mhils

5 ms·

1.
by mhils 1y ago
FWIW I agree that the Rust way is nicer, but I can't impose the Rust way on Python. I guess the secret hack is to use PyO3, which pdoc supports quite well. ;)
2.
by mhils 1y ago
pdoc3 is not pdoc, see https://github.com/mitmproxy/pdoc?tab=readme-ov-file#pdoc-vs... .
3.
by mhils 1y ago
Let me try to explain why it is that way: First, it's consistent with Python functions. The docstring for functions is below the signature as well. Second, consider a file with only a docstring and then a variable declaration. Here it
4.
by mhils 1y ago
pdoc maintainer here. Pleasant surprise to see us on HN again, and happy to answer any questions! :)
5.
by mhils 1y ago
I'd say neither fork as made great strides since then, but I'm also biased here as the maintainer of pdoc. There is no pdoc-specific library for link checking as far as I'm aware. It's all plain HTML though, so you can u
6.
by mhils 2y ago
Congrats on the seccomp-based interception, that's a really neat way to solve this problem! We did some BPF_PROG_TYPE_CGROUP_SOCK eBPF shenanigans in mitmproxy for redirection, but that doesn't work with containers at all. Cool to
7.
by mhils 2y ago
This is really cool, thank you for sharing! We've built a similar feature for mitmproxy lately, but with different tradeoffs. Our approach does require root and we don't have automated certificate install (yet), but we don't
8.
by mhils 2y ago
> so you have to configure your program to use a proxy server. That's not true for local capture mode: https://mitmproxy.org/posts/local-capture/linux/ . :)
9.
by mhils 2y ago
Fully reproducible builds would of course be nicer from a security standpoint, but attestations have vastly lower implementation costs and scale much better while still raising the bar meaningfully.
10.
by mhils 2y ago
One of the main promises of HTTP/3 is better performance under worse network conditions (e.g. no head-of-line blocking as in HTTP/2, connection migration, 0-RTT). For all of that HTTP/3 between client and proxy is really grea
11.
by mhils 2y ago
Thank you for your work on Hickory! It's super exciting to see how PyO3's Python <-> Rust interop enables us to use a production-grade DNS library with Hickory and also a really solid user-space networking stack with smoltcp
12.
Mitmproxy 11: Full HTTP/3 Support(mitmproxy.org)
388 points by mhils 2y ago|75 comments
13.
by mhils 2y ago
There's OCSP Must-Staple, which makes MITM without stapling impossible. That is, if the client implements it and does not fail open. :)
14.
by mhils 2y ago
It does. It also optionally supports notifications if someone messages you while you have all tabs closed (using https://developer.mozilla.org/en-US/docs/Web/API/Notificatio... ).
15.
by mhils 3y ago
TIL this goes back to 2006, how cool! We nowadays have a much simpler version as a mitmproxy example: https://github.com/mitmproxy/mitmproxy/blob/main/examples/ad... . Although it obviously does not
16.
by mhils 3y ago
I can answer this as one of the mitmproxy devs: We're doing this for 10+ years as FOSS, we're a relatively well-known project (so lots of eyes hopefully), our software has absolutely zero telemetry / phone home functionality,
17.
by mhils 3y ago
Performance of our HTTP/3 stack is not very good yet, and the benefits of HTTP/3 don't play out in this particular example. :)
18.
Mitmproxy 10: First Bits of HTTP/3(mitmproxy.org)
80 points by mhils 3y ago|7 comments
19.
by mhils 3y ago
Asking for a release date is a perfectly reasonable request! My response was highly influenced by the context. I came back with "email me for a support contract" because 1) I previously stated in the thread that we will not ship a
20.
by mhils 3y ago
We transitioned from S3 to R2 for downloads.mitmproxy.org because egress got prohibitively expensive for a hobby ($300/month). CI for 9.x still points to the old infrastructure. This does not mean we couldn't ship a patch release
21.
by mhils 3y ago
OP here. To be clear, I don't mind the release question at all, it's valid! But the context should be along the lines of "we have an interest in this, how can we help make it happen" (contributions or $) and not "yo
22.
by mhils 3y ago
Not supporting GPC (the DNT successor) directly contradicts the "respecting users" marketing fluff. I suspect the main reason why there is a "reject all" button is that Cloudflare folks rightly figured out that they are
23.
by mhils 3y ago
Fantastic work, kudos! OIDC auth is so much nicer compared to any ad-hoc secrets management. Thank you for dealing with JWT for us. :) As a small suggestion, it may make sense to move the "Create a token for ..." button to the new
24.
New prompt injection attack on ChatGPT(medium.com)
4 points by mhils 3y ago|0 comments
25.
by mhils 4y ago
The note in the official Python documentation was only added in September 2022 [1], so no wonder this comes as a surprise to many! [1] https://github.com/python/cpython/commit/6281affee6423296893...
26.
by mhils 4y ago
I don't think anyone argues against treating them as bugs (and fixing them), they just shouldn't get as much special attention as they do.
27.
by mhils 4y ago
This really shouldn't be the case. What kind of client are you using? Could you open an issue over at https://github.com/mitmproxy/mitmproxy/issues please?
28.
by mhils 4y ago
Our WireGuard mode is entirely user space and works on all operating systems mitmproxy runs on. :)
29.
by mhils 4y ago
What do you mean by "on the basis"? :)
30.
by mhils 4y ago
Suppose you have an Android device for which you want to see all traffic. You could configure an HTTP proxy in your system settings, but this does not capture any UDP-based protocols. Additionally, apps may choose to ignore the proxy sett

More ›