Hacker Newsnew | past | comments | ask | show | jobs | submit | lisk1's commentslogin

also they probably, like every ISP nowadays know when what IP to who was assigned so dynamic IP is not guarantee for anonymity


dnscrypt-proxy can do that for you, downside slow DNS server means slow DNS responce time


Solution for this is to tunnel the traffic through encrypted connection to servers in countries that respect persons privacy(if that is true nowadays). The easiest way is to use WireGuard, easy to set up uses only one port and have clients for many devices.


> ... countries that respect persons privacy

May be a long time ago, in a galaxy far away, such a thing once existed. It's a sweet thought though.


You don't even need that to be useful though.

In my tinpot banana republic (Australia) ISP metadata retention is required by law, and warrantless access to that is granted to organisations involved in fighting terrorism, child abuse, and other serious crimes - and those agencies include local councils, animal control, the taxi commission, and various horse racing oversight organisations... :sigh:

Even moving your meta data to a different legal jurisdiction makes it less likely to be abused. My local nosy dog catcher is unlikely to attempt to get hold of any useful internet meta data when my ISP hands over their records and say "Ahhh, yes - bigiain's metadata here shows about 2TB of bandwidth for May, all to the ip address of a VPN endpoint in <checks ip geolocation> Belize... I can look up the Belize police phone number for you, do you speak creole?"


Isn't the official language in Belize is English? Aren't South America's routers accessible by the agencies collaborating with the US Govt.?


Maybe, and quite likely. I considered using Moldovia as my example jurisdiction instead, but Belize has some nice cachet and backstory to add appropriate colour and context to a rant.

Still gonna put off the local dog catcher who's trying to work out if I'm video chatting with his ex girlfriend...

(If _actual_ FVEY or equivalent national security agencies are curious about me, I'm pragmatic enough to know none of my tradecraft live action role playing is gonna make any difference at all. I could buy some magical amulets, fake my own death, and live in a submarine. I am still gonna be Mossad'ed upon... I'll avoid running shipping containers full of drugs/weapons/children across international borders, and try to keep my harshest criticism of the Saudi/Trump Royal families to myself...)


Oh. It's quite enough to express your opinions.


If you trust your vps dns, easiest way would be autossh -D<port> <user@host> and set your browser's socks5 proxy to localhost:<port> and tell it to use remote dns when resolving domains. This requires no wireguard setup, no certificate generation or anything.


I've been doing both and have to say Wireguard is much more performant and stable than an ssh tunnel. Besides, it shouldn't be too hard to set it up on a VPS.


As a counter point about reliability, I've been tunnelling my HTTP traffic (and DNS) through SSH (to get around corporate restrictions and monitoring) for 10 years or so - I don't think I've ever had any reliability issues.


I've had a lot of problems: latency, ssh tcp connections dropping packets and whole connection becoming unstable, manually configure proxy / browser each time & also sometimes you may forget to start the tunnel. You also need to start a new ssh connection for each port you want to forward, so you end up managing a bunch of ssh connections if you want to expose some services for example. Wireguard is more deeper down the layers and just works without jumping through hoops - none of the apps are aware of it and when it's on, it just stays on). Of course, when all you have is ssh to get around pesky restrictions, then I guess that will do fine too! ;-)


A good point about switching proxies and apps that don't support SOCKS natively.

I guess I've been dealing with those issues for so long they don't bother me anymore!

Also, I use a great extension for Firefox, so I can switch to/from the proxy in 2 clicks, "Proxy Switcher and Manager".


WireGuard doesn't use certificates it works similar way to SSH with keys, also they have open source clients for Android and iOS a few clicks configuration


You don't generate a key pair to share with the client? How does that even work when you want to disable a key or set a password?


What i meant generating keys is not equal to generating certificate in the common sense of this word, it only works with randomly generated keys , passwords are not save way to encrypt data unless you can remember random sequence of characters for every client you have. If look at WireGuard protocol will get all the answares.


I got my answers, it is pretty much openvpn with a different wireprotocol and there are key pairs.


Thailand has some new and strong privacy laws:

https://www.insideprivacy.com/data-privacy/thailand-passes-p...


Which have been delayed for a year due to C19.

All Thai constitutions have had strong privacy requirements, but that has never been important for what actually happens.

It's really not clear what compliance will be like. If it's anything like most things here then it'll only be if the government gets annoyed that a company will be in any danger of prosecution.


There are a lot more RNA virus specifically targeting antivirals surprised that most of them are not yet tested.


sounds like we should get on it


According to this radio programme[1] I was listening to at the weekend, scientists have been warning about the potential of coronaviruses to cause a pandemic for a long time, and saying we should work on general antivirals for them. Obviously that didn't happen.

[1] https://www.bbc.co.uk/programmes/m000gvd1


Didn't it? The one we're talking about was developed to fight the last two Coronaviruses.


Due to the outbreak global supplies will be disrupted also there are people that take it as prescription medicine for arthritis, its relevant people to have access to the synthesis of it. Here is a paper describing cost effective way to synthesis it [1].Its not trivial task but good information to have access to. Had a quick look at the precursor chemicals used in this synthesis they are sold from global chemical suppliers and doesn't seem to have any specific restriction for sell.

[1] https://www.beilstein-journals.org/bjoc/articles/14/45


Thanks for the link, There are essential medicines that synthesis of which should be public domain.


Wikipedia says: "Hydroxychloroquine was approved for medical use in the United States in 1955.[1] It is on the World Health Organization's List of Essential Medicines, the safest and most effective medicines needed in a health system.[5] The wholesale cost in the developing world is about US$4.65 per month as of 2015, when used for rheumatoid arthritis or lupus.[6] In the United States the wholesale cost of a month of treatment is about US$25 as of 2020

That's old enough that there is no patent on the drug and I am sure many public domain synthesis paths: somebody might have a newer, better, cheaper way to make it which is patented, but there is no legal barrier to making it.


Wikipedia is misquoting WHO.

> The core list presents a list of minimum medicine needs for a basic health-care system, listing the most efficacious, safe and cost–effective medicines for priority conditions. Priority conditions are selected on the basis of current and estimated future public health relevance, and potential for safe and cost-effective treatment.

WHO is saying "this medication is the safest medication available to treat malaria". It's definitely not saying "this medication is safe".

For chloroquine they say "* For use only for the treatment of P.vivax infection", so they're not even saying "this is the safest med for malaria", they're saying "for this one type of malaria this is the safest med".


If you find it relevant you may also post this link in this thread related to Hydroxychloroquine trails, to give it more visibility https://news.ycombinator.com/item?id=22627714


Reading this, Snowden have to feel lucky he managed to escape in Russia , if he didnt he pretty much will face the same fate as Assanges. Assange mistake was he was counting too much on Ecuador's officials but they got pretty easily bribed by US government.


I'm perplexed by this article what so special about tesla hardware except some custom ASICs , few days ago there was article disusing the software side of Tesla cars didnt took traction on HN , its just Ubuntu based linux with fail save boot feature, a bunch of shell scripts and QT based user interface. The interesting questions is, is it viable someone to make fully open source linux distro for tesla cars and how legal is it to install alternative software for Tesla cars , just like a PC, customer buys the hardware but have a choice to install what ever software he wants.


What stands out from this article for me; I own a model 3; is that they are suggesting that suppliers may hold back some manufacturers who do not wish to damage their relationship with those suppliers by wholesale changing up how cars are done.

one area they suffer not highlighted is that each supplier maintains its own code base and while I bet they are obligated to share that with the automobile manufacturer it is still a separate team that does not integrate with other suppliers, all this meaning that since Tesla codes all their own ECU and everything feeds up they have a much easier time adapting to new tech and also fixing issues as they come along

OTA alone is a major headache for any traditional manufacturer to implement because they don't make all the electronics so they have to rely on the suppliers coming on board. Worse they also have to convince the dealer network this is a good change because it will take work from them. BMW just recently demonstrated their ability to OTA with some improvements sent up which allow customization of non driving related functions. We know that Audi supports limited OTA for eTron and the Chevrolet Bolt while it has the ability no one seems to report it being use.

for the most part the article is a bit too fanboi for me, after all Tesla riding this edge is just as likely to have issues with hardware that does not stand up to the abuse an automobile can give it


My guess is Linux is still mainly used in server environment so utilizing more threads as possible is necessity so more contribution is going into this ,


You may be right but keep in mind that there are a lot of talented people that cant afford paying for software such as Cinema4D and that's the beauty of Blender you have access to 3D software with good amount of possibilities without paying anything and the community is pretty huge and getting a momentum


Yep, I agree - Blender is a great tool and not wanting to take away anything from it.

But I found this horn-tooting about Blender and saying that its superior to every 3D software out there is a stretch if not flatout wrong.

Ever used Houdini? Yeah, it's not totally free but it's free for non-commercial use. It will blow your mind what it can do: https://www.youtube.com/watch?v=MIcUW9QFMLE

The Houdini UI is nothing short of absolute genius.

I don't see Blender ever competing with Houdini. Like...ever. Because, it is fundamentally a different take on 3D content. It does the same thing at the end (3D content), but the way it does it is different (procedural). Better IMHO, but I could be biased.

Does that mean Blender has no place in the sofware ecosystem? No. Can we me a bit more pragmatic, stop horn-tooting and objectively look at the 3D software landscape as a whole? Yes.


Houdini is nice peace of 3D software they are going for a lot of years now leading to 90s good that they added some affordable licensing for indie artists recent years but again for starter 3d artist Blender is best choice after that its up to the person what direction he/she will choose.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: