bauruine

12 ms·

151.
by bauruine 3y ago
Or drop table|database or delete from. To _nearly_ lose data it took multiple clueless engineers and not detecting the issue for months. I wonder how Diversion handles operations that possibly delete data. Whats their solution?
152.
by bauruine 3y ago
So multiple people did a git reset --hard origin/master and nobody complained or checked what and why this was done? That's not "one data scientist with the wrong command" but the whole team that fucked up hard IMHO.
153.
by bauruine 3y ago
It is backwards compatible. There are multiple ways to connect to an IPv4 host with an IPv6 only host. Many mobile networks are IPv6 only. If you want it the other way around. How should that work?
154.
by bauruine 3y ago
I run a largeish Tor relay family on rented servers and have thought about running exits on my own "ISP" for quite some time. I already have an ASN and IPv6 addresses but Tor needs v4 and those are prohibitively expensive to buy a
155.
by bauruine 3y ago
If you have an embedded device that has to work for 20 years without update you better design it's networking part so that telnet isn't an issue in your threat model.
156.
by bauruine 3y ago
If you want to go down the rabbit hole have a look at VPP. [0] It's a very fast, like 100GBit/s+ and 100 Mpps+, user space routing engine for commodity x86 hardware. Pim van Pelt has many interesting Videos [1] and articles [2] ab
157.
by bauruine 3y ago
Getting it for free with your Apple device sounds like "monetise it via the sale of hardware devices" which they supposedly don't do.
158.
by bauruine 3y ago
The certificate transparency logs are a merkle tree.
159.
by bauruine 3y ago
I've looked it up for you. "IIRC it just should look like normal TLS traffic." and "because basically everything does it" was correct. "/* Browsers use the TLS hostname extension, so we should too. */
160.
by bauruine 3y ago
Plain Tor says "Hi there! I'm connecting to a Tor node" because all relay IPs are public. You can't hide that fact with ECH or by not sending the SNI. Every second invested in that is just wasted.
161.
by bauruine 3y ago
According to the spec [0] it looks like SNI is not needed. It just specifies a TLS connection. Why does it send an SNI? I guess because basically everything does it so why should Tor not send it? [0]: https://spec.torproject.org&
162.
by bauruine 3y ago
IIRC it just should look like normal TLS traffic. They are unique to each of the already public Tor relays not the users. What benefit would ECH bring? You can still look at the IP and know it's Tor. All the "let's hide that
163.
by bauruine 3y ago
Those random domains belong to Tor relays. The list of relays is public anyway so you can just look at the IP address to see that it's a Tor connection. Obfuscating it would achieve nothing. If you want to hide that you are using Tor y
164.
by bauruine 3y ago
The captcha has reCAPTCHA written on it and the Tor Browser does like 15 requests to google.com domains. None of the archive.is|li|ph|today domains use Cloudflare name servers and resolving archive.is from all over the world returns not a s
165.
by bauruine 3y ago
archive.is doesn't use Cloudflare. The captcha is reCAPTCHA.
166.
by bauruine 3y ago
Bandwidth is about 2 orders of magnitude less on non-cloud even without any negotiation or commitment. How much do you have to commit for e.g. Cloudfront to pay 2 orders of magnitude less than their list price of 0.02 per GB?
167.
by bauruine 3y ago
I have a few 100million RIPE atlas credits I don't need. So if anyone want to test it just drop me a mail with your RIPE account and I'm gladly send you a few millions. My email is in my profile.
168.
by bauruine 3y ago
The site provides an onion service [0] I wouldn't call that "opposed to privacy". [0] http://archiveiya74codqgiixo33q62qlrqtkgmcitqx5u2oeqnmn5bpcb...
169.
by bauruine 3y ago
Ups forgot that that there is this one relay that I don't run that is also called bauruine. I've updated the link to MyFamily. nusenu shows the authenticated domain which is tuxli.org for my relays.
170.
by bauruine 3y ago
I run one of the bigger Tor relay families [0] with around 3.5% of the exit bandwidth [1]. Hosting high bw stuff is actually pretty cheap if you stay away from the cloud. I don't pay five figures per month for all these relays it'
171.
by bauruine 3y ago
>However, clients still need to ask the directory for information about a specific onion address, which would again allow mass collection of onion addresses. With V3 onion services, this is prevented by using key derivation to derive a d
172.
by bauruine 3y ago
Yes all onion service connections appear from 127.0.0.1 but the current v3 onions are not guess or enumerateable. If you don't publish your address you get 0 attacks ever. Have you put your onion address all over the Internet to get at
173.
by bauruine 3y ago
And even if you only use 500Mbit/s it's more than 3k$ in cloud egress fees saved.
174.
by bauruine 3y ago
rfc4941 is from 2011 if you use an OS that isn't using it you have bigger problems.
175.
by bauruine 3y ago
You can create an account with an email address if you click on "create your account" next to the "Log in" button.
176.
by bauruine 3y ago
Any chance you are going to implement non http(s) Outbound probes? Not everything is http so a generic TCP connection check would be great. edit: Is it possible to add services in an automated fashion with an API?
177.
by bauruine 3y ago
There is still the chance that the person that created the 4 line dependency also just copy pasted it from the flawed StackOverflow answer. Or is the same person or is also just a random person creating the package like the random person th
178.
by bauruine 3y ago
Thats common knowledge because De Beers wants us to think that. https://archive.ph/eFwVj
179.
by bauruine 3y ago
What's your problem with the IPv6 end-user experience? Hundreds of millions of end-users are using it without even knowing what an IP is.
180.
by bauruine 3y ago
Adding to this as a relay operator, while I can't speak for the Tor Project or other operators, I think this is a perfectly valid use case for Tor and I happily provide ressources for it.

More ›