• ssh to remote, forwarding some remote port to your local ssh port (-R)
• ssh from remote through the exposed port, starting socks proxy in the process (-D)
• use socks proxy explicitly or find some tool that can route the traffic into it

Similar approach can be used to establish VPN tunnel with no encryption (ssh already provides that), routing everything but your ssh connection through it.

• ssh to remote, reverse forwarding your VPN-over-tcp server’s listening port
• establish vpn connection on remote, route everything but your ssh connection through the newly established interface

It will be wasteful, but it will work.

Same weird non-sequiturs chain that foobar2000 author uses.

They could’ve honestly said “I don’t wanna”, and that would be the end of it.

In the beginning the Universe was created. This has made a lot of people very angry and been widely regarded as a bad move.

Considering that git doesn’t need federation, and email is the grandfather of federation, sourcehut has a working version of it this very moment.

Oh yeah, please do imagine there is no such thing as a time zone.

On an ellipsoid!

If you use HTTPS, the attacker can still see what websites you connect to, they just can’t see what you are sending or receiving. So basically they can steal your browsing history, which defeats the purpose of a commercial VPN for many users.

This is blatantly false. They can see IP addresses and ports of you connect to from IP packets, and hostnames from TLS negotiation phase (and DNS requests if you don’t use custom DNS settings). HTTP data is fully encrypted when using HTTPS.

If exposing hostnames and IP addresses is dangerous, chances are that establishing a VPN connection is as dangerous.

Control of the DHCP server in the victim’s network is required for the attack to work.

This is not a VPN vulnerability, but a lower level networking setup manipulation that negates naive VPN setups by instructing your OS to send traffic outside of VPN tunnel.

In conclusion, if your VPN setup doesn’t include routing guards or an indirection layer, ISP controlled routers and public WiFis will make you drop out of the tunnel now that there’s a simple video instruction out there.

As we all know, siphoning of the power to the small percentage of people had never happened prior to capitalism.

Support for QUIC and HTTP/3 protocols is available since 1.25.0. Also, since 1.25.0, the QUIC and HTTP/3 support is available in Linux binary packages.

https://nginx.org/en/docs/quic.html

2023-05-23 nginx-1.25.0 mainline version has been released, featuring experimental HTTP/3 support.

https://nginx.org/2023.html

It’s not a dev code. It would also take a mere minute to check this before failing to sound smart.

Even better, the dude forked because a security issue in “experimental” but nonetheless released feature was responsibly announced.

Talk about an ego.

Please correct me if I’m wrong, but doesn’t this allow one to represent virtually any resource as a mail inbox/outbox with access through a generic mail app?

I’m working with a specialized healthcare company right now, and this looks like a way to represent patient treatments data as an intuitive timeline of messages. With a local offline cache in case of outages. Security of local workstations is a weak point of course, but when is it not…

“Huh, I wonder” has been driving general scientific progress and heart failures in engineering since forever.

Don’t compare someone’s highlight reel to your behind the scenes.

I once convinced someone that they are actually doing a great job by sharing my struggles and showing that they are not an impostor. They now outshine me and will go to even greater heights.

And while that one episode of dealing with burnout and impostor syndrome is a drop in the ocean of their persistence, it’s a great illustration to how misleading comparison to others is.

PS: Also, if you have ADHD, you’re nearsighted in time. That doesn’t only mean “you can’t plan well”, it means “your life looks like a hazy blob, where others see a complex scenery”. And that can be devastating when doing a comparison. Be kind to yourself, be kind to others.

Adding to the pile.

Peter Watts. Most of his works are available on his site for free - https://www.rifters.com/real/shorts.htm

Greg Egan. Start with Diaspora.

Alastair Reynolds. I recommend starting with short fiction in Revelation Space and looping back to main novels. I accidentally approached it that way, and the experience of all the stories linking together was downright magical.

Charles Stross’ “Neptune Brood” explores the idea of debt under the guise of a space opera-ish action. Afterwards, Glasshouse and linked books will present a different existential crysis to mull over.

Cory Doctorow’s Little brother is an excellent book to follow 1984 with. And a great start to the rest of his biography.

N. K. Jemisin’s “Broken earth” was quite a treat, prose- and story-wise.

Ann Lecke’s “Imperial Radch” is a brain-twister, especially for someone whose native language is gendered all throughout. It was fun giving up on information I’m used to have in words.

Pierce Brown’s “Red rising” has one of the best flowing prose I’ve read. Do mind that the story was initially planned to be a trilogy, and it clearly shows in narration.

Mark Lawrence’s everything. “Power word kill” is a great play around DnD, and “The broken empire” has the most loathsome protagonist you’ll ever root for.

Sorry, but you don’t get to claim groupthink while ignoring state of Apache when Nginx got released.

Apache was a mess of modules with confusing documentation, an arsenal of foot guns, and generally a PITA to deal with. Nginx was simpler, more performant, and didn’t have the extra complexity that Apache was failing to manage.

My personal first encounter was about hosting PHP applications in a multiuser environment, and god damn was nginx a better tool.

Apache caught up in a few years, but by then people were already solving different problems. Would nginx arrive merely a year later, it would get lost to history, but it arrived exactly when everyone was fed up with Apache just the right amount.

Nowadays, when people choose a web server, they choose one they are comfortable with. With both httpds being mature, that’s the strongest objective factor to influence the choice. It’s not groupthink, it’s a consequence of concrete events.

Sourcehut

Atheist is a non-believer. Prefix “a-“ means absence. Every human is an atheist unless they believe in every god. The word was first used in relation to Christians.

Anti-theist is someone opposed to religion or belief in supernatural. “Anti” means “opposed / opposite to”.

Agnostic is a bullshit cop-out term that at some point in a Christian discourse briefly meant “someone who considers supernatural to not be knowable”, but doesn’t have a proper meaning nowadays. It has a transactional role in conversation - it most often relays unwillingness to continue the conversation on religion.

A “definite belief that there is no god” would be “gnostic atheist” in proper terms. I.e. “god is knowable and he’s absent”. But those proper terms were barely ever alive. Instead, people dance around topic of religion as if it didn’t enjoy enough fucking dances for millennia past.

I survived and managed to find a job that helps me help a few other humans survive.

Don’t discriminate. Many men want a guy that can provide too.

Eh, there’s plenty of socialism in practice. But English speaking discourse is dominated by fans of dictators that actively hunted socialists in twentieth century.