Anyone that can adapt, improvise and overcome. This term can be applied to any field though most commonly used today to suggest one that utilizes extensive computer and network knowledge to remove any obstacles in their path to gain access to any data they require access to or accomplish any goal or mission in the computing field.
adding, one can test it here [1] though I think it also depends on the client using DoH [2] For people already using Cloudflare or Google DoH DNS it should just work.
To get ECH to work for me I had to enable DoH in my local Unbound DNS daemon and point Firefox to it rather than using unencrypted DNS on my LAN. I had to force a refresh (shift-F5 on tls-ech.dev). I only use my own recursive DNS so I get query logs and can block some ad/malware sites.
Among many other items this would never be accepted. This momentary cease fire is just regrouping time for everyone involved and that has always been the case for Iran.
It is acceptable, if only enriched for civilian reactors, not weapon grade what they did - and Iran was about to agree to that condition before their leadership was wiped out. If the new leadership will agree, remains to be seen. But I believe china or russia are also not strongly interested in a nuclear armed Iran.
There no feasible escalation path for the US. Trump has alienated allies and much of his anti war supporters. A forever war quagmire in a country 3x larger than Iraq is unlikely, as is carpet bombing. So what's left? A JCPOA style agreement with a Maga bumper sticker on it, with heavy concessions to Iran to prevent them from racing to a bomb, which is the best option from their pov at this point.
Carpet bombing would be a waste of munitions. Iran to your point is massive and surface level bombing would mostly take out civilians. The civilians have been through enough. Most of Irans military and religious leaders are in missile cities that are 500 meters+ under mountains of rock, the same places they are creating nuclear material. These bunkers are immune to bunker busters and nukes. That will require ground troops and likely a lot of them. How that plays out specifically I have not a clue. I can only hope that they share body-cam footage and that casualties are kept to a minimum. If there is one thing I can give Iran credit for that is building some amazing and very impressive bunkers using US dollars.
with heavy concessions to Iran to prevent them from racing to a bomb
This game has already been played out many times before. Obama unfroze 1.7 billion, Biden gave them upwards of 6 billion. All together the US has given them upwards of 60 billion to pinky promise they wont build nukes. Never pay a bully, ever. They used that extortion money to build bunkers, pay their proxy soldiers to attack Israel and all the gulf states and to work on their bunkers. There will be no more of that. Shame on anyone that falls for those shenanigans again.
Age old story of all choke points of course. I was taught about choke points by a family member that served in WWII and it's funny, thinking back I was in trouble because I could not find the Strait of Hormuz on a world globe that had no writing on it. I mean seriously ... who keeps such a globe just sitting around for such an obscure moment? That lesson stuck with me. It was a strange lesson but it stuck nonetheless.
Was just reading that this is the first time a waterway choke point (other than canals which are man made) has had a toll. The implications are intriguing for their novelty and unknown second order effects.
Also, the comment about the globe reminds me of a quip from The Daily Show that went something like "... something something War, or how Americans learn geography." You are lucky to have prior generations which provide such inter-generational teaching moments.
The Iran nuclear agreement was absolutely working for the year or so it lasted. International inspectors finally got to see things. Iran did not have a significant nuclear program during Trump's first term when he killed the agreement.
After Trump killed the agreement, what was Iran supposed to do? If the US can just ignore a diplomatic agreement, there's no reason for Iran to follow it. That means diplomacy is basically off the table. So they built a nuclear weapons industry again.
If Iran just wants to kill kill kill, why did it shut down it's chemical weapon industry? Why no dirty bombs? Why no gas attacks? Why is Iran, fighting an actually existential war, pulling it's punches? Why is it not hitting desalination plants like it can? They demonstrated that they have weapons that could hit Europe.
International inspectors finally got to see things.
Or so we are told. I have my doubts that they had access to all the missile cities. We will never know. Nobody will ever know until ICBM's, SRBM's and SRAM's start rolling out of their bunkers and Iran becomes a nuclear power. I believe this has been the goal of their stalling tactics and bullying. Too many nations trust but never really verify. This is how things went wrong with North Korea.
Give tourists paid access to all the bunkers. I want to ride an e-bike through all of them.
> Never pay a bully, ever. They used that extortion money to build bunkers
Which bully are we talking about here? I'm guessing Donald Trump, who took millions in "donations" to demolish a 3rd of the white house to build a new bunker with a stupid ballroom on top (which will never get built, but the GOP will just shrug when asked where the money went).
