bauruine

Most of the hardware stuff is done by the data center anyway. You just create a ticket for remote hands and the data center staff is going to rack the server you sent them or replace a hard disk etc.

I'm using Infomaniak. I especially like their renewal warranty [0]. It's a few bucks more a year but they renew the Domain even if you are not paying and try to contact you by phone, snail mail etc. They also support IPv6 and DNSSEC.

[0] https://www.infomaniak.com/en/renewal-warranty

Found it myself. https://news.ycombinator.com/item?id=35047624

Do you have a link to the tribal reservation ISP story? I can't find anything about it.

Yes at the moment the IPv6 internet is way more secure even without a firewall but there are possible attacks to enumerate the used IPv6 addresses. [0]

[0]: https://isc.sans.edu/diary/Targeted+IPv6+Scans+Using+pool.nt...

I run multiple private bridges and they aren't in this list.

I'm from Switzerland so I may get "gender" wrong but yeah that is the progressive take here since the 2000s or so. That just means that you shouldn't force gender stereotypes on children. Let boys play with Barbies and wear pink if the like it and stuff like that. But nobody thought about their gender because of this, they are still boys. Nowadays, at least from what I read online, it feels like your gender depends on these sterotypes and if you don't conform to them you're trans.

I use borgbackup to a server and once a month upload it to backblaze b2 with a 90 day retention policy on the bucket. The policy doesn't let you modify or delete the files for 90 days even if you have access to the account. Costs something like 5$ for the 3x500GB of backups I have.

SFP+ uses less power, has less latency and DAC / Twinax cables cost less then 30$ for 6 meters. The only downside is that DAC is limited to 6 meters I think.

You can get dual port 10 Gbit cards from ebay for less than 20$ right now.

This is very unlikely as the total exit capacity is very low in .ua. Only 110.26 MiB/s [0] out of 21083.12 MiB/s [1] total exit bandwidth is in the Ukraine. Have you tried creating a new circuit a few times and look what exit you are using?

[0] https://metrics.torproject.org/rs.html#search/flag:exit%20co...

[1] https://metrics.torproject.org/rs.html#search/flag:exit

The Amazon website is just pure and utter garbage. I seriously don't know why anyone can buy anything there. They would have to sell everything at least at halve the price for me even considering using them instead of Digitec. Amazon has little traction because Switzerland is small so they don't care, not as price sensitive as others and hence people don't like to torment themselves just to save a few bucks.

The filtering system was way, way better than everything else we had for a very long time and they often also where the cheapest. I write was because honestly I haven't visited many other shops for quite some time. But whenever I check on toppreise it's only marginaly more expensive then the other shops. It's convenient to have everything from the same shop where you know you have it the next day. And the "Geiz ist geil" mentality just doesn't realy exist in Switzerland.

They are only reachable by multiple hours hiking high up in the mountains. That's a lot of "work" just for the chance of a few hundred CHF.

I work for an ISP in a small country and we have to manage more than 100k network devices. Network automation is absolutely a must even on our rather small scale.

The library is 20KB even with the 400k requests a month that's less than 10GB of traffic. I don't think that's worth the time to do anything.

Yes Tor usage by default is trivial to detect because the list of Tor nodes your client connects to is public. The EFF has a nice interactive graphic that shows what different actors see if you use Tor [0] You can make that harder to detect by using a bridge. https://bridges.torproject.org/

[0] https://www.eff.org/de/pages/tor-and-https

It's the most basic file possible but it does it's job.

cat /etc/systemd/system/upgrade-system.service

  [Unit]
  After=network-online.target

  [Service]
  ExecStart=/bin/bash -c '/usr/bin/snap refresh && apt update && apt upgrade -y'

  [Install]
  WantedBy=default.target

Not updating isn't a solution. What works for me is a systemd service that does a snap refresh on boot. At least I have some controll on when it updates.

You could also use e.g. nginx to cache the site you don't need Cloudflare for that.

There are http benchmarking tools like wrk [0]. You don't need a ddos service for that.

[0] https://github.com/wg/wrk

I do 2.9 PB a month for less than 1000$. And this is for rented servers so even includes the hardware. That would be more than 30k$ at your rate. Not going to argue about the rest but the cloud is charging horrendous rates for egress even with negotiated discounts.

Add a 0 to maxwidth (6400) and you can read it.

Remember when imgur was marketed as an imagehost that doesn't suck? Now i can't read 2/3 of the text because it's just a blurry mess if I'm not manually changing url parameters. I'm using Firefox on Android and I can't find another method to get the full image. Am I missing some button to show the full res image?

Some statistics from one of my servers regarding Tor abuse. From 1130 abuse IPs in my http access log 4 are Tor exit nodes and from the 1905 ssh bruteforce attacker IPs 3 are Tor exit nodes. Stop operating Tor nodes would therefore reduce the abuse by basically nothing but take Tor from the people that need it.

>eh, it's still worth it

Yes it's totally worth it.

Running an exit from your home IP is a very, very bad idea so he most likely has rented a server somewhere and is running the exit node there.

You seem to mix up a lot of stuff here. The Tor Project thinks TLS for onion services is unneeded because they ARE end to end encrypted by design. The address itself is an ed25519 public key. And exit nodes are not involved in connecting to an onion service at all.

For connections to the clearnet it was always highly recommended to only use TLS and recent Tor browsers have now finally enabled https only mode that displays a big warning if you try to connect to a http server.

Sure they can create routers with more space for the routing table but you still have to replace all the old ones which isn't cheap.

A single port of a router at an internet exchange can reach more than 1000 different routers. A router has to decide to which IP it should forward a packet not just the port.

I'm running exits since about 9 months. Have been running non exits for over a decade before. The exits are run by a non-profit (a Swiss Verein) and use the recommended setup like described in the blog post. The ISP knows it's an exit, it has a page on port 80 describing it and a PTR record that contains tor-exit.

No contact with the police till now.

If you would like to support the Tor network but don't want to run nodes yourself you can donate to one of the relay associations https://community.torproject.org/relay/community-resources/r...

The problem is that the routers that have to hold the routing table can only handle a limited number of routes. There is a good article from APNIC about the topic.

https://blog.apnic.net/2021/03/03/what-will-happen-when-the-...