Hacker News Reader

Comment by DrammBA | Hacker News Reader

I love how someone's security disaster becomes someone else's feature.

I agree. We may as well make some lemonade out of these lemons. IMHO the ability of companies to 'securely' close off hardware and software from their users is a sad casualty of the success of cryptography, and not a feature.

Most things have tradeoffs

At some point you’re forced to stack rank two or more of your values in a case where they’re mutually exclusive

To some it's not really "security". At least it's not securing them from their greatest "threat" (read: annoyance): so-called "tech" companies engaged in data collection, surveillance and advertising services

In fact, it's securing _the companies_ against potential competitors and users who might raise privacy concerns

The Fortune 500 "MiTM's" TLS traffic from their local networks

Every individual with a local network should be doing the same

I prefer haproxy to mitmproxy. It's faster

> I prefer haproxy to mitmproxy. It's faster

If you’re proxying all the traffic in your network it makes sense, naturally. mitmproxy is usually used for debugging and/or reverse engineering (e.g. with a specific app).

haproxy is also smaller than mitmproxy

I prefer Lua to Python. It's smaller and startup time is faster

Looks like OpenAI used mitmproxy for the purpose of "proxying all traffic in [their] network"

https://web.archive.org/web/20261029130824/https://alignment...

As the percentage of technology controlled by people actively using it to do evil increases, so does the net value to society of a trivially-expliotable zero-day.

I seriously laughed at the flag. public wifi is going to be lit.

What about using a VPN on public wifi?

At places where I did work anything private over even properly protected wifi was forbidden after several wifi vulns in 2018. So the only thing available on company's wifi was vpn gateway and page with manual how to set it up.

So, not trusting anything wireless is a thing for almost a decade.

For the public WiFi threat vector (e.g. a rogue WiFi AP running MITMproxy to sniff your traffic) you would be protected by vpn.

But the broader threat, e.g. older & unpatched devices with these flimsy CAs installed & not upgradable or revocable – tough cookies.

Reply on news.ycombinator.com