Avatar
Ike
d2e94a63f173541dc21380f4dad6ff6c5783f9c79ccf87c7e74ae912fc520ed7
notes & nodes

You don't even know that your own model has since Einstein entirely disregarde Newtonian gravity.

The same will happen in due time with the relativistic nonsense as it's more make-belief material, and not consistent with observations.

Gravity is a theory trying to explain *why* the natural phenomenon of denser things falling down through less denser medium is true.

It's irrelevant if I believe the natural phenomenon, as it's a fact of our world. I can, however chose not to believe in your attempt to explain why it happens.

I also don't have to offer you any counter-theory why it happens - falsifiability doesn't require a new theory.

*Assumptions required to believe this statement:

- sun is millions of miles away (unverifiable)

- its light is unlimited, apparently no matter its size

- the way you observe the sun from earth is not distorted from the layer of air

It's not a disk but a topographical plane.

The modern internet is totally corrupt. Let’s dive in to why…

Content Delivery Networks (CDN)

Content delivery networks are global servers spread out around the world that keep a copy of a website closer to you, to serve it to you. By being physically closer to the end user, it speeds up the website’s delivery. However, the negative of this is that it has a tendency to centralize power for the entire internet to a few large players and that has big privacy effects. Rather than have these separate sites and blogs around the world just see their site only, instead the big CDNs see all traffic on the entire internet. This enables the “tyranny of the modern web”, in which website owners have just a tiny 1 core VPS, and then all their real files are externally hosted. The heavy use of CDNs allows the website owner to save on money, while sacrificing their free speech, independence, and the end user’s privacy.

With larger files, such as a video, a CDN is likely required. But the heavy use of CDNs for literally everything on the website should be associated with poverty. The website owner is saying “I’m too poor to host files”. Additionally, website owners enable Big Tech third party JavaScript such as a “Facebook like widget” which does surveillance that then slows down the load speed. So then they need an even more centralized CDN to serve up this bullshit bloat. This creates a vicious cycle of more and more Big Tech surveillance, which then needs an ever larger CDN.

Because surveillance is so profitable, the firms doing it can hire the best creative talent, which then shapes the entire tech industry. Young web developers use the same toolkits and learn from these corrupt organizations where an erosion of end user liberty is the norm. The end result is that web developers don’t even realize that they are over-using JavaScript when it’s not required. This slows down the web and feeds into the vicious CDN cycle. The largest player in the game is Cloudflare.

Cloudflare sees ALL passwords

One type of CDN literally points the domain name to the CDN company, so:

User -> Cloudflare -> real website VPS (1 tiny core)

This is how Cloudflare works. Since this is literally directing all traffic to the CDN company, they can see all passwords and ALL data. The SSL connection or httpS encryption is stripped away by Cloudflare. Unfortunately, a VAST majority of the internet uses Cloudflare. You will be shocked at how many “privacy” websites use it, including Skiff.com email, KYCnot.me, Michael Bazzell’s OSINT, and even Monero’s official site at GetMonero.org. Finding out that Monero’s core team used Cloudflare to distribute binaries, was for me like finding out there is no Santa Clause. Even Handshake.org literally complained about Cloudflare while using it.

Supposedly Cloudflare helps to stop “distributed denial of service” DDoS attacks, which is the bullshit justification that websites owners will give, instead of just admitting that they are poor and willing to sacrifice their freedom of speech because they have nothing of value to say.

A DDoS is when lots of bots or bullshit traffic hits up a website to overload it and take it down. But Cloudflare isn’t doing anything unique to stop this and there are many other choices one could pick from. All Cloudflare is doing is having a ton of money and servers to absorb the traffic. Then because Cloudflare has scaled through business deals, they can deliver the CDN at a much lower cost than other providers.

There are many other CDNs, but unfortunately most website owners simply do not care about their (or your) privacy and freedom, and they are only mostly concerned with getting the absolute rock bottom lowest cost, which is typically bundled into “shared hosting” plans.

Then MORE CDNs?!

Many website owners don’t just use Cloudflare. Then on top of that, their website calls upon 3rd party images from even more CDNs via JavaScript. For example website-files.com is a popular “JavaScript CDN” of this type.