The only place I have utilized an IPv6 address publicly is on my authoritative name servers only because some DNS testing tools assume it is there. It's not really needed however. My home firewall does have one but I have never used it. I can't think of a use for it. I have multiple static IPv4 addresses and they have suited me just fine for decades. I suppose I could bind a Squid SSL Bump MitM proxy to it in case a site blocks me but I would probably leave it off most of the time.
I never use them on my web, chat, voice, IRC and other servers as I personally find blocking shenanigans on IPv4 and not having to implement the same checks on IPv6 is just easier for a lazy person like me. IPv6 just feels like an after-thought bolt on to me. Clunky, not well thought out. Some privacy gotchas that can be disabled but some will not. That's just my take. I doubt anyone will have the same take.
I think IPv4 will be fine for another 100 years even if we have to re-purpose some DoD/MoD ranges given they don't use them and maybe annex some /8's from a few greedy companies. But that's a problem for Gen Delta. Gen Foxtrot can deal with repurposing some multicast ranges.
Or ... people can use the DoD/Mod and assorted other space to get their IPv4 allocations. There is a ton of unused space in IPv4. Reserved, allocated but entirely unused. Also take back some /8's from greedy companies that don't need all that space. stares at HP When I say take I mean take as in a forceful annex and a timeline.
> Or ... people can use the DoD/Mod and assorted other space to get their IPv4 allocations.
Someone did the math on this:
> Now, average daily assignment rates have been running at above 10 /8s per year, for 2010, and approached 15 /8s towards the end. This means any reclamation effort has to recover at least 15 /8s per year just to break even on 2010’s growth. That’s 5.9% of the total IPv4 address space, or 6.8% of the assignable address space. Is it feasible to be able to reclaim that much address space? Even if there were low-hanging fruit to cover the first year of new demand, what about there-after? Worse, demand for address space has been growing supra-linearly, particularly in Asia and Latin America. So it seems highly unlikely that any reclamation project can buy anything more than a years worth of time (and reclamation itself takes time).
There are 'only four billion IPv4 addresses, and there are eight billion people on the planet. There are just as many smartphones (I have two: personal and work):
Even if you (CG-)NAT an IPv4 address for some number of people, you still need to have IPv4 addresses for public services (web, mail, NTP, etc).
There is no scenario where 2^32 addresses is enough for humanity's needs: as some point you need to go to a protocol with more that 32 bits of address space.
There are 'only four billion IPv4 addresses, and there are eight billion people on the planet. There are just as many smartphones (I have two: personal and work)
Unless all of these devices are running a dedicated full time server that must be reachable inbound by everyone this is not required. At any given time "all the people" are not online. That is why DHCP (per ISP) takes care of this. Maybe some day all the people may become terminally online but I would not count on it.
Yeah some day IPv6 may be required. Maybe in 100 years or so. IPv4 has plenty of unused allocated addresses that can be ripped away from greedy people. There was a time when ARIN would check to see what was in use and would take back anything people were squatting on. I think the reclamation project works if we dont assume everything has to be reachable as a server.
I should add that cell phones (where people are terminally online) were already IPv6 a long time ago for the most part so it's really a non issue. The only risk I see is if someone wanted to start a new massive dedicated server and VPS provider. Most of those are dual stack IPv4+IPv6 now and doing that means clawing some IPv4 space away from those I mentioned earlier.
> Unless all of these devices are running a dedicated full time server that must be reachable inbound by everyone this is not required.
I think this is a lack of imagination. The fact that (CG-)NAT is in the way could be precluding the development of software that could take advantage of incoming/P2P connections.
It's a form of (negative/inverse) survivorship bias: kind of like zoning for only single-family homes and yet saying "no one wants mid-rise towers/apartments as evidenced by the fact no one building them". The current rules/structure preclude any other options.
When we went from dial-up speeds to DSL/cable to fibre we were able to have all sorts new applications due to higher bandwidth. Are there classes of applications that we don't / can't have because of NAT? We're stuck with things that often need a central server (TURN/ICE/STUN) and I'd like people to have the ability to explore a more distributed/decentralized Internet.
No imagination required. P2P works fine if at least 20% to 30% have ports open inbound. 70%+ need not have open inbound ports. Where this could theoretically be a problem is if a specific sub-set of CG-NAT users were the only people seeding and downloading something. This non existent problem can be worked around using a VPN mesh. Tinc is an open source VPN that operates in user-space and while not as fast as Wireguard it can do things Wireguard could never dream of such as user space mesh routing, always discovering the shortest path. The advantage of this is keeping ambulance chasing lawyers off the P2P/VPN mesh. The only imagination required is how to keep the network semi-private. In my experience this is running a semi-private invite-only self hosted forum. In reality none of this is required for P2P however.
