Hacker Newsnew | past | comments | ask | show | jobs | submit | phalangion's commentslogin

hhtps://www.schuetzler.net - currently down because my home router died, but hopefully back up tomorrow


Adguard Home and others can be configured to complete your DNS requests over HTTPS (using, for example, https://dns.cloudflare.com/dns-query).


That's not what this is about.

HTTPS is the name of a protocol, which is mostly used to make the World Wide Web work, but we do lots of other things with it, such as DNS-over-HTTPS aka DoH.

However HTTPS is also the name of a type of DNS record, this record contains everything you need to best reach the named HTTPS (protocol) server, and this is the type of record your parent didn't previously know about

In the boring case, say, 20 years ago, when you type https://some.name/stuff/hats.html into a web browser your browser goes "Huh, HTTPS to some.name. OK, I will find out the IPv4 address of some.name, and it makes a DNS query asking A? some.name. The DNS server answers with an IPv4 address, and then as the browser connects securely to that IP address, it asks to talk to some.name, and if the remote host can prove it is some.name, the browser says it wants /stuff/hats.html

Notice we have to tell the remote server who we hope they are - and it so happens eavesdroppers can listen in on this. This means Bad Guys can see that you wanted to visit some.name. They can't see that you wanted to read the document about hats, but they might be able to guess that from context, and wouldn't you rather they didn't know more than they need to?

With the HTTPS record, your web browser asks (over secure DNS if you have it) HTTPS? some.name and, maybe it gets a positive answer. If it does, the answer tells it not only where to try to connect, but also it can choose to provide instructions for a cover name to always use, and how to encrypt the real name, this is part of Encrypted Client Hello (or ECH)

Then the web server tells the server that it wants to talk to the cover name and it provides an encrypted version of some.name. Eavesdroppers can't decrypt that, so if many people share the same endpoints then eavesdropper can't tell which site you were visiting.

Now, if the server only contains documents about hats, this doesn't stop the Secret Hat Police from concluding that everybody connecting to that server is a Hat Pervert and needs to go to Hat Jail. But if you're a bulk host then you force such organisations to choose, they can enforce their rules equally for everything (You wanted to read News about Chickens? Too bad, Hat Jail for you) or they can accept that actually they don't know what people are reading (if this seems crazy, keep in mind that's how US Post worked for many years after Comstock failed, if you get a brown paper package posted to you, well, it's your business what is in there, and your state wasn't allowed to insist on ripping open the packaging to see whether it is pornography or communist propaganda)


> so if many people share the same endpoints then eavesdropper can't tell which site you were visiting.

Which is why it is so important/useful to Cloudflare but of much lower utility to most nginx users.


Cloudflare provides a very large haystack for this, but even for an nginx server with no CDN, it's still useful to prevent the hostname from being sent in the clear before the TLS connection is negotiated. This still hides the hostname from casual eavesdroppers, who now only know what IP you're connecting to, and would need need out-of-band information to map the IP back to a hostname. And they couldn't ever be 100% sure of that, because they wouldn't know for certain whether there are additional vhosts running on a given server.


I think you might be surprised at how heavily SNI is leveraged at places like GoDaddy, Bluehost, and other similar providers to host sites from hundreds of completely unrelated businesses on the same IP address.



Did you read the article? It’s about how to tell if your database is read or write heavy.


I think a large part of what people are responding to here is the title, which comes off as something someone who doesn't actually understand the nature of a database workload would write. It may be a simple typo, but "Is YOUR Postgres Read Heavy or Write Heavy?" is the question that can have an answer. "Is Postgres More Appropriate for Read Heavy or Write Heavy workloads?" would also be fine, but it would be a totally different article from the written one.


That works for software, but not as well for services like YouTube


Even for software practice has shown few are actually willing to pay hundreds to thousands for a lifetime license. And you still need to purchase service packs, etc


> I think some people just have to be the inviters or relationships fall apart.

As annoying as it is, this is definitely true. I've only recently become an inviter, and it's made all the difference. It helps to recognize that not everybody is an inviter/organizer.


Any tips?


Invite people to things. You’re probably overthinking it


It really is exactly this. My default mindset is "everybody's busy with their own lives, so they probably don't have time so I won't even try to invite them to X." Change your assumptions a little bit to instead assume people want to do things. If they say no, so be it. But I've found that people want to be invited out to do more things than they are, so send the invites.

I started swimming with a community team two years ago, and about 4 months in I invited them to also lift weights with me. Now there are about 8 of us that are together 5 mornings per week. Took a chance and invited them on a trip, and now 5 of us are going on a week long trip together.

Find a group of people doing something you like. If it's a tech meetup, community organization, hobby group, whatever. What it is doesn't matter. What matters is that you find people with whom you share _an_ interest. Then take a chance there and say "hey, want to meet up for lunch next week?" Or just say "hey, I'm going to see X next weekend, want to come?"


This video shows the peanut butter and jelly problem in action: https://youtu.be/cDA3_5982h8?si=xIQpzNTvhRcGY4Nb


Or the inflation worries with 8% inflation


People complained about censorship within ChatGPT pretty quickly after it was released. The difference is that now people know to look for it, so the evaluations are happening both more quickly and more systematically.


the gp is a sock puppet account, consistently posting pro-china and anti-west stuff.


Except the article explains in fairly easy to understand terms how the study came to this theory, and the original paper is linked from that article. The question here gives the impression that the asker read only the headline.


I’d guess money has a lot (everything) to do with it. The Linux gamers market is not big enough to be worth the investment.


It's not just money. Some companies did DVD linux ports 10-15 years ago which haven't been installable in years. The linux environment isn't as stable as windows.


There are Linux releases on GOG which are not playable on a modern distribution without heroics. Too much churn in system libraries/dependencies/whatever.

The only way to ensure I have a working backup of a GOG installer is to download the Windows release even when Linux is an option.


With the steam deck, this might not be true anymore given how a bunch of big games made sure to be steam deck verified


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: