any chance it'll be…
The default should reserve a single ip range and simply fail (with a nice message) if more are needed.
Re: Millions of the Pentagon’s dormant IP addresses sprang to life on January 20
#210Earlier quoted context omitted.
why?
Its incompatible with IP v4, has a stupid addressing scheme, it requires new router hardware and software for isps to buy and nobody is using it because of all the aforementioned issues.
And by "stupid addressing scheme" do you mean it's too big, or what? You can ignore all that stuff with mac addresses and make all your addresses go like prefix:subnet::1 prefix:subnet::2 prefix:subnet::3 if you want to.