Hacker Newsnew | past | comments | ask | show | jobs | submit | Plasmoid's commentslogin

What happens is that economics shift from a renewable model to an extractive model.

Farms are renewable so farmers maintain them over centuries. Mines are extractive so they get pumped and dumped.

What landlords do in these situations is try to extract as much money as possible before the enterprise collapses, either literally or figuratively. New housing doesn't come online quickly so both quality and quantity fall.


Well, this is a reason that we have standards and laws about rentable properties.

Landlords who can’t operate within the imposed constraints, those for instance who have debts they used to get into the game in the first place, might simply be forced to leave the business.

In many markets this is actively desirable.


We could like build more houses though

Yeah, but what's the burn rate?

If it's going down at 1 day per week then it's not so bad. If it's closer to 0.75 days per day, that's much more serious.


> I administrate are contractually obligated to be so isolated

Yeah, I've seen those contracts. They just reference a SeCuRiTy doc that's 20+ years old, and has never been re-evaluated. Things are secure because they follow the doc, not because they have actually evaluated the reasonable attack space.

I've fighting customers for years on their ideas of proper TLS usage and it's always the same thing. They've got a security doc that never changes and has never evaluated any of the trade-offs. Almost to the point that the people who wrote them choose things that increase downtime and KTLO work without helping security.


Ah-yup. The equivalent in my world is contracts that insist we make our employees rotate their passwords every 2 months or whatever, which was a popular (but still dumb) idea 20 years ago and is strongly recommended against today.


Yep. I get real tired of adding a month and year to the same base password every time I need to rotate it.


On week one of my current job, I turned that off for the whole company. Here's the citation you can give your security department to show them why they're doing it wrong.

NIST Special Publication 800-63B, the July 2025 version, section 3.1.1.2, says:

"Verifiers and CSPs SHALL NOT require subscribers to change passwords periodically. However, verifiers SHALL force a change if there is evidence that the authenticator has been compromised."

The previous version from June 2017, section 5.1.1.2, says:

"Verifiers SHOULD NOT require memorized secrets to be changed arbitrarily (e.g., periodically). However, verifiers SHALL force a change if there is evidence of compromise of the authenticator."

So 9 years ago, NIST said to stop requiring that. Last year, they clarified that to say, no, really, freaking stop it. Any company still making people do that today is 9 years out of date, and 1 year out of compliance.


> keeping backward operational compatibility

It is not possible to be backwards compatibility with a larger address space


You are right that a 32 bit ipv4 stack can not understand a 64 bit packet format. The thing I am trying to get at is not native compatibility, it is operational compatibility via translation. I know, I know, you will probably say that is what ipv6 bridges do.

But in an ipv42 type setup, you would have determnistic embedding so that every ipv4 address is represented inside the larger address space. This would allow translation at network boundaries and let old systems continue to operate unchanged. Then the routers and systems would be upgraded incrementally. I think that is why it would have been upgraded more quickly.


> But in an ipv42 type setup, you would have determnistic embedding so that every ipv4 address is represented inside the larger address space

IPv6 supports that, but it ended up not getting used very much.

See https://en.wikipedia.org/wiki/List_of_IPv6_transition_mechan...


I remember reading about that a long time ago. I wonder why it never really caught on?

I think part of the problem is not so much a technical one, as a coordination issue. Who are you more likely to get on board? ISP and backbone providers. What is the path forward? Here is the recommended path forward, kind of thing.


I don't see how it matters we forced people into ipv6 as well. Who cares. It's more about the difference in mental models that prevented adoption especially among those who run the services that are on the internet.


Your proposal (translation) is addressed as point 3B in the article.


I went and re-read point 3B. I agree that some hypothetical ipv42 faces a translation problem.

But it does not follow that address design is irrelevant. The structure of the address space directly determines whether translation can be stateless and alogrithmic.

In a hypothetical ipv42 design that preserves a deterministic embedding relationship between old and new addresses, translation at the edges could be largely stateless and mechanically reversible, to reduce coordiation overhead between operators and it makes reachability more predictable.

