Hacker Newsnew | past | comments | ask | show | jobs | submit | tryauuum's commentslogin

Like in Russia

    - drop wireguard / OpenVPN packets crossing the country border
    - analyze https traffic to detect traffic patterns not matching https fully and block such connections

The state of the art, "xray-reality", is not blockable. It's a legit tls connection with data smuggled inside it.

Are you taking from the experience that this is not blockeable in Russia?

EDIT: I might be confusing vless/xray/reality but seems like there are no problems to block it based on ip reputation + tls fingerprint + amount of connections https://habr.com/ru/articles/1044396/

Of course this would block some valid websites but when has government cared about that


The IPs are Cloudflare, the TLS fingerprint is uTLS Chrome, and the number of connections with xhttp is the same as your normal browsing.

If you are willing to block browsing all ordinary web sites fronted with a CDN, then yes you can block reality/xhttp. You cannot, however, differentially block it via any of the three things you mentioned.


They are willing to break some cloudflare-fronted websites. That's already a reality in Russia.

The government (any government) hates its citizens and the freedoms it had to allow them


How bad was it?

1,500 packages out of 107,000 so pretty bad, ameliorated by only affecting installs of those in a window of a few days.

AUR comes with a warning that its up to you to check what you install from there.


I was concerned at headline, then saw "oh just AUR"

Next up, "millions of malicious packages still not taken down on internet"


I wonder what typical AUR usage looks like. I apparently have 27 packages installed and last updated one in November.

There's more than one way but this lists packages not installed by pacman itself:

    pacman -Qm
Only 237 on my 12 year old system but I rarely update AUR packages and usually try to remove unused ones before updating.

this website redirects me to casinos

I don't think people actually care about a sincere answer to "how are you doing", so replying with the prebaked line makes sense

Indeed! I’ve always considered it as a quick check that the other person is not about to suddenly explode on you.

How old are we talking?


IIRC it is pre-2008.


sounds still more natural than windows made of brick or other non-transparent material!


feels like ai slop


> Nvidia that gives absolutely zero fucks about people that aren’t their enterprise customers buying GPUs by the thousands.

for the context, nvidia gives zero fucks about people who are buying their GPUs by thousands as well.


Not shot on sight but e.g. "being declined entry because you refused to unlock your smartphone to the customs officer". And then you have to fly back over the ocean.

America isn't special here, I guess every country treats non-citizens worse than citizens. But at least the trip back is usually shorter


"privacy tools" doesn't sound strong enough. "tools to bypass censorship of the future fascist government" sound better, though longer

I always remember a video snippet of some meeting in US, some chinese looking woman says something like "Mao took our guns and killed us all, I'm never giving up my rifle". Some politician reminds her that they live in the democracy. She asks him something like "can you guarantee me that in 20 years it will still be a democracy", which he admits he can't

found the video https://www.reddit.com/r/GunMemes/comments/1c13kkz/survivor_...


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: