New Novel attack allows your ISP to see your VPN traffic!
Remember all the people calling me a tinfoil hat wacko for insisting on open source routers?
There is a new critical VPN vulnerability from Leviathan Security group, which they call “TunnelVision”. It allows the ISP or local router to see the VPN traffic by abusing the DHCP client and option 121
Here’s the basics:
--It uses the local area network, so we’re talking about a hostile router
--Android is safe by default and unaffected.
--Linux may be safe if used correctly.
--Microsoft Windows and Apple are highly vulnerable.
--While Leviathan created it, they think it’s been used in the wild since maybe even 2002
--Abuses the DHCP server to incorrectly route packets
--Random devices can pretend to be the router with DHCP attacks
How it works:
DHCP is when a home router assigns IP addresses to devices in your local area network. There is “ option 121” which allows that router (DHCP server) to route the VPN user’s system in a way that is more specific than those used by most VPNs. TunnelVision abuses option 121 to purposefully route the system through their fake interface.
Why Android is immune:
Android ignores option 121
How Linux users can protect themselves, quote from Leviathan:
“Using network namespaces on Linux can completely fix this behavior. However, in our experience, it is less commonly implemented. WireGuard’s documentation shows how it’s possible to use a namespace for all applications with traffic that should be using a VPN before sending it to another namespace that contains a physical interface. However, this appears to be Linux-specific functionality and it’s not clear if there is a solution for Windows, MacOS, or other operating systems with the same amount of robustness.” Source: https://www.leviathansecurity.com/blog/tunnelvision
And of course, Linux PLUS an open source router is the real protection. Check out the router section of our site,
I really need to brush up on Linux network namespaces.
Maniacs, every last one of them.
Welp, there goes localmonero and agoradesk. Was great while it lasted.
Yes.
He does all kinds of stuff like that. I think he genuinely believes that his ideas, which often go against individual liberty, are good for humanity. I don't think so, but yeah, I believe he does.
Oh I forgot, the entire reason for my reply:
1) he prefers democrats and agrees with some of their politics, probably is donor to a lot of them and so gets what he wants better from them,
2) genuinely dislikes what's going on in Canaan.
Call me crazy lol but I happen to think George Soros is just a genuine dude. I've seen him do interviews, I've read one of his books (his magnum opus as he stated when he wrote it) and looked at some of his activities, I've never seen a lie or any dishonesty.
He believes some things I disagree with, strongly even, and he puts his resources to work furthering those things which I don't like. But I don't think he's a liar or trying to hurt humanity or anything like that.
Checking out kalc, a scientific/graphing calculator written in Rust. I've been looking for a good calculator, and I don't need all the features in it, although sometimes I do find myself wishing I could just graph something real quick.
So far it is fantastic! It's basically a shell in a terminal that accepts all sorts of notation, sqrt(x), x//2, x(1/2) and x**(1/2) for example all give you the square root of x. So no matter what sort of notation you're used to for doing math, whether it's from some programming language you use a lot, or regular algebraic notation, it has you covered. It also has all the built in functions you would ever need, all trigonometric functions and everything else you could ask for, logic operators, bitwise operators, everything. It let's you change notation. It allows you to use Greek characters, has all the constants you'd use in day to day life like e, π and i, and you can define functions and constants yourself in the configuration. Additionally, it loads files. The only things I haven't figured out yet is how to do binary and hex conversions, I wonder if those are built in or not.
I've tried numerous different calculators, GUI calculators, TUI calculators, programmers calculators, scientific calculators, numerous different graphing calculator emulators, and this is so far the one that does everything in a sane way. Usually I'll just load a REPL or the python interpreter to do math real quick because it works better than every calculator I've tried. If you use a calculator regularly on your machine this one will probably do everything you need and stay out of your way.
It depends on gnuplot for graphing.
FYI, you can get FFUpdater in f-droid (or from it's git repo and keep it up to date using Obtainium) and it keeps a ton of privacy focused browsers available for you and keeps them up to date, including Kiwi. You could also use Obtainium to just get Kiwi from it's repo as well.
Also, nos2x (another nostr signing browser extension, works with rebelnet) works on iceraven, an FF fork also available through FFUpdater.
At this point I fail to see what point you're even trying to make. You're just arguing with people for entertainment.
Isn't that what we are doing by taking the money out of their control? I propose we do what we are doing.
This is happening everywhere and you're not paying attention.
