Hacker News new | past | comments | ask | show | jobs | submit | mdtancsa's comments login

I am in a similar same boat. Its way more correct than not for the tasks I give it. For simple queries about, say, CLI tools I dont use that often, or regex formulations, I find it handy as when it gives the answer Its easy to test if its right or not. If it gets it wrong, I work with Claude to get to the right answer.

Would be useful to see the cost of just the land as well if thats possible. As others have pointed out, the size and feature expectation inflation has to be factored in here. The little "wartime 4" I grew up in north of Toronto was smaller than a lot of "garage-ma-halls" these days and didn't really have insulation. It was a regular feature in winters to get ice on the living room window. My "modest" (by today's standards) house would be a rich persons place in the 70s.


That kind of goes both ways, though.

I live in an affluent suburb in a rich city in a sleeper town just outside Toronto. My home was built in the past twenty years and is in a "McMansion" style neighbourhood. It's a relatively large home, but in many ways things have regressed.

Craftsmanship is non-existent. The kitchen cabinets look like Ikea specials with shelves held up by little plastic pegs. All of the various particle board doors are installed laughably poorly with giant gaps. Sound travels through the home with ease.

It's well insulated and has good multi-pane windows, but automation and mass production should bring a lot of that just with the passage of time. I would expect that all else being equal the same work should by better windows and insulation and so on than fifty years ago.

Regarding land value, it is interesting how in denial we are about land values. The city gives me property tax statements valuing my land at 1/10th the price of the dwelling...yet people are buying $1M homes on smaller lots and immediately tearing the home down to build new. More than a few cases of that demands that we completely upend our valuations.


There is an equation they use that might be biased toward improvements. In Seattle/King county at least they are gradually changing the equation to value land more and improvements less, so our property taxes have been going down each year even though our value is going up (since we are a narrow townhome on a small plot). This is to ultimately encourage more density and make it more expensive to hold unimproved land.


I think quality is something at least there is choice on. But even then, the lowest quality of materials now seems way above anything my 1940s war-time-four that I grew up in in Willowdale. It was just tarpaper "brick" over the frame. We didnt feel "poor" or anything as thats what all the houses were. I was lucky to buy my first house in 97 at the bottom of the market in Waterloo. An 1890s house on a 133x66 lot. House was absolute mishmash of "left over parts" as one contractor friend of mine described it. My wife and I saved up and did a full teardown in 2016 (again as luck would have it) at a low point in construction costs. My general contractor said it would now be 3x to do the same project due to labour and material costs. But, going through the process I could do anything I wanted. Fresh timber, or timber that was properly aged. Steel beams, or wood. You can choose "quality" it just is gonna cost. But that 3x jump (not even taking into account land costs) pre-covid vs post covid is.... eye popping.


Your windows likely would still ice up today, except they are double pane with argon or another gas inbetween the panes so they are comparatively insanely well insulated.


My garage (22x30) is over half the square footage of the house I grew up in. Which didn't even have a garage. Yard is three times as big as well.


similar experience with perl scripts being re-written into golang. Crazy good experience with Claude


haha, same!


I suspect the distributed cracking will move to the same pattern as the SMTP/pop3 brute force guys did and use one IP per x+1 seconds where x=the ssh penalty window. We have seen this on our customer facing smtp server where we have hundreds of remote compromised IPs trying each one password per 30-60min. Still, I welcome this change as there are enough single prick attackers out there where this will help cut down on the size of the logs to process / digest.


Actually this already is the SOTA of cracking. My honeypot can see several different IP is brute forcing concurrently, and they seems irrelevant. But once you let one of them login, it will quit immediately and all those IPs will quiet after ~15sec. Then one of those IPs will login again to deploy miner.


Next level: let them login and forward the ssh connection to the digital equivalent of a room full of mirrors.


reminds me of using the old MIRROR target in iptables back in the day. before it was removed because its ridiculous. we used to watch script kiddies trying to brute force their own hosts but even then we knew it was ripe for abuse.

https://www.linuxtopia.org/Linux_Firewall_iptables/x4448.htm...


Probably for the best, since it sounds like that could be used for DDoS amplification and/or reflection.

For example, if an attack could spoof traffic to get two different reflectors hall-of-mirror-ing each other, or using a botnet that spoofs traffic to get one collection of dupes to slam a single victim in response, etc.


How would you spoof multiple valid packets in a TCP-based protocol requiring a sequence of interactions when you can't receive any of the ACKs (because they'll be sent to not-your-IP)?


Depending on the protocol you can probably do reflection attacks over tcp with TFO.


It was beautiful to see people nuke themselves in winnuke era.


This is already the practice in my experience. Fail2ban has become completely useless for ssh about 5~6 years ago. Always just one to three tries per IP address.

So looks like this openssh feature is a decade late.


That doesn’t make it useless. It still severely limits the rate of brute force versus having no limit.



Any discussion around this with more details ? I was surprised nothing mentioned on the OpenVPN list


Is this vulnerability only impacts OpenVPN access server or it also impacts their OpenVPN connect client vpn?


These were from a while ago but the article implied they were new which they are not. Details at https://github.com/OpenVPN/openvpn/blob/v2.6.10/Changes.rst


thanks. saw that too. seems this is being repackaged as a zero day.

https://www.reddit.com/r/OpenVPN/s/1qrqJhp0Fp


It says, its says.... "Drink Ovalteenus"

In all seriousness though, I find this such an amazing project to follow regardless of the outcome(s)


Love it! I feverishly consumed every computer mag I could get my hands on back then, and there is something about those images that still capture my imagination and wonder today. I guess thats a testament to the artist!


really excellent software I have been using for a long time to manage snapshots!


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: