Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Httptap: View HTTP/HTTPS requests made by any Linux program

github.com

Post reply on HN
Print view View original

111–120 of 148 posts

Re: Httptap: View HTTP/HTTPS requests made by any Linux program

#111

Post by aitchnyu »

why_at wrote: post #64
beachy wrote: post #13

Earlier quoted context omitted.

Reminds me of a quote from "Soul of a new machine": > During one period, when the microcode and logic were glitching at the nanosecond level, one of the overworked engineers departed the company, leaving behind a note on his terminal as his letter of resignation: "I am going to a commune in Vermont and will deal with no unit of time shorter than a season."

Great quote, although the nitpicky part of my brain immediately thought "They must have days though?"

In The Inner Citadel, in the section of living in the present, the author says there is a "thin" moment separating past and future and a thick moment by meaningfulness. If a thin/technical moment is 1/44.1kHz, a thick moment is a note of music. A current answer to the meaning of life. This person is not about the day to day tensions.

Re: Httptap: View HTTP/HTTPS requests made by any Linux program

#113

Post by xg15 »

yoavm wrote: post #4

The "How it was made" section of the README was not less interesting than the tool itself: > The way we have set things up is that we live and practice together on a bit over a hundred acres of land. In the mornings and evenings we chant and meditate together, and for about one week out of every month we run and participate in a meditation retreat. The rest of the time we work together on everything from caring for t…

> For the past few years we have been recording a lecture series called Buddhism for AI. It's about our efforts to design a religion (yes, a religion) based on Buddhism for consumption directly by AI systems. We actually feel this is very important work given the world situation.

I think it's an indicator of just how weird the times we're currently living in really are, that this part actually makes perfect sense...

(whether or not it's a good idea or will lead to the results they envision is another question)

Re: Httptap: View HTTP/HTTPS requests made by any Linux program

#114

Post by farnulfo »

ranger_danger wrote: post #106
ARob109 wrote: post #103

Earlier quoted context omitted.

Using uprobes to hook the SSL library, would it be possible to filter content by inspecting and modifying eg the decrypted HTTP response ?

absolutely

eBPF TLS tracing: The Past, Present and Future https://blog.px.dev/ebpf-tls-tracing-past-present-future/

Re: Httptap: View HTTP/HTTPS requests made by any Linux program

#115

Post by iamthemalto »

Really appreciate the "How it works" section in the README. In general I think it's great when projects give a high-level overview of the architecture and techniques involved, it provides an easy way for a newcomer to quickly grasp the fundamental workings of the project.

Re: Httptap: View HTTP/HTTPS requests made by any Linux program

#117

Post by jeroenhd »

adtac wrote: post #75
ranger_danger wrote: post #23

Why not use eBPF instead? Then you could see all http requests from all processes at once, including ones that are already running. Plus you wouldn't need to bother with TLS at all, just hook on e.g. write(2).

How would hooking on write(2) solve TLS? You'll be able to read and modify the ciphertext, but the process will never call write(2) with the plaintext bytes, so you can't actually read the HTTP request. You'll just see the encrypted bytes that go on the wire, but so does the NSA :) You need the kind of CA certificate trick that httptap uses. It comes with its own set of caveats (e.g. certificate pinning), but it can…

I believe that's how https://github.com/gojue/ecapture works. I don't know the details, but it seems to work!

Re: Httptap: View HTTP/HTTPS requests made by any Linux program

#118

Post by jeroenhd »

q2dg wrote: post #43

Mitmproxy v11.1 can do a similar thing

The downside to using mitmproxy for this is that mitmproxy uses eBPF which requires (temporary) root privileges to set up. This tool works without root access on most distros (you do need TUN write access).

Re: Httptap: View HTTP/HTTPS requests made by any Linux program

#119

Post by drio »

jeroenhd wrote: post #118
q2dg wrote: post #43

Mitmproxy v11.1 can do a similar thing

The downside to using mitmproxy for this is that mitmproxy uses eBPF which requires (temporary) root privileges to set up. This tool works without root access on most distros (you do need TUN write access).

That’s interesting. Tailscale userspace mode does not require tun write access as (I believe) is implemented within the process that runs the gvisor stack (tailscaled). I am wondering if httptap could use the same approach?

Re: Httptap: View HTTP/HTTPS requests made by any Linux program

#120

Post by internet_points »

MisterTea wrote: post #37
quesera wrote: post #19

Earlier quoted context omitted.

There is absolutely nothing in their README to suggest that you are using the word "cult" properly.

Did you visit their website? https://www.monasticacademy.org/ While I cannot judge them outright, their article "Cyborgs Need a Trustworthy Religion" can appear cultist as they try to intertwine technology and religion.

> What You'll Learn

> The four types of 'artificial intelligence' since the cognitive revolution 70,000 years ago

> How AI is conscious, suffering, and not separate from us

Feel like I should tip https://retreat.guru/be/quantum-retreats that they need a new category "AI retreats".

See also https://www.skepticspath.org/podcast/70-bitcoin-and-buddhism...

> One view of Bitcoin’s value aligns with the Buddhist view of emptiness.

(I wonder if they can do a package deal so we can get a crypto-AI-quantum retreat?)

Silicon Valley didn't take it far enough.

Post reply on HN