In our world ipv6, the transition seems to require a mix of dual stack, nat64, dns64, tunneling aproaches. The mapping between ipv4 and ipv6 is not uniformly deterministic across all deployment contexts.

Also, there is just a human factor. The mental gymnastics that go on. The perception of what is the way forward? With ipv6, it feels like everyone has to go get their ipv6 stack in order. With a hypothetical ipv42, where the ISPs and backbone providers can throw in the translation layers, it feels like, to me, they would have gotten on board much more quickly. Yeah, I know, it is just a feeling.


I agree with you about the embedded addresses, and I don't understand why the space was moved to all zeros to a bunch of other mappings.

but the utility of this isn't that high. we already know how to handle 4-4 and 6-6 traffic just fine. but if a 4 host wants to talk to a 6 host, it just doesn't have the extra bits in order to describe it, so this just doesn't facilitate 4-6 endpoint communication at all. this is true even you substitute v6 with any other layer 3 with a larger address space.

where it does help is in a unified routing backbone, that would allow v4 prefixes to be announced in the v6 routing system. which is arguably useful.


We have that, it's called ipv6. A section of the v6 address space is sectioned off to hold all v4 addresses


The embedding I believe you are referring to is not a part of the global routing model. (maybe I am wrong?) What I am describing is making that kind of declaration central to the system in a deterministic, network wide mapping of ipv4 to the larger ipv6 space. The translation in ipv6 ended up being handled by a mix of mechanisms after the fact, rather than a single, uniform mapping model that tied directly to the address structure. I think part of the problem is they did not put that front and center, at the beginning, when doing the initial specification.


How would an embedding handle the other 99.999999999999% of addresses not embedded?


At least at first, you wouldn't, you'd embed all of them. Cloudflare has 1.1.1.1, so they get 1.1.1.1:: too.


Not doing that was one of the key points of starting fresh with IPv6. Doing that would mean that you could end up with billions of routes to consider.

One reason for large address space is that those with networks could be placed sparsely and left room to grow. Thus allowing less routes in general.


Indeed doing it this way would keep the fragmentation, or at least delay fixing it. That's what these articles always overlook, the goal of ipv6 wasn't to just add more bits, it was also to defrag the routes.

I think instead of 1.1.1.1::, you could do 4:1.1.1.1::, wait for v4 to be gone, then start building new topologies in the other /8s. Not sure how hard that is, but it seems easier than what they're trying to do now.


Would it help at all? You can't just send IPv6 packets down the equivalent IPv4 path because that bext-hop router probably xoesn't understand IPv6 packets. In fact there could be no IPv6 path at all between you and the destination, so knowing where they are still wouldn't help you forward packets. If it understood them, it would have given you an IPv6 route anyway. Updating BGP to support IPv6 routes wasn't an actual problem.


There are lots of services I can't send v6 to, not because some router in the middle only understands v4 but because the service operator decided not to deal with v6.


So the idea is to surreptitiously install software on the service operator's machines that they can't disable?

It's already a bit like that, but they can and do disable it. You can see the other comments in this thread: many people disable IPv6 upon any sign of a networking problem.


No, the idea is you can turn v6 on/off, but doing so only changes the packet format and nothing else at first. There's no separate place to configure v6-specific settings because there are none. You use the same address, routes, DHCP, NAT, DNS, etc as v4, but you're limited to 32-bit addrs at first. The point is to just get people off v4.

Once v6 has reached enough adoption, you can turn off v4. Those who want to keep the addrs from v4 can, except now they get way more addresses under those too. Others can start building a clean new topology under the other prefixes without worrying about compatibility.


I don't see why anyone would change all the bits you actually need to change for some nebulous future gains. Still have to deal with new sockets and new routing decisions at least. To not really gain much from new features.

To me it looks like something that would have gained nearly no actual adoption outside some toy examples. Later you will need to anyway get new DNS, DHCP(or alternative) and so on.


