Live data from Hacker News

Russia Starts Blocking VPN Protocols

vpncentral.com

141–150 of 166 posts

Re: Russia Starts Blocking VPN Protocols

#142

Ah, of course. Good ol' Russia furthering its reach of state propaganda and brain washing its people into truly believing that Russia doesn't invade, but instead saves other countries. Source: Am from Estonia, and a lot of Russians living here very much believe this.

Don't mention the Americans in the middle east.

The US did nothing to suppress free speech with regards to those wars.

It was very unpopular to criticize them in the post-9/11 fervor, but there was no legal suppression of those viewpoints.

Re: Russia Starts Blocking VPN Protocols

#143

Earlier quoted context omitted.

> you would not want to be his life insurance provider right now Why not? Sounds like the perfect scam, collect the $$$, funnel it to some offshore account. When Putin dies the chaos of succession ensures that nobody will be able to attempt to collect before I leave the country.

I mean, I'm not sure how it works in Russia, but in most countries the insurance industry is about the most heavily regulated part of the finance industry, particularly since the financial crisis; that would be difficult to pull off :) (Now curious whether "client became a dictator and is currently provoking people into murdering him" is sufficient basis for an insurer to get out of a policy...)

It is a reasonable bet that you can leave the country between his death and when regulations manage to enforce things.

Re: Russia Starts Blocking VPN Protocols

#144
post #107

Earlier quoted context omitted.

"sooo many" is a technical term? "Sooo many" compared to what? Did you scrutinize the equivalent of Java's SDK in Rust + extra crates to get the same functionality? Do you include things like unrelated package bugs, like log4j bugs?

Hyperbola GNU/Linux ditched OpenJDK becasue either bugs or patents. The list on Java CVE's it's atrocious. Java should've died long ago with Golang and some cross-plaform (basic) GUI libraries promoted from Google. Nothing fancy, something like plan9/9front UI's, but enhanced. Java exists today because of corporateware. Outside of it, it's dead. De-ad. No one uses Java seriously for emulators, browsers, or basic soft…

You mean something like arbitrary deserialization? That's a logical bug implementable in any language.

Re: Russia Starts Blocking VPN Protocols

#145
post #136
post #107

Earlier quoted context omitted.

Hyperbola GNU/Linux ditched OpenJDK becasue either bugs or patents. The list on Java CVE's it's atrocious. Java should've died long ago with Golang and some cross-plaform (basic) GUI libraries promoted from Google. Nothing fancy, something like plan9/9front UI's, but enhanced. Java exists today because of corporateware. Outside of it, it's dead. De-ad. No one uses Java seriously for emulators, browsers, or basic soft…

JetBrains is valued at $7 billion by the Bloomberg Billionaires Index and they build their popular IDEs in Java... So Java isn't de-ad outside of corporateware...

I know it's used by inertia in some corporate envs and thanks to some GC tunings it looks that it can run really well over long time. But even with GraalWM, the performance outside big irons leaves much to be desired...

Re: Russia Starts Blocking VPN Protocols

#146
post #107

Earlier quoted context omitted.

Hyperbola GNU/Linux ditched OpenJDK becasue either bugs or patents. The list on Java CVE's it's atrocious. Java should've died long ago with Golang and some cross-plaform (basic) GUI libraries promoted from Google. Nothing fancy, something like plan9/9front UI's, but enhanced. Java exists today because of corporateware. Outside of it, it's dead. De-ad. No one uses Java seriously for emulators, browsers, or basic soft…

I don't think this take understands Java's position, relevance, or the roles it serves. Or even what are the important categories, driving most of software development (it's not enulators, broswers -of which they're just a handful, all in C++, or "basic software" whatever that means). For starters, Java is by no means used just in "corporateware", if this means some intranet stuff. It's also hugely dominant in server…

That doesn't say anything about CVE's and the issues on being not so performant against the new iterations of C# or even PHP >7.

I know that if you were to work in any company, Java would ve everywhere, but today the times changes. Even the Crustacean lang it's preferable againt Java on big backends. On the ligther workloads, Golang works great and it solves the multiplatform issue by crosscompiling from anywhere to anywhere.

Re: Russia Starts Blocking VPN Protocols

#147
post #139

Earlier quoted context omitted.

I don't live in China. Yet I'd very much like my country having its own national software stack (OS, search engine, browser, social media apps). All is fine for you guys in the US, but you forget when our national interests conflict with yours or big tech corporations or when the privacy of our citizens is concerned, it happens to be a national security issue. I trust my own government to not spy on me unnecessarily,…

I fully agree with you. Digital sovereignty is important for countries and it makes sense that they are trying to become digitally independent. The bad part is that this particular instance, it will be used against the people. I would say that better goal would be for individuals to be digitally sovereign, and not countries. Individual digital sovereignty protects us from external and internal oppression.

I'm afraid that's technically not possible. Internet is inherently centralized due to the need for ISPs, and there are TLS CAs, TSMC, and many more things. Current sophistication of technology needs centralization for its manufacture and use.

Re: Russia Starts Blocking VPN Protocols

#148
post #131

Earlier quoted context omitted.

To be pedantic, Go strings are immutable and will carry different pointers to different underlying rune slices, so the reader would just display one string or the other, not "Susan Sarcemin". That said, I'm not sure why developers freak out over races so much. Races that result in simple display of data that's one nanosecond old is typically not a failure condition in most applications. Actual failure conditions from…

> I'm not sure why developers freak out over races so much In all languages if you cause a data race you lose Sequential Consistency. Java's experience teaches us that even if you go to extraordinary lengths to ensure that everything else is still fine, programmers cannot reason about non-trivial software without Sequential Consistency and so now they can't fix it. In something like C or C++ all races are Undefined B…

Do you need to imagine a vulnerability when we have a CVE database?

Re: Russia Starts Blocking VPN Protocols

#149
post #145
post #136

Earlier quoted context omitted.

JetBrains is valued at $7 billion by the Bloomberg Billionaires Index and they build their popular IDEs in Java... So Java isn't de-ad outside of corporateware...

I know it's used by inertia in some corporate envs and thanks to some GC tunings it looks that it can run really well over long time. But even with GraalWM, the performance outside big irons leaves much to be desired...

Java works passably and gets job done over long time. And rust isn't magically fast.

Re: Russia Starts Blocking VPN Protocols

#150
post #103

Earlier quoted context omitted.

That approach, while convenient is not safe. It does not guarantee non-TCP traffic will be proxied. (You can test with a “WebRTC leak tester”.)

Using Links+ to proxy all info into that not leaking everything should be mandatory. TOR, I2PD, anything. If you are using a JS based browser, you don't deserve security in first place. If any, you can always use torosocks and yt-dlp to fetch all media. If I had time I could set up a tutorial not to use SSH as a proxy, but as a client to a remote VPS/tilde to use the offpunk client there to browse web/gemini and goph…

> If you are using a JS based browser, you don't deserve security in first place.

In some cases, that is true, but not all, and I suggest not even most. In many cases, I think people are just as culpable for being unwilling to use Whonix.

> If I had time I could set up a tutorial not to use SSH as a proxy, but as a client to a remote VPS/tilde to use the offpunk client there to browse web/gemini and gopher sites anonymously.

https://github.com/browsh-org/browsh can be pretty decent, too.

Aside, it's a shame that it's not common practice to provide resource gleanings in the form of such access to random others from one's VPS. An easily reproduced NixOS environment in VM with locked down containers proxying through a local tor instance(s) would scale up alright and significantly limit risks for the donor. I find very few people take up the offer to even use another's VPS though.

Post reply on HN