The DMZ

« first day (4148 days earlier) ← previous day next day → last day (1030 days later) »

Fire Quacker

03:05

@belkarx Novi Fosili, Die Mayrhofner, The Corries, Tomatito and Paco de Lucia, Jewish Starlight Orchestra, 100 Tamburaša, Cancionero de Upsala, occasionally sea songs, Acapella, and movie soundtracks.

2 hours later…

belkarx

04:41

@FireQuacker Favorite movie soundtrack?

7 hours later…

A. Hersean

11:59

Is commenting "RTFM" considered offensive?

2 hours later…

Fire Quacker

13:55

@belkarx Not sure I have a favorite. I listen to Avengers: Endgame, Star Trek (2009), and random other movie soundtracks. Some Ennio Morricone. Favorite individual tracks are Mandalorian theme, Chariots of Fire title theme, and Magnificent Seven title theme.

ThoriumBR

you can say RTFM means read the friendly manual if anyone accuses you from being offensive

A. Hersean

@ThoriumBR I like this idea.

ThoriumBR

and if anyone is offended by being told to read the manual, you can say "the manual explains better than I could, and copy/paste from it would prevent you from learning extra things there"

A. Hersean

14:10

I do not think I would risk to be banned just from telling someone to read the documentation, even if the OP is offended by it.

ThoriumBR

I am not that sure...

the risk is low, but not zero

Fire Quacker

For one comment, the risk is low unless it's egregiously offensive. Usually it takes a pattern of offensive comments before suspension.

2 hours later…

RoraΖ

16:02

Not sure if anyone remembers me, it's been a few years since I was active. But I'm back and trying to be active here again :)

Fire Quacker

16:54

Welcome back!

A. Hersean

I don't think I was active in the DMZ at this time. But welcome back anyway!

RoraΖ

17:49

Yeah I was probably active back in 2014-2016

Rory Alsop

18:42

@RoraΖ Evenin' - long time no see!

ThoriumBR

18:59

welcome back

1 hour later…

forest

20:09

Welcome back. Although I don't think I was here when you were active. :P

forest

20:59

@A.Hersean Not offensive, but under certain new silly rules, it's "unwelcoming". I think it depends on context. A comment with nothing about "RTFM" is as offensive as saying "Google it", but I don't think that particular initialism is problematic in and of itself.

Fire Quacker

21:13

RTFM was actually discussed on Meta Stack Overflow back in 2009, long before most of the welcoming crazes

ThoriumBR

netns and IPv6 are beating me down so hard I am about to give up...
the problem: I want to create a namespace for some software so they can use a different ipv6 address than my computer, so I can test some things (and I can tcpdump and not have to filter out my local addresses). so I went the netsh way.

I created a namespace, a virtual interface, added the host interface as the gateway, I can ping the host from the ns and ping the ns from the host, but nothing on the local network can ping the ns and vice versa

(I used blogs.igalia.com/dpino/2016/05/02/network-namespaces-ipv6 as a reference)

(and this: gist.github.com/dpino/6743226422594b6c02c7150b6e5e7df7)

forest

21:31

I don't think IPv6 is handled differently from IPv4 in network namespaces, is it?

ThoriumBR

it should be the same

well, I will try again tomorrow...

user

Can Cloudflare be used for traffic correlation vs Tor?

forest

@user Cloudflare is in a position to perform attacks from the role of the destination website.

But that's true for all major CDNs or any highly-centralized network.

@user Can you elaborate more on the question?

user

21:48

(i dont know much about those things) I was wondering if NSA for example has full access to Cloudflare and other CDNs, would it only need to control entry nodes to deanon users? I mean, it wouldn't need to control any exit nodes, right?

forest

@user An attacker can do a lot more if they have control of the exit node itself. If they only have control of upstream, they can't take advantage of cryptographic malleability within the Tor network (the so-called crypto tagging attack).

But yes, they can perform other tagging attacks, such as injecting delays to encode information about what site was visited and hoping that the target uses a guard owned by them or a friendly entity that will then listen for said delays.

Because Tor's guards (the entry nodes) are kept unchanging for around 3 months, it makes it a lot more difficult for them to perform a Sybil attack. I described a bit about what an attacker can do if they control the exit vs the destination website here:

A: Attacks on decentralised networks by running a fleet of nodes with modified software

It would be possible in theory using remote attestation for network access controls. This could reduce the TCB (Trusted Computing Base) to only the CPU. Unfortunately, this would require all Tor relays to be run on hardware that supports such remote attestation such as those with SGX, which would...

user

22:03

Any idea what type of data GIFCT share besides image hashes? If they share mouse location perhaps a big adversary doesn't even need to control many CDNs.

GIFCT is a group of big tech companies. Twitter, Facebook, etc.

forest

Share in what sense?

Are you referring to PhotoDNA-type hashes?

user

They share data among each other (facebook, youtbe, twitter, etc) for sock puppet detection among other things if i recall correctly. I remember in a video they mentioned sharing image hashes but don't think they went into details. Neither did they mention other types of data.

forest

The image hash sharing is for detecting child pornography (it's not actually a cryptographic hash, but a representation of an image that is hash-like and flexible enough to withstand mild image editing). I'm not aware of them sharing information for sock puppet detection, beyond whatever third party sources they may use.

@user I don't think they share all that much, tbh. They don't want to help their competition.

Officially, that is. A nation-state threat actor may have compromised them a la PRISM.

1 hour later…

forest

23:22

Random interesting link: flak.tedunangst.com/post/on-the-detection-of-quantum-insert

« first day (4148 days earlier) ← previous day next day → last day (1030 days later) »

all rooms