91–100 of 154 posts
Earlier quoted context omitted.
Open source does not mean secure. Half the time nobody even reads the source, let alone compares the binaries to the repository.
It's a chrome extension, so the source you see is the code executed by your browser.
Earlier quoted context omitted.
> the source will be readable and verifiable. that's all well and good, but if it's executed by an unverifiable binary build of Chrome (i.e. the one distributed by Google), it's not worth much. For what you know, Chrome might just detect the extension is installed and silently eavesdrop on all its calls. If this extension will work as-is on third-party Chromium builds compiled from public sources, then yeah, it can b…
We actually don't know with 100% certainty that Chrome runs the code that we see. Considering Google is forced to comply with NSA's shit (and other agencies in their respective countries), I wouldn't trust my life to this extension.
While we're speculating about trust and such, the video mentions that it's a browser extension which connects to a trusted peer and uses the peer as a proxy. This leads me to believe that, 1. Since it's a normal browser extension, the source will be readable and verifiable. 2. It probably uses WebRTC. It seems Google merely plays an incubator role here for the authors. Either way, I don't see much trust issues that o…
> the source will be readable and verifiable. that's all well and good, but if it's executed by an unverifiable binary build of Chrome (i.e. the one distributed by Google), it's not worth much. For what you know, Chrome might just detect the extension is installed and silently eavesdrop on all its calls. If this extension will work as-is on third-party Chromium builds compiled from public sources, then yeah, it can b…
So is this kinda of like Tor but without the anonymity and only one peer to connect to?
I regularly share my wireless network access with friends without thinking, while running a tor exit node/publishing my network password gives me serious liability concerns.
> "If someone from a country with limited internet access installs uProxy, they can get a friend from the US to authorize them to surf the open web using their connection. " In effect, they would also be sending all their sensitive, potentially illegal traffic to be read and copied by the american NSA agency. http://en.wikipedia.org/wiki/PRISM_%28surveillance_program%2... People proxying illegal traffic through the U…
Can we stop every new thread on HN with NSA spy stories? The NSA can/has/is spying on you for a long time and it has nothing to do with any US company. Much of the traffic around the world (bound for the US or not) is routed through the USA due to us being such a central player, and these core routers have been tapped for a long time. It doesn't matter if you are dealing with "US company" or not.
It's not nearly that clear what the NSA is doing. I've worked in the NOC and as a datacenter tech at a Regional ISP and we definitely did not have spying gear in our facilities. We had other, regional BGP peers so it's entirely likely your traffic never crossed the Internet to get to its destination. I'm still not convinced they've tapped a significant fraction of anything.
The Internet is a complex decentralized network and the NSA most certainly doesn't have the physical resources to tap more than a small fraction of it.
So Google helps building a proxy for by passing their own censorship, Bravo Google, Bravo. (I'm being ironic of course) This is what I get any time I try to download anything from Google Code or Android sdk or even read something hosted on GAE. http://s24.postimg.org/gr0lto1l1/work107.png I'm in Cuba but the same should be for Iran and others "bad boys".
Earlier quoted context omitted.
Why would somebody who lives outside of USA care about US agencies? All I want is to bypass my own country's censorship.
Because non-Americans still have to worry about being abducted off the street and tortured by American agents: https://en.wikipedia.org/wiki/Khaled_El-Masri
I wouldn't trust Google with this. Fuck no. Why don't they help develop the Tor plugin? Why don't the open up a whole bunch of Tor nodes? Wait... scratch that last one. This is just bad.
uProxy is better than Tor (as long as you have a friend you can trust that has access to the content you are interested in). The problem with Tor and other proxies is that you don't know who controls the proxy or exit node, so can't trust it. Is your government running Tor nodes and logging everything and tracing it back to you? Maybe. You can't know.
uProxy is good.
From a cursory reading, 70% of the comments in here are people who came straight to this page to say "I don't trust Google/why wouldn't they do /Google will just shut this down". Can we stop with the kneejerk reactions? This is a p2p browser extension, doesn't run through Google, wasn't developed by Google, the only involvement Google had was maybe fund it. Are we going to be getting these comments any time Google is…
Yes, and I think rightly so. What evidence do you have that this will not happen? None - which is the less evidence that the people saying it will happen have. Google has earned that rep and, until 1-3 years have gone in which they've not done something like that, people will continue to bring it up.