So Microsoft did something good? I thought they are too busy keeping my personal data in a prison and writing tight bash loops wasting 100 percent of a core
I've never had a twitter account so all these people hating durov for his exile marketing look weird to me. I'm not disagreeing with what you say but it's like a whole another subsection of world opened to me
> You people are just racist towards Russians and need help.
>> That doesn’t exclude the statements about Telegram to be correct though.
just attack the telegram from the technical standpoint, then no complains about "racist towards russians" will be given. Like, mentioning the lack of user-friendly E2EE is great already. Saying things like "Durov who supposedly lives in exile has visited Russia over 50 times" is meh. How can one intepret it in any other way is "Russia is evil and visiting Russia is thus evil"?
When I said about "no mitigations except for the kernel updates" I meant exactly that. Some sysctl config to flip, some kernel module to unload. Apparently such thing doesn't exist in this one
Today they already analyze the SSL handshake and traffic patterns in Russia. And if your valid https traffic crosses the border but doesn't behave like https (I don't know how they do it. Frequency of TCP packets and their size and the delay between?) your IP-address will be blocked
I want to stress that I'm speaking from experience. I personally installed a telegram proxy project which aimed to mirror the pattern of traffic and fool the censors
> new technology that is designed to balance interests on all sides and actually enforce the guarantees IN CODE AND PROTOCOLS.
They will just call your code illegal in law. And if you will run it anyway, use deep packet inspection to drop your protocol packets, like they do in Russia
It's hard to compare US and EU internet freedom because a person usually spends most of their life in one place and is clueless about the life in other.
I've never lived in US, were there any cases of ISPs blocking websites in USA? Even DNS-level blocking counts
Not all device files, only /dev/kvm. I assume the logic was "with /dev/kvm access the user can ...allocate memory and execute code, which they already can, so why not allow it?". Could also make rootless isolation easier
- microsoft is evil, I cannot delete my github account, will never use anything by this company
- if the attacker knows your *public* key they can enumerate the list of the servers you have access to https://github.com/benjojo/ssh-key-confirmer
I would tell them to not give their children internet access at all until they think they are ready. Does it sound realistic? I don't know. From technical point of view certainly realistic, a child doesn't have money / devices of his own
I don't fully get you. Do you mean untrusted regex or untrusted data it operates on?
And to be honest, even if the regex is trusted (came from a developer) and the data as well (something predictable and structured) we are still not protected from the developer using extremely stupid regex and breaking everything