ameshkov

6 ms·

1.
by ameshkov 1mo ago
I made an MCP proxy with a similar idea in the past: replace a ton of tools that consume tokens with just two (get_tool_schema, invoke_tool) - https://github.com/ameshkov/mcp-compress-router One thing that I noticed is
2.
by ameshkov 1mo ago
> I couldn’t find a great CLI tool for interactively probing an MCP server What about mcp-inspector? It’s a nice tool, can be used interactively, can be used as a CLI. https://github.com/modelcontextprotocol/inspecto
3.
Show HN: MCP-compress-router – MCP Compressor(github.com)
1 points by ameshkov 3mo ago|0 comments
4.
by ameshkov 7mo ago
Love the idea, made a Windsurf-compatible version: https://github.com/ameshkov/peon-ping-windsurf
5.
by ameshkov 8mo ago
No, but it's a very good point, we'll add it to the backlog
6.
by ameshkov 8mo ago
In Cyprus, companies are usually incorporated via a corporate service provider, who also provides the registered office address and PO Box services. Basically, if you need to reach out to us by mail, you should use the "legal address&q
7.
by ameshkov 8mo ago
For example, in some countries it's either slowed down or outright blocked.
8.
by ameshkov 8mo ago
Actually, no, we don't resolve them. We scan the incoming ClientHello before making a decision on where to route the connections. If the connection should be bypassed we make a connection by ourselves and proxy traffic. Implementing it
9.
by ameshkov 8mo ago
Well, Google is like a small country and some parts of it are very good guys that are genuinely interested in being a "user agent".
10.
by ameshkov 8mo ago
Uh, I guess it's a little bit off-topic here:) It's hard to say what's more harmful, I'd say cookies still take #1, but I think we're not far from the moment when your email address or its derivative will be used as
11.
by ameshkov 8mo ago
This is actually supported by both the client and the server. To use it in mobile clients you need to specify two domain names like that: fake-sni.com|domain.com where “fake-sni.com” is the domain thay will be in the SNI and “domain.com” is
12.
by ameshkov 8mo ago
There are no shady alleys in Cyprus:) We have only one office in Limassol, the company is mostly remote: https://maps.app.goo.gl/pounSEQqBvYftZGZ6?g_st=ic (we are moving to a bit bigger office in the neighboring building, n
13.
by ameshkov 8mo ago
Hi, thank you very much for supporting AG! We are very cautious with Apple as we suffered from them before [1]. So we're trying to stick to the APIs they provide. I hope the new URL filtering API [2] will improve the situation with the
14.
by ameshkov 8mo ago
You mean in TrustTunnel apps? You can create a routing profile there and select which domains/ips are bypassed, and then select that routing profile in the vpn connection settings.
15.
by ameshkov 8mo ago
We support both H2 and H3 and this is necessary. QUIC is not bad, but there are places where it either does not work at all or works too slow. And one more thing, even though the code and spec is only published now, we’ve been using TrustTu
16.
by ameshkov 8mo ago
Yay, thank you! :) I wish we finish with redesigning it nicely this year and finally after all those years we will finally call it v1.0
17.
by ameshkov 8mo ago
More or less, built on top of it with added udp/icmp. When writing server and client a lot of time is consumed by additional features, not on implementing the spec itself. For instance, in order to be truly stealthy we have to make sur
18.
by ameshkov 8mo ago
Performance reasons aside, TrustTunnel is developed by the team whose main language is C++ (and the client library is actually written in C++) so Rust was a more natural choice for them.
19.
by ameshkov 8mo ago
We do, and from what we know a bigger problem in China is detecting traffic patterns. SNI filtering is not that big of a deal, in order to block your domain it needs to first learn which one you’re using. What for the traffic patterns, peop
20.
by ameshkov 8mo ago
One interesting thing I’ve noticed is that AdGuard means different things in different parts of the world. In some places, people know us primarily as an ad blocker, in others we’re best known for our DNS service and in some regions AdGuard
21.
by ameshkov 8mo ago
Hi, I’m one of the people working on this. One clarification that may not be obvious: open-sourcing this isn’t primarily about signaling or auditability. If that were the goal, a standalone protocol spec or a minimal reference repo would ha
22.
by ameshkov 8mo ago
This is not a common issue tbh. What sometimes may happen is that after an iOS update the content blockers in Safari becomes corrupted and the only thing that fixes it is not just a reinstall, but uninstall + reboot + reinstall after that.
23.
by ameshkov 10mo ago
I would advise against using unbound on the client side as this way all your DNS queries will be unencrypted and visible to your ISP. Besides that, the DNS responses can be modified, this kind of censorship is very popular and used in many
24.
by ameshkov 10mo ago
I tried not to share too much details while we were still in process of figuring out the details. The legal advice we got was basically “block asap or risk jail time”. Moreover, the risk would still be there even if the complainant is shady
25.
TLS Certificate Mis-Issuance Exposes 1.1.1.1 DNS Service to Exploitation(gbhackers.com)
2 points by ameshkov 1y ago|0 comments
26.
Ten years in the wrong regex lane(adguard.com)
5 points by ameshkov 1y ago|0 comments
27.
by ameshkov 1y ago
Thanks for understanding and sorry if my comment sounded too harsh. Over the past few years we went through a lot and when I hear that AdGuard is just registered I may overreact. What for your position, I respect it and as much as I’d like
28.
by ameshkov 1y ago
Most of the employees relocated including senior staff, devs and people with access. We still have some contractors working from there, mostly in support service, content and qa. Not "most" or "a lot", but nevertheless.
29.
by ameshkov 1y ago
It's not the first time I've noticed you spreading this misinformation on HN, so let me respond. Most of AdGuard's staff relocated in 2022, and I (CTO and co-founder of AdGuard) personally live in Limassol, Cyprus. We comment
30.
by ameshkov 1y ago
Alternatively, you can do something like this: *$denyallow=example.org|example.com Blocks everything except example.org and example.com. Works in AdGuard Home, AdGuard DNS or any other AG product with DNS filtering capabilities: https:&#x2

More ›