bauruine

10 ms·

91.
Uniting for Internet Freedom: Tor Project and Tails Join Forces(blog.torproject.org)
7 points by bauruine 2y ago|0 comments
92.
by bauruine 2y ago
Consumer routers are all extremely limited when it comes to many connections. Even an Ubiquiti UDM Pro only allows 65536 by default.
93.
by bauruine 2y ago
About [3]. In Switzerland most of the fiber network is built by Swisscom, a former telecom monopoly and still 51% state owned company that also owns the old copper network. Other ISPs can use the network but everyone has their own router wi
94.
by bauruine 2y ago
ONT = The device you have at home where the fiber goes in (router / modem) OLT = The device where the fiber goes in on the provider side
95.
by bauruine 2y ago
That's still an order of magnitude more than what you can get with rented servers. I pay between 0.2 and 0.4 per TB doing nearly 2000TB a month.
96.
by bauruine 2y ago
I did 150TB+ on a 40 Euro Hetzner server for years without any issue and also did the same amount in a similar price range on multiple different providers. The cloud and CDNs charge a huge markup.
97.
by bauruine 2y ago
You need to ask your ISP either to announce it with their own ASN or peer with you if you have your own.
98.
by bauruine 2y ago
You only need an ASN (and at least for RIPE it's a requirement) if you have multiple upstreams.
99.
by bauruine 2y ago
If you are in RIPE land you can get a PI (provider independent) /48 from a LIR (a RIPE member) and ask your datacenter to announce it. https://www.ripe.net/manage-ips-and-asns/ipv6/request-ipv6/h...
100.
by bauruine 2y ago
Why use Tailscale if you can just setup a WireGuard tunnel?
101.
by bauruine 2y ago
They mention a 700$ AWS bill using S3 + Cloudfront (0.08 per GB) so about 700/0.08 ~9TB. In the range of what every 10$ VPS can do a month.
102.
by bauruine 2y ago
About what? Running Tor nodes is pretty boring as long as you don't get a police visit which I luckily didn't have till now.
103.
by bauruine 2y ago
It's the provider I'm using that does it for the Tor exits people host with them. I don't have my own IPv4 space, which is something like 8k$ for the smallest useful subnet and that's too expensive for a hobby. They just
104.
by bauruine 2y ago
Most (all?) of them aren't in Russia. I run half of the "Russian" exits and they are in Norway they just use Russian IPs.
105.
by bauruine 2y ago
You can get 4x22TB (60TB with RAID5) for ~120$ so for less than 250$ you get the storage with geo redundancy. https://www.hetzner.com/dedicated-rootserver/sx65/
106.
by bauruine 2y ago
Yes it's only IPv4 where it's practical to scan the whole address space in minutes but there are methods to find IPv6 addresses [0] certificate transpareny logs are also scanned for hostnames to get AAAA records. But from my exper
107.
by bauruine 2y ago
Most ISPs don't allow BGP announcements smaller than /48 so you don't get any usefull information from that.
108.
by bauruine 2y ago
Tails is a single machine that runs Tor you are mixing it up with Whonix which uses a gateway VM with Tor on it and a workstation VM that gets routed via the gateway.
109.
by bauruine 2y ago
There was a talk about this at this years FOSDEM [0] Regarding the "Several European countries are betting on open-source software for their technology. In the United States, eh, not so much." I thought software developed by the U
110.
by bauruine 2y ago
>At present – Thunderbird version 128.0 is only offered as direct download from thunderbird.net and not as an upgrade from Thunderbird version 115 or earlier. A future release will provide updates from earlier versions.
111.
by bauruine 2y ago
Not only peering agreements but 70%-90% [0] is directly served from your ISPs data center. google sends your ISP the server but rackspace, power and network is provided by the ISP. [0] https://support.google.com/interconnect
112.
by bauruine 2y ago
If you pay 1000+ for the flight an additional 40 Euros isn't that bad.
113.
by bauruine 2y ago
That's called domain fronting [0] and is disabled by all big CDNs now. [0]: https://en.wikipedia.org/wiki/Domain_fronting
114.
by bauruine 2y ago
>However, we cannot yet endorse its appropriateness for production systems without further peer review. [0] Not an alternative and won't be for the foreseeable future. [0]: https://github.com/francoismichel/ssh3
115.
by bauruine 2y ago
Because nobody has written an sshd in a memory safe language with the same track record of safety as OpenSSH. I personally wouldn't trust a new sshd for a few years at least.
116.
by bauruine 2y ago
I assume it's for people who smoke.
117.
by bauruine 2y ago
The site is about 10 packs.
118.
by bauruine 2y ago
Norway is a NATO member. One of the founding members even. I hope they are on the "Do NOT invade" list.
119.
by bauruine 2y ago
The interface to DSL or coax only has to be a layer 2 bridge. You can put many modems into bridge mode so they don't do any layer 3 (IP) at all. For fiber, if you don't use PON at least, even a standard SFP(+) will do.
120.
by bauruine 2y ago
The article says that the "modems" affected are the Sagemcom F5380 and ActionTec T3200 which from a quick search looks like full fledged CPEs aka routers with a web interface and NAT, WIFI and all the stuff. They also write about

More ›