Hacker Newsnew | past | comments | ask | show | jobs | submit | throw0101a's commentslogin

> 1. Maduro stole an election. He is not legitimately in power. Many other people in power, like the military and other political factions, opposed this and wants him removed.

Can US administration claim a domestic election (like the upcoming 2026 mid-terms) was stolen and… do stuff?

> 3. With the tacit approval of these folks, the US arrests Maduro for previously indicted crimes.

Concern:

> This argument means that any time a president wants to invade a country "legally," he just has to get his DOJ to indict the country's leader. It makes Congress' power to declare war totally meaningless.(

* https://x.com/JamesSurowiecki/status/2007450814097305734#m


> Can US administration claim a domestic election (like the upcoming 2026 mid-terms) was stolen and… do stuff?

A more direct comparison would be if Mexico decided Trump's lies about the 2020 US election were correct and kidnapped Joe Biden and his wife.

You cant condone these actions and also claim to believe in the rule of law...


> Can US administration claim a domestic election (like the upcoming 2026 mid-terms) was stolen and… do stuff?

With enough guns, anything is possible.


> Note the US administration contends that he wasn't the legitimate head of state. [1] [2]

Trump contends that Biden wasn't the legitimate President because the 2020 election was rigged.

If Trump ends up contending the 2026 mid-terms are not legitimate is that valid too? Are they able to act on those contentions to… do stuff?


An observation:

> This argument means that any time a president wants to invade a country "legally," he just has to get his DOJ to indict the country's leader. It makes Congress' power to declare war totally meaningless.

* https://x.com/JamesSurowiecki/status/2007450814097305734#m

Also, the irony:

> the administration's position is that American courts can hold any president accountable for crimes, except the American president

* https://x.com/SevaUT/status/2007433614657552640#m


Even if you'd accept this warped logic, I don't see how you'd get from "this was just a slightly more complex police action" to "we're gonna run the country from now on and take over the oil sector", legally speaking...

Might makes right.

Remember this energy when someone stronger than you decides they want your wallet.

I'd just call the police, since they're more powerful than your average robber.

Maduro's remaining cronies could call on Russia for help since they just signed a military alliance. However, that's not likely to work.


this is why people carry guns in america

I thought these were for mass shootings

They are for BOTH.

Only if you’re insane.

Maybe we should let people learn that actions have consequences. The kind and uplifting are seldom shot.

Take Isabelle Robinson from parkland. Paraphrasing: "It's not my responsibility to "befriend" a person who is showing violent red flags; it’s the school’s job to intervene and provide professional help or remove the threat." So she did notice the red flags, but didn't do anything, she believe the school should do something not her. The failure in this line of reasoning is that every institution is made up of individuals, if they all think the same way nothing will change.

This is literally a school shooting victim saying she doesn't believe that she should personally have to pay... well she didn't have to pay as much as some of her classmates.

The school of will find their own people to blame.

Pretty much every major religion teaches something like: If they slap one cheek show them the other, and that we are all one.

Nevertheless, very few people will take any amount of responsibility for another "individuals" actions. The logical conclusion is that we sit in silod VR pods until the life support systems fail


The President can now tell "his" DOJ to indict someone in another country (like its leader), and use that to 'legally' justify an attack on said country to grab the person.

Ironically, the current administration thinks that American courts can hold any president accountable for crimes, except the American president.


> Enough addresses for what? Nobody needs or even wants all of their devices to have globally routable addresses.

They do if they have applications, such as Xbox/PS gaming applications, broken VoIP in gaming lobbies, failure of SIP client to punch through etc. And if an ISP does not have, or cannot afford, to get enough IPv4 to hand each of their customers at least one to assign to the CPE's WAN port, you're now talking about CG-NAT, which a whole other level of breakage.


> Adopting IPv6 doesn't alleviate the pain of IPv4 exhaustion if you still need to support dual-stack.

Sure it does: the more server-side stuff has IPv6 the fewer IPv4 addresses you need.

If you have money (or were around early in the IPv4 land grab) you have plenty of IPv4 addresses so can give each customer one to for NATing. But if you don't have money to spend (many community-based ISPs) you have to start sharing addresses (16:1 to 64:1 is common in MAP-T deployments). You also have to spend CapEx on CG-NAT hardware to handle traffic loads.

