HNHacker News
TopNewBestAskShowJobs

bauruine

1,019 karma · joined December 19, 2017

I manage one of the larger Tor relay families https://tuxli.org/

contact: hn@tuxli.ch

submissionscomments
bauruine··on Apple's “iCloud Private Relay” broke risk based authentication
Which datacenters are they using? Could you provide IPs or ASNs?
bauruine··on Hacker deleted all of NewsBlur’s Mongo data and is now holding the data hostage
Shodan has a monitor feature. [0] I haven't used it myself but the description looks like it's about what you want.

[0] https://monitor.shodan.io/

bauruine··on OVH CEO Octave Klaba speaking about the incident [video]
AWS is the new IBM. Nobody ever got fired for using AWS.
bauruine··on The State of IPv6 support on the Tor network
You don't have to run an exit node to help. Just run a guard / middle node. I have been running nodes at home and in data centers since at least 2014 and the only problems i had was one site that redirected me to their .onion site because it thought i was using Tor and once I couldn't access a website because it was hosted in China which blocks all IPs that host Tor nodes.

For Exit nodes it's more complicated. You should read at least [0][1][2] before thinking about running one.

[0]: https://community.torproject.org/relay/community-resources/t...

[1]: https://blog.torproject.org/tips-running-exit-node

[2]: https://community.torproject.org/relay/community-resources/e...

bauruine··on German police take down 'world's largest darknet marketplace'
The common misconception is that you have to run the nodes to do a traffic correlation attack. It's enough to see the traffic of the nodes e.g. on a IXP or as the ISP. [0] Even if the VPN is trustworthy and adversary that is able to break Tor could most likely still sees the traffic and can do a similar attack like he did for Tor.

I'm not saying that this happened only that if you think that there is a global adversary that can break the Tor anonymity a VPN won't protect you.

[0] https://www.ohmygodel.com/publications/usersrouted-ccs13.pdf

bauruine··on German police take down 'world's largest darknet marketplace'
If they are able to do a deanonymization attack on the 3 hop Tor circuit why should a VPN protect you? They can just mount a similar attack on the one hop VPN.
bauruine··on Scaling the Root of the DNS
I've never heard those terms only recursive / resolver and authoritative. Who uses content and proxy?
bauruine··on Proposed bounty for adding virtual camera / microphone support natively to OBS
Sounds like https://www.bountysource.com/
bauruine··on A Vegan Sued Burger King over Its ‘Impossible Whopper’
I wouldn't care. Rats, insects or something like dog food on the other side would may bother me so I think I get the point.
bauruine··on Show HN: My Weekend Project, AutoSSL
Read the readme of

https://github.com/GUI/lua-resty-auto-ssl/blob/master/README...

And tell me what this service can do what resty-auto-ssl can't. And there are a lot of different implementations for every language because it is easy.

bauruine··on Show HN: My Weekend Project, AutoSSL
>Can you read my customers' traffic?

Yes they can.

>A self-hosted option

https://letsencrypt.org/docs/client-options/

Aren't those enough options?

bauruine··on Show HN: My Weekend Project, AutoSSL
>As long as the origin has SSL, the communication is secure end-to-end.

No it isn't. You are doing a MITM.

bauruine··on Processing 40TB of code from 10M projects with a dedicated server and Go
Or you could just put it on some Hetzner box. I would do that but I'm not sure how to contact him.
bauruine··on SACK Panic – Multiple TCP-based remote denial-of-service issues
There is also an ansible playbook on the resolve tab to easily apply the net.ipv4.tpc_sack workaround on all your hosts.
bauruine··on Study finds that a GPS outage would cost $1B per day
google maps works without GPS you just need to remember the directions and follow the signs. Even if someone uses GPS even for the easiest routes doesn't mean that he's not capable of doing it without.
bauruine··on Teen Suicide Spiked After Debut Of Netflix's '13 Reasons Why,' Study Says
>Surely there have been other depictions of suicide in the media? Did they have the same corresponding uptick in suicide rates?

Yes.[0] Newspapers try not to cover suicide whenever possible and when they do they always also write about emergency suicide prevention hotlines. At least in switzerland.

[0] https://www.reuters.com/article/us-health-suicide-media/suic...

bauruine··on Quora User Data Compromised
Pass is awesome. I use it in combination with a YubiKey to store the pgp key. Because every password is stored in an independent encrypted file and every decryption needs a press on the YubiKey even a stolen database and keylogger does not provide access to all passwords.
bauruine··on OVH CEO: Unlike Amazon, Google, “we will never be in competition with you”
Hetzner is charging € 1.00 per TB after you used all the included bandwidth and they are making a profit with that. [0]

[0] https://wiki.hetzner.de/index.php/Traffic/en#Option_1

← PreviousPage 12 of 12