ValdikSS

26 ms·

361.
by ValdikSS 4y ago
That's a LineageOS customization, as far as I know.
362.
by ValdikSS 4y ago
Which use case are you referring to? You can't connect via SSH to the GitHub Actions worker, it is behind NAT.
363.
OpenVPN & WireGuard server at GitHub Actions: representative NAT traversal case(github.com)
48 points by ValdikSS 4y ago|7 comments
364.
by ValdikSS 4y ago
It's not possible to run server software on GitHub Actions using regular methods: the worker virtual machine is placed behind Network Address Translation (NAT), which prevents it from receiving direct inbound TCP/UDP connections.
365.
by ValdikSS 4y ago
https://bitbucket.org/anticensority/russian-unlisted-blocks/... — my list of unlisted blocks >How are the TSPU boxes setup? Are these provided by the government to different datacenters/IXs or at some sort
366.
by ValdikSS 4y ago
Several issues: * VPNs are mostly not free, and with current situation in Russia, you can't easily pay for the Europe/US service due to absent Visa/MC service * Popular VPN providers are getting blocked in Russia recently * F
367.
by ValdikSS 4y ago
If anyone gets me a network link to China, I'm ready to test and implement new techniques. Last time I asked why such tools are not built in China, the developer of very popular anti-censorship tool told me that there are punishment fo
368.
by ValdikSS 4y ago
That was true 3-4 years ago but nowadays they're getting surprisingly good, and that's alarming.
369.
by ValdikSS 4y ago
No, unfortunately almost no of these naive methods longer works. However the protocol spoofing ("fake packet" in GoodbyeDPI) with Auto-TTL is pretty effective on most ISPs of Russia, Korea, Indonesia, Turkey.
370.
by ValdikSS 4y ago
GoodbyeDPI also includes Russian blacklist built from zapret-info, to apply censorship circumvention only for the websites from the list, to reduce the risk of breaking the website due to mangled traffic. The newest issue are unlisted filte
371.
by ValdikSS 4y ago
Windows Server 2016+ with Secure Boot enabled won't allow loading of any third-party non-HLK-certified drivers, whether they are signed or unsigned. That's why. And HLK is only for device drivers, not for any regular drivers, as f
372.
by ValdikSS 4y ago
Windows Server 2016+ with Secure Boot enabled won't allow loading of any third-party non-HLK-certified drivers, whether they are signed or unsigned. That's why.
373.
by ValdikSS 4y ago
+ If it wasn't OllyDBG, I would never have understood how a computer works.
374.
by ValdikSS 5y ago
The article mentions Miracle Box, but the cracked version is dangerous, use it without the internet connection. Basically if you're fine with dangerous windows-only no-VM Miracle Box, it supports all the devices.
375.
by ValdikSS 5y ago
No-no, le9 is very useful both with swap (physical or zram) and without. With zram it makes swapping process seamless (no lags when swapping), with physical swap on HDD it makes it a bit softer (on regular kernel both swapping and file relo
376.
by ValdikSS 5y ago
https://notes.valdikss.org.ru/linux-for-old-pc-from-2007/en/ The patch prevents eviction of file cache from the RAM, which, when using with zram, makes the system very fast when it is swapping. On regular Linux, w
377.
by ValdikSS 5y ago
TL;DR: 1. Linux sucks when the memory usage come close to RAM amount, making system barely usable even on modern PCs (here's the report of system freeze with 32 GB RAM[1]). Luckily, the "le9" patch helps with thrashing condit
378.
Linux for PC from 2007: 37 browser tabs+Discord+Skype with no lag on 2 GB RAM(notes.valdikss.org.ru)
8 points by ValdikSS 5y ago|1 comments
379.
by ValdikSS 6y ago
All port forwarding requests are bind to random localhost ports only. What client writes to the left part of -R command is not used in socket binding process, but saved in forwarding database called "pseudodns". The SSH daemon is
380.
Show HN: Public SSH Jump and Port Forwarding Server
22 points by ValdikSS 6y ago|4 comments
381.
by ValdikSS 6y ago
It's still not clear whether LE Audio supports high quality duplex audio. They say you can use it for microphone, but that doesn't certainly means voice communication (both listening and speaking at the same time).
382.
by ValdikSS 7y ago
I have an experimental version which works with Turk Telecom. Contact me if you want to test it.
383.
by ValdikSS 7y ago
> So... this is basically fragrouter? No, not really. GoodbyeDPI does not perform IP-level fragmentation, it does not generate/send any packets at all, it only modifies them or drop them. What's called "Fragmentation"
384.
by ValdikSS 7y ago
It doesn't, but INTANG should. https://github.com/seclab-ucr/INTANG
385.
by ValdikSS 7y ago
Probably. I know that people use GoodbyeDPI on MTS mobile career in Russia, to circumvent tethering restrictions. Without GoodbyeDPI, the career introspects HTTP User-Agent header and the internet gets blocked if it looks like a PC user age
386.
by ValdikSS 7y ago
In Russia, DPI systems which are used for censorship generally prevent accessing only blocked domain names or exact HTTP URLs. There's no proxy or VPN censorship in place, so unknown protocols are not getting discarded. We still don&#x
387.
by ValdikSS 7y ago
INTANG should work https://github.com/seclab-ucr/INTANG I have plans to implement INTANG methods in GoodbyeDPI, but it requires some architectural changes first. Modern DPIs in Russia also perform stream reassembly or
388.
by ValdikSS 7y ago
>I'd also be quite interested in knowing which queries are detected and whether different tools have any effect For that, I wrote Blockcheck utility to check whether censorship circumvention techniques could be applied on this ISP o
389.
Audio over Bluetooth: most detailed information about profiles, codecs, devices(habr.com)
6 points by ValdikSS 7y ago|0 comments
390.
by ValdikSS 8y ago
It was only once when my repository got take down by government request, and that time I got a notification prior any actions from Github, after which they restricted access to only said repository from Russia only. I never had problems wit

More ›