1. 2

    So… what does this mean for the network operator? Is this something I can implement with a firmware update, or is this a “I have to go buy new Ubiquiti WAPs” thing? Same for the end-user - can the WPA2-compatible cards/antennae act as a client on a WPA3-Personal or -Enterprise network, or do we have to wait for laptop manufacturers to build in the new hardware and worry about depreciation cycles, etc?

    1. 2

      From another article:

      WPA3 is available on new routers certified by the Wi-Fi Alliance, and it’s up to individual vendors whether to install the protocol on existing routers with a software update.

      I don’t have an answer to your second question, but as it’s only a new encryption standard, I don’t think any hardware upgrades will be necessary…

      1. 1

        Cheers, thanks for that! I was just reading in [https://www.wired.com/story/wpa3-wi-fi-security-passwords-easy-connect/](yet another article) that new hardware would be required:

        “Even at the very beginning, when a user has a mix of device capabilities, if they get a network with WPA3 in it, they can immediately turn on a transitional mode. Any of their WPA3-capable devices will get the benefits of WPA3, and the legacy WPA2 devices can continue to connect,” Robinson says.

        Lurking inside that assurance, though, is the reality that WPA3 will come at a literal cost. “The gotcha is that everyone’s got to buy a new everything,” says Rudis. “But at least it’s setting the framework for a much more secure setup than what we’ve got now.”

    1. 10

      A.k.a. How To Become An ESR.

      1. 2

        Is that the worst thing in the world? We could use a few more good hackers-as-defined-by-ESR in the community, at least by my reckoning.

        1. 4

          Lots of things mentioned aren’t really typical. Met tons of hackers who don’t play any instruments, and hardly know anyone involved into martial arts except a couple sysadmins. Bit of painting by numbers there.

        2. 1

          It’s easy to take potshots at an old and sick man and his work a decade after the fact.

          As horribly cringey as a lot of his stuff is, some documents of his (like this one) are an honest and decent attempt to make the world a better place, and I don’t think it’s particularly useful to throw them aside without something much better to replace them with.

          1. 3

            You have a point, I should have expressed myself perhaps in a more civil manner. My opinion of the piece, however, didn’t change since it was published.

            1. 1

              It’s easy to take potshots at an old and sick man and his work…

              Honestly, I think this call to human pity is out of place.
              I think we should be able honestly analyze a work without losing human solidarity for the man who did it.

              …a decade after the fact

              The last revision is from 06 October 2017.

              an honest and decent attempt to make the world a better place

              I think “honest”, “decent”, and “better place” largely depends on how much you align with his values.

              I don’t think it’s particularly useful to throw them aside without something much better to replace them with.

              As influentials as those texts have been, they need a serious critical read if we want to hack something better.

              Those who cannot remember the past are condemned to repeat it.

            2. 0
            1. 3

              For a good laugh, look here at this PR.

              1. 18

                It’s both easier and more polite to ignore someone you think is being weird in a harmless way. Pointing and laughing at a person/community is the start of brigading. Lobsters isn’t big enough to be competent at this kind of evil, but it’s still a bad thing to try.

                1. 6

                  https://github.com/tootsuite/mastodon/pull/7391#issuecomment-389261480

                  What other project has its lead calmly explaining the difference between horse_ebooks and actual horses to clarify a pull request?

                  1. 3

                    And yet, he manages to offend someone.

                    1. 4

                      Can someone explain the controversy here? I legitimately do not understand. Is the individual claiming to be a computer and a person? Or do they just believe that someday some people will be computers and desire to future-proof the messages (as it alluded to in another comment)?

                      1. 7

                        This person is claiming they think of themselves as a robot, and is insulted at the insinuation that robots are not people.

                        Posts like this remind me of just how strange things can get when you connect most of the people on the planet.

                        1. 6

                          So, I tried contacting the author:

                          http://mynameiser.in/post/174391127526/hi-my-name-is-jordi-im-also

                          Looks like she believes she’s a robot in the transhumanist sense. I thought transhumanists thought they would be robots some day, not that they already are robots now.

                          I tried reading through her toots as she suggested, but it was making me feel unhappy, because she herself seems very unhappy. She seems to be going through personal stuff like breaking up from a bad relationship or something.

                          I still don’t understand what is going on and what exactly does she mean by saying she’s a robot. Whatever the reason, though, mocking her is counterproductive and all around a dick thing to do. Her request in the PR was denied, which I think is reasonable. So “no” was said to something, contrary to what zpojqwfejwfhiunz said elsewhere.

