Live data from Hacker News

Viewing profile — Sakura-sx

Sakura-sx

HN member
Joined
Mon, Jun 23, 2025, 12:07 AM UTC
HN karma
95
Public activity
41 items

About Sakura-sx

No profile information was provided.

Recent public activity

  1. comment
    Comment #46428816

    I am not detecting that, I am just detecting L4 proxies for now sob

  2. comment
    Comment #46428320

    I think for stealth TCP proxies are more common since you can use your own TLS fingerprints and all of that, with something like an HTTP proxy you'd need to set up your requests to…

  3. comment
    Comment #46427297

    The issue is that if HTTP is an extra 50ms than TCP for example, if you increase TCP by 50ms now HTTP is 100ms more. Basically it is always more no matter how much you increase it.…

  4. comment
    Comment #46427124

    Thank you! Will check it out!

  5. comment
    Comment #46426321

    Yes, it's important to keep this in mind, thanks for your comment!

  6. comment
    Comment #46426190

    Oh I haven't seen that before, it's really cool, thank you for showing me that! I want to clarify that the approaches are a bit different, they use IP intelligence too and this app…

  7. comment
    Comment #46425992

    First of all, thanks! I imagine any big CDN implementing something like this could keep a database of all of this, combined with the old kind of IP intelligence and collecting not …

  8. comment
    Comment #46425902

    Are you using a proxy? If you aren't that would be concerning, since false positives are way worse than false negatives. If you are then it means the score is sometimes a bit lower…

  9. comment
    Comment #46425835

    About the straightline path I did think of that but apparently I forgot to address it when writing the README :p The point I was trying to make is that if the RTT is low enough you…

  10. comment
    Comment #46425674

    I guess for this to work best you'd build your own CDN and have as many servers as possible. I have always dreamed of an Open Source CDN managed by a nonprofit and dedicated to off…

  11. comment
    Comment #46425565

    I think you could also compare with TLS handshake timings, delay for client hello among other things. And you could also compare it with HTTP RTT, not to mention that you can do TC…

  12. comment
    Comment #46425351

    Thank you! There are other ways of detecting L3 VPNs, but I wanted to start with proxies since they do most of the damage.

  13. comment
    Comment #46425289

    It's done by checking the difference between the initial TCP RTT and the subsequent TCP RTTs, both of which can be retrieved from the Linux Kernel easily without the need for PCAPi…

  14. comment
    Comment #46425116

    That's strange, could you try with " https://aroma.global.ssl.fastly.net/score "?

  15. comment
    Comment #46425097

    Also, something I haven't included on the README is that apart from testing with Tor, WARP and some other proxies. I did some testing with the free one-week trial of Brightdata's r…

  16. story
    Show HN: Aroma: Every TCP Proxy Is Detectable with RTT Fingerprinting

    TL;DR explanation (go to https://github.com/Sakura-sx/Aroma?tab=readme-ov-file#tldr-e... if you want the formatted version) This is done by measuring the minimum TCP RTT (client.so…

  17. story
  18. comment
  19. comment
    Comment #44392922

    I advice either monkeytype or keybr, both have a setting for code

  20. comment
    Comment #44392445

    Thanks!!!

  21. comment
    Comment #44392294

    Thanks for the idea, added to roadmap!

  22. comment
    Comment #44392076

    keybr's algorithm is flawed, getting 1 extra WPM on "q" does way less progress than getting 1 extra WPM on "e", it's better than most of the things but also I wouldn't have made ty…

  23. story
  24. story
  25. comment
    Comment #44392004

    You are right, I didn't know what it was when posting.