vvv

joined 2 years ago
[–] vvv 50 points 8 months ago* (last edited 8 months ago) (4 children)

(obligatory I'm not a network surgeon this is likely not perfectly correct)

The article mentions network interfaces, DHCP and gateways so real quick: a network interface usually represents a physical connection to a network, like an Ethernet port or a WiFi card. DHCP is a protocol that auto configured network routes and addresses once a physical connection is established, like when you jack in via an ethernet cable, it tells you the IP address you should go by, the range of IP address on the network you've connected to, where you can resolve domain names to IP addresses. It also tells you the address of a default gateway to route traffic to, if you're trying to reach something outside of this network.

You can have more than one set of this configuration. Your wired network might tell you that your an address is 10.0.0.34, anything that starts with 10.0.0. is local, and to talk to 10.0.0.254 if you're trying to get to anything else. If at the same time you also connect to a wireless network, that might tell you that your address is 192.168.0.69, 192.168.0.* is your local network, and 192.168.0.254 is your gateway out. Now your computer wants to talk to 4.2.2.2. Should it use the wireless interface and go via 192.168.0.254? or the wired one and use 10.0.0.254? Your os has a routing table that includes both of those routes, and based on the precedence of the entries in it, it'll pick one.

VPN software usually works by creating a network interface on your computer, similar to an interface to a WiFi card, but virtual. It then asks the OS to route all network traffic, through the new interface it created. Except of course traffic from the VPN software, because that still needs to get out to the VPN provider (let's say, at 1.3.3.7) via real Internet.

So if you're following along at home, your routing table at this point might look like this:

  • traffic to 1.3.3.7 should go to 10.0.0.254 via the wired interface
  • all traffic should go to the VPN interface
  • traffic to 10.0.0.* should go to the wired interface
  • all traffic should go to 10.0.0.254 via the wired interface
  • traffic to 192.168.0.* should go to the wireless interface
  • all traffic should go to 192.168.0.254 via the wireless interface

whenever your os wants to send network packets, it'll go down this list of rules until one applies. With that VPN turned on, most of the time, only those two first rules will ever apply.

If I'm reading the article correctly, what this attack does, is run a DHCP server, that when handing out routing rules, will send one with a flag that causes, for example, the last two rules to be placed at the top of the list instead of the bottom. Your VPN will still be on, the configuration it's requested the OS to make would still be in place, and yet all your traffic will be routed out to this insecure wireless network that's somehow set itself as the priority route over anything else.

[–] vvv 8 points 8 months ago (1 children)

The password to my password manager: a few randomly chosen words that will definitely just sound like nonsense dementia-talk probably.

[–] vvv 11 points 8 months ago

Geocaching is free and usually lots of fun in cities. It's like a big database of dead drops - people hide small containers with pieces of paper to sign, and post their GPS coordinates online. Frequently they're hidden near points if interest, as well so you might find some cool shops or bars as a side effect.

[–] vvv 9 points 8 months ago

That's the other one. The Rabbit thing is $200, which, not that I would buy one, is not too unreasonable for an AI tamagotchi

[–] vvv 3 points 8 months ago

Once you have your list, check out fdroidcl so you can get it all installed from your laptop via adb

[–] vvv 8 points 9 months ago (3 children)

yep. they're still here. they got smaller, and we call them "tracking pixels" now.

it's just an image, which, server side, you can count the number of times it got loaded. easy to embed and no js required.

[–] vvv 2 points 9 months ago

That's interesting, okay. Is svn doing compression of those binaries for you?

Not to say "you're holding it wrong", but I'm curious about your workflow here. You clone these binaries every time you come back to a project?

[–] vvv 9 points 9 months ago (2 children)

I don't get it, who in their right mind hosts development stuff on a Windows clunker?

Same question, but Subversion. Switch to git. Import your repos with git-svn.

[–] vvv 11 points 9 months ago

I'll take it over QuickTime

[–] vvv 5 points 9 months ago (2 children)

The sentiment of the first half of your comment is the cause of the problem you describe in the second half. Why /should/ the CI tool have any "steps" built in? Use a task runner, or script in your repo for any task you expect CI to do. Configure CI to run the same command you would run locally.

[–] vvv 1 points 9 months ago (1 children)

yeah, you can use any app, and they work fine... with, as you might expect some warts due to apps not being designed for that screen size. a common issue is with apps that have ridiculous fixed headers and footers, leaving you a teeny tiny sliver of space for content. there's an option to make the viewport slightly bigger, since the screen extends down and around the outer cameras, and that helps sometimes, but then obviously the cameras might prevent you from hitting some buttons on that footer. this is not a very common situation though, and maybe almost desirable? I can use the outer screen to do quick phone interactions and put it back in my pocket without being too sucked in. if I want to doom scroll/get otherwise immersed, I'll open the fold. i like that this needs to be an intentional action.

you can respond to messages and type on the outer screen, yes, using any keyboard as long as it's Gboard.

[–] vvv 1 points 9 months ago

yeah, I liked the z3c so much, I must've gone through like 4 copies of them, until a newly purchased one had the screen let go within a month of me opening up the box. I've been chasing for a modern version of that phone ever since, and the razr+ is the closest I've come

view more: ‹ prev next ›