openvpn-install creator here :)
Thanks for the mention!
994 karma · joined May 31, 2011
Thanks for the mention!
They are utter shit and not representative of the Swiss hosting market.
Anyway, AWS in South Africa isn't worth it if routes to nearby countries go through London anyway (like it's currently the case).
Likely the server hosting the blog is being DDoSed too. I feel bad for them, but they should know a bit better already...
Doesn't matter when we are talking about DTAG, which is the dominant ISP and will not peer for free. Yeah, you can peer with a lot of smaller networks which is nice, but not enough.
Same applies for the US market where the big players refuse to peer.
You don't even have the choice of direct connections to all of the world with just a single server in Germany.
Feel free to submit a pull request if you can improve OS detection, it certainly is primitive.
> But the real problem is that there's more instances within your script of code getting pulled from the internet with certificate checking disabled
I have just pushed a commit with a better approach.
One can't simply MITM a datacenter.
> literally nobody can trust the internet. Hence why CA's exist
lol
> it's something that is already supported by Github but you are intentionally breaking
I'm not breaking anything. It is supported by GitHub but not by many of the client machines (by default).
> It's called "social engineering" and actually quite a comment method of attack.
I unfortunately can't fix user stupidity.
> That's an edge case.
That's when you've proved you have no idea about what my user base is. Minimal images are very common for OpenVZ templates.
Anyway, and to end this: you've already stated your points and I've given you my explanations. You can either accept them or not, but I don't want to waste more time on this - feel free to fork if you don't like it.
Dissolve in alcohol, avoid water like others suggested. You can't calculate micrograms if the blotter dosage is unknown, lab testing is needed for that.
> if it's in liquid form, I'm guessing it's already in some volumetric dosing
Yes, just take a smaller dose then.
> Lab tested you say... not convenient as in I can't just go to a lab and tell them "hey I need to be trippin so can you check these blotters"?
Here in my country I can... this kind of services are available for free in some European countries.
Energy Control in Spain provides this to foreigners for a relatively small fee. You can contact them at: international AT energycontrol.org
Yes, you are. If your adversary can MITM a datacenter, it's likely that a rouge cert can also be obtained from a trusted CA. If your threat model includes this kind of adversary, please don't use my script. You should also consider how funny would be to host a VPN and route your traffic like this in a network which you don't trust.
> You're also still ignoring my first point as well.
What would an adversary accomplish pointing a DIFFERENT short URL to a malicious script? I don't understand. I'm only using/listing git.io/vpn, so whatever someone does with other URLs is not my problem. There is some fork using git.io/ovpn for example.
> I really don't get your careless stance here.
I'm not careless. You can either run the one-liner which clearly states --no-check-certificate or download and examine the script as long as you want. The choice is on you.
> Github already comes with an SSL cert
But minimal distro images don't come with trusted CA certificates, so it's useless. Yes, I could install them. No, I don't want to.
* Get the blotters/microdots lab tested so you know dosage per blotter, then volumetric dosing. This is relatively easy/accesible although not very convenient.
* If access to crystal and equipment is possible, you can just weight it. Obviously this is rarely a possibility and LSD crystal needs to be handled with care.
People suggesting volumetric dosing at home are simply clueless, "100ug" blotters are almost never ~100ug.
https://github.com/Nyr/openvpn-install/issues/24 https://github.com/Nyr/openvpn-install/issues/66
> given the security and privacy expectations of VPN
The security and privacy expectations are that the network for the server is not compromised. If that's not the case, why would you want the VPN hosted there in the first place?
It's possible and very easy: https://github.com/Nyr/openvpn-install
Disclaimer: I'm the script creator.
DDoS mitigation isn't that expensive antway considering the size of FastMail.
To provide an example: transit to DTAG via GTT (CloudFlare) is always saturated at peak hours. So Akamai has a big advantage (direct connection) if you want to reach Deutsche Telekom customers.
Not really. Akamai has presence inside many "too big to peer" networks, while CloudFlare doesn't (for now).
You can't just compare CloudFlare to Akamai at the moment, they are following very different strategies.
* uBlock Origin: 92,9 MB
* Adblock Fast: 54,7 MB
Considering uBlock Origin packs a lot of functionality (and lists) which your extension lacks, you don't really have much advantage (if any).
Also, consuming a "lower percentage of CPU" is counterproductive. Adblockers should peak the CPU for the smallest amount of time possible, not use a little percentage of CPU time during a longer period of time as you advertise. That's just ridiculous.
Your site is a simple WordPress blog, I'm sure you can perfectly host it for $1/month.
Man, you are selling PPTP VPN on a $14/year VPS... and no, RamNode will not let you run public proxies either. Nor will do Atlantic.net in your $1/month VPS.
Nice try, but... no.
Then it would be nice to have contact synchronization available via CardDAV.
If you expect to get DDoSed, buy protection or go with OVH.