Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Want to use my wifi?

thejh.net

Post reply on HN
Print view View original

21–30 of 57 posts

Re: Want to use my wifi?

#21

Post by jiri »

malandrew wrote: post #8

Is it possible to use the browser in https only mode, or at least have it force launch any https sites in a new incognito mode window so that you know it's http-only. Furthermore, it would be nice if you could disable all text inputs on http-only windows. I know that I would be more likely to contact a site owner asking for https if it screamed at me everytime it happened. It's time to ditch http for all but rare use…

Yes, you can configure most browser to use proxy. So, I think, you can set the none proxy (or valid) for https and some invalid proxy ip for http, so you cannot connect to any http server.

Re: Want to use my wifi?

#22

Post by noinsight »

malandrew wrote: post #8

Is it possible to use the browser in https only mode, or at least have it force launch any https sites in a new incognito mode window so that you know it's http-only. Furthermore, it would be nice if you could disable all text inputs on http-only windows. I know that I would be more likely to contact a site owner asking for https if it screamed at me everytime it happened. It's time to ditch http for all but rare use…

Get the "HTTPS Everywhere" addon for Firefox, or, apparently, Chrome now.

Re: Want to use my wifi?

#23

Post by voltagex_ »

loser777 wrote: post #20

Situations like these are how I justify keeping a low power 24/7 box on at home. In situations where I don't have my own (trusted) connection, I'll just ssh tunnel a SOCKS5 proxy to my home server. I only have a residential internet connection at home, but 2mbps is surprisingly snappy for casual or emergency on the go web browsing. With boxes out there (e.g. rPi) that push power consumption far south of 10W, it makes…

Yep, I have a Dreamplug with dual ethernet and an attached USB hard drive. Last I checked, the hard drive used more power than the machine itself.

SSH is done through key authentication and there's an OpenVPN server if the network I'm connecting through isn't too locked down.

Next trick is to do IP-over-DNS and I'll be all set where ever I am.

Now if only someone would come out with a USB3-capable board with dual-gigE (I don't mind if it can only push 500Mbit each port)

Re: Want to use my wifi?

#24

Post by thejosh »

malandrew wrote: post #9
IgorPartola wrote: post #4

Using a browser in incognito mode does none of the sort. You can still enter your password into it and it can be stolen just as easily. The true solution is to only browse over HTTPS, connect to a VPN or not use untrusted networks. Note that if I can spoof an IP address, I can send you bogus DNS replies, and send you to a web server that impersonates Google/Facebook/etc. but does not require HTTPS (unless they use th…

How easy is it to fully automate VPN only computer usage so that everything I do comes out of a machine at Amazon EC2 for example? I've never set it up and was curious what others have done to make it as invisible as possible.

There was a vpn provider (which I cannot remember now for the life of me) where if any traffic went over non-VPN it wouldn't work.

Re: Want to use my wifi?

#26

Post by icebraining »

tcas wrote: post #13
culturestate wrote: post #10

Earlier quoted context omitted.

If you're on a Mac, it's nearly plug-and-play — I use a small menubar app called sidestep[1] that automatically tunnels over SSH, but there are also a few (Viscosity comes to mind) that work in a similar fashion with OpenVPN. There may be similar bits available for Windows, but I haven't looked into it there in some time. 1. https://github.com/chetan51/sidestep

Haven't used sidestep, but sshuttle [1] is a nice command line utility that does the same, just not automatically. Much easier than setting up a VPN server. [1] https://github.com/apenwarr/sshuttle

It's easier (and I'm a fan as well), but setting up an OpenVPN server with pre-shared key is very easy too. It's essentially a matter of apt-getting openvpn and writing a three line config file: http://openvpn.net/index.php/open-source/documentation/misce...

Re: Want to use my wifi?