> No imagination required. P2P works fine if at least 20% to 30% have ports open inbound. 70%+ need not have open inbound ports. Where this could theoretically be a problem is if a specific sub-set of CG-NAT users were the only people seeding and downloading something.
"Seeding"? "Downloading"? I think applications besides BitTorrent could be invented and become popular. Even now, existing things like SIP and WebRTC would probably be much less onerous.
> This non existent problem can be worked around using a VPN mesh. Tinc is an open source VPN that operates in user-space and while not as fast as Wireguard it can do things Wireguard could never dream of such as user space mesh routing, always discovering the shortest path.
So you're introducing another layer of software because the underlying network does not have the functionality available (just like STUN/TURN/ICE had to be invented to deal with NAT).
Here's another idea: have IPv6, and if folks want to have end-to-end encrypted communications, start up an IKEv2 process (that opens a hole for its port via UPNP/PCP), and we have IPsec (which is built into most OSes anyway) encrypted communications opportunistically enabled.
> Or ... people can use the DoD/Mod and assorted other space to get their IPv4 allocations. There is a ton of unused space in IPv4. Reserved, allocated but entirely unused. Also take back some /8's from greedy companies that don't need all that space.
In our exponentially growing world that wouldn't help. By the time we ran out of Class As we were allocating a new one every month. Reclaiming all the unused addresses would barely make a dent in demand.
You have to be really special if you think a 32-bit address space can cope with the ever expanding internet. We only managed to scrape by for now because ISPs keep on putting more and more people behind CGNAT. (My country's ISPs forced the migration to CGNAT because they literally couldn't get more IPv4 blocks without spending a hefty amount)
Err... you do realize that the number of humans currently living on planet earth is twice the number of IPv4 addresses... right?
We can't all have an IPv4 address for each of our devices. We can't all even have one IPv4 address, period. But maybe they should just try not being poor, eh?
There was a day when many people used a Firefox addon that rewrote hxxps to https and would undefang the IP addresses. I can't remember what it's called but these days I use FoxReplace to do similar things. If I want to obfuscate things I typically base64 encode for the laptop and workstation users.
Adding to this KI wont keep anything out of the other organs. People not in sealed bunkers will air filtration systems will get acute radiation sickness and eventually cancer either way. Intentionally leaving out the extra morbid details.
If he is including civilians then yes. Surface targets are easy and their civilians have done nothing to deserve this.
Otherwise their leadership have been begging for decades to be decimated. The leadership that the US put in place. It would be quite a feat. Much of their leadership are secured waiting us out in missile cities that are immune to bunker busters and nukes. It would take a massive and prolonged ground assault to clear all of them out. Most people on all sides do not want this to become yet another multi-decade multi-trillion dollar war.
I would expect most of the civilians to flee the country and I have no idea who could or would accommodate 90 million refugees.
Explain to me how you will 'kill a civilization' without including civilians. It's sort of in the name.
I think you and I know he says a lot of whacky stuff to make people think he is unstable and will do anything so other nations are more likely to assume he may do something unethical and to take him seriously.
But yes to your point if I took him literally then that would include civilians. I suppose we will only know if and when tactical nukes are dropped on cities. I have learned to never take him literally at his word.
> I have learned to never take him literally at his word.
So far his words seem to have been pretty good predictors for his future actions. Maybe not always in the same order and/or with the intended effect. But the list of stuff he said he would do compared with the list of stuff he said he would do but didn't do is changing day-by-day and for some of those things he didn't do the clock hasn't run out yet. I think you ignore these kinds of statements at your peril when means, motive and opportunity are a fact.
I suppose I agree with that. If he's taking out 90 million civilians that would be by far the most extreme action and this assumes people follow orders. He did recently purge a few generals. Purge as in fired, not Xi-stinguished. I don't know to what end this would accomplish anything. A strong message to China? What would be the point in removing the cost burden of the Iranian government that is their civilians? Purge Muslims? There are something like 2 billion so it can't be that. What other reasons might there be? Untrained and inexperienced civilians offer little benefit to their existing IRGC that I can see. They are all soft targets and a cost to Iran's government.
He's bluffed in the past. Some call it taco, I call it a bluff. All entirely expected from a former real-estate empire builder.
Anyone that can adapt, improvise and overcome. This term can be applied to any field though most commonly used today to suggest one that utilizes extensive computer and network knowledge to remove any obstacles in their path to gain access to any data they require access to or accomplish any goal or mission in the computing field.
reply