jedisct1

67 ms·

901.
by jedisct1 8y ago
I don't feel comfortable with DNS services being "observed".
902.
by jedisct1 8y ago
UDP indeed fit DNS like a glove, except on links with excessive latency / packet loss. This is more of an implementation issue than a problem with UDP, though. I'm not very familiar with DNSCurve but I don't think it has any
903.
FreeBSD Security Advisory: Resource Exhaustion in TCP Reassembly(lists.freebsd.org)
3 points by jedisct1 8y ago|0 comments
904.
OVH Glorytun – A VPN intelligently aggregating the bandwidth of multiple links(github.com)
1 points by jedisct1 8y ago|1 comments
905.
by jedisct1 8y ago
They are probably way faster. Speed is not what libhydrogen and libsodium are obsessed about.
906.
by jedisct1 8y ago
Meanwhile Apple is cool with the Verizon VPN [1], because it also blocks ads in applications, but server-side, and that makes a huge difference (?). Or rather, because this is Verizon. [1] https://techcrunch.com/2018/07
907.
by jedisct1 8y ago
Use https://github.com/jedisct1/dnscrypt-proxy
908.
by jedisct1 8y ago
Go to https://cloudflare-dns.com/help/
909.
by jedisct1 8y ago
Enhanced privacy if you consider what's between your device and the DNS operator. But the DNS operator itself learns more about you. They can more accurately fingerprint your devices with DoH than regular DNS due to HTTP sessions, HT
910.
by jedisct1 8y ago
Not necessarily. CDNs have been doing, and keep doing a great job at pushing new things forward. Fastly, Cloudflare and Akamai already have implementations and test websites.
911.
by jedisct1 8y ago
It doesn't have to be. On iOS, DNSCloak will provide system-level DNS authentication (plus filtering, caching, etc). On Android, AdGuard Pro also does. On Windows, Simple DNSCrypt does. On Unix, dnscrypt-proxy does.
912.
by jedisct1 8y ago
Major resolvers do DNSSEC validation. The real problem is the very low number of zones that are actually signed. Which shouldn't be an excuse for not doing DNSSEC validation if only because your own zones can be signed. You know, the o
913.
by jedisct1 8y ago
Install rust-doh: https://github.com/jedisct1/rust-doh There are also tutorials on how to set up your own DNSCrypt server: https://github.com/jedisct1/dnscrypt-proxy/wiki/How-to-setup...
914.
by jedisct1 8y ago
What is your non-web WASM backend?
915.
by jedisct1 8y ago
I wouldn't trust these numbers too much. Pretty sure Windows XP usage remains far more than 3% in India and China.
916.
by jedisct1 8y ago
Go binaries not running any more on Windows < 7 is going to be a serious issue.
917.
by jedisct1 8y ago
I recently tried Linux on the desktop. Which is why I just ordered the Macbook Pro.
918.
by jedisct1 8y ago
And Webassembly, and iOS, and Android.
919.
by jedisct1 8y ago
As a user, I'm super happy with `./configure`, that works the same way across all applications using it, and has been for the past 20 years. You don't want to look at the actual script, but as a user , it is very convenient.
920.
by jedisct1 8y ago
Who is still using jQuery in 2018 besides legacy Wordpress modules? Do we really need an "alternative"?
921.
Labeled Tab-separated Values(ltsv.org)
2 points by jedisct1 8y ago|0 comments
922.
by jedisct1 8y ago
https://github.com/jedisct1/piknik
923.
by jedisct1 8y ago
Or use Piknik https://github.com/jedisct1/piknik
924.
by jedisct1 8y ago
npmjs shows 1,325,674 weekly downloads. The current version was released 3 years ago. The code is small and straightforward. Using exec("cat x " + userdata) to read a file in any language should immediately drive any developer nu
925.
by jedisct1 8y ago
For a fast and secure RNG, take a look at Google Randen instead: https://github.com/google/randen
926.
by jedisct1 8y ago
dnscrypt-proxy is compatible with Cloudflare and now has built-in support for Tor. Just add `proxy = "socks5://127.0.0.1:9050"` to the configuration file.
927.
by jedisct1 8y ago
TLS tickets are indeed a kind of a cookie. Even without tickets, having TCP sessions means that server operators can link multiple queries to a single device, even if multiple devices share the same external IP. This gives server operators
928.
by jedisct1 8y ago
dnscrypt-proxy is probably the most popular DNS-over-HTTPS client. https://github.com/jedisct1/dnscrypt-proxy
929.
by jedisct1 8y ago
This is great. I was already using dnscrypt-proxy to limit access to some websites during certain days/times, but restrictions at application level is even better, at least for iOS devices.
930.
by jedisct1 8y ago
UDP doesn't require any connection at all

More ›