Slotos

joined 2 years ago
[–] Slotos 2 points 1 year ago

Monitor the room temperature.

[–] Slotos 27 points 1 year ago

It’s called Russia Law because it’s literally a Russian law copied verbatim

[–] Slotos 1 points 1 year ago (2 children)

If you use HTTPS, the attacker can still see what websites you connect to, they just can't see what you are sending or receiving. So basically they can steal your browsing history, which defeats the purpose of a commercial VPN for many users.

This is blatantly false. They can see IP addresses and ports of you connect to from IP packets, and hostnames from TLS negotiation phase (and DNS requests if you don’t use custom DNS settings). HTTP data is fully encrypted when using HTTPS.

If exposing hostnames and IP addresses is dangerous, chances are that establishing a VPN connection is as dangerous.

[–] Slotos 1 points 1 year ago

I was going for “implicated”, but suffered a critical failure in my word formation attempt.

(Still better than that one time when I decided that past tense of “to bug [someone]” was “buggered”)

[–] Slotos 1 points 1 year ago (2 children)

Native tongue doesn’t have articles, which makes me forget the implicative importance they hold in English >.<

IIRC a malicious DHCP server could also listen to ARP probes and respond to those it didn’t issue, making clients seek renegotiation, which could increase (guarantee?) the chance of client choosing malicious server.

I haven’t worked with low level networking for a good decade or two, however, so there’s that.

[–] Slotos 37 points 1 year ago (7 children)

Control of the DHCP server in the victim’s network is required for the attack to work.

This is not a VPN vulnerability, but a lower level networking setup manipulation that negates naive VPN setups by instructing your OS to send traffic outside of VPN tunnel.

In conclusion, if your VPN setup doesn’t include routing guards or an indirection layer, ISP controlled routers and public WiFis will make you drop out of the tunnel now that there’s a simple video instruction out there.

[–] Slotos 2 points 1 year ago

Sounds a lot like US House of Representatives, but in this case I don’t see why not.

[–] Slotos 2 points 1 year ago* (last edited 1 year ago)

I mean, Schwarzschild radius shows that for a medium of constant density (and on a large scale, Universe is fairly uniform) there is an upper limit of a radius of a ball comprised of said medium above which it will form an event horizon.

https://en.wikipedia.org/wiki/Schwarzschild_radius#Calculating_the_maximum_volume_and_radius_possible_given_a_density_before_a_black_hole_forms

Which means that an infinite universe of non-zero density is either a bloody paradox (spend a minute deciding where exactly event horizons should form and whether there will be gaps), or our understanding of gravity and spacetime breaks on ginormous scales just as it does on micro ones.

PS: I have seen no physicists talk about this, so there’s a good chance that there’s a simple resolution to the problem and I’m just stupid.

[–] Slotos 4 points 1 year ago

Support for QUIC and HTTP/3 protocols is available since 1.25.0. Also, since 1.25.0, the QUIC and HTTP/3 support is available in Linux binary packages.

https://nginx.org/en/docs/quic.html

2023-05-23 nginx-1.25.0 mainline version has been released, featuring experimental HTTP/3 support.

https://nginx.org/2023.html

It’s not a dev code. It would also take a mere minute to check this before failing to sound smart.

[–] Slotos 6 points 1 year ago (2 children)

Even better, the dude forked because a security issue in “experimental” but nonetheless released feature was responsibly announced.

Talk about an ego.

view more: ‹ prev next ›