jeffhykin

@jeffhykin@lemm.ee

This profile is from a federated server and may be incomplete. View on remote instance

jeffhykin OP , (edited )

I'm shocked this answer has so many upvotes. No, a MAC address is not close to a phone number. No two people have the same phone number, and I can't just edit my phone number to be someone else's number.

  • "two network interfaces connected to two different networks can share the same MAC address"
  • "Many network interfaces, however, support changing their MAC addresses"

https://en.m.wikipedia.org/wiki/MAC_address

jeffhykin OP , (edited )

Cell phones don't get a new phone number every time they switch cell towers, so why do laptops.

Its not like I can write down the IP address of my friends laptop so I can send it a message once he gets to a new city. Right?

jeffhykin OP , (edited )
  1. Yeah I was lazy with saying ipv32 just to mean something excessively long. I didnt want to say ipv6, since I kinda think it needs to at least be 64bits (edit: ipv6 is actually 128bits), and really for a public-private key pair it should be larger, so more like 512 to avoid anything like the v4 v6 cacatestrophe again in 20 years with post quantum forms of asymetric key challenges. But I didnt feel like writing all that out.
  2. I'm with you. I knew I'd get people not reading and say "that's the ip address", but MAC address? 🤦‍♂️
jeffhykin OP ,

This is the kind of answer I was looking for, thank you!

jeffhykin OP , (edited )

Every phone number has one owner, but MAC addresses can have many owners. They're categorically different.

How would the internet know how to find your phone?

The same way phone calls try to find a phone when its powered off. Attempt, and then fail under a timeout.

Where would the registery be?

Same place as the phone number registry. Or the domain name registry.

That would be one giant database

Yep the domain name registry and cell phone registry very much are AFAIK

jeffhykin OP ,

I meant "in the same way that phone numbers are unique to phones (not perfectly unique, some phones have dual Sim, some have no sim, sometimes a Sim changes numbers after contacting the provider, etc)"

Its just typing all that^ in a title is kinda long.

EUI-64 IPv6 (and why its not a reality) though is kinda what I'm curious about. But not really because, even under that spec, its still not static like a phone number. I want to know why networks were not created in a way where I can send a message to a laptop regardless of what WiFi its connected to (assuming it is connected and online).

jeffhykin OP ,

Solid answer, thanks! You deserve all the upvotes that were, instead, for some reason, given to the guy that just said "I think its a MAC address"

jeffhykin OP ,

Same people who decide phone numbers and domain names. We already have central registries, why does it being a computer make it harder to have a central authority?

jeffhykin OP ,

no need for an endpoint to be directly exposed

If I were an engineer in the past, trying to send a message back to an endpoint (e.g. a server response) I would've reached for everything having a static IP, same as the EID system with phones, instead of the DHCP multi-tier NAT type system with temp addresses.

I'm all but certain they didnt do it for privacy reasons at the time.

jeffhykin OP , (edited )

Sure, I'll change the title to say "phones have unique phone number (b/c sim cards), why don't computers have an equivalent?" I didnt mean one phone == one phone number.

With VOIP I can get phone calls even without cell service, even behind a NAT. My question is why is the network designed in such a way where that is possible, but I can't buy a static address that will persist across networks endpoint changes (e.g. new wifi connection) such that I can initiate a connection to my laptop while it is behind a NAT.

jeffhykin OP , (edited )

Yes I'm sure. Try changing the number to 911. Phone numbers only have one owner, MAC addresses may have many owners.

jeffhykin OP ,

Even paying for a static IP its not like a phone number which is discoverable behind a NAT without extra router configuration.

jeffhykin OP , (edited )

The IP doesn't persist across network hops (cell tower to cell tower) and the MAC address doesnt have one verified owner. A phone number is both verified having one owner and persists across network hops.

jeffhykin OP ,

Yep, and I can verify my phone number didnt change when roaming, people could still call me.

jeffhykin OP ,

I can get VOIP calls behind a NAT without cell service. I'm asking how is that possible. Is the router somehow part of the same AP as cell service?

jeffhykin OP ,

Cool, I'll have to look that up!

jeffhykin OP ,

AFAIK static public-facing IP addresses are limited to a physical location. It would work if my laptop never left my house but as soon as I take it to the airport its no longer accessible. People who try to connect to the static ip would just get a message saying the address timed out.

jeffhykin OP ,

Fair, I could have said fully qualified number, including country code.

And also fair, instead of saying a MAC could be edited, I should've said each phone number has one global owner, while each MAC address could have many owners.