Your all caps shows your unhinged worldview.
Our goal here is to free the world, not run and hide in a hole.
Dude this is fantastic that is for sharing, you've enlightened me a little and given me a perspective I hadn't considered.
Just use a mixer they said.
How long before payment channel providers on lightning start getting charged with operating a money transmitting business without a license?
I love that last sentence. Most might miss it, but I didn't. I'm also a wild animal.
I made a few qutebrowser userscripts if you're into that kind of thing. A tool to mutate URLs before following them in just about any user configurable way, and a tool for bookmarking/tab/session management to organize links, are the two big ones. I can't live without the latter now.
I'm also working on a robust reader mode like userscript off and on that I'll get out eventually, and rolling around the concept of something to open links externally, such as opening video links in youtube-dlp or mpd or something.
You really can't beat this browser.
Another question... in my quest to gradually migrate to a freedom tech...
"Open board", an open source keyboard for Android, that will hopefully not spy on me and not send everything I type to Google...
https://github.com/openboard-team/openboard
What do you think?
Trustworthy?
Worth installing?
(I'm not ready to move to Graphene or Calyx)
(You could argue that as long as I use stock Android, Google anyway controls my device and may soy on me anyway)
nostr:npub14slk4lshtylkrqg9z0dvng09gn58h88frvnax7uga3v0h25szj4qzjt5d6
nostr:npub18ams6ewn5aj2n3wt2qawzglx9mr4nzksxhvrdc4gzrecw7n5tvjqctp424
Your thoughts?
Thank you.
FYI openboard is not maintained and there's a new fork of it out there called heliboard that is pretty great. It's in the f-droid repo and of course you can keep it up to date with obtainium.
I am not often hyped about self sustainability. I'd rather use the market to get things I can't produce very well and produce by using my unique abilities. It is called specialization.
The problem is when the centrally planned providers are controlled by insane people. Then it is more than sane to invest your capital to production capacity and become independent of the central planners. The paradox is that because I can't build lightweight nuclear reactor, I need to build renewables, which is what the central planners wanted to push towards anyway.
By accepting the central planners are insane and taking production in your own hands, you do what they want. This has quite the Scanner Darkly vibes...
sorry for the bird app reference, I don't know how to copy a thread very well.
at least giving a preview.
https://twitter.com/energybants/status/1775015586176663641?t=UmSyO6Q_fSKxrQS6r3CwDA&s=19

If you specialize in something that has elastic demand while consuming inelastic goods you put yourself at the mercy of the producers of those goods, or whoever controls their flow.
Look at states. States often specialize with regard to exports. But the most successful states diversify; they attempt to accomplish food security. The specializers are at the mercy of those that can sustain themselves.
Self sustainability is very important, markets are also very important. At the very least you should be capable of providing the basic things you need to stay alive.
It's amazing, once you understand capital and wealth creation, and you see that you can create real wealth yourself, for yourself, using mud, without any middleman or government taxing you, without a counterparty, you'll realize you didn't quite understand it as well as you thought. You experience feeling numinous and epiphany at the same time.
Yeah I think it's a good idea. I absolutely hate setting up self hosted email, so if I needed to self host I'd definitely rather pay someone to set it all up for me. It's like the best of both worlds: you get the security of self hosted without the pain of having to do it. Bonus points, you get xmpp?
I personally dislike email, but the fact is you're stuck with it, and if you're all about your privacy and security, self hosting is the way to go.
I've got to disagree. I will never (again) host my own email. It's my last line of communication. It doesn't need to rely on my maintenance, it just needs to be there. I'd rather pay for hosted email. I'm not maintaining a server and updating dependencies for a communication channel that I basically use for marketing spam and just in case I lose contact in other ways. I absolutely hate email, but I have it, same as a phone number. I honestly don't want either, so I'm going to put minimal effort into keeping them. With regard to email, the farthest I'll go is paying something monthly and not using the big two email services.
If you're someone seriously using email for secure communications all the time, yeah you should probably put the effort in and self host. But most people don't use it like that anymore. Most people use it to confirm sign ups for accounts they sign up for to order a single thing from a web shop. If you don't like your purchasing habits being snooped, avoiding google and Microsoft is about all you need to do. The only people I know that use email seriously are people contributing to FOSS projects with git the old school way, via mailing lists.
If you really want privacy in your communications, just use something that isn't email.