Viewing profile — alexflint

Thanks! Yeah linux network namespaces are a powerhouse that we're only just starting to fully utilize (outside of containerization).

Thank you! mitmproxy is fantastic - thanks for all the work that's gone into that project. Maybe we can get in touch and chat about all this stuff.

Nothing at all! You do need write access to /dev/net/tun. This is standard for all users for the distros that I've looked into, but it is ultimately a distro-specific thing.

Unfortunately TLS happens inside the the application, not in the kernel, so using eBPF to hook syscalls to write won't help with TLS decryption.

Fascinating, I hadn't heard of WARC - thanks for the pointer and I'll consider it.

Yeah that photo is real! That's where I live! Yes, it's true, actually doing it is hard, but to be honest not as hard as a lot of other stuff (getting a phd for example, or goodnes…

Wireshark is awesome but yeah as others mentioned it's the TLS decryption piece that is difficult in that workflow

Woah, this is super helpful info. Thanks. That sounds like a real possibility for a macOS port actually.

This is a very interesting possibility actually. Not 100% sure what the implication would be but maybe there is something here.

Yeah mitmproxy is great. The main difference with httptap is that it's an HTTP proxy server, so you have to configure your program to use a proxy server. When I wrote httptap I wan…

Thanks! I did try this with firefox but it doesn't work right now due to (I think) the user namespace messing with user IDs. I think I should be able to fix this, though. I will ha…

Same here actually -- have wanted this from time to time for years. Finally sat down and worked it out.

Yep. This is the first time I've mentioned this but there are actually two implementations of this in the codebase -- one uses gVisor and one is an incredibly bare-bones TCP implem…

Very cool! Would love to hear how it goes, especially any features that would be useful in the context of real-world usage.

Yep, mitmproxy is fantastic IMO.

Yeah learning about gVisor was one of the most fun parts of this project. The gVisor devs are incredibly helpful. If you look through the gvisor-users mailing list you'll see me as…

Interesting. Care to share any info about your setup? Would it be a matter of httptap reading a certain environment variable and then forwarding traffic to a SOCKS proxy? FWIW ther…

Thanks! But yep I agree, you're exactly right, it's ultimately... frustrating that there isn't really an agreed-upon or system-enforced way to specify CA roots to an arbitrary proc…

Very good to know about. But you still have the problem of decrypting TLS traffic.

Wow, did not know about this!

Super cool! Connecting what you capture to Chrome DevTools is fascinating, as is using eBPF. Great work getting the devtools to run as a standalone web app. You won't believe it bu…

Wow that's an incredible quote! It feels like that to me too.

Agreed! So there isn't any interface for modifying requests/responses at present, but it's definitely possible given the underlying approach. If you consider [this line of code]( h…

Yeah, for other readers who are looking at this thread, the connection is just that this (httptap) is a Monastic Academy project, and what that means is that there is a group of pe…

Thanks! Haven't measured performance at all. However when I decided on the approach I looked at the performance benchmarks from tun2socks, which uses the same gVisor code that http…