Corrections have been made 👍

jeffhykin OP ,

This I'm interested in, because its at the edge/limits of my knowledge when it comes to domains and cellular networking.

Are you saying if cell phones had a larger address space, let's say 32 digits base 10, and every device was given a cell phone number, it would overwhelm the existing infrastructure?

jeffhykin OP ,

Thats a valid solution, thanks for saying it!

I think it is good to note this requires either having another system at home or in the cloud to host the VPN right?

jeffhykin OP ,

You're right it depends on the definition of phone number, and I edited the original post to try and be more clear that I meant the phone number including the country code and area code.

If you're talking about something other than country/area code though, then that's news to me.

jeffhykin OP , (edited )

Finally :D thank you so much!

So basically VOIP is "cheating" because its not actually handled by the network directly, the phone company pays for always-online servers, and phone(s) reach out to those server every time they change networks, in order for servers to be able to route calls to them.

Which also means! it is possible to do the same thing for computers, but it requires having

  1. A static IP
  2. An always online server
  3. The device needs a daemon that tries to connect to an always online server, and authenticates itself
  4. That server needs to manually reroute traffic (through a VPN or some other means) from the static IP address to the device, wherever it might be

Which also explains why general network providers wouldn't want to create the infrastructure. Even if universal addresses were given to each device, which simplifies DHCP and address-leasing, and shortens time it takes to handshake with the network, all of that is less of a cost than the infrastructure needed track of devices as they change networks. (And that's on top of ISP's being slow to change from the legacy approach of local networks and desktops).

^ which is more the conversation I wanted to have but didnt really get with this post.

Thats a sizable edit!

Yeah 😅 I didnt want it to be this complicated of a question, but I didnt see how else to explain that current addressing systems don't meet the same need as a phone number.

jeffhykin OP ,

If I'm understanding correctly, you're saying that right now the network doesn't have an exhaustive table of IP addresses to physical locations. It has a cache, and a hierarchy, and the path to a location of the IP is fluid.

But a system where every device could be directly contacted/identified like a Sim card, would effectively require a complete table of "what network is device ABC at". A table that is updated every time the device changes network connections. It would be like trying to change domain name to point to a different IP address.

The problem is, updating a domain to point to a new IP takes hours or days not seconds, so doing that every time a phone changes WiFi is not practical.

Is that a good summary?

jeffhykin OP ,

Thank you for such a long and detailed post! I indeed did not know about things beyond the SIM, and I didn't know about the extra details about the country codes either. That is extremely interesting to me.

With the phone spoofing though, does that mean two factor with a phone number is basically useless? If I had authentication based on a MAC address, it would take seconds to break it. But I think, and sure hope, that auth based on phone numbers is more secure.

I think your domain name answer -- that for the most part computers didnt need them -- is a very satisfying answer.

jeffhykin OP ,

Wow that's super interesting to know. So its still got some resistance, but a lot less than I thought. Thanks again for sharing!

jeffhykin ,

"Select where you heard about typst"
-> Fediverse

Finally somewhere that actually has Fediverse as an option, this must be a good app.

jeffhykin ,

Sadly no AFAIK, even ignoring the licensing issues.

jeffhykin ,

You should learn the nix lang, flakes, zero to nix, etc and try not to get bogged down in the Nix/Aux stuff. Be prepared to wait for things to settle down on that side.

jeffhykin ,

Agreed, I made a thread for it. You've got some good names!

https://forum.aux.computer/t/aux-name-enhancement/179

jeffhykin ,

I read it as "a pin nix" like appendix with a lisp

jeffhykin ,

He got convinced, its now Auxolotl!

https://github.com/auxolotl/

Theres going to be an official reevaluation once the governance has finished bootstrapping.

jeffhykin OP ,

[TOTP] Simple to setup / create, doesn't depend on 3rd party ...

Actually I'm worried its a bit TOO easy to create. I don't need a bulletproof/airtight system but what's stopping highschooler from installing bluestacks, downloading the AUTH app, and then handling 10,000 TOTP requests for different bot accounts.

jeffhykin OP ,

PoW sure, but like what's the tool name. Rolling my own PoW sounds not-smart. I've messed with metamask a bit but last I check isn't real practical for mobile.

jeffhykin OP ,

While I'm really glad to hear about it, I think it would work great for DDOS detection, I don't know that it works for preventing spam accounts. I'm pretty sure puppeteer with GPT4 could check that box no problem.

jeffhykin OP ,

I mean, manual approval technically does work. I kinda wanted something that would scale.

jeffhykin ,

Its quite a bit more, but I wouldn't blame you for making the comparison.

Side note: unless you're a dev really trying to get in on bleeding edge stuff, ignore the hype. The IPFS team is doing great, but there's a lot of work left to do.

The torrent TLDR is; theres a lot of quality-of-life things missing from torrents (if they were going to be loaded like webpages) and it turns out fixing some of those quality of life things requires solving some pretty hard technical challenges, even if they don't feel much different to the end user. Things like decentelized discovery, content address hashing (best thing since sliced bread), merkel trees for de-duplication, and change detection.

jeffhykin , (edited )

The "front page" of most instances are not interesting to average people or to professionals (e.g. local gov that wants to go open source, like those switching to Mastodon).

Part is lemmy's hot-sort is basically broken as a ranking, another part is bad language filters, another part is that major communities here (fediverse, Linux memes, star trek memes, science memes, etc) are off-putting to out-of-group people because of so many in-group jokes. Its a hard fix.

jeffhykin , (edited )

You should watch the rest, especially the ending, there are some great quotes in there.
"There's so much freedom in [suburb]. There's no shops, cafes, theaters, places to eat, schools, or even people. But uhh, that's all part of the freedom; you have the freedom to go somewhere better! like [15min city name]"

Is there a License that requires the user to donate if they make revenue?

I tried a couple license finders and I even looked into the OSI database but I could not find a license that works pretty much like agpl but requiring payment (combined 1% of revenue per month, spread evenly over all FOSS software, if applicable) if one of these is true:...

jeffhykin ,

This is pretty cool. I've got a couple repos that Microsoft uses for VS Code. I switched one of them to GPLv3, but maybe I'll switch the other to this license.

jeffhykin ,

I know a good bit of micro biology, psychology, and medical trial fields can. But thats about the limit of my "other fields" knowledge.

jeffhykin ,

I think we can agree "Good reseach" is in the how-its-done. I wish journals would chose/require/verify the how-its-done (time frame, resources, hypothesis, method etc) but after that be contractually required publish whatever conclusion is discovered by the team/project they picked and verified.

Opinion on modular vehicles with standardized parts?

I've started to hate SUV, MUV and MPV. I've been thinking about how buses may be an ideal transportation, but in reality, it will probably not be feasible to have an entire transport system running on buses, right? Maybe a bit of rickshaws and mini-taxis too? And also compact private vehicles?...

jeffhykin ,

I think once you get down to the size of vehicles like this: https://www.youtube.com/watch?v=R2oD1ZHNMFE then they become naturally modular/replaceable. At least in the same way that bikes are. I don't think people really create "modular" bikes they are just naturally swappable. Of course standards are helpful, and I think there is a total lack of standards for golfcart sized enclosed vehicles.

jeffhykin ,

Same (sunlight alarm clock, getting up super early to compensate, and male) but also I have a heater on a timer-socket. When its super hot and bright its hard to stay in bed.

Looking for directions to re-write my program

Hello everyone, first post over here, I'm a junior dev that was working on an open source picture organizer based on location groups within sub-directories, like streets and cities (inferred from EXIF geotags being extracted and sent to a reverse geocoding API) which I've first coined as GeoPicSorter (outlined in its home page)....

jeffhykin ,

Just commenting here to ping you that I found a new major alternative! I've edited the comment but TLDR; search ".NET Avalonia" and see what you think

jeffhykin , (edited )

The one thing I use it for is lesspass (if you've heard of it then see the note at the bottom). It is a site that hashes content (site, username, password) to, somewhat problematically, generate a new password deterministicly.

I downloaded the HTML, verified they're not doing anything shady, and then put the HTML file on IPFS so that 1. I could self-host and always get it even if their site was down, but also 2. Know that they didn't update the site and suddenly start harvesting peoples master passwords.

The bigger usecase for IPFS though would be for something like Nix with people being able to share precompiled binaries through IPFS (which is in the works). IPFS more of a foundation tool, not an end-user tool.

Side note: while lesspass doesnt live up to the hype, but it can be useful... I mean useful if you don't really use it as intended.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • supersentai
  • WatchParties
  • Rutgers
  • jeremy
  • Lexington
  • cragsand
  • mead
  • RetroGamingNetwork
  • loren
  • steinbach
  • xyz
  • PowerRangers
  • AnarchoCapitalism
  • kamenrider
  • Mordhau
  • WarhammerFantasy
  • itdept
  • AgeRegression
  • mauerstrassenwetten
  • MidnightClan
  • space_engine
  • learnviet
  • bjj
  • Teensy
  • khanate
  • electropalaeography
  • neondivide
  • fandic
  • All magazines