Avatar
mister_monster
dd2057556f88a64cacd075d007f1be480f949c91fd6d0c4d593baccdb2aabde2
I do not recognize anyone’s right to one minute of my life. Nor to any part of my energy. Nor to any achievement of mine. No matter who makes the claim, how large their number or how great their need. My public bookmarks are like a pseudo blog, check them out to see what I have to say. I don't post every day, think of me as a high SNR oracle, when I show up in your feed it's probably going to be interesting. I do private contracting for personal server setups and automation scripts. Feel free to contact and inquire about that if you need something put together. xmpp, deltachat and email: mister_monster@disroot.org pgp fingerprint: 16b1f268d3a01afdf4194b87868bc00fa8740dac 8C2H9HbnwamDs2EkZroPNbdrUJB8hguQsjSNUKgg1fNvB7tAsETHMWhdWYG9aKAZzMRJMb3pw6J46T4wnSNyfZR863nYyEd White noise npub1ga5usrfkrue6qeekzhrcylserwx5cuw903vhrn4ftrdj549vscesdr2kds (until white noise supports amber, for security purposes) 09F911029D74E35BD84156C5635688C0

New Novel attack allows your ISP to see your VPN traffic!

Remember all the people calling me a tinfoil hat wacko for insisting on open source routers?

There is a new critical VPN vulnerability from Leviathan Security group, which they call “TunnelVision”. It allows the ISP or local router to see the VPN traffic by abusing the DHCP client and option 121

Here’s the basics:

--It uses the local area network, so we’re talking about a hostile router

--Android is safe by default and unaffected.

--Linux may be safe if used correctly.

--Microsoft Windows and Apple are highly vulnerable.

--While Leviathan created it, they think it’s been used in the wild since maybe even 2002

--Abuses the DHCP server to incorrectly route packets

--Random devices can pretend to be the router with DHCP attacks

How it works:

DHCP is when a home router assigns IP addresses to devices in your local area network. There is “ option 121” which allows that router (DHCP server) to route the VPN user’s system in a way that is more specific than those used by most VPNs. TunnelVision abuses option 121 to purposefully route the system through their fake interface.

Why Android is immune:

Android ignores option 121

How Linux users can protect themselves, quote from Leviathan:

“Using network namespaces on Linux can completely fix this behavior. However, in our experience, it is less commonly implemented. WireGuard’s documentation shows how it’s possible to use a namespace for all applications with traffic that should be using a VPN before sending it to another namespace that contains a physical interface. However, this appears to be Linux-specific functionality and it’s not clear if there is a solution for Windows, MacOS, or other operating systems with the same amount of robustness.” Source: https://www.leviathansecurity.com/blog/tunnelvision

And of course, Linux PLUS an open source router is the real protection. Check out the router section of our site,

https://simplifiedprivacy.com/category/routers/

I really need to brush up on Linux network namespaces.

Welp, there goes localmonero and agoradesk. Was great while it lasted.

Yes.

He does all kinds of stuff like that. I think he genuinely believes that his ideas, which often go against individual liberty, are good for humanity. I don't think so, but yeah, I believe he does.

Call me crazy lol but I happen to think George Soros is just a genuine dude. I've seen him do interviews, I've read one of his books (his magnum opus as he stated when he wrote it) and looked at some of his activities, I've never seen a lie or any dishonesty.

He believes some things I disagree with, strongly even, and he puts his resources to work furthering those things which I don't like. But I don't think he's a liar or trying to hurt humanity or anything like that.

Checking out kalc, a scientific/graphing calculator written in Rust. I've been looking for a good calculator, and I don't need all the features in it, although sometimes I do find myself wishing I could just graph something real quick.

So far it is fantastic! It's basically a shell in a terminal that accepts all sorts of notation, sqrt(x), x//2, x(1/2) and x**(1/2) for example all give you the square root of x. So no matter what sort of notation you're used to for doing math, whether it's from some programming language you use a lot, or regular algebraic notation, it has you covered. It also has all the built in functions you would ever need, all trigonometric functions and everything else you could ask for, logic operators, bitwise operators, everything. It let's you change notation. It allows you to use Greek characters, has all the constants you'd use in day to day life like e, π and i, and you can define functions and constants yourself in the configuration. Additionally, it loads files. The only things I haven't figured out yet is how to do binary and hex conversions, I wonder if those are built in or not.