Some of the highest bandwidth loads on the Internet are for video, and Youtube/Google, Netflix, and MetaBook all support IPv6: that's a lot of load that can skip the CG-NAT if the client is given a IPv6 address.

If you can go from 1:1 to 16:1 (or higher) because so few things use IPv4 that means every ISPs can reduce their legacy addressing needs.


> You’re not wrong, but I have been running complicated multi-site VPNs with a small homelab multi-subnet / VLAN setup for 25 years and still have yet to have a collision.

And I've been in corporate IT networks with mergers/acquisitions where both organizations involved had 10.0.0.0/24. Ever have NAT inside a company? Fun stuff. (Thrown in some internal-only split-horizon DNS too.)

Then there's the fact that in the COVID period we had IPs for VPN clients (172.*) in the same range as what some developers used for their Docker stuff. Hilarity.


Only one has to change, the smaller one presumably. Do it on the weekend, done. Planned ahead, easier than crowdstrike.

> Hell, going from 199.120.121.122 to 199.120.121.122.123 will have expanded IPv4 by 254 times. It took us, what? 40 years to exhaust Ipv4... Just increasing it by 254 alone is insane large amount.

In it's original design, SIPP, the design that was chosen for IPng had 'only' 64-bits, but it was decided that it would be impossible do another transition, and going to 128 would be better future-proofing:

* https://datatracker.ietf.org/doc/html/rfc1752#section-9

So 199.120.121.122 could have grown to 199.120.121.122.152.183.166.197, which I do not think would have made a practical difference to those who complain about "hard to remember" addresses.

And it took 40 years to exhaust IPv4 because NAT was invented (RFC 1631), and now we're stuck with that kludge and have to have all sorts of workaround for it (ICE/TURN/STUN). IMHO it has also has contributed to the centralization of the Internet because doing P2P is just a pain in the ass.


I think that hex digits are inherently hard to remember also because they are unpronounceable.

> IPv6 has SO many special networks. Network. Public. Multicast. Link local.

IPv4 has those exact same ones: link-local (169.254/16), multicast (224/4), public, private (RFC 1918).

* https://en.wikipedia.org/wiki/Reserved_IP_addresses

IPv6 is (IMHO) simpler: 2001::/32 and anything else (either link-local (fe80), multicast (ff00), and ULA (fc)). So either it starts with a "2" or an "f".


but not on the same computer. and the application does not have to figure out which one it has to use.

Yes on the same computer. Pretty much every multicast-capable host has a unicast address and has multicast groups that they join when they get an IP address. [0] Edge routers almost always have -at minimum- a global address and a "site-local" address. Any host that has multiple active interfaces can have multiple "categories" of addresses assigned to it.

You might also be unaware of the fact that network interfaces can usually be assigned multiple IPv4 addresses, just like they can be assigned multiple IPv6 addresses.

> ...the application does not have to figure out which one it has to use.

You might be surprised to learn that that's the job of the routing table on the system. Applications can influence the choices made by the system by binding to a specific source address, but the default behavior used by nearly everything is to let the system handle all that for you.

[0] You appear to be unaware that multicast addresses aren't assigned to a host. I suspect you're unaware that IPv6 removed the special-case "broadcast" address. It's now treated as what it actually is; the "all hosts" multicast address.


> That's a non sequitur. I can have a both a firewall and a NAT. The two layers are better than one because at least my address is shouldn't be routable even if I failed to configure my firewall correctly.

You talk about NAT like it's a single thing: it is not. There are at least three major varieties of NAT:

* https://blog.ipspace.net/2011/12/is-nat-security-feature/

See also various 'cones' that add complexity to getting things to work (and for which kludges like ICE/TURN/etc had to be invented):

* https://en.wikipedia.org/wiki/Network_address_translation#Me...

See also RFC 4787 which distinguishes between NAT mapping and NAT filtering. Also, also see perhaps "NAT Traversal Mess":

* https://blog.ipspace.net/2025/04/response-nat-traversal/


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: