arch-choot

5 ms·

1.
by arch-choot 1mo ago
I've been using DS4F+Pi with great results, but I think one thing that helps is at the end of my prompt I'll tell it how to verify it, e.g. "Make sure the compose file works by running it locally (use self-signed certs if req
2.
by arch-choot 5mo ago
Repeating a prior comment I've made about this[0]: I run a rust webserver on a €4 VPS from hetzner that serves 300M (million) requests a day. From what I can figure out, Vercel charges "$0.60 per million invocations" [1], whi
3.
by arch-choot 6mo ago
It's a BitTorrent tracker tracker.mywaifu.best:6969/announce Running https://github.com/ckcr4lyf/kiryuu (Disclaimer: I'm the author of kiryuu) CPX11, so 2vCPU/2GB
4.
by arch-choot 6mo ago
I run a rust webserver on a €4 VPS from hetzner that serves 300M (million) requests a day. Way cheaper than doing that on _any_ "serverless" request-based platform, I think.
5.
by arch-choot 7mo ago
Could you clarify a bit more what you mean by "Domain Fronting is why ECH exists"? Because even with ECH, you (TLS client) can set any public_name you want, but the innerSNI can be something else. Or is that what you mean; since t
6.
by arch-choot 7mo ago
An example for the hub: ``` echo -e "GET / HTTP/1.1\r\nHost: www.pornhub.com\r\nConnection: close\r\n\r\n" | openssl s_client -connect 66.254.114.41:443 -quiet ``` This works for most ISPs in India, but if you set the SN
7.
by arch-choot 7mo ago
If i'm not mistaken its because IPs are actually much easier to rotate than domains. E.g. all the users will remember `example.com` , underlying it doesn't matter what IP it resolves to. If the IP gets "burned" , then th
8.
by arch-choot 7mo ago
\> This makes the spec entirely meaningless for small servers and basically requires shifting hosting to shared hosts/massive CDNs to provide any protection against SNI snooping. Actually you can setup ECH on your server, and config
9.
by arch-choot 7mo ago
Should've added this was back in like 2018 or so. Setting up DoH was harder than enabling SNI, and from my testing back then they were hard filtering on SNI (e.g. I used OpenSSL CLI to set the SNI to `pornhub.com` and connect to "
10.
by arch-choot 7mo ago
Glad that it's published, I'd been following it since ESNI draft days. Was pretty useful back when I was in India since Jio randomly blocked websites, and cloudflare adopted the ESNI draft on its servers as did Firefox client side
11.
by arch-choot 11mo ago
Those are great domains for this kinda thing! Thanks for the idea
12.
by arch-choot 11mo ago
Just bare wireguard on 51820? I think I had tried that but no luck; but I don't remember for sure.
13.
by arch-choot 11mo ago
Sorry if its a bit unclear; the first part was HKG -> LHR when I kinda discovered it (9th May), and then the HTTPS proxy test was my flight back LHR -> HKG (18th May)
14.
by arch-choot 11mo ago
Ah right, if they also impose IP restrictions this would not work
15.
by arch-choot 11mo ago
Yea, I run wireguard & OpenVPN on port53 (different VPS) just in case it works. Unfortunately my experience with the "pay to use" WiFi so far has been they validate that port 53 is valid DNS traffic, and often don't allow
16.
by arch-choot 11mo ago
I think that's essentially what my HTTPS proxy does; except rather than actually being over WhatsApp (i.e. using WA messages or w/ever), the SNI tricks their authorization into thinking I'm using WA, while I am connecting to
17.
by arch-choot 11mo ago
There may not be any "free messaging" or similar offers is my guess. In fact using ECH it is already possible to spoof the SNI but make a real TLS handshake to the underlying domain; you can try it on my test website[0] with wires
18.
by arch-choot 11mo ago
Yep; on my way to LHR I was intrigued by their "free messaging" and wanted to poke around, with the SNI hypothesis I did the actual HTTPS proxy setup on a VPS while in the UK, so I could actually try and proxy arbitrary browser tr
19.
by arch-choot 11mo ago
So there's no way to get back in if you step out for food?
20.
by arch-choot 1y ago
Interesting! I'd done something similar in Typescript to learn more about BT, and then redid it in rust to learn rust ( https://github.com/ckcr4lyf/kiryuu ). However I decided to just use redis as the DB. It sounds
21.
by arch-choot 2y ago
Pretty cool! I've been living in HK for 7 years now and not moved past the basic few phrases - mostly because English gets you so far there's no "forcing factor" (vs. in Tokyo you'd be kinda forced to learn Japanese
22.
by arch-choot 2y ago
imo BT is not at fault here (if that's what your were implying) - It is a conscious choice by Apple chooses to always listen for these beacons and prompt the user with a pop-up (even if they turn it "off" via the pull down se
23.
by arch-choot 2y ago
If you ignore the last 6 points about cameras and displays, then this is kinda what "Smartcards" are, I think? https://en.wikipedia.org/wiki/OpenPGP_card In fact the Estonian Id-Card is one of these if I&#x27
24.
by arch-choot 3y ago
I'm not sure how intensive the "backend" is, but I've found stuff like workers to be economically efficient only for hobby tier projects. I operate a BitTorrent tracker I wrote for fun, and it receives around ~1500req&#x
25.
by arch-choot 3y ago
Related: https://news.ycombinator.com/item?id=22995008
26.
by arch-choot 3y ago
I'm pretty sure the default is they can see all the cleartext, since their product is based on TLS interception, for example to evaluate page rules. This is also how they insert extra headers in both the request and response.
27.
by arch-choot 3y ago
I think it just leads to a false sense of security for most "normie" users. E.g. Snapchat, people think it must give a screenshot notification or whatever, so it is "safe" for nudes. Well it is quite trivial to save the
28.
by arch-choot 3y ago
It's also possible via something way cheaper, like an ESP32 (~US$1.5), e.g. using https://github.com/ckcr4lyf/EvilAppleJuice-ESP32 (Disclaimer: I am the author)
29.
by arch-choot 3y ago
Funnily enough, India did something similar to that - they overnight made 500 & 1000 rupee bills (the two highest value denomination - approx ~8 & 16USD at the time) illegitimate. There were ways to convert those to the new bills, s
30.
by arch-choot 3y ago
Documents when applying for a Visa, e.g. Bank Statements, Utility Bills etc. Also the actual e-Visa / travel authorizations which for some countries are just electronic

More ›