ranger_danger

> SimpleX does not.

https://simplex.chat/faq/

> Private message routing is, effectively, a two-hop onion packet routing.

And actually, it's even better than that:

> Private message routing routes packets (each message is one 16kb packet), not sockets. Unlike Tor and VPN, it does not create circuits between your client and destination servers. The forwarding server creates one shared session between itself and the destination, and forwards all messages from you and other clients to that destination server, mixing messages from many clients into a single TCP session.

> As each message uses its own random encryption key and random (non-sequential) identifier, the destination server cannot link multiple message queue addresses to the same client. At the same time, the forwarding server cannot observe which (and how many) addresses on the destination server your client sends messages to, thanks to e2e encryption between the client and destination server. In that regard, this design is similar to onion routing, but with per-packet anonymity, not per-circuit.

> This design is similar to mixnets (e.g. Nym network), and it is tailored to the needs of message routing, providing better transport anonymity than general-purpose networks, like Tor or VPN. You still can use Tor or VPN to connect to known servers, to protect your IP address from them.

One idea I had for an improvement to Tor wrt sybils was to split traffic up and send different pieces to different nodes, possibly using different circuits for the pieces, so that even if you have control over all the nodes in one path, you most likely won't have full control over all the paths it sprays the pieces over.

reader mode button works wonders for me

How do you know data is copied to their servers?

> If you serve as a mere conduit for automatic transmission of user communications, there are no other qualifications or obligations you need to meet. If you serve a caching function, in addition to the two requirements above, you must maintain comply with the notice-and-takedown process.

https://www.copyright.gov/512/

https://internetcases.com/2024/02/12/dmca-subpoena-to-mere-c...

Development still continues by others: https://codeberg.org/mv12star/shitter

Aurora Store does the same thing to facilitate downloading Play Store apps.

And the company's previous name was, ominously... Luminati.

Go look at the github commits for llama.cpp and read the actual code they're adding to support new model/quant types... to me at least it's some serious black magic, and the sheer number of genius developers and activity level in this repo is absolutely wild.

Imagine what could happen if other open source projects had this level of engagement and expertise at hand and eager to contribute... instead of arguing over politics and making yet another fork of something.

For cars they most certainly do.

Besides the irony of a privacy-conscious user using facebook to buy a car... those "perfectly-serviceable vehicles" are 1. no longer manufactured, and 2. will not last forever.

Unless a new age of unconnected cars becomes a reality in the near future, I don't see this being a long-term solution.

I think most people would not be on board with your solution, but in general to your point I would say everyone draws the line somewhere different.

Yes there are many (maybe most) who will not give up their comforts or risk modifying their vehicle in order to make it more private... but trying to play the judge in a made-up internet game of altruism olympics is not going to convert many people either.

But GrapheneOS relies on a proprietary, black-box security chip from Google... who pinky-promised to open-source it but never did, and that just doesn't sit well with me.

I think it's entirely possible that a compromised Titan module (whether such code ships with the device or is updated at a later point) could leak keys via some covert method, and possibly transmit via the baseband or through some other application/method where the OS is not really aware of what's going on.

> the surveillance networks can capture metadata - who talks to who and when

If this is part of your threat model then I would suggest a different tool such as SimpleX since it uses onion routing and can be configured to always use private routing/relays.

I tried it and it was fine while it worked, but eventually I had to go back to regular Signal because Molly's updates did not follow Signal's closely enough, and at some point the server code changed enough to where I was unable to use it for an unacceptable amount of time (after checking, it took them weeks to update). Something to keep in mind if you're not using a custom server.

I have tried many, many, many browsers across multiple OSes and different hardware, and they all give me endless captchas.

Firefox, Waterfox, Iceweasel, Icecat, Seamonkey, LibreWolf, Pale Moon, Mullvad, Tor Browser

Chromium, ungoogled-chromium, Google Chrome, Edge, Brave, Falkon, qutebrowser

Safari, GNOME Web, Konqueror

No difference.

I am 100% certain it has nothing to do with my browser.

Can you provide sources for these claims?

I figured they're just admitting AI models have plateaued and are coming up with some fake story about self restraint so they don't lose VC money

I'm not convinced it would be completely negated... maybe slowed down a bit, but sure.

Sorry, I don't consider that a bypass, or easy.

I certainly would not call that adequate, especially for someone like Cloudflare with their scale, and with what their customers expect.

What you describe may be technically possible in a very narrow sense, for only specific types of DDoS attacks, but I don't see it being practical in most cases, plus I think ECH would make this difficult to do properly.

> because you live in the global south

I don't, but thanks for confidently assuming.

> there is no way to turn off Google AI search

&udm=web works fine for me, you can use a browser shortcut or extension to enforce it

You might have better luck using google maps (even the web version) to find menus.

Do you have a source for this claim? Cloudflare gives me endless captchas on almost any website.

I have to anyway because google always gives me endless captchas, as my ISP frequently rotates IPs with people who can't behave.

I don't think it's fair to blame AI just because people aren't prompting unique design elements into their vibe-coding.

What did you mean by this?

Why does this repo always seem to have trouble staying online? All the other mirrors are down, and it's not because of this post, because I have been watching other mirrors of this repo disappear over time that aren't even listed there, like https://notabug.org/crimeflare/cloudflare-tor and https://codeberg.org/crimeflare/cloudflare-tor.

> The random bold formatting is as good a tell as it gets.

Don't forget the emdash and overuse of emoji.

I didn't mean it so much as a physical constraint, but an operational one.

Not everyone wants to (or their policy allows them to) manage TLS certs directly on their origin servers, and some services only allow plaintext HTTP origins, like AWS ALB/ELB. In that particular case it's "ok" because the load balancer is placed inside your VPC, so cleartext traffic is not visible to other customers or networks.

Also, ESNI/ECH would make TLS passthrough problematic.