VoRS: Vo(IP) Simple Alternative to Mumble • Hacker News Board

Re: VoRS: Vo(IP) Simple Alternative to Mumble

#71

Post by lxgr » Fri, Apr 19, 2024, 7:17 PM UTC

Karrot_Kream wrote: post #70

Sean-Der wrote: post #68

Earlier quoted context omitted.

What makes something a 'blessed way'? Are you looking for community support, large corporate users etc..? Not being snarky, curious about how people see the space. Lots of implementations exist and I have used most of them for different projects, not all these projects went to production though. * https://github.com/elixir-webrtc (Elixir) * https://github.com/pion/webrtc (Golang) * https://github.com/webrtc-rs/webrtc…

> Are you looking for community support, large corporate users etc..? Lots of documentation and demonstrations. And honestly, probably a bit better SEO or maybe searching on my part. For some reason GStreamer's webrtcbin totally flew under my radar. Also not trying to be snarky/negative about WebRTC. I think it's fantastic at what it does. But as a tinkerer, I want something with more tinkering surface area. Not to d…

WebRTC actually feels exceptionally tinkerable to me, with human(-ish) readable SDP offers, public RFCs, various implementations, and importantly it being accessible from JavaScript playgrounds right within the browser!

I've learned a lot about it over the years by following https://webrtchacks.com/, which does just that, i.e. taking apart various open and closed VoIP implementations (WebRTC or otherwise) and seeing how they work.

Re: VoRS: Vo(IP) Simple Alternative to Mumble

#72

Post by Sean-Der » Fri, Apr 19, 2024, 10:20 PM UTC

lxgr wrote: post #56

Sean-Der wrote: post #50

Earlier quoted context omitted.

libdatachannel[0] is exciting me the most for 'low footprint'. str0m[1] is especially exciting, but you have to be in a device/ecosystem that allows rust. > only if you use the same kind of software and codecs With WebRTC I can connect clients with varying support of H264, VP8, VP9, AV1, Opus, ulaw and alaw. WebRTC has plenty of flaws, but 'lack of negotiation' is one of them. [0] https://github.com/paullouisageneau/…

Oh, this looks great! Also thank you for Pion :) Edit: Woah, I somehow completely missed that Pion does WebRTC media too (I've only seen it in a data channel project I've toyed around with in the past). Definitely add that to my list above, and I can somewhat vouch for it, it's cool!

Thank you so much for using it. I feel so honored(and surprised) that people use it. I totally stumbled into a successful project.

If I ever can be helpful with your projects reach out!

Re: VoRS: Vo(IP) Simple Alternative to Mumble

#73

Post by d-z-m » Sat, Apr 20, 2024, 2:25 AM UTC

someguydave wrote: post #59

d-z-m wrote: post #44

> You have to verify downloaded tarballs authenticity to be sure that you retrieved trusted and untampered software. I'm not able to access the site over TLS, so this is currently impossible. Anyone else have better luck? (from the installation instructions) $ [fetch|wget] http://www.vors.stargrave.org/download/. vors-2.3.0.tar.zst $ [fetch|wget] http://www.vors.stargrave.org/download/vors-2.3.0.tar.zst.sig [verify s…

I can see your point about a man-in-the-middle attack on HTTP, but realistically if the the attacker can do the MITM he can probably also figure out how to modify the contents on the webserver, in which case TLS does nothing

> realistically if the the attacker can do the MITM he can probably also figure out how to modify the contents on the webserver, in which case TLS does nothing

Sorry, I don't see how that follows. If you had access to the webserver you would never even attempt a MITM attack in the first place.

Re: VoRS: Vo(IP) Simple Alternative to Mumble

#74

Post by d-z-m » Sat, Apr 20, 2024, 2:27 AM UTC

ranger_danger wrote: post #63

d-z-m wrote: post #44

> You have to verify downloaded tarballs authenticity to be sure that you retrieved trusted and untampered software. I'm not able to access the site over TLS, so this is currently impossible. Anyone else have better luck? (from the installation instructions) $ [fetch|wget] http://www.vors.stargrave.org/download/. vors-2.3.0.tar.zst $ [fetch|wget] http://www.vors.stargrave.org/download/vors-2.3.0.tar.zst.sig [verify s…

Most websites these days use Crimeflare or equivalent already anyways which is a MITM proxy, so you're still not safe there either.

Yes, however there's a big difference between Cloudflare and an arbitrary MITM. If you think Cloudflare is mangling traffic in a malicious way you would need a shred of evidence to substantiate that claim.

I would also push back that "most websites" use a 3rd party TLS terminating CDN/proxy layer in front of the actual webserver.

Re: VoRS: Vo(IP) Simple Alternative to Mumble

#75

Post by thfuran » Sat, Apr 20, 2024, 9:15 PM UTC

tarxvf wrote: post #65

thfuran wrote: post #30

Earlier quoted context omitted.

And even if I had, I'm quite sure they wouldn't have meant they wanted it in the terminal instead.

Well cover me in foil and charge extra, I guess I'm rare. Why would I ever want a GUI for a voice application?

You are aware that nearly all computer users never use the terminal at all, right? Why would they want anything other than a gui?

Re: VoRS: Vo(IP) Simple Alternative to Mumble

#76

Post by ranger_danger » Sun, Apr 21, 2024, 5:18 PM UTC

d-z-m wrote: post #74

ranger_danger wrote: post #63

Earlier quoted context omitted.

Most websites these days use Crimeflare or equivalent already anyways which is a MITM proxy, so you're still not safe there either.

Yes, however there's a big difference between Cloudflare and an arbitrary MITM. If you think Cloudflare is mangling traffic in a malicious way you would need a shred of evidence to substantiate that claim. I would also push back that "most websites" use a 3rd party TLS terminating CDN/proxy layer in front of the actual webserver.

> If you think Cloudflare is mangling traffic

I'm more concerned with the data they receive being leaked or sold.

And by most websites I guess I meant large ones that people frequent every day, because these days it's almost impossible to have any sort of useful DDoS protection without using such a service.

Re: VoRS: Vo(IP) Simple Alternative to Mumble

#77

Post by d-z-m » Sun, Apr 28, 2024, 4:12 PM UTC

ranger_danger wrote: post #76

d-z-m wrote: post #74

Earlier quoted context omitted.

Yes, however there's a big difference between Cloudflare and an arbitrary MITM. If you think Cloudflare is mangling traffic in a malicious way you would need a shred of evidence to substantiate that claim. I would also push back that "most websites" use a 3rd party TLS terminating CDN/proxy layer in front of the actual webserver.

> If you think Cloudflare is mangling traffic I'm more concerned with the data they receive being leaked or sold. And by most websites I guess I meant large ones that people frequent every day, because these days it's almost impossible to have any sort of useful DDoS protection without using such a service.

> I'm more concerned with the data they receive being leaked or sold.

But that's not what we're talking about here. We were talking about a MITM attack on key/tarfile distribution in the context of verifying file integrity.