That's a legit concern. If that's not interesting enough to the kind of user that wants all-new v6, instead start from today where some users are on the new v6 network, and say they added the 4:: prefix as a way to pick up the kind of user that doesn't want to change much. They'd still be compatible eventually. Though the reason I was thinking 4:: from the start would've been attractive enough is, a lot of people did use 6to4 and other halfway measures despite having no immediate gain.

Today's DNS6 DHCP6 etc are totally incompatible with v4. 4:: buys backwards-compatibility. Each can be updated to support longer addrs without caring whether you use it with v4 or v6.


> At least at first, you wouldn't, you'd embed all of them. Cloudflare has 1.1.1.1, so they get 1.1.1.1:: too.

Everyone with an IPv4 address automatically got an IPv6 allocation:

> For any 32-bit global IPv4 address that is assigned to a host, a 48-bit 6to4 IPv6 prefix can be constructed for use by that host (and if applicable the network behind it) by appending the IPv4 address to 2002::/16.

> For example, the global IPv4 address 192.0.2.4 has the corresponding 6to4 prefix 2002:c000:0204::/48. This gives a prefix length of 48 bits, which leaves room for a 16-bit subnet field and 64 bit host addresses within the subnets.

* https://en.wikipedia.org/wiki/6to4

What does it mean to have an /48? Well, a IPv6 subnet is /64, so that's 16 bits for subnets. In IPv4 land, if you take a subnet to be /24, an allocation with 16 bits worth of subnets would be a /8.

So basically, with 6to4, every person with an IPv4 address got the equilvalent of a Class A in IPv6.


This is a fake argument. Noone is arguing for backwards compatibility.

But there was also no necessity to demand reshaping networks and changing address assignment in a way that made migration extremely work intensive and hard to deploy in parallel.


How would you do it?


I wouldn't try to reinvent DHCP, kept NAT and generally attempted to keep the overall shape of a v6 network the same as v4 networks to ease transition of large deployments.

Ipv6 now has most of that - after years of resistance - which results in a mixed mess of "several ways to do it" approaches spiced with clients and equipment supporting a random set of them.


And yet 50% of the internet is using CGNAT just fine. The extra bits are just in a different place.


Yes, but CGNAT is an inherently stateful system and as a result will always be more expensive to operate per packet than a stateless router. The reason we are seeing steady (if slow) growth in native IPv6 is because the workarounds for IPv4 exhaustion cost money, and eventually upgrading equipment and putting pressure on website operators to support IPv6 becomes cheaper than growing CGNAT capacity.


Because there are so many applicants that have good grades.

A more cynical view is that the governing boards want a way to pick and choose who they let in. So they create "holistic" application systems to get "360 degree view of the candidate".


No matter how many have good grades, you can always pick the top n by grades—unless there's a ceiling that the top m > n have all hit. Which, if you're talking about "grades" as in GPA, is plausible.

MCAT seems more relevant, though. According to Claude: "Roughly 0.1% or fewer of test-takers score a perfect 528 in any given year — typically only a few dozen individuals out of the ~120,000 or so who sit for the exam annually." So it should work fairly well for them to sort by MCAT and take however many they have (or expect to have) room for.


I think OP's point was that the governing boards don't want the people with the top n grades. They want certain people, and by making the admissions criteria fuzzy, they can pick and choose those certain people and then say "well, our admission criteria is subjective," and "we are looking for 'well rounded people," and all kinds of other vague weasely ways to let them legitimately shape the student body in the way they want.

See also: "Cultural fit" when hiring.


One of my roommates who was premed had a "hot car" poster as a motivational study aid. After a short term as a candy striper at a local hospital, he changed majors. The system works! ;-)


At a certain point, grades become arbitrary and won’t necessarily select for the best candidates. Obviously the current system doesn’t, either.

The actual solution is to increase the number of slots for training doctors to match the huge number of qualified applicants. It makes even more sense given that there is a shortage of doctors and health care costs are astronomical.