User -> Cloudflare -> real website VPS (1 tiny core) -> Website-Files.com

So everyone and their mother sees your data, and the website owner lost their autonomy of speech, by complying with more and more terms of service restrictions. This is why website owners don’t care about abusing unnecessary JavaScript, because they outsource the economic cost of being an idiot, at at the expense of both their and your liberty.

Conclusion

In conclusion, change does not come from politics, but comes from you. Your actions dictate how much freedom the world has. If you accept a world of surveillance, then let the entire internet be overseen by two or three companies. But I do not accept things for the way they are. It is only through your actions to pressure website owners will it ever matter. Seek out alternatives, they do exist.

PS, check out Ombello, it’s a Tor Browser Onion search engine that crosses out Cloudflare:

ombrelo.im5wixghmfmt7gf7wb4xrgdm6byx2gj26zn47da6nwo7xvybgxnqryid.onion

What's the other benefit to doing a dos attack on a website, apart from forcing them to use a "ddos-proof" cdn?

The "missing" coins are in other, colder places. IOUs will be traded instead. Legacy exchanges will gradually be regulated out of the biz as shitcoins might be comming to an end.

FYI, half of Iran is mining the corn, so thinking Gary will make them trillionaires overnight is just hopium. Glad to be wrong, but that's just crazy talk, maaan.

Enjoyed reading this. As a lay-man I find lighning is great for merchants (static receivers) and their customers (random payees with small balances). I think it achieved its goals - with all the solved and current issues it's fair to say LN is still very much experimental/research tech, but also very usable.

Really smart guys are working on it, it'll keep getting better. Excited about the next big L2 push, though - instead of focusing on one solution it really seems better to work on multiple fronts. A bit more demanding to keep up, but that's true also for the rogue nodes in the network...

Replying to Avatar Mina 👽💜

Two weeks ago I asked for alternatives to Little Snitch on Linux and Android:

nostr:nevent1qqsqcuvclgekv70rqye5g30xtajklpqemfeq34yldj05p9yh77ghasqpp4mhxue69uhkummn9ekx7mqpz3mhxue69uhhyetvv9ujuerpd46hxtnfdupzqstv5xf654zghrx2ruykg2q8wewvpm3fjcyljuklqc2vlw829u43qvzqqqqqqywxtgtm

I didn't get any replies, so I went out to search myself. Here's what I found:

Linux:

- opensnitch

Very similar to Little Snitch. To run on NixOS, add services.opensnitch.enable = true; and add opensnitch-ui to your packages

Homepage: https://github.com/evilsocket/opensnitch

- Portmaster

Open source, looks more advanced than LS, offer paid plan. Haven't tried yet since it's not available in nixpkgs.

Homepage: https://safing.io

Android:

- NetGuard

Open source, simple - allows blocking WiFi/mobile/both networking for single apps. Acts like a virtual VPN. F-Droid available afaik.

Homepage: https://netguard.me/

- GlassWire:

Free, analyses your network usage per App. App firewall like NetGuard available in paid plan. Also available for Windows

Homepage: https://www.glasswire.com/

Trying both at the moment, unless you pay for GlassWire NetGuard makes sense I guess.

Bonus: Mac OS

- LuLu

Open Source alternative to Little Snitch. Available on homebrew. Haven't tried yet but this will land on my work mac next week.

Homepage: https://github.com/objective-see/LuLu

I hope this may help if you're on the same quest :) Stop the snooping #asknostr

Orbot can also work as an "application" firewall - setup as VPN, forbid connections outside the vpn in android, and in orbot you can select which apps will have net. Bonus - it's all through tor.

Need non-tor traffic? Get shelter or similar and clone any app to the work profile to connect to the clearnet.

I see, you mean if you setup gmail with a local client. It's probably better this way, still I wouldn't use any of those for really sensitive stuff. Having to use gpg means it's not for email, imo. You have to also be 100% sure your contact uses a local client, else your efforts are for nought.

I would chose proton over goolag for everyday online services where bank/card payments are involved, for example. Nothing more sensitive, though.

You have to chose between being certain the biggest data harvest op globally will know your mails, or proton, who might(!) not share them unless required.

That's why Proton is "better" for more sensitive email needs above normie stuff.