Viewing profile — jonfriesen

Build a browser on top of an open standard, neglect that standard, then refer to that neglecting as the reason to kill it. This fits that spiderman pointing at spiderman meme perfe…

Yes, since NixOS runs on a standard Linux kernel, Qtap will work. I realized that we weren't scanning the nix store for shared libs (eg. OpenSSL) and added that this morning.

Thanks! We're really excited about Qcontrol and what it will be able to provide! The rules in that doc are powered by our Rulekit project https://github.com/qpoint-io/rulekit if yo…

`ecapture` has been around for a while and do a lot of great stuff and a lot of functionality overlaps. Our aim is to make Qtap extensible and via a plugin system. We have http1/2 …

As of today, we don't output pcap or har files though these are additions I'd like to make in the future, they aren't currently on our near term roadmap.

I think the closest is an app with a full GUI called LittleSnitch. It's pretty impressive. https://www.obdev.at/products/littlesnitch/index.html

These are all great callouts. We've worked hard to address some of them, some are future endeavours. To address your points: 1. In our testing, uprobes add a statistically insignif…

Not today, maybe one day! Edit: Another user posted a link to https://github.com/gojue/ecapture which looks like it supports android and has some overlapping functionality.

Qtap does require root privileges to function as it uses eBPF to hook into kernel and userspace program functions. The good news is it can also be run within a container. There are…

You've definitely hit on a point that we've talked about at length and have come to terms that different organizations have different requirements, especially when it comes to regu…

Fair point on -O2 and -O3 optimized bins. We've approached this by building custom bin utils that are optimized for blazingly fast symbol recognition. Traditional ELF tools that fo…

That was one of our biggest motivators when dreaming up Qtap. How can we remove the impact that proxies have on connections, AND see the content without having to manage a custom c…

This is a great point, and Qtap itself does need to be used with care. The company behind Qtap (Qpoint.io) provides full inventory and alerting for this sort of scenario. That said…

Qtap scans binaries of processes as well known locations for OpenSSL on startup, then passes the offsets to eBPF where it hooks into the SSL_read and SSL_write to get the content b…

A small note, the DigitalOcean dev DBs do have daily backups though these are not accessible by the user and only come into play when there is a non-recoverable issue with the node…

Hey futhey, The team agreed that we had some gaps that needed to be filled, you will now see new plans: Basic $40/month 4GB RAM & 2 Shared vCPUs Pro $75/month 4GB RAM & 1 Dedicated…