I want a doctor who was a strong student with diverse experiences, lots of soft skills and can handle the entire psychological spectrum of being a doctor, not the doctor who was solely the best at exams.


There are all kinds of doctors though? The ones who don't have soft skills or diverse experiences can go into pathology or other fields that don't involve as much patient interaction. Why lose out on their gifts altogether if they're genuinely interested in medicine.


> No matter how many have good grades, you can always pick the top n by grades. Which, if you're talking about "grades" as in GPA, is plausible.

I live in Ontario and we're there. 40% of Waterloo students had above a 95% average in high school. The average GPA to get into UofT med school is 3.94/4.00 GPA.

What has happened as a result is students killing themselves and each other. If you fail one test in any course, you cannot move to the next level.

So, if you go on the UofT subreddit there's endless stories of pre-med students sabotaging each other. Faking friendliness, destroying notes, etc etc. This is arguably rational because the pool is small and there's little to gain by studying harder if you already have a perfect GPA.

https://www.reddit.com/r/UofT/comments/1sbu811/had_no_idea_t...

You don't want this type of person as a doctor. They will sabotage others because that is how they got ahead in the past. In a medical environment that kills people.


Too many kids want to be doctors and have the grades for it? That's an opportunity, not a problem.

Training more doctors is just never an option for some reason.

Don't build systems that reward amoral psychopaths.


We've opened a new med school after a decade of planning. 1.5% acceptance rate.


> This is arguably rational because the pool is small and there's little to gain by studying harder if you already have a perfect GPA.

So there is a low ceiling, and if they instead used MCAT or something with a higher ceiling (where, apparently, the number of perfect scores is about 50 per year—in America, presumably lower in Canada due to population size), then studying harder would benefit them. That seems like a much better outlet for competitive urges.

But also, how small is the pool of qualified applicants? If there were something like "they're going to take n people from your school, at which there are 30 plausible candidates", then sabotaging one might conceivably be worthwhile. But if the pool is—well, Google says 3,000 medical students get accepted each year in Canada (and the qualified applicant pool is presumably at least somewhat larger), and sabotaging one person is extremely unlikely to help you personally. (This is one case where it's good that the expected-value "benefits", of sabotaging person X, are widely distributed among thousands of medical candidates, and thus it's a "free-rider problem" where no individual candidate has a strong motivation to do the work.)

Is there some multi-stage thing where they pick 10 people from each high school, or 30 from a town, or something? Or is there major grading on a curve, or a big benefit for being the top person in your classroom of 15? That seems like how you would get real incentives for this backstabbing behavior. Otherwise, I can't see how it's rational (even to a complete sociopath), and would have to chalk it up to individual miscreants and possibly some kind of culture that encourages it in other ways.


> Or is there major grading on a curve, or a big benefit for being the top person in your classroom of 15?

Yes. UofT even has "down curves" where your mark is lowered to ensure the correct distribution.


> Because there are so many applicants that have good grades.

So train more doctors.


That would increase competition and thus depress wages for existing doctors, who are the ones who make the decisions here. I heard, from a medical school attendee, that she overheard some doctors discussing whether it would be a good idea to require a fifth year of medical school to become a general practitioner (luckily, they were like, "Eh... nah"). It did not seem like it bothered them that this would make it even harder for civilians to get medical care.


I thought lawmakers made the decisions. Silly me! :-D


Theoretically yes. But I think at least part of the decision they've made is to delegate a chunk of the decisionmaking to doctors' guilds. Which—on the one hand, they are experts of a sort, but on the other hand, they have an obvious conflict of interest.

https://en.wikipedia.org/wiki/American_Medical_Association#R...

Wow. 1997: https://www.baltimoresun.com/1997/03/01/ama-seeks-limit-on-r...

> “The United States is on the verge of a serious oversupply of physicians,” the AMA and five other medical groups said in a joint statement. “The current rate of physician supply — the number of physicians entering the work force each year — is clearly excessive.”

> The groups, representing a large segment of the medical establishment, proposed limits on the number of doctors who become residents each year.

