HNHacker News
TopNewBestAskShowJobs

tryauuum

999 karma · joined October 3, 2018

submissionscomments
tryauuum··on EU Parliament greenlights Chat Control 1.0
Today they already analyze the SSL handshake and traffic patterns in Russia. And if your valid https traffic crosses the border but doesn't behave like https (I don't know how they do it. Frequency of TCP packets and their size and the delay between?) your IP-address will be blocked

I want to stress that I'm speaking from experience. I personally installed a telegram proxy project which aimed to mirror the pattern of traffic and fool the censors

tryauuum··on EU Parliament greenlights Chat Control 1.0
> new technology that is designed to balance interests on all sides and actually enforce the guarantees IN CODE AND PROTOCOLS.

They will just call your code illegal in law. And if you will run it anyway, use deep packet inspection to drop your protocol packets, like they do in Russia

tryauuum··on EU Parliament greenlights Chat Control 1.0
That's cool and all but looks like we are running out of good countries

And if they all have censorship, they are not failing (when comparing them to each other)

tryauuum··on EU Parliament greenlights Chat Control 1.0
It's hard to compare US and EU internet freedom because a person usually spends most of their life in one place and is clueless about the life in other.

I've never lived in US, were there any cases of ISPs blocking websites in USA? Even DNS-level blocking counts

tryauuum··on We won $92,337 bug bounty using a single kernel 0-day
it's all so tiresome

so no mitigation except for kernel updates?

tryauuum··on Januscape: Guest-to-Host Escape in KVM/x86 [CVE-2026-53359]
how dangerous is the vulnerability in practice? How hard is to actually achieve the KVM escape?
tryauuum··on Januscape: Guest-to-Host Escape in KVM/x86 [CVE-2026-53359]
Not all device files, only /dev/kvm. I assume the logic was "with /dev/kvm access the user can ...allocate memory and execute code, which they already can, so why not allow it?". Could also make rootless isolation easier
tryauuum··on Ask HN: Who is quitting? (July 2026)
"lock-in factor"?
tryauuum··on Xsnow "protestware" in Debian
> don't, like, invade their country

I did not invade any country

At least this app just displays the flags and not prints such accusations

tryauuum··on A native graphical shell for SSH
this touches two pieces of my knowledge:

    - microsoft is evil, I cannot delete my github account, will never use anything by this company
    - if the attacker knows your *public* key they can enumerate the list of the servers you have access to https://github.com/benjojo/ssh-key-confirmer
tryauuum··on A native graphical shell for SSH
wonder if anyone tried X over infiniband, latency would be so great
tryauuum··on Age verification is just a precursor to automated attribution of speech
The ad companies I think would want the opposite

If they cannot distinguish real people from bots they can just charge more for more ads shown !

tryauuum··on Age verification is just a precursor to automated attribution of speech
I would tell them to not give their children internet access at all until they think they are ready. Does it sound realistic? I don't know. From technical point of view certainly realistic, a child doesn't have money / devices of his own
tryauuum··on Vulnerability reports are not special anymore
I don't fully get you. Do you mean untrusted regex or untrusted data it operates on?

And to be honest, even if the regex is trusted (came from a developer) and the data as well (something predictable and structured) we are still not protected from the developer using extremely stupid regex and breaking everything

tryauuum··on Vulnerability reports are not special anymore
That's a real issue, took cloudflare down once...
tryauuum··on Volkswagen started blocking GrapheneOS users
They are willing to break some cloudflare-fronted websites. That's already a reality in Russia.

The government (any government) hates its citizens and the freedoms it had to allow them

tryauuum··on Volkswagen started blocking GrapheneOS users
Are you taking from the experience that this is not blockeable in Russia?

EDIT: I might be confusing vless/xray/reality but seems like there are no problems to block it based on ip reputation + tls fingerprint + amount of connections https://habr.com/ru/articles/1044396/

Of course this would block some valid websites but when has government cared about that

tryauuum··on Volkswagen started blocking GrapheneOS users
Like in Russia

    - drop wireguard / OpenVPN packets crossing the country border
    - analyze https traffic to detect traffic patterns not matching https fully and block such connections
tryauuum··on Arch Linux Now Believes Malware Incident Under Control: More Than 1,500 Packages
How bad was it?
tryauuum··on What we know about the plan to give Americans an equity stake in AI
this website redirects me to casinos
tryauuum··on Social Cache Busting
I don't think people actually care about a sincere answer to "how are you doing", so replying with the prebaked line makes sense
tryauuum··on A 10 year old Xeon is all you need
How old are we talking?
tryauuum··on You Weren't Meant to Have a Boss (2008)
sounds still more natural than windows made of brick or other non-transparent material!
tryauuum··on Why I Sacrificed a Goat to AWS Gods
feels like ai slop
tryauuum··on Was my $48K GPU server worth it?
> Nvidia that gives absolutely zero fucks about people that aren’t their enterprise customers buying GPUs by the thousands.

for the context, nvidia gives zero fucks about people who are buying their GPUs by thousands as well.

tryauuum··on Declining America
Not shot on sight but e.g. "being declined entry because you refused to unlock your smartphone to the customs officer". And then you have to fly back over the ocean.

America isn't special here, I guess every country treats non-citizens worse than citizens. But at least the trip back is usually shorter

tryauuum··on Mozilla to UK regulators: VPNs are essential privacy and security tools
"privacy tools" doesn't sound strong enough. "tools to bypass censorship of the future fascist government" sound better, though longer

I always remember a video snippet of some meeting in US, some chinese looking woman says something like "Mao took our guns and killed us all, I'm never giving up my rifle". Some politician reminds her that they live in the democracy. She asks him something like "can you guarantee me that in 20 years it will still be a democracy", which he admits he can't

found the video https://www.reddit.com/r/GunMemes/comments/1c13kkz/survivor_...

tryauuum··on Finland: Failures to deliver public warnings (Finnish)
I'm thinking now, is there even a point of notifying everyone during a drone alert? With current amount of drones entering Finland, you are more likely to die in a car accident when you leave your house than to be killed by a drone

I guess it's better to know than to not know (citation needed).

tryauuum··on Linux's Latest Vulnerability Allows Reading Root-Owned Files by Unpriv Users
this is real
tryauuum··on Linux's Latest Vulnerability Allows Reading Root-Owned Files by Unpriv Users
Chat is this real? Sorry I don't have an ssh client on my phone
← PreviousPage 2 of 22Next →