#27

Post by icebraining »

voltagex_ wrote: post #23
loser777 wrote: post #20

Situations like these are how I justify keeping a low power 24/7 box on at home. In situations where I don't have my own (trusted) connection, I'll just ssh tunnel a SOCKS5 proxy to my home server. I only have a residential internet connection at home, but 2mbps is surprisingly snappy for casual or emergency on the go web browsing. With boxes out there (e.g. rPi) that push power consumption far south of 10W, it makes…

Yep, I have a Dreamplug with dual ethernet and an attached USB hard drive. Last I checked, the hard drive used more power than the machine itself. SSH is done through key authentication and there's an OpenVPN server if the network I'm connecting through isn't too locked down. Next trick is to do IP-over-DNS and I'll be all set where ever I am. Now if only someone would come out with a USB3-capable board with dual-gig…

Next trick is to do IP-over-DNS and I'll be all set where ever I am.

iodine[1] is a fairly easy way to set that up. I just made a tunnel.mydomain.tld subdomain, pointed the NS records at my VPS and run "iodined 10.0.0.1 tunnel.mydomain.tld"

[1] http://code.kryo.se/iodine/

Re: Want to use my wifi?

#28

Post by MichaelGG »

dave1010uk wrote: post #19
MichaelGG wrote: post #16

Earlier quoted context omitted.

Is that even remotely lucrative? As I understand, even a $300 GPU is orders of magnitude more powerful than any CPU miner, let alone a JavaScript based one. And even a single GPU isn't remotely competitive these days compared to the GPU farms and now ASIC setups. So you'd need to inject JS into, I dunno, a million, devices to make anything worthwhile.

You could probably use WebCL, Flash or Silverlight to use the user's GPU. A quick Google shows this has been done with WebCL already: http://webcl.nokiaresearch.com/jsoclbm/

There's a neat hardware comparison here: https://en.bitcoin.it/wiki/Mining_hardware_comparison

Seems like ASICs are measured in the thousands to tens or hundreds of thousands of MHashes/sec. Whereas powerful GPUs drawing ~1000 Watts don't even break 1000MH/sec. High-end laptop GPUs seem to be in the 10s of MH/sec, a quad-core Atom shows 2MH/sec, and the Galaxy SII comes in at 1.3.

The vast majority of devices connecting to public APs are not going to be high-power systems. Not to mention the time they'll spend connected is unlikely to be 24/7. Even if it was, mining will probably drain batteries pretty quickly. Plus power-saving is likely to be on for mobile devices and reduce peak perf. And if it's just injecting JS, then backgrounded tabs should get much less CPU time. And WebGL/etc. are unlikely to be running in background tabs.

If you assume a device stays connected and open for 1/4 a day, and stays for 3 days on average, and gives you 1MH/sec (seems optimistic, all things considered), 1 million devices compromised a month gives you ~$300 a month. If the assumption is that you can persistently own a machine, then you'd need less machines. But that's going beyond simple JS injection on HTML pages.

I used this calculator: http://www.alloscomp.com/bitcoin/calculator

Re: Want to use my wifi?

#29

Post by username42 »

malandrew wrote: post #9
IgorPartola wrote: post #4

Using a browser in incognito mode does none of the sort. You can still enter your password into it and it can be stolen just as easily. The true solution is to only browse over HTTPS, connect to a VPN or not use untrusted networks. Note that if I can spoof an IP address, I can send you bogus DNS replies, and send you to a web server that impersonates Google/Facebook/etc. but does not require HTTPS (unless they use th…

How easy is it to fully automate VPN only computer usage so that everything I do comes out of a machine at Amazon EC2 for example? I've never set it up and was curious what others have done to make it as invisible as possible.

I do not know for VPN, I use ssh. It is very simple and does not require any system administration right. Install a proxy (squid) on your Amazon EC2. Install putty if you are on windows and launch it with port forward using the option -L: putty -L 3128:127.0.0.1:3128 user@host

Add the option --proxy-server=127.0.0.1:3128 on you chrome shortcut and that's it.

Re: Want to use my wifi?

#30

Post by toadi »

IgorPartola wrote: post #4

Using a browser in incognito mode does none of the sort. You can still enter your password into it and it can be stolen just as easily. The true solution is to only browse over HTTPS, connect to a VPN or not use untrusted networks. Note that if I can spoof an IP address, I can send you bogus DNS replies, and send you to a web server that impersonates Google/Facebook/etc. but does not require HTTPS (unless they use th…

Using chrome or Firefox will give you a big fat warning when you strip the https with a man in the middle attack for google and facebook.
Post reply on HN