Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)K

khorovodoved

@ khorovodoved @lemm.ee

Posts
0
Comments
77
Joined
3 yr. ago

  • So what ARE the current "good" VPN services?

    Jump

  • Using VPN over TOR greatly reduces performance. Also, for most cases TOR is enough,. Why would you slap a VPN on top of it?

  • So what ARE the current "good" VPN services?

    Jump

  • They also take your IP.

  • So what ARE the current "good" VPN services?

    Jump

  • I would not put Nym in the same category as Mullvad and IVPN. It is a new and immature product. I have not heard that they have passed any sort of audit, their claims about non-log policy have not been tested yet.

    Their infrastructure is decentralized only in name. In fact, they have the same problem as session, the cost of maintaining a server discourages decentralization so much that no one does that. As a result it nullifies any advantages their mixnet might offer, as chances are all your hops are between the servers of the same owner.

  • Google Play Store gets a smarter way to handle sideloading third-party apps

    Jump

  • You are right. Removing play services right now.

  • Xiaomi Redmi Note 14 5G review - The powerful entry-level smartphone with a big price advantage

    Jump

  • You can, it is just very inconvenient to unlock bootloader.

  • Which new Protocol or Standard are you most excited about?

    Jump

  • Intensions do not metter in this case. It can be used for that and that's enough. If you block any connections that use ECH (by blocking cloudflare-ech for example) users will have no choice but to fallback to unencrypted CH.

  • Which new Protocol or Standard are you most excited about?

    Jump

  • I doubt it. Today there is a huge trend towards censorship in the world. And ECH is exactly what a censor would not want. It is already blocked in Russia after Cloudflare enabled it by default and I would expect it to be blocked in the west "for anti-piracy reasons" very soon.

  • Base installation voidlinux doesn't allow sudo in Xorg

    Jump

  • Try starting with dbus session. Also try lxqt-session and startlxqt commands.

  • There is now an 'on the go' section in Flathub to promote mobile apps

    Jump

  • Because it is affiliated with gnome...

  • Deleted

    Permanently Deleted

    Jump

  • TLS clienthello contains unencrypted string, called SNI, that contains the domain of a destination web site. It must be unencrypted to work, because web sites read this string to determine which certificate to use.

    You do not break encryption. It is unencrypted by design.

    With all due respect, but it seams to me that you do not quite understand how HTTPS works. For encryption it relies on TLS protocol. And TLS does not encrypt everything, it encrypts only payload, but it also has to share some additional data to even establish encrypted connection. The majority of that work is done by exchanging clienthello and serverhello. To do that client has to clarify what server he is even trying to reach as there can be multiple servers on IP, but they have separate certificates, support different cyphers etc. For that a string "SNI", that contains domain name is used. Only after client and server exchange all the necessary information encrypted conversation can start. So, by looking into clienthello and reading SNI any MITM can determine what web site are you trying to reach.

  • Deleted

    Permanently Deleted

    Jump

  • It would not be hard at all. China, Iran and Russia already do that. Clienthello is not encrypted and that is all you need.

    And ECH would not solve this as you can just block cloudflare-ech (or other, depending on CDN) domain itself and force clients to fallback to non-encrypted clienthello.

  • Deleted

    Permanently Deleted

    Jump

  • Everyone gansta till DPI system is installed.

  • I have been out of the loop for over a decade, where do I begin?

    Jump

  • That's just VPN with extra steps. Why not just set up a SOCKS5/Shadowsocks/wireguard/whatever on any hosting and get a lot better experience?

  • Linus Torvalds: Speaks on the Rust vs C Linux Divide

    Jump

  • Zig has other selling points, that are arguably more suitable for system programming. Rust's obsession with safety (which is still not absolute even in rust) is not the only thing to consider.

  • Linus Torvalds: Speaks on the Rust vs C Linux Divide

    Jump

  • Zig is indeed designed specifically for such tasks as system programming and interoperability with C code. However it is not yet ready for production usage as necessary infrastructure is not yet done and each new version introduces breaking changes. Developers recomend waiting version 1.0 before using it in any serious project.

  • Deleted

    Gnome merges XDG session management wayland protocol (but disabled in Gnome 47 by default)

    Jump

  • Does it require to be enabled at compilation, or it can be toggled at any time?

  • Telegram Sparks Outrage Over FAQ Changes Even as Key Language on Private Chats Remains.

    Jump

  • Telegram published a statement on X/Twitter that they are not changing any policy. The just removed misleading line in their FAQ, that stated that you can't report private chats (which you always could).

  • Man pages maintenance suspended

    Jump

  • I doubt it. It is basically equivalent to buying a proprietary software license for 1% of a revenue. I doubt any large business would be willing to spend that much on a single piece of software. And it would always be only one piece of software at a time.

  • Porting systemd to musl libc-powered Linux

    Jump

  • He already has the overhead of maintaining to C libraries, which is a lot bigger problem.