> The number of medical residents, now 25,000, should be much lower, the groups said. While they did not endorse a specific number, they suggested that 18,700 might be appropriate.


I've read about that before. I personally am of the belief that Medicare funding for residency slots should be eliminated over time. Also freely allow the opening and expansion of medical schools and teaching hospitals. Over time things should settle into a comfortable equilibrium of enough doctors making decent wages for everyone to be treated at a reasonable cost.

But maybe that's a free market fantasy. Who knows.

Or the alternative. Government-owned everything healthcare - facilities, hospitals, med schools, doctor practices. Doctors only work for the government.

The current system is neither here nor there and is designed for maximum profit.


> Because there are so many applicants that have good grades.

Sounds like we need more spots for these people to go


> As per The Information, Meta employees used a total of 60.2 trillion AI tokens (!!) in 30 days. If this was charged at Anthropic’s API prices, it would cost $900M.

How are the investors not completely losing their minds at this kind of spending?


Because they're doing the exact same thing.


Yet.

Many ISPs are pushing v4 users into CGNAT so they're easier and cheaper to manage.

This is a big reason why Netflix and YouTube are on v6. To avoid the cost of service over v4.


I'm not sure that counting "How it's going?" as a productivity stat is the win you think it is.


When they say 'stuck...' and we fix a problem, I'd count that as a win.


Fun story - at Oxford they like to name buildings after important people. Dr Hoare was nominated to have a house named after him. This presented the university with a dilemma of having a literal `Hoare house` (pronounced whore).

I can't remember what Oxford did to resolve this, but I think they settled on `C.A.R. Hoare Residence`.


There's the Tony Hoare Room [1] in the Robert Hooke Building. We held our Reinforcement Learning reading group there.

[1] https://www.cs.ox.ac.uk/people/jennifer.watson/tonyhoare.htm...


>our Reinforcement Learning reading group there //

Anyone else, like me, imagining ML models embodied as Androids attending what amounts to a book club? (I can't quite shake the image of them being little CodeBullets with CRT monitors for heads either.)


The CB reference is appreciated, he isn't talked about enough here


I had countless lectures and classes there


Our Graphics Lab at University used to be in an old house opposite a fish and chip shop. The people at the fish and chip shop were suspicious of our lab as all they saw was young men (mostly) entering and leaving at all hours of the night. We really missed an opportunity to name it "Hoare House" after one of our favourite computer scientists.


I was awarded the CAR Hoare prize from university, which is marginally better than the hoare prize I suppose


Cowards.


Shame the university takes itself so seriously. The illustrative example of overloading would have been pertinent to his subject of expertise.


I mean, I like puns but they're a flash in the pan. Jokes get old after a while and you don't want to embed them in something fairly permanent like a building name.


"Surely you've all heard of the Hoare house on campus?" seems like a pretty timeless way to a) keep people from dozing off during that bit of lecture b) cause a whole bunch of people to remember who this guy was and what he did.


This particular word for the oldest profession goes back to Old English. I am fairly sure it would outlive the building.


If the problem is when the joke lives on amusing undergrads long after you've tired of it, that just makes it worse.


Wait until they hear about what Magpie Lane in Oxford used to be called.

https://en.wikipedia.org/wiki/Magpie_Lane,_Oxford


A historical bawdy pun is one of the most Oxfordian things I can think of. If we can incorporate a man in drag, we're in real business.


"Hoare House" would trigger millions of idiots, from rude little children to pontifying alpha ideologues. In perpetuity.

The University was correct in saying "nope" to the endless distractions, misery, and overhead of having to deal with that.


Imagine being a world-famous computer scientist and dying and one of the top threads in a discussion of your life is juvenile crap about how your name sounds like "whore".


Imagine being an adult human but not being able to extract a tiny chuckle from such a silly thing.


Well, I do have a rather special last name which makes me susceptible.


[flagged]


GP is well known, you really needn't guess if you're that fascinated.


Chill out, I doubt he would've minded and humorous anecdotes are great ways to grieve


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: