• 1 Post
  • 582 Comments
Joined 1 year ago
cake
Cake day: July 14th, 2023

help-circle


  • If you are not a copyright holder, then you are not in a position to make any demands. I find it especially ironic, considering when the GPL was actually violated on multiple occasions, even as recently as a few months ago, nobody ever takes issue with that.

    Ironic that he says he understands licensing but doesn’t understand that, if you’re not a copyright holder, you don’t have standing to do anything about those violations. The Violations of GNU Licenses page states that if you see a violation, you should confirm the violation, collect as many details as you can, and then:

    Once you have collected the details, you should send a precise report to the copyright holders of the packages that are being wrongly distributed. The GNU licenses are copyright licenses; free licenses in general are based on copyright. In most countries only the copyright holders are legally empowered to act against violations.

    I remember reading about someone attempting to challenge that by suing for the rights that should have been conveyed to them by the infringer respecting copyright, but I wasn’t able to find anything on it. I did find references to people who were partial copyright holders being found to not have standing due to not having sufficient ownership to make a claim, though - see the outcome of https://sfconservancy.org/copyleft-compliance/vmware-lawsuit-faq.html













  • What exactly are you trusting a cert provider with and what are the security implications?

    End users trust the cert provider. The cert provider has a process that they use to determine if they can trust you.

    What attack vectors do you open yourself up to when trusting a certificate authority with your websites’ certificates?

    You’re not really trusting them with your certificates. You don’t give them your private key or anything like that, and the certs are visible to anyone navigating to your website.

    Your new vulnerabilities are basically limited to what you do for them - any changes you make to your domain’s DNS config, or anything you host, etc. - and depend on that introducing a vulnerability of its own. You also open a new phishing attack vector, where someone might contact you, posing as the certificate authority, and ask you to make a change that would introduce a vulnerability.

    In what way could it benefit security and/or privacy to utilize a paid service?

    For most use cases, as far as I know, it doesn’t.

    LetsEncrypt doesn’t offer EV or OV certificates, which you may need for your use case. However, these are mostly relevant at the enterprise level. Maybe you have a storefront and want an EV cert?

    LetsEncrypt also only offers community support, and if you set something up wrong you could be less secure.

    Other CAs may offer services that enhance privacy and security, as well, like scanning your site to confirm your config is sound… but the core offering isn’t really going to be different (aside from LE having intentionally short renewal periods), and theoretically you could get those same services from a different vendor.



  • In AD&D, you still had access to the abilities of your retired classes, but if you used them you had experience penalties (if you use them in an encounter, you gain no experience for that encounter and your experience for the entire adventure is halved) . The reason was that you were supposed to be learning to do things a new way, and if you fell back to the old way, you weren’t pushing yourself anymore. From the AD&D PHB, under “Dual-Class Benefits and Restrictions”:

    This is not to imply that a dual-class human forgets every-thing he knew before; he still has, at his fingertips, all the know-ledge, abilities, and proficiencies of his old class. But if he uses any of his previous class’s abilities during an encounter, he earns no experience for that encounter and only half experi-ence for the adventure.

    The paragraph goes on to explain what’s restricted (everything but HD and hit points), then ends with:

    (The character is trying to learn new ways to do things; by slipping back to his old meth-ods, he has set back his learning in his new character class.)


  • Sure, but if everyone does it then it wouldn’t work (no one would be drawing excess when the solar is at peak)

    If everyone did it then electric companies could prioritize investing in batteries and capacitors and further reduce their reliance on fossil fuels.

    If everyone did it, then even without extra storage capacity, net metering would still work. You don’t get credits for generating energy, just for sending it to the grid. All they have to do is the same thing they already do - curtailment.

    Finally, it’s impossible for everyone to be on net metering because NEM 3.0 doesn’t have net metering and NEM 1.0 and 2.0 are only available if you’re grandfathered in.

    If oversupply were really a concern, then you’d think the prices during oversupply would reflect that, dropping to basically nothing. They don’t. If they did, then EVs could be charged for super cheap when solar power was flooding the grid.

    that sounds a lot like what they are talking about

    What they’re talking about is revoking the law that grandfathered people into NEM 1.0 and 2.0 contracts. Keep in mind, the people who purchased solar under NEM 1.0 and 2.0 did so under the presumption that they would be able to stay on it for at least 20 years (because that was codified in law).000

    only getting paid some large percentage of the price for energy sent to the grid

    NEM 3.0 reduces the way credits are calculated to, on average, 25% of what they were before, and that are not the same as the retail rate.

    https://aurorasolar.com/blog/explaining-and-modeling-californias-net-billing-tariff-nem-3-0/ has some examples. At the same time that electricity from the grid costs $0.44/kWh, solar sent to the grid only returns a $0.05/kWh credit.

    5 cents is not a large percentage of 44 cents.

    If your neighbor has solar and you charge your EV in the middle of a sunny day when your neighbor is at work, you’re probably using your neighbor’s electricity to do so. That’s gonna cost you $15 and net your neighbor a $1.71 credit.

    Under NEM 1.0 and 2.0, if you import from and export to the grid in the same hour, those amounts are netted, even before NBCs come into effect. But under NEM 3.0, you could get billed for importing in the same hour even if you exported far more than you used. If you imported 1 kWh from the grid, you’d need to export 9 kWh to break even.

    Again, this doesn’t make sense. Someone is paying $0.44/kWh for the energy you exported, but you’re only getting $0.05 credit for it.

    If your solar system has storage, you can strategically export energy to the grid when the compensation is higher. That’s something you can consider when installing your solar system… but that’s not true for the people who are grandfathered into NEM 1.0 and 2.0, who knew they were grandfathered in by law.

    And from what I’ve heard, even that doesn’t actually help that much, because the credits don’t apply to the largest part of the bill - they apply to “generation,” not to “delivery.” I haven’t found a reliable source confirming that, but if true it just adds insult to injury - if you pay the added cost to install an intelligent storage system and configure it to return money to the grid when their costs are highest, you get a credit equal to the cost you helped them avoid, but then the credit’s actually only usable on a small portion of your bill. If the calculations are based on avoided cost, you should get those credits even if it means the electric company is paying you.


  • It doesn’t really seem like net metering is sustainable.

    Not sure why you think that.

    Say for example someone generates the same amount of electricity they use, in that case they pay $0 for electricity even though the grid has to take the burden of storing the electricity until they use it later in the day.

    The grid isn’t storing their energy - it’s sending it to other customers, meaning that non-sustainable, polluting energy sources don’t have to be generated.

    The only time that’s not true is when the net load on the grid dips below zero. According to the duck curve graph from the article, it does appear to be very briefly dipping for a very brief time period each day. At that point it could make sense to store the rest, but if the grid doesn’t have storage capacity then any excess is “wasted,” but at that point the grid engages in a process known as “curtailment,” which means it rejects the excess, meaning that nobody gets credit later for energy that isn’t used now.

    Also, curtailment is often not because the grid itself is over-supplied, but because specific regions are over-supplied and the grid lacks transmission lines from them to regions where demand is higher.

    in that case they pay $0 for electricity

    True under NEM 1.0, but NEM 2.0 also includes “non-bypassable charges” - components of pulling from the grid that cannot be offset by what they contribute. Those charges are roughly 5% as far as I can tell, meaning that if they pulled $300 worth of energy from the grid and sent back $300 worth (or more), they’d still owe $15.