I've tried numerous different calculators, GUI calculators, TUI calculators, programmers calculators, scientific calculators, numerous different graphing calculator emulators, and this is so far the one that does everything in a sane way. Usually I'll just load a REPL or the python interpreter to do math real quick because it works better than every calculator I've tried. If you use a calculator regularly on your machine this one will probably do everything you need and stay out of your way.

It depends on gnuplot for graphing.

https://github.com/bgkillas/kalc

FYI, you can get FFUpdater in f-droid (or from it's git repo and keep it up to date using Obtainium) and it keeps a ton of privacy focused browsers available for you and keeps them up to date, including Kiwi. You could also use Obtainium to just get Kiwi from it's repo as well.

Also, nos2x (another nostr signing browser extension, works with rebelnet) works on iceraven, an FF fork also available through FFUpdater.

At this point I fail to see what point you're even trying to make. You're just arguing with people for entertainment.

Isn't that what we are doing by taking the money out of their control? I propose we do what we are doing.

This is happening everywhere and you're not paying attention.

Your all caps shows your unhinged worldview.

Our goal here is to free the world, not run and hide in a hole.

Dude this is fantastic that is for sharing, you've enlightened me a little and given me a perspective I hadn't considered.

Just use a mixer they said.

How long before payment channel providers on lightning start getting charged with operating a money transmitting business without a license?

I made a few qutebrowser userscripts if you're into that kind of thing. A tool to mutate URLs before following them in just about any user configurable way, and a tool for bookmarking/tab/session management to organize links, are the two big ones. I can't live without the latter now.

I'm also working on a robust reader mode like userscript off and on that I'll get out eventually, and rolling around the concept of something to open links externally, such as opening video links in youtube-dlp or mpd or something.

You really can't beat this browser.

FYI openboard is not maintained and there's a new fork of it out there called heliboard that is pretty great. It's in the f-droid repo and of course you can keep it up to date with obtainium.

If you specialize in something that has elastic demand while consuming inelastic goods you put yourself at the mercy of the producers of those goods, or whoever controls their flow.

Look at states. States often specialize with regard to exports. But the most successful states diversify; they attempt to accomplish food security. The specializers are at the mercy of those that can sustain themselves.

Self sustainability is very important, markets are also very important. At the very least you should be capable of providing the basic things you need to stay alive.

It's amazing, once you understand capital and wealth creation, and you see that you can create real wealth yourself, for yourself, using mud, without any middleman or government taxing you, without a counterparty, you'll realize you didn't quite understand it as well as you thought. You experience feeling numinous and epiphany at the same time.

Yeah I think it's a good idea. I absolutely hate setting up self hosted email, so if I needed to self host I'd definitely rather pay someone to set it all up for me. It's like the best of both worlds: you get the security of self hosted without the pain of having to do it. Bonus points, you get xmpp?

I personally dislike email, but the fact is you're stuck with it, and if you're all about your privacy and security, self hosting is the way to go.

I've got to disagree. I will never (again) host my own email. It's my last line of communication. It doesn't need to rely on my maintenance, it just needs to be there. I'd rather pay for hosted email. I'm not maintaining a server and updating dependencies for a communication channel that I basically use for marketing spam and just in case I lose contact in other ways. I absolutely hate email, but I have it, same as a phone number. I honestly don't want either, so I'm going to put minimal effort into keeping them. With regard to email, the farthest I'll go is paying something monthly and not using the big two email services.

If you're someone seriously using email for secure communications all the time, yeah you should probably put the effort in and self host. But most people don't use it like that anymore. Most people use it to confirm sign ups for accounts they sign up for to order a single thing from a web shop. If you don't like your purchasing habits being snooped, avoiding google and Microsoft is about all you need to do. The only people I know that use email seriously are people contributing to FOSS projects with git the old school way, via mailing lists.

If you really want privacy in your communications, just use something that isn't email.