Follow Slashdot blog updates by subscribing to our blog RSS feed

 



Forgot your password?
typodupeerror
×

Comment Re:If only Windows supported IPv6 (Score 1) 250

[...] because RAs are broadcasts sent by routers (plural, potentially) to announce network layout.

So? dns is a common part of modern network infrastructure. It's also possible you want to have devices use a dns according to which router they use (potentially, because the dns server may be on the other side of the router). Again, if they think dns in RA is bad design, it's still a common standard, it's not up to them to say "screw you" to those users.

That doesn't match up with the requirements for host config parameters, where you need a single authoritative source and you need the ability to receive machine IDs from clients so you can give out per-machine config settings.

A requirement that you just made up? A network can function properly with different hosts using different dns servers, there's no requirement to use the same.
Sure, RA doesn't have support for "per-machine config settings", but this is only something corporate environments need (and they can use dhcpv6). That just justifies the usage of dhcpv6 in those scenarios. It doesn't justify discarting RA completely for every user.

(Of course we haven't really stuck with that logic, since people argued that they didn't want to run dhcpv6 just for dns, so dns info was added to RAs. Then other people argued they didn't want to run dhcpv6 just for dns search domains, so that was added too. Where does it stop, I wonder...)

dns search domain are part of the network layout (just higher layer that IP/gateway). It makes perfect sense to include it into a single protocol that advertises network layout.

Again, none of these arguments justify not supporting RA. And saying that windows "fully supports IPv6" is mistaken, it only supports a certain network configuration. Not the most popular one by the way.

Comment Re:If only Windows supported IPv6 (Score 1) 250

You also said they can't transition to v6 because their own OS doesn't support it, which isn't true. It's supported full automatic configuration of v6 network details out of the box since Vista in 2006, which is a lot longer than most Linux distros have been doing it.

"full automatic configuration of v6 network details". The word "full" is quite relative here. It only works on a single specific (and very uncommon) scenario where you have dhcpv6

I believe Debian only started doing that last year, and I'd be unsurprised if there were still major distros that didn't.

We were not discussing Linux nor debian. That's completely out-of-topic and irrelevant.

I wish I could find the discussions they must have had at the time about RAs... I assumed there would be mailing list archives or somesuch but I haven't managed to find anything. I guess the logic was that dns info (or other host config) doesn't belong in RAs

That's they opinion. The standard differs. Both the written standard, and common real life scenarios.

Comment Re:Feature or bug? (Score 1) 89

Nokia would not have been able to ensure that the phones accept only applications approved by the company.

Sounds more like a feature than a bug. Do device "owners" really want phones that "accept only applications approved by the company".

The dive can run any code, the signing key makes it look "officially approved" by Nokia.

Comment Re:Internal and External Simultaneously (Score 1) 104

That's just what I was thinking: if they're firms based overseas, then they can't force them to disclose SSL keys (making the communication secure-er). They shouldn't be able to force them to do anything, legally.

But doesn't facebook have a UK subsidiary, and offices in the UK (and mirrors, since I'm pretty sure they use CDNs)?

Comment Re:If only Windows supported IPv6 (Score 1) 250

Like I said, I doesn't support retrieving DNS over RA; only retrieving IP address/prefix (it's quite silly to support getting an address but not DNS servers, by the way. Why would I want a public IP address and no DNS on a desktop OS?).

RA is the more common (and simple) option for advertising DNS. DHCPv6 requires a second (redundant) service just for DNS - seems a bit of an overkill. Also, I've yet to come across a network that uses stateless DHCPv6.

Comment Re:IP numbers are terrible (Score 1) 250

I really don't get what your post is about. Only very specific situations require you to actually use IP (4 or 6) numbers. We've had DNS for decades and mDNS for a long time as well. You only need to work with dns when initially configuring network devices (eg: routers) or DNS servers themselves. No other scenario should require that you use IP numbers.

Comment Re:Just don't upgrade the kernel with nvidia close (Score 1) 185

Actually, were it not for propietary blobs, there would be abolutely no necesity for them. Linux is designed to have drivers in-kernel, so no user intervention should be required to have devices working, hence, a friedly UI for users to configure devices is sort of wierd.

Seeing as how propietary drives need to be properly integrated for non-power-users to install them, the package manager usually sounds like the right place.

Comment Re:Just don't upgrade the kernel with nvidia close (Score 2) 185

Text files have their huge advantage. They're easy to back up and don't require anything aside from a text-editor to restore a broken system. I can easily copy them over, and diff them. Sample configuration files are quick to compare.

None of this is true for the windows registry.

Text files may be less newbie friendy, but then again, programs do have a settings/preferences option generally for stuff newbies want to touch. Messing the config files OR a registry by these sort of users tends to end badly anyway.

Comment Re:Just don't upgrade the kernel with nvidia close (Score 1) 185

Actually, that's quite wrong.
There's are standards for configuration locations, and only legacy applications and notable exceptions keep them elsewhere.
Generally, /etc is for system-wide configuration, and $XDG_CONFIG_HOME (~/.config, be default) for user-level configuration. The former is only user when configuring the OS itself, generally, and the latter for desktop applications. Most users will only care about ~/.config.

See the XDG Basedir Spec for more details.

Comment Re:Security (Score 1) 323

Wrong.

Encryption is security through obscurity, just like MAC filtering.

No it's not. None of them have any obscuriy. Encryption can openly defined, it's just they keys/passphrases that are secret. Mac filtering has no obscurity at all.

One is far more difficult than the other, but they are more or less the same. The MAC is a 6 byte key that gets broadcast openly fairly often where as most people use far larger keys for encryption that aren't broadcast at all if possible, but in the end the principles are the same.

Please stop repeating things someone else said that you don't understand.

Security is built in layers, defense in depth. You use as many as you can/need. You ACCEPT that one or more of your security protocols CAN and WILL fail, but you design in the hope that enough of them will work to keep you safe.

Your argument is the height of ignorance. You're arguing that leaving your valuables out in the front yard near the street is just as secure as putting them in your home because you left the door unlocked, ignoring the fact that no one will see them inside the house so they won't know its there to steal. Sure, its easy to walk through then unlocked door, but thats already a step beyond what most people will do.

I'm not repeating something someone else said. Mac filtering is like having a doorman to whom you scream your name before getting into the building. Anyone in range can hear it, and pretend to be you by screaming your name.

Actual encryption is like having a key. Nobody can get in until you give them a copy of it (eg: tell them the password).

Slashdot Top Deals

Our OS who art in CPU, UNIX be thy name. Thy programs run, thy syscalls done, In kernel as it is in user!

Working...