Viewing profile — sporksmith

I thought this must be a joke at first. "Glaze" is in pretty heavy use as recent slang for "when someone excessively praises another person in a way that feels over-the-top." https…

After the "trust nothing" security model in the rest of the article I found it funny to complain that a hardware kill switch is useless when you can just trust the software to do i…

Cool, will be interested to see how this develops! tokio's loom framework has been a big help in testing some tricky concurrency code I've worked on. Folks interested in this space…

> if you're allowed to look inside the process, which would be for similar reasons to why you're allowed to look inside a configuration file belonging to the user On recent Linux d…

Folks are saying to practice your fall-possibility-sport where a fall won't hurt as much. I say take it a step further and do focused practice of falling and rolling intentionally.…

Yes. Though I'm not sure I see the connection to the OP...? The example I'm most familiar with, because I work on it, is Shadow. We used ptrace for a bit but now use seccomp. https…

In my journaling I realized the process of writing was valuable, but I rarely referred back to anything. So for personal / stream of consciousness things I either write on paper an…

True, but it'd be difficult to both make arrests based on info learned from having broken Tor, and keep it secret that they'd broken Tor. It's possible by obscuring how they got in…

There is a bit of a heuristics-based arms race here for sure. https://blog.torproject.org/malicious-relays-health-tor-netw... talks about this

This article is from 2013, and notes a huge increase in tor clients . While the article notes we weren't able to determine the cause of the sudden increase, the primary hypothesis …

UDP is currently not supported, but we're working on a design for it now https://gitlab.torproject.org/tpo/core/torspec/-/blob/main/p...

The spec documents linked from there are the most canonical documentation, though the gitweb link will probably be deprecated soon in favor of gitlab. https://gitlab.torproject.org…

Probably some, but the Tor network is designed to be robust to that. The community does a lot of active monitoring to kick out misbehaving relays. "Misbehaving" includes running mu…

Tor dev here! We're super excited about this launch! The lead dev on this feature, who also wrote the blog post, is taking some well deserved r&r after getting this feature out the…

... No? Could you be more specific? Disclaimer: am a Tor developer and employee.

Folks interested in the state of the art of this kind of DPI evasion might want to check out obs4, which is a "look-like nothing obfuscation protocol", and the default pluggable tr…

The original Mario Bros arcade game had crab enemies: https://www.youtube.com/watch?v=FgOAW6lv1qg

We've started looking into eBPF a bit - IIUC eBPF by itself doesn't give us the ability to service or arbitrarily manipulate the traced process's syscalls. We have recently learned…

For anyone interested in following current development on Shadow, we've been publishing a series of updates. Most recent: https://github.com/shadow/shadow/discussions/1274 The prev…

Sorry, I'm not well versed in the network model; most of my work has been on the new ptrace-based syscall interposition. That sure sounds like a bug, though. We recently added a di…

Shadow developer here! Disclaimer - I joined the project a little over a year ago. I'm not as well versed in some of the related work as my colleagues, but I can take a shot - Mini…

The in-repo docs have a general walk-through for getting started: https://github.com/shadow/shadow/tree/main/docs . Shadow's primary use-case is simulating the Tor network. Shadow'…

Yup. I just tested ~~the fdroid~~ signal (the non-google-play apk from signal's web site) with orbot (a tor VPN for android) and verified it works correctly for text messaging. As …

(Relatively new) Tor developer here. Yes, unfortunately some sites and such "protection" services block Tor IP addresses to mitigate abuse. While just blocking exit nodes would be …

I wonder if OSM has clean extension points for adding this sort of specialized metadata. Might be a nice way to create these kind of specialized geo-databases without having to do …