bureaucrat

Are PG and VG ok? What’s the difference that makes Vit E acetate harmful?

It’s still superior.

This attack was done by North Koreans. The site is a North Korean propaganda advertising site, which is visited a lot by South Korean researchers.

CVE no. was created in July. I wonder whether the fix took that long.

No, I favor full screen screenshots because people tend to not include important things when they crop.

Yeah, this is the reason why I don’t donate even a cent to charities that ‘claims’ to help Africans and North Koreans.

I’d rather give a dollar to the local homeless shelter and watch them burn fuel with it at night, than my cent going straight to corrupt governments and militias.

Don’t worry. You won’t get a subpoena or get a surprise visit from you-know-what. Tor relays just relays data, while exit nodes relay data from tor to Internet.

They _were_ also not disclosing that they were hacked last year.

https://web.archive.org/web/20180504001844/https://8ch.net/b...

Yes, people would rather give their entire packet to a hacker than five eyes, wouldn’t they?

Tor asks not to host on them so no.

What datacenter do you use? How much does it cost? Did you get any legal troubles?

I run 3 nodes. They have 1TB traffic cap per month, so they serve 30GB per day per node, and then hibernates. It costs 15$ per month to run. I also use those nodes for personal use, so it’s not that expensive.

Also I’ve convinced my company to run nodes with their VPS credit. 6 nodes, 30GB per day per node. It costs them 30$.

I’d rather trust Google than Brave.

Nothing wrong.

I know. Problem with extensions is they tend to break with version upgrades.

The fundamental question is: why not implement this stupid feature in the first place?

People opened tickets on bugzilla. They have even developed an extension. (which seems to break on every major version upgrade)

It’s even not that hard to implement, it’s just they are valuing their stupid politics and philosophy over user experience.

If a DNA is found on a felony crime site, I think all searches should be possible. If possible restrict it with a need for a warrant.

I’m trying to think but so far there seems no way to justify limiting searches.

Yeah, your suggestion sounds good.

But remember: What tor is doing is hard. They are doing complex crypto, networking, security.... The hard stuff. The real stuff. Torproject is a nonprofit organization with limited capabilities. They are doing their best. It took 3 years to design and implement dos mitigation techniques, for example.

Your proposed plan could take over 10 years, even for a well funded corporation. It might take time and fail. It might create huge vulnerability due to code complexity. Afaik, tor can’t risk that.

It seems that they changed the name from hidden service to onion service.

Simple. Imagine you are using tor and one of the relay has problems(unstable, high latency or packet loss). You don’t know which of the 3 hops failed. We have no option but to build a new circuit and we don’t want that. That’s why tor needs stable, trustworthy relays.

From tor blog:

A new relay, assuming it is reliable and has plenty of bandwidth, goes through four phases: the unmeasured phase (days 0-3) where it gets roughly no use, the remote-measurement phase (days 3-8) where load starts to increase, the ramp-up guard phase (days 8-68) where load counterintuitively drops and then rises higher, and the steady-state guard phase (days 68+).

https://blog.torproject.org/lifecycle-new-relay

They tried to enforce users to become a relay when using as a client but relays should be stable servers so the plan was dismissed.

First of all, it’s hidden sevices, not dark web.

Second, to anyone crawling hidden services or crawling over tor, please run a relay or decrease your hop. Don’t sacrifice other’s desperate need for anonymity for your $whatever_purpose_thats_probably_not_important. It could be some fun thing to do for you, but some people are relying on tor to use the free, secure and anonymous Internet.

A silicon atom is 0.2nm.

No, New York Times. If you don’t allow private mode browsing, I won’t consume your contents.

Maybe respect others privacy before using the ‘democracy and freedom is at stake’ rhetoric.

Why should legit users need to check whether a packet is to a dns server or not?

And blocking https packets with mere confidence is impossible.

Oh no no no, it does add security.

Think DNS over TLS. Okay. You think $ip:$port is a dns connection. You send query with DoT protocol. You get answers. Bingo! It’s DNS.

If it’s DNS over HTTPS, you can’t tell. What domain(dns.quad9.net or cloudflare-dns.com or dns.google or whatever you can imagine) is it? What endpoint and method(/dns-query?url= or whatever you can imagine) is it? You can’t tell.

HTTP adds complexity. Complexity adds security.

“You” need to run port 443 DNS server. Instead we can make this mandatory for everyone.

Your explained method is nearly impossible to implement for medium to large scale networks.

It sounds bad, but the fact that it can’t be blocked is important in terms of censorship.

DNS over TLS can be easily blocked by blocking port 853. To block DNS over HTTPS you need to block the entire HTTPS traffic.

DoH should be supported on the OS network stack, if needed.

I can’t understand this move. Firefox should retreat from this default.

I have. It just doesn’t get the ‘f*ing job done’ unlike Mac or Windows.

Don’t get me wrong, I use Linux extensively. I spend nearly half of my computer time on a SSH terminal. I just hate the graphical part of it.

And what ‘worth’, may I ask, did you get?