                          1. 6

                            As someone who’s loosely in touch with some of the transhumanist scene, her answer makes no sense and was honestly kind of flippant and rude to you.

                            That said, it sounds like she’s been dealing with a lot of abuse lately from the fact that this Github thread went viral. I’m not surprised, because there are certain people who will jump on any opportunity to mock someone like her in an attempt to score points with people who share their politics. In this case she’s being used as a proxy to discredit the social justice movement, because that’s what she uses to justify her identity.

                            Abuse is never okay and cases like this require some pretty heavy moderation so that they don’t spiral out of control. But they also require a pretty firm hand so that you don’t end up getting pulled into every crazy ideascape that the internet comes up with. If I was the moderator of this GitHub thread, I would have told her, “Whatever it is you’re trying to express when you say ‘I am a robot,’ the Mastodon [BOT] flag is not the right way to do it.” End of discussion, and if anyone comes around to try to harass her, use the moderator powers liberally so as not to veer off-topic.

                            Then you could get into the actual meat of the discussion at hand, which was things like “If I have a bot that reposts my Twitter onto Mastodon, could that really be said to ‘not represent a person’? Maybe another wording would be better.”

                            In the end she’s just a girl who likes to say she’s a robot on the internet. If that bugs you or confuses you, the nicest thing you can do is just take it like that and just ignore her.

                            1. 8

                              I don’t think she was rude to me. She’s just busy with other things and has no obligation to respond to every rando who asks her stuff. I’m thankful she answered me at all. It’s a bit of effort, however slight, to formulate a response for anyone.

                              1. 3

                                I mean, I can kind of see where you’re coming from, but I’d still argue that starting with “You should develop your software in accordance to my unusual worldview”, followed by flippantly refusing to actually explain that worldview when politely asked, is at least not nice.

                                Regardless, that might justify a firm hand, but not harassment, because nothing justifies harassment.

                                1. 2

                                  I see this point of view too. But I’m also just some rando on the internet. She doesn’t owe me anything, If someone needed to hear her reasons, that would have been the Mastodon devs. They handled it in a different way, and I think they handled it well, overall.

                                  1. 1

                                    I’m inclined to agree on that last point, though it’s hard to say for sure given all the deleted comments.

                                    And I do hope she can work through whatever she’s going through.

                            2. 4

                              I don’t know, personally, anyone who identifies as a robot, but I do know a bunch of people who identify as cyborgs. Some of it’s transhumanist stuff – embedding sensors under the skin, that sort of thing. But much of it is reframing of stuff we don’t think of that way: artificial limbs, pacemakers, etc, but also reliance on smartphones, google glass or similar, and other devices.

                              From that standpoint, robot doesn’t seem a stretch at all.

                              That said, I agree that the feature wasn’t intended to be (and shouldn’t be) a badge. But someone did submit a PR to make the wording more neutral and inclusive, and that was accepted (#7507), and I think that’s a positive thing.

                              1. 2

                                Actually, that rewording even seems clearer to me regardless of whether someone calls themself a robot or not. “Not a person” sounds a bit ambiguous; because you can totally mechanically turk any bot account at any time, or the account could be a mirror of a real person’s tweets or something.

                              2. 1

                                That’s unfortunate. It’s always difficult to deal with these things. I, too, understood transhumanism to be more of a future thing, but apparently at least some people interpret it differently. Thanks for following up where I was too lazy!

                              3. -6

                                American ‘snowflake’ phenomenon. The offendee believes that the rest of the world must fully and immediately capitulate to whatever pronoun they decided to apply to themselves that week, and anything other than complete and unquestioning deference is blatant whatever-ism.

                                1. 16

                                  Person in question is Brazilian, but don’t let easily checked facts get in the way of your narrative.

                                  1. -5

                                    Thanks for the clarification. Ugh, the phenomenon is spreading. I hope it’s not contagious. Should we shut down Madagascar? :-D

                                    1. 3

                                      TBH I think it’s just what happens when you connect a lot of people who speak your language to the internet, and the USA had more people connected than elsewhere.

                                      1. 0

                                        It definitely takes a lot of people to make a world. To paraphrase Garcia, “what a long strange trip it will be”.

                                  2. 3

                                    She says “she” is a fine pronoun for her.

                              4. 1

                                It’s wonderful. :)

                              5. 3

                                What is happening there? I can’t tell if this is satire or reality

                                1. 2

                                  That’s pretty common with Mastodon; there’s an acrid effluence that tinges the air for hours after it leaves the room. That smell’s name? Never saying no to anyone.

