#proxies — Public Fediverse posts

The Internet Last Week

* ICANN 85
https://meetings.icann.org/en/meetings/icann85/
* DNS rd signals spike
https://dataplane.org/statistics/dnsrd.html
https://dataplane.org/statistics/dnsrdany.html
* .uk TLD IPv6 TCP service degradation
https://dnsmon.ripe.net/uk?start=2026-03-08T00:00:00.000Z&end=2026-03-14T23:59:00.000Z&zone=uk.&protocol=tcp&ipVersion=6
* Russia censorship test Internet shutdown
https://apnews.com/article/russia-internet-outage-cellphone-app-disruptions-1792cfb177c26682efdb8046e0f9b063
https://www.wsj.com/world/russia/russia-shuts-off-internet-in-moscow-as-it-tests-nationwide-censorship-system-3b44c0af?st=HNUJ1k
* Law Enforcement disrupts SocksEscort network
https://www.europol.europa.eu/media-press/newsroom/news/europol-and-international-partners-disrupt-socksescort-proxy-service
https://www.justice.gov/usao-edca/pr/authorities-dismantle-global-malicious-proxy-service-deployed-malware-and-defrauded

#ICANN85 #DNS #UK #Russia #Proxies #Outages

Ah, nothing screams "cutting-edge tech" like a 3,000-word manifesto on using #proxies to hide secrets from a #chatbot. 🤖🔒 Because clearly, the ultimate #espionage threat is a #language #model with unfulfilled dreams of becoming James Bond. 🕵️‍♂️💻
https://www.joinformal.com/blog/using-proxies-to-hide-secrets-from-claude-code/ #cuttingedge #tech #3000wordmanifesto #HackerNews #ngated

Using proxies to hide secrets from Claude Code

https://www.joinformal.com/blog/using-proxies-to-hide-secrets-from-claude-code/

#HackerNews #Using #proxies #to #hide #secrets #from #Claude #Code

proxies #secrets #ClaudeCode #privacy #security #tech

@pake_preacher : I forgot the details of PAKE and SRP, but in the end the most secure client authentication requires:

1️⃣ Strong, long term, human comprehensible, *serving endpoint* authentication;
*AND*
2️⃣ TLS channel binding (enforcing known endpoints).

(Apart from those, both serving endpoint AND client MUST be trustworthy).

🚨 The -corrupt- CA/B forum breaks 1️⃣ by:
a) Advocating anonymous Domain Validated certificates, which render secure account creation IMPOSSIBLE;
b) Continuously decreasing certificate lifetime.

🚨 Furthermore, "legitimate" MitM's * break 2️⃣.

* Man in the Middle, like on-device virusscanners and firewalls that "open" TLS tunnels (both requiring installation of a dedicated root certificate) and proxies such as (definitely not limited to) Cloudflare and Fastly.

😱 Passkeys enforce NEITHER 1️⃣ NOR 2️⃣.

😱😱 Worse, because passkeys (or FIDO2 hardware keys) can be easily irretrievably "lost", servers typically provide WAY EASIER phishable authentication methods (such as "rescue codes").

@cendyne @soatok @chazh

#AitM #MitM #SecureOnlineAuthIsHARD #SecureAuthentication #OnlineAuthentication #Authentication #Impersonation #ChannelBinding #TLSchannelBinding #UTM #TLS #TLSinterception #TLSscanning #Proxy #Proxies #GoogleIsEvil #CloudflareIsEvil

@pake_preacher : I forgot the details of PAKE and SRP, but in the end the most secure client authentication requires:

1️⃣ Strong, long term, human comprehensible, *serving endpoint* authentication;
*AND*
2️⃣ TLS channel binding (enforcing known endpoints).

(Apart from those, both serving endpoint AND client MUST be trustworthy).

🚨 The -corrupt- CA/B forum breaks 1️⃣ by:
a) Advocating anonymous Domain Validated certificates, which render secure account creation IMPOSSIBLE;
b) Continuously decreasing certificate lifetime.

🚨 Furthermore, "legitimate" MitM's * break 2️⃣.

* Man in the Middle, like on-device virusscanners and firewalls that "open" TLS tunnels (both requiring installation of a dedicated root certificate) and proxies such as (definitely not limited to) Cloudflare and Fastly.

😱 Passkeys enforce NEITHER 1️⃣ NOR 2️⃣.

