Live data from Hacker News

Httptap: View HTTP/HTTPS requests made by any Linux program

github.com

41–50 of 148 posts

Re: Httptap: View HTTP/HTTPS requests made by any Linux program

#41
post #36
post #21

Earlier quoted context omitted.

Do you know if it's possible to get this working on macos? I believe Tailscale uses gvisor's tcp/ip lib (as their netstack lib) on macos for certain things.

Does Darwin have network namespaces like the Linux kernel does? I get the impression that's an important component of this approach

Yes, good point, maybe that is the blocker.

Re: Httptap: View HTTP/HTTPS requests made by any Linux program

#44
post #4

The "How it was made" section of the README was not less interesting than the tool itself: > The way we have set things up is that we live and practice together on a bit over a hundred acres of land. In the mornings and evenings we chant and meditate together, and for about one week out of every month we run and participate in a meditation retreat. The rest of the time we work together on everything from caring for t…

I sadly assumed the first countryside photo was generated but I assume now it is real!

The mix of tech and meditation would appeal to me. Maybe the idea does (actually doing it is probably hard!).

It seems like a "Buddhist Recurse"

Re: Httptap: View HTTP/HTTPS requests made by any Linux program

#46
post #19

Earlier quoted context omitted.

There is absolutely nothing in their README to suggest that you are using the word "cult" properly.

Did you visit their website? https://www.monasticacademy.org/ While I cannot judge them outright, their article "Cyborgs Need a Trustworthy Religion" can appear cultist as they try to intertwine technology and religion.

The fine line between futurism and cult.

Re: Httptap: View HTTP/HTTPS requests made by any Linux program

#47
post #40

Earlier quoted context omitted.

Very good to know about. But you still have the problem of decrypting TLS traffic.

I don't know if it's a standard but I believe a lot of tls libraries honor the SSLKEYLOGFILE env-var https://wiki.wireshark.org/TLS#:~:text=and%20curl%20when-,th...

That seems like an unnecessary vulnerability waiting to happen.

Re: Httptap: View HTTP/HTTPS requests made by any Linux program

#49

Why not use eBPF instead? Then you could see all http requests from all processes at once, including ones that are already running. Plus you wouldn't need to bother with TLS at all, just hook on e.g. write(2).

Presumably eBPF requires root privs?

[deleted]

Re: Httptap: View HTTP/HTTPS requests made by any Linux program

#50

httptap is a process-scoped http tracer that you can run without root priveleges. You can run `httptap ` where is a linux program and you get a trace of http/https requests and responses in standard output: httptap -- python -c "import requests; requests.get('https://monasticacademy.org')" ---> GET https://monasticacademy.org/ GET https://www.monasticacademy.org/ It works by running in an isolated network namespace.…

Did everyone forget about wireshark, which can totally be ran as non-root?

https://blog.wireshark.org/2010/02/running-wireshark-as-you/

Post reply on HN