Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Internet Data Is Rotting

theconversation.com

Post reply on HN
Print view View original

111–116 of 116 posts

Re: Internet Data Is Rotting

#111

Post by dredmorbius »

thaumasiotes wrote: post #102
dredmorbius wrote: post #80

Earlier quoted context omitted.

Sadly, a lot of old-school proxies (squid, privoxy) are stymied by SSL/TLS connections. I think we're due for the idea that a proxy can be designated as a trusted intermediary, most especially if it's run on a personal basis. I'm sure this presents security issues, but it also avoids some.

> I think we're due for the idea that a proxy can be designated as a trusted intermediary, most especially if it's run on a personal basis. We have that idea now; you designate the proxy as a trusted intermediary by accepting its certificate. The chain looks something like this: You: browser, take me to https://youtube.com Browser: proxy, get me https://youtube.com Proxy: YouTube, get me / YouTube: I'm youtube.com --…

Does Chrome (and other browsers') MITM attack defeat prevent this? That's my understanding.

https://comodosslstore.com/blog/google-chrome-63-will-warn-y...

Re: Internet Data Is Rotting

#112

Post by thaumasiotes »

dredmorbius wrote: post #111
thaumasiotes wrote: post #102

Earlier quoted context omitted.

> I think we're due for the idea that a proxy can be designated as a trusted intermediary, most especially if it's run on a personal basis. We have that idea now; you designate the proxy as a trusted intermediary by accepting its certificate. The chain looks something like this: You: browser, take me to https://youtube.com Browser: proxy, get me https://youtube.com Proxy: YouTube, get me / YouTube: I'm youtube.com --…

Does Chrome (and other browsers') MITM attack defeat prevent this? That's my understanding. https://comodosslstore.com/blog/google-chrome-63-will-warn-y...

I'm answering based mostly on having read that link. It looks like the protection applies only in the case where an error is being surfaced. The problem Chrome wants to address is that users will click past the SECURITY ALERT.

If you properly configure your own CA, then the TLS error triggering this behavior won't occur, and there is no security problem for Chrome to put its foot down on -- your proxy is providing a valid certificate for whatever domain, as far as Chrome is concerned, not an invalid one.

Compare https://support.portswigger.net/customer/portal/articles/178... .

> The Chrome browser picks up the certificate trust store from your host computer. By installing Burp's CA certificate in your computer’s built-in browser (e.g. Internet Explorer on Windows, or Safari on OS X), Chrome will automatically make use of the certificate.

> When the Burp CA certificate has been installed for your built-in browser, restart Chrome and you should be able to visit any HTTPS URL via Burp without any security warnings.

Re: Internet Data Is Rotting

#113

Post by dredmorbius »

thaumasiotes wrote: post #112
dredmorbius wrote: post #111

Earlier quoted context omitted.

Does Chrome (and other browsers') MITM attack defeat prevent this? That's my understanding. https://comodosslstore.com/blog/google-chrome-63-will-warn-y...

I'm answering based mostly on having read that link. It looks like the protection applies only in the case where an error is being surfaced. The problem Chrome wants to address is that users will click past the SECURITY ALERT. If you properly configure your own CA, then the TLS error triggering this behavior won't occur, and there is no security problem for Chrome to put its foot down on -- your proxy is providing a…

Thanks. This is something I've got some plans on.

Re: Internet Data Is Rotting

#114

Post by kwhitefoot »

DFXLuna wrote: post #39

This seems like a good time to plug running a storage server on your local network. You can pick up old workstations off eBay for 100$. Stick a couple of drives in it, load it up with data to preserve and then put encrypted backups in the cloud. Back blaze B2 is something like .001$ per gigabyte. It's a fun experiment with clear, practical use.

Not quite that cheap 0.005$ per GB. USD 6 per month for personal unlimited backup though.

Trying the trial now.

Thanks for bringing it to my attention.

Re: Internet Data Is Rotting

#115

Post by teknico »

eitland wrote: post #106
gambler wrote: post #16

This needs to be solved on the protocol level. Of course, the players who have control over our protocols are exactly the people who don't want this to be solved at all. The next best thing would be to redefine what "bookmarking" is. When I bookmark a page, I want it to be permanently stored on my local machine and full-text indexed. In fact, it's rather ridiculous that after 25 years browsers don't have anything of…

There used to be a Firefox extension called Scrapbook. I think it was one of the winners of one of the two first extension competitions. It could easily download entire sites or just a subtree, including resources. It would the rewrite URLs as necessary to point to the downloaded documents instead of pointing to absolute URLs on tje Internet. Still hoping that Mozilla will improve its extension API. I mean I can see…

Been using it for so long. Currently it's Scrapbook X under Pale Moon (that I keep around just to run that).

Looking for an alternative that would import my thousands of saved pages.

Re: Internet Data Is Rotting

#116

Post by teknico »

asdff wrote: post #70
fibonachos wrote: post #26

Earlier quoted context omitted.

Tangentially related, but the reader view of a page seems ideally suited for archival bookmarking. It's unfortunate that so many sites seem to be intentionally breaking the reader view functionality in order to maximize newsletter subscriptions and eyeball monetization. Recipe sites are the worst offenders IMO.

Pocket seems to have luck where other reader views and outlining services fail, and you can set up IFTTT to download pocket articles as html files to dropbox, but that's certainly not automatic and completely out of your way. I would have preferred it to archive as a plain text document but I couldn't figure it out through IFTTT.

Pocket Premium stores the web pages on a server. If there was a way to batch export and access them locally, I'd gladly pay for it.
Post reply on HN