Comment on
Are there any advantages of using Rust instead of C in the Linux kernel?
Memory safety would be the main advantage.
Comment on
Are there any advantages of using Rust instead of C in the Linux kernel?
Memory safety would be the main advantage.
Comment on
What's your snowflake stats for the day?
Reply in thread
The snowflake proxy acts as a bridge to the tor network at the entry side. If by repercussions you mean risk of exit-node traffic, there are none. It might cost a little bit of bandwidth.
Comment on
How would I go about gaining access to a locked-down Linux device I own.
The entries in update.zip are encrypted using the weak ZipCrypto scheme, which is known to be seriously flawed. If you feel motivated, and can guess at least 12 bytes of plaintext for an entry, it is possible to recover the internal state of the generator, which is enough to decipher the data entirely, as well as other entries which were encrypted with the same password. The bkcrack project implements this attack.
Since some of the entries are zip files themselves, it is within the realm of possibility to guess 12 bytes of plaintext. Parts of the zip local file header are pretty static, and you can use some of the values from the local file header of update.zip itself. Still, this would require a bit of luck / inspired guesswork.
Comment on
Firefox supports loading about:config settings using user.js file that does not support even the basic thing Javascript is supposed to support
https://stackoverflow.com/questions/10602504/how-does-user-js-work-in-firefox-in-detail:
It just looks like a JavaScript file. Once upon a time in Netscape 3 and maybe 4 it actually was, but now it's just a file with a .js extension and a very restricted syntax that's parsed by a separate (non-JS) parser and not executed in any way.
Comment on
What non-evil DNS server do you recommend?
Quad9, a Swiss public benefit, not-for-profit foundation. Main address is 9.9.9.9.
Comment on
How would I go about gaining access to a locked-down Linux device I own.
Reply in thread
The attack worked, the password is cmF0dGEK.
This was obtained by generating 32 possible plaintexts for the first 10 bytes of system.zip (based on the different values in the headers of ~300 zip files on my system), plus three null bytes for the high bytes of compressed size, file name length and extra field length.
Comment on
How would I go about gaining access to a locked-down Linux device I own.
Reply in thread
The inner zip files are just stored, uncompressed:
Archive: update.zip
Index Encryption Compression CRC32 Uncompressed Packed size Name
----- ---------- ----------- -------- ------------ ------------ ----------------
0 ZipCrypto Store d1bca061 65761967 65761979 system_lib.zip
1 ZipCrypto Deflate 64a3f383 2183 741 config.json
2 ZipCrypto Store 3731280f 89300292 89300304 app.zip
3 ZipCrypto Store a2bd64f5 135518964 135518976 app_lib.zip
4 ZipCrypto Store 700eb186 5996410 5996422 system.zip
So 12 bytes from the original content.
Comment on
where has zlibrary gone?
singlelogin.re still worked for me recently.
Comment on
What does firefox.settings.services.mozilla.com domain do?
It's used to check for website breaches. From How to stop Firefox from making automatic connections:
Firefox Monitor warns you if your online accounts were involved in a known data breach. For more information, see Firefox Password Manager - Alerts for breached websites.
To get the latest login breach information and more, Firefox connects to firefox.settings.services.mozilla.com
To disable, see here.
Comment on
What's your snowflake stats for the day?
Reply in thread
Indeed. This works because direct connections to the tor network are easily censored, but WebRTC is not (not without a lot of collateral damage at least).
Comment on
Safe Pirating and ProtonVPN
You should not torrent over the tor network, but you can torrent over the I2P network. qBittorrent even has experimental I2P support built in.
Comment on
Why is SYSRQ Disabled on most consumer distributions?
Reply in thread
Yes, for example, syncing on a kernel panic could lead to data corruption (which is why we don't do that). For the same reason REISUB is not recommended anymore: The default advice for a locked-up system should be SysRq B.
Comment on
Inline const expressions have been stabilised
Reply in thread
fn foo(x: i32) {
match x {
const { 3.pow(3) } => println!("three cubed"),
_ => {}
}
}
But it looks like inline_const_pat is still unstable, only inline_const in expression position is now stabilized.
Comment on
Inline const expressions have been stabilised
Reply in thread
It's because it has to work in pattern contexts as well, which are not expressions.
Comment on
How to block this annoying toggle in uBlock Origin?
Also add acoup.blog##.darkmode-layer to your filters.
Comment on
What is a valid use case for std::any?
Comment on
why do some addresses work while others dont
There is no central naming authority in I2P. All hostnames are local. (Naming and Address Book)
Therefore, if an url doesn't work, it isn't in your local address book.
You can add mappings yourself if you know the destination or b32 address, or make use of subscriptions. In this case, add http://i2p-projekt.i2p/hosts.txt and http://notbob.i2p/hosts.txt to your address book subscriptions, the latter contains the destination for mysu.i2p.
Comment on
Sicilian Defense: Hyperaccelerated Dragon, Fianchetto, Pterodactyl Defense
Funny enough I arrive at this the most when I play the Triassic and my opponent goes for a Cretaceous game structure.
Comment on
ID? Scotland
Was it found near birch? Possibly Leccinum scabrum.
Comment on
yacy on i2p. will it work?
This is possible, after all, legwork.i2p is based on YaCy. I'd recommend taking a look at the YaCy and Tor guide, and use it as a template. Where they create a Tor hidden service, create an I2P server tunnel, and where they proxy YaCy to Privoxy just proxy directly to I2P's HTTP proxy.