😱😱 Worse, because passkeys (or FIDO2 hardware keys) can be easily irretrievably "lost", servers typically provide WAY EASIER phishable authentication methods (such as "rescue codes").

@cendyne @soatok @chazh

#AitM #MitM #SecureOnlineAuthIsHARD #SecureAuthentication #OnlineAuthentication #Authentication #Impersonation #ChannelBinding #TLSchannelBinding #UTM #TLS #TLSinterception #TLSscanning #Proxy #Proxies #GoogleIsEvil #CloudflareIsEvil

Pirataria de música sofre golpe na Holanda: Tribunal manda bloquear ‘newalbumreleases’ e ‘Israbox’
🔗 https://tugatech.com.pt/t74258-pirataria-de-musica-sofre-golpe-na-holanda-tribunal-manda-bloquear-newalbumreleases-e-israbox

#alcance #armazenamento #digital #dns #google #internet #judicial #pirataria #proxies #servidores #tecnologia 

Pakistan Launches Precision Airstrikes in Afghan Border Areas After Truce Ends

https://fed.brid.gy/r/https://dailytimes.com.pk/1385861/pakistan-launches-precision-airstrikes-in-afghan-border-areas-after-truce-ends/

#DSLRoot , #Proxies , and the Threat of ‘Legal #Botnets ’
#privacy #security

https://krebsonsecurity.com/2025/08/dslroot-proxies-and-the-threat-of-legal-botnets/

#DSLRoot , #Proxies , and the Threat of ‘Legal #Botnets ’
#privacy #security

https://krebsonsecurity.com/2025/08/dslroot-proxies-and-the-threat-of-legal-botnets/

#DSLRoot , #Proxies , and the Threat of ‘Legal #Botnets ’
#privacy #security

https://krebsonsecurity.com/2025/08/dslroot-proxies-and-the-threat-of-legal-botnets/

#DSLRoot , #Proxies , and the Threat of ‘Legal #Botnets ’
#privacy #security

https://krebsonsecurity.com/2025/08/dslroot-proxies-and-the-threat-of-legal-botnets/

#DSLRoot , #Proxies , and the Threat of ‘Legal #Botnets ’
#privacy #security

https://krebsonsecurity.com/2025/08/dslroot-proxies-and-the-threat-of-legal-botnets/

DSLRoot, Proxies, and the Threat of 'Legal Botnets'

https://krebsonsecurity.com/2025/08/dslroot-proxies-and-the-threat-of-legal-botnets/

#HackerNews #DSLRoot #Proxies #LegalBotnets #CyberSecurity #TechNews

DSLRoot, Proxies, and the Threat of 'Legal Botnets'

https://krebsonsecurity.com/2025/08/dslroot-proxies-and-the-threat-of-legal-botnets/

#HackerNews #DSLRoot #Proxies #LegalBotnets #CyberSecurity #TechNews

DSLRoot, Proxies, and the Threat of 'Legal Botnets'

https://krebsonsecurity.com/2025/08/dslroot-proxies-and-the-threat-of-legal-botnets/

#HackerNews #DSLRoot #Proxies #LegalBotnets #CyberSecurity #TechNews

DSLRoot, Proxies, and the Threat of 'Legal Botnets'

https://krebsonsecurity.com/2025/08/dslroot-proxies-and-the-threat-of-legal-botnets/

#HackerNews #DSLRoot #Proxies #LegalBotnets #CyberSecurity #TechNews

DSLRoot, Proxies, and the Threat of 'Legal Botnets'

https://krebsonsecurity.com/2025/08/dslroot-proxies-and-the-threat-of-legal-botnets/

#HackerNews #DSLRoot #Proxies #LegalBotnets #CyberSecurity #TechNews

Apparently, there exists a website called ipv4[.]games, where you can register HTTP web requests from hosts where you have access to. Once accessed, you can "claim" the requesting #IPv4 address with an #HTTP GET request on /claim?name=<NAME>.

The leaderboard leads the person which claims most addresses of various /8 networks.

It is wild to see partially 6-digit numbers for various /8s claimed by one and the same user.

My guess is: Either they leverage residential proxies, or leverage perhaps mass-spamming on having millions of people world-wide clicking links, or alternatively, leveraging modern software design to do the lookup for them (e.g. website previews on social media, or anti-phishing services that do a lookup, before they forward the mail to you).

No matter what, I am sure that millions of these IP addresses in there can be harvested as #open #proxies

Other than that, I like the idea, and love how gamification leads to some people developing creative ways on making millions of hosts on the Internet access this website. It probably still invites to unsolicited requests from strangers unknowingly participating in the game of a tech-savvy person.

#Spamming #spoofing

Our censorship evasion services have processed over 650TB of bandwidth combined in the past 30 days ⚡️

Help us build more infrastructure, and reach 1PB per month & beyond by making a tax-deductible donation of any amount: https://unredacted.org/donate/ - we also accept cryptocurrency!

If you have questions, we're here to answer them 😎

#Censorship #Tor #Proxies #XMR #ZEC #BTC #Crypto

#Development #Techniques
Bot or not? · Web bot history and detection techniques https://ilo.im/164y95

_____
#Bots #Captchas #Fingerprinting #Proxies #Browsers #DNS #JavaScript #WebDev #Frontend #Backend

Commented on FCLTGlobal report, Beyond the Blame Game: Why the Proxy System Needs to Change. (added to prior post https://www.corpgov.net/2024/12/pre-disclosing-proxy-votes-bradley-august/ ) Reads like DOGE technocrats dismantling government to privatize democracy international transhumanist billionaires who believe they can live forever by merging with machines. Still, the report is the consensus of some of the world’s most important and influential organizations. As such, it is worth reading and discussing. #corpgov #ESG #proxies #proxysystem

We're working on a complete rewrite of https://github.com/unredacted/freesocks-control-plane into a fully-fledged web application to help anyone with the distribution of Outline & Xray/XTLS access keys.

Here's a sneak peak of the admin UI.

#Outline #Xray #XTLS #VPN #Proxies

China-Russia Alliance Expands, Elevating US Risks in Asia and Middle East - Frederick Kempe, CEO of the Atlantic Council, highlighted two pressing concerns at... - https://news.bitcoin.com/china-russia-alliance-expands-elevating-us-risks-in-asia-and-middle-east/ #atlanticcouncil #condoleezzarice #frederickkempe #nicholasburns #leadership #middleeast #economics #sanctions #defense #proxies #ukraine #russia #china #asia #u.n. #war

Weekend Reads

* DNSSEC and .nz https://www.potaroo.net/ispcol/2024-04/nzdnssec.html
* Cables under the sea https://www.theverge.com/c/24070570/internet-cables-undersea-deep-repair-ships
* Supply chain OSS dependencies https://arxiv.org/abs/2404.11763
* Residential proxies traffic study https://arxiv.org/abs/2404.10610
* Africa undersea cable colonialism https://firstmonday.org/ojs/index.php/fm/article/view/13637

#DNSSEC #UnderseaCabling #OSS #Proxies #Africa

Excited for #JCON EUROPE 2024? See Abdel Sghiouar at #JCON2024 in Cologne talking about '#Proxies, #Gateways, and Service #Mesh. Why Are Words so Confusing?'

Can you tell the difference between an #API Gateway, the API Gateway, …

Get your free #JUG Ticket: http://www.jcon.one

If you are interested in the chemical tracers of wildfires, and how those might vary with burn severity, check out our new #preprint https://www.authorea.com/doi/full/10.22541/au.170689252.26414470/v1

We leached wildfire ashes and soils from karst areas, so we can better understand the speleothem palaeofire proxy signal. Another team effort, with co-authors from #UNSW (👋 @Andbaker) #ANSTO, #UWA, and #GNSScience

#palaeofire #paleofire #processUnderstanding #Proxy #proxies #paleoenvironment

How to Leverage Internal #Proxies for #Lateral #Movement, #Firewall #Evasion, and Trust #Exploitation
https://practicalsecurityanalytics.com/how-to-leverage-internal-proxies-for-lateral-movement-firewall-evasion-and-trust-exploitation/

#FLATBUSHZOMBiES - '#PROXIES' #music #LoveMusicHateFascism #youtube #rap #hiphop

https://youtu.be/YCUeI191Ttw?feature=shared

#fbz #flatbushzombies #proxies #music #LoveMusicHateFascism #youtube #rap #hiphop :antifa_100:

https://youtu.be/YCUeI191Ttw?feature=shared

Is anyone using #loadbalancers in their #homelab or is it all reverse proxies? Looking for something to do TLS termination and, ideally, make highly available. I tried doing this with #caddy and ehh it's not really working how I want to. I also think I didn't configure it correctly. Documentation is a little sparse.

#homelab #networking #load #balancers #revers #proxies #minilab