mirimir

90 ms·

931.
by mirimir 7y ago
Sure. But the point is that the file could have been decrypted by this approach. And it wasn't done, even though the data was available in the backup. Unless there's something wrong with the approach described in TFA.
932.
by mirimir 7y ago
Right, give everyone red, until the noise level drops below some threshold. But then, people with loud horns could shut down traffic.
933.
by mirimir 7y ago
But wait! I doubt that their "decibel meters" are very directional. So perhaps drivers that currently have the green could honk more, and so force the signal to skip a cycle.
934.
by mirimir 7y ago
OK, my $0.02 as someone who's used lots of psychedelics. Start with a couple grams of dried Psilocybe. And don't combine it with alcohol, marijuana, etc. If you liked that, after at least a couple weeks, try two or three times as
935.
by mirimir 7y ago
I do miss that stuff.
936.
by mirimir 7y ago
One good piece of advice from Abercrombie is that only liars say "trust me". That would never occur to anyone who's really being honest.
937.
by mirimir 7y ago
OK, so how about a general content equivalent to Sci-Hub? Back in the day, when the issue was sites requiring registration, bugmenot.com appeared. And now we have archive.today and other sites. But they only archive when someone requests. S
938.
by mirimir 7y ago
Yeah, but here's the thing. I realize that. And there are too many sites that I'd want to read, even just from HN links. So the per site subscription model is just unworkable. So from me, they get nothing now. But with a system fo
939.
by mirimir 7y ago
Good point! Actually, that works well enough with OpenVPN. I've managed a crude setup that switches two-hop nested VN chains at 10 minute intervals.[0] I should also have mentioned the Orchid app for Android (and perhaps soon for iOS).
940.
by mirimir 7y ago
Oops, I neglected to address this point: > More important, what purpose is there to reference a 5 year old patched security vulnearbility? Sure, it's old, and everyone screws up sometimes. A few things bother me about it. One is tha
941.
by mirimir 7y ago
I agree that malware means game over. But firewall rules at least protect against wimpy malware. And yes, I really don't know why they haven't embraced Whonix. What's funny is that Tails has more visibility, and it's act
942.
by mirimir 7y ago
Yes, I should have mentioned Whonix. It's the only sane way to use Tor. And about the TorifyHOWTO, the dumbed-down website redesign has made that stuff even harder to find than it was before.
943.
by mirimir 7y ago
Huh. That is an interesting idea. So you could have Tor exits that aren't published. That would get around the CAPTCHA plague for Tor users. Another option that I've considered is IPv6. Relays with both IPv4 and IPv6 must publis
944.
by mirimir 7y ago
Good questions :) > First of all running your own leads directly back to you. Second it puts you on the list of even more paranoid people. It doesn't point to "me", at least in meatspace or even as Mirimir. It points to so
945.
by mirimir 7y ago
Yes, that is an issue for Tor. But it's still arguably worse for I2P, because all peers can connect to each other. But regardless, that's why I never use Tor or I2P from home, except through nested VPN chains. I don't care so
946.
by mirimir 7y ago
Why? It "falls flat" if you're using a malicious guard. But then, you're already screwed, in that case.
947.
by mirimir 7y ago
The issue isn't that the CMU people exploited the "relay early" bug. It's that the FBI subpoenaed all their data, tracked down onion services, and served malware. This is just the outcome from busting one site, PlayPen:
948.
by mirimir 7y ago
Well put! I left it as "network effect". Probably too opaque. It's like there was a window in the early 00s, when stuff like Tor, Freenet and I2P could recruit enough nodes to be viable. Remailer networks were just too damn h
949.
by mirimir 7y ago
Upon reflection, I gotta say more. I do share the concerns about Tor's security, and about the Tor Project's focus. However, I don't believe that it's useful to argue about the culture war soap opera. As an attentive out
950.
by mirimir 7y ago
About Freenet, see https://news.ycombinator.com/item?id=22216177 I2P was rather like the love child of Freenet and Tor. Like Freenet, it's pure P2P, where all users route traffic for each other. And although there are
951.
by mirimir 7y ago
Yes. See https://news.ycombinator.com/item?id=22215126 Not one person. Hundreds, maybe thousands. Because of a exploited vulnerability, and failure to pay attention to an upsurge in suspicious relays. Unless you consider th
952.
by mirimir 7y ago
Huh? Sites like the BBC don't see guards, or middle relays, just exit relays. However, Tor relays are exits only if their torrc has this: ExitRelay 1 Otherwise, to start, they're just middle relays. It takes a while to ear
953.
by mirimir 7y ago
Freenet is pure P2P, and there's no option for Internet access. Also, it doesn't do onion routing like Tor or I2P do. It employs a sophisticated encryption and forwarding strategy, to obfuscate senders and recipients from innocent
954.
by mirimir 7y ago
Sure. However, I2P is the only alternative that's been implemented at any scale, to my knowledge. Papers have been published, yes. But I'm not aware of any other anonymity networks that have even gone public. Why that is, I'm
955.
by mirimir 7y ago
I don't think that's possible. A private/unpublished bridge, yes. But if you just run a relay with ... PublishServerDescriptor 0 ... I don't think that it would get a guard flag, and so your tor client wouldn&#x2
956.
by mirimir 7y ago
I bother with Tor because it's this onion routing network that's pretty large and well used. And maybe even ~secure and ~uncompromised, but counting on that is iffy. I mistakenly said "running your own guard". What I mea
957.
by mirimir 7y ago
I share your concerns. But I haven't given up on it entirely. I mean, what else do we have? VPNs, sure. And maybe I2P. But it'd be very sad if Tor were totally compromised.
958.
by mirimir 7y ago
Tor protects the server. Paying and managing is separate. And yes, also uses Tor, plus nested VPN chains.
959.
by mirimir 7y ago
As long as you're anonymous enough about it, I don't see why running your own [private bridge] is any less anonymous than using an unpublished bridge, or a snowflake proxy. An adversary with lots of intercepts could certainly figu
960.
by mirimir 7y ago
Lots of onion services have been deanonymized. The "relay early" bug that CMU researchers exploited deanonymized perhaps hundreds of sites. And, both directly and indirectly via malware served by compromised sites, thousands of us

More ›