4 ms·
I had never heard of charles ... (https://www.charlesproxy.com/ https://www.charlesproxy.com/) I basically wrote a simple version of it 20 years ago (https://gi
by kristopolous 2y ago
I had never heard of charles ... (https://www.charlesproxy.com/ https://www.charlesproxy.com/) I basically wrote a simple version of it 20 years ago (https://github.com/kristopolous/proxy https://github.com/kristopolous/proxy) that I use because back then, this didn't exist ... I need to remember to toss my old tools aside
- mlenhard 2y agoYeah, at its core it's just a proxy, so there are a lot of other tools out there that would do the job. It does have a nice UI and I try to support projects like it when I can. I'll check out your proxy as well, I enjoy looking at anything built around networking.
- Maxious 2y agoeven the approach that charles takes for intercepting TLS traffic is a bit old school (proxies, fake root certs etc.) - cool kids use eBPF https://mitmproxy.org/posts/local-capture/linux/ https://mitmproxy.org/posts/local-capture/linux/
- stavros 2y agoI can see how you don't need a proxy any more, but I don't see how you can bypass TLS without fake root certs, even with eBPF.
- Tokumei-no-hito 2y agonew to this program as well but looks really nice. i think it is still a proxy though unless I’m missing something (beyond the name lol). [here's a section on macos dealing with certs](https://mitmproxy.org/posts/local-capture/macos/ https://mitmproxy.org/posts/local-capture/macos/)
- beaugunderson 2y agohere is one example: https://github.com/gojue/ecapture https://github.com/gojue/ecapture in short, you can hook calls within SSL libraries (like OpenSSL)
- stavros 2y agoSure, but that very much depends on the application, no? What if it's statically linked its SSL lib?
- beaugunderson 2y agoyou wanted to know how people are bypassing the need for a certificate with eBPF, that is how
- stavros 2y agoWell, Charles launched almost 20 years ago, so I'd say there's a good chance that it did exist.
- deleted 2y ago[deleted]
- kristopolous 2y agoWell hopefully my current thing, a streaming markdown renderer for the terminal (https://github.com/kristopolous/Streamdown https://github.com/kristopolous/Streamdown) hasn't also been a waste of time
- stavros 2y agoWhy would anything be a waste of time?
- mptest 2y agothe answers to that question are hugely variable and depend on the objective and defining waste. if one values learning intrinsically, like most of us here probably do, it is pretty hard to come up with a waste of time, even taking the rare break from learning. But it seems self-evident where constraints like markets or material conditions might demarcate usefulness and waste. Even the learners who are as happy to hear about linguistics as they are material science I presume do some opportunity cost analysis as they learn. Personally speaking, I rarely, if ever, feel like I'm wasting time per se but I always recognize and am conscious of the other things I could be doing to better maximize alternative objectives. That omnipresent consciousness may just be anxiety though I guess...
- kristopolous 2y agoI build things I cannot find. Every project I do is an assertion that I don't believe the thing I make exists. I have been unable to find a streaming forward only markdown renderer for the terminal nor have I been able to find any suitable library that I could build one with. So I've taken on the ambitious effort of building my own parser and renderer and go through all the grueling testing that entails