                                  1. 12

                                    Seems “never saying no to anyone” has also been happening to lobster’s invite system :(

                                    People here on lobsters used to post links to content they endorse and learn something from and want to share in a positive way. Whatever your motivation was to submit this story, it apparently wasn’t that…

                                    1. 4

                                      The person who shared the “good laugh” has been here twice as long as you have.

                                      1. 1

                                        I’m absolutely not saying you’re wrong, but I’m pretty confident there’s something to be learned here. I may not necessarily know what the lesson is yet, but this is not the first or the last situation of this kind to present itself in software development writ large.

                                1. 2

                                  I refer to it regularly, here’s the source PDF (ugh). Perhaps petitioning LOPSA to update it and re-host it on their site would be a good thing?

                                  https://www.usenix.org/system/files/lisa/books/usenix_22_jobs3rd_core.pdf

                                  1. 6

                                    I also run my own DNS server, but I prefer to maintain just the master. I pay ~$15/yr to outsource the slaves to a third party company who specializes in such things, and I don’t have to worry as much if my VPS provider decides to go down for a few hours, etc. I get a more reliable DNS system, and I still get to maintain control, graph statistics, etc, to my heart’s content.

                                    Glad to see the discipline of self-hosting isn’t completely going the way of the dodo in this day and age!

                                    1. 2

                                      Any recommendation for a good third part company for such outsourcing?

                                      I also run my own DNS. The main reason is that I run my own mail using https://mailinabox.email/, which has been a reasonably simple and pain-free experience. Paying someone to get better stability could be interesting.

                                      1. 3

                                        I have added nameservers from BuddyNS to my secondary DNS. For the moment I’m just using their free plan since I’ve delegated to only one nameservers out of the 3 which are serving my zones, and the query count is low enough to keep me on the free plan.

                                        1. 1

                                          I loved BuddyNS but I went over their query limit and the only payment they accept is PayPal and I boycott PayPal after they stole $900 from me… I wish they would take other forms of payment

                                        2. 3

                                          I asked for some recommendations online. My biggest requirements were a ‘slave only’ offering, DNSSEC/IPv6 support, and ‘not Dyn’ (I just can’t give Oracle money these days). With all that in mind, I ended up choosing dnsmadesimple.com (edit: looks like they’re $30/yr, not $15 as above. Mea culpa) It was seriously easy to get everything set up (less than 20 minutes!) and now I don’t have to worry about what happens when my master goes down.

                                          1. 1

                                            Do you mean dnsmadeeasy.com or do you mean dnsimple.com?

                                            dnsmadesimple.com doesn’t exist

                                            1. 2

                                              My deepest apologies, this is what I get for Internetting when I’m about four cups of coffee short.

                                              dnsmadeasy.com is the correct one.

                                          2. 3

                                            Hello everyone! This is my first post. :)

                                            I’m Vitalie from LuaDNS. We don’t offer slaves right now (only AXFR transfers), but if you don’t mind to fiddle with git, you can add your Bind files to a git repository and push them to us via GitHub/Bitbucket/YourRepo. You can keep using your DNS servers for redundancy as slaves.

                                            You get backups via git and free Anycast DNS for 3 zones. :)

                                            Shameless Plug

                                          3. 1

                                            Interesting - that’s not a bad idea.

                                            If I were a corp I wouldn’t want this method, but for the single user, the investment has been well worth the pay-off - even if I decide to go with a vendor in future, I’ll understand what I’m paying for.

                                          1. 3

                                            I use it (3-node cluster) in my homelab. I’ve deployed it at a handful of customer sites, all < 50 nodes, as an alternative to VMWare, and everyone seems happy with it.

                                            1. -1

                                              OK. Fork it. Build your own community/dev processes/culture around the way you feel is best, and let the market decide. Don’t do the public talk circuit and whinge about how Linus is a meanie.

                                              1. 10

                                                OK. Fork it. Build your own community/dev processes/culture around the way you feel is best, and let the market decide. Don’t do the public talk circuit and whinge about how Linus is a meanie.

                                                I find this kind of response to criticism, to be generally counter productive. It is often simply being dismissive. I mean.. shouldn’t forking an entire community be the /last/ option, not the /first/ one?

                                                1. 7

                                                  Build your own community/dev processes/culture around the way you feel is best, and let the market decide.

                                                  I won’t repeat trousers’ comment that forking is the last resort (which I agree on).

                                                  I will add that a community where someone can talk about problems openly is a healthy robust community.

                                                  Don’t do the public talk circuit

                                                  This talk was at linux.conf.au, which is a significant community open source conference. A bunch of kernel developers & maintainers come every year. Linus himself has come a few times. Standing up in front of your peers (or former peers) to explain problems you see is not “doing the public talk circuit”.

                                                  Linus is a meanie

                                                  One point made in the talk is how the “angry Linus” meme (particularly the way his abusive LKML outbursts are covered so widely) is a barrier to talking constructively about disfunction in the rest of the kernel developer/maintainership (which is what the majority of the talk was about).

                                                1. 10

                                                  An unauthenticated cleartext audio stream delivered over an unisolated multicast domain? Sounds like you could’ve loaded up VLC and some The Exorcist soundbytes, and had yourself a good old time :-)

                                                  1. 1

                                                    An unlocked house next to a street? Sounds like you could have loaded up a beanie and some bag and had yourself a good old time d:^D

                                                    1. 3

                                                      To be fair his claim is more like filling their home with packing peanuts. Obnoxious, a crime, but also not on the same scale as theft.

                                                  1. 2

                                                    SO very true.

                                                    1. 6

                                                      Yes please, all of my agreements! Just purchased a new 2015-era MBP specifically because of everything mentioned here. It’s my work/business laptop, so I need to have Applecare (my 2014-era MBP’s just expired), Joint Venture, etc, for minimum downtime should Something Bad(tm) happen. I would’ve loved something with USB-C ports (and USB-C charging), but the mandatory Touchbar/butterfly keys are such a PITA I’ll never own a laptop that has them. I am very much looking forward to the new Force Touch trackpad on the 2015-era MBP - my 2014’s old-school touchpad had to be replaced no less than four times during its service.

                                                      1. 4

                                                        I mean, yes, I understand the concerns over backwards compatibility… but at what point is the technical debt too much to pay down? XUL was terrible.

                                                        1. 4

                                                          XUL isn’t great, but better than building desktop UIs in HTML/CSS

                                                          1. [Comment from banned user removed]

                                                            1. 4

                                                              You made your bed and you’re sleeping in it.

                                                              Technical debt kills projects in the long run. Honestly, technical debt was a big part of the reason for Firefox’s decline. As the userbase declines, so does the funding. Technical debt becomes real debt pretty quickly.

                                                              1. 0

                                                                Oh please, get over yourself. “Never”? That’s about how often you’ve paid money for a web browser - any web browser. Why not sling some hyperbole at JS Print, since they’re the ones with the technical prowess, wrote the plugin, presumably were aware of the year-plus long notice from Mozilla around “Hey, we’re changing everything, here’s guides, blog posts, community forums, etc, to help you migrate your code to the new platform”, and they’re the ones providing extra functionality to the end-user through the browser?

                                                                1. 2

                                                                  Why not sling some hyperbole at JS Print, since they’re the ones with the technical prowess, wrote the plugin, presumably were aware of the year-plus long notice from Mozilla around “Hey, we’re changing everything, here’s guides, blog posts, community forums, etc, to help you migrate your code to the new platform”, and they’re the ones providing extra functionality to the end-user through the browser?

                                                                  Because I know there was no way to implement the same functionality with the new, crippled API.

                                                                  The naive developers even wasted their time asking for the new API to be extended so they can port their add-on: https://github.com/edabg/jsprintsetup/issues/39

                                                                  That request had its comments closed as “not being productive” after 4 months: https://bugzilla.mozilla.org/show_bug.cgi?id=1385827

                                                                  1. [Comment removed by moderator pushcx: Removing an off-topic subthread that sank into personal attacks. You can let people be wrong without explaining to them all the ways they're an idiot for it.]

                                                                    1. [Comment removed by moderator pushcx: Removing an off-topic subthread that sank into personal attacks. You can let people be wrong without explaining to them all the ways they're an idiot for it.]

                                                            1. 2

                                                              git (or SCM-based) deploys are the bane of my existence. By all means, use your SCM to get your code into a build environment, but for the love of all that is holy - use your OS packaging system! RPM spec-files aren’t all that hard to build (.deb can be tricky, I will readily admit), but the tool ‘fpm’ abstracts a lot of that complexity away.

                                                              1. 3

                                                                I haven’t worked with RPM too much, but given how easy .deb is to build I can’t imagine it being easier ;) I expect it’s just a matter of what one is used to.

                                                                1. 1

                                                                  Alternatively, many build systems can create tarballs. We use sbt dist, for example.

                                                              1. 1

                                                                Enough alliteration already! :-)