bauruine

Pornhub redirects Tor users to their .onion which has been broken for at least months.

If someone has a contact there please tell them to fix it.

Thats what I meant with the other way around. That would be awesome but how? Are there any protocolls that could do that? Any research? A paper? Because for my simple mind it seems impossible.

True I should have written "They should learn" or they could open security holes.

Now I'm interested on what kind of "home network" you have that makes v6 that hard.

IPv6 has backwards compatibility thats how the IPv6 only mobile networks work. If you think the other way around then my question is how?

Valid point but all those "not network engineers" that build networks can either fight it or implement it. Either way they have to learn it because they get exposed to it at least passively as the article calls it.

I have a really hard time imagine a system that does not have those problems and provides the larger address space IPv6 provides. What would be your solution thats orders of magnitude easier to implement?

Setting up a non trivial network requires a deep understanding of networkig whether it is v4 or v6. I don't get your point.

What changes exactly makes it orders of magnitudes more difficult?

We have millions of customers of which most don't know what an IP is. They mostly have a standard network, wired PCs, wifi devices, consoles etc. like 99% of all people. They browse facebook and instagram, search on google and watch youtube videos all over IPv6 without even knowing. Yes there where network engineers involved to make this work but without some engineers you wouldn't have IPv4 either.

Thats the case in the US afaik. I don't know the stats globally but Switzerland has 40% and no mobile carrier supports IPv6 yet.

>I just want my devices connected.

Which IPv6 does pretty well even if you aren't a network engineer. More than 40% of all requests to google are from IPv6 and the vast majority of those connections are from people that never heard of IPv6.

I have a small API to get the source ASN for IPs [0] that also does bulk exports of all announced subnets by an ASN [1]. Feel free to use it in your scripts there are no rate limits although it's not super performant so please don't do more than like 10 concurrent requests.

[0] https://asnumber.tuxli.ch/asnumber/asnum?ip=2001:67c:99c::1

[1] https://asnumber.tuxli.ch/subnet?as=3303

Yeah it's the same court that recently ordered Quad9 to block the DNS resolution of certain domains https://en.m.wikipedia.org/wiki/Quad9#Sony_Music_injunction

JUICE has a launch mass of 5,963 kg while Juno had 3,625 kg and Voyager only 721.9 kg. I guess it may be a limit of the launch vehicle and the mass the spacecrafts have.

I've tested the site with the Tor Browser and it told me "Yes! You are unique". I've downloaded my fingerprint, closed the Tor Browser and did it again and again it was unique. So they couldn't link the two sessions together which is good. A jsondiff of the downloaded files only showed "canvas" as different which I guess gets generated randomly on every visit?

I think he said it sometimes after KAX17 so around 2022 but honestly I'm not exactly sure since when he doesn't know that much anymore maybe it has been till a few years ago and not 10.

Yeah you're right it's a small group with a lot power. I have no solution to make it decentralized but I'm pretty sure if the solution includes "money" it's not a solution I like.

Tor relies on the IPv4 scarcity to make Sybil attacks more expensive but is slowly moving away from it e.g. the number of allowed relays per IP was recently doubled from 2 to 4 and it may get doubled in the near future again.

>Roger Dingledine does claim to "personally have met" 2/3rds of them

Hey said that he knew 2/3 in the beginning so 10 years+ ago and that it's no longer the case but he would like to increase the number of relay operator he or others of the Tor Project knows again. There are in person relay operator meetups at conferences (e.g Chaos Communication Congress) and I assume that he met most of the people at such occasions. I'm not sure why this should be terrifying.

>whitelist model (which is how Tor manages their high-risk exit nodes)

I'm not sure if this ever was the case but exit nodes aren't threatened specially than other relays and there is no whitelist model for them.

Because they don't care at all about progressive politics and their mouth just says what the most vocal people want to hear. It's all just woke washing.

They they don't need NAT that is simply called routing. The ISP sends every packet that is in your assigned /64 to your routers IP address. It's called prefix delegation [0]

Yes they get a /32 by default (at least in RIPE) larger allocations need justification. But there are 2^32 /64 subnets in a /32 so every ISP gets a complete IPv4 internet of /64 they can assign to their customers at will. Your devices assigns itself a random IP address from that /64 network your ISP gave you via prefix delegation.

[0] https://en.wikipedia.org/wiki/Prefix_delegation

No ISPs don't need to do NAT but you can if you like. You also don't have to do NAT with IPv4 if you only have one device or get a subnet from your ISP. It's just done because we don't have enough v4 addresses.

They can do subnet to customer correlation. The IPv6 is randomly generated by your device if you use SLAAC. But if your ISP is an adversary you have pretty much lost anyway. If they provide you with a router they can see all devices in your network (MAC and hostname) and they could also map certain devices to certain port ranges and sell that too.

Every device implements privacy extensions which changes the address every 24 hours. It's no longer based on the MAC and hasn't been for a long time.

You can easily do this by looking at the IP address. All exit node IPs are public, you don't need browser fingerprinting for that.

AWS engineers must be horrible because others are able to do it for at least an order of magnitude less.

A single 800Gbit/s port can do 259200000 GB a month. That's 5'184'000$ a month. Their traffic prices are ridiculous and there is no excuse for it.

They all have an alt-text.

https://xkcd.com/1053/

True but the last part of the article is basically only about the computation and not about mathematical breakthroughs. And from that point of view both numbers are equally infeasible to compute right?

>you need to check 2^903 edge colorings

This instantly reminded me of the "It will never be possible to brute force AES256 (Check 2^256 possibilities) because, even in the best case, it needs more energy than the whole Solar system contains" [0] The author states that 2^903 should be possible to do in less than a year. Am I wrong and those aren't related problems? Or is the author a bit optimistic?

[0] https://security.stackexchange.com/a/6149

That's possible true for the <50$ servers but with 143$ it's sustainable for the provider even if you use it 24/7.

Yes 0.0005$ per GB egress and a provider in Europe still makes money.

They sell pretty much everything they had in the past 10 years in the Server Auction https://www.hetzner.com/sb

Tor uses a "client-server" model at the moment. All relays have to publish their server descriptor to the directory authorities (9 Tor relays run by super trusted community members). The article you linked is about how to scale the network after those become a bottleneck, where one possibility would be P2P or as they propose PIR.

What potential legal or ethical issues do you see with access via Tor onion service?