flipped

Did everyone forget about soulseek? It's still very much alive, been using it for years.

[flagged]

Fuck congress. They are dead weight. Fuck the president too. Bring back anarchism.

Because that doesn't improve actual security. It's for dumb nuggets who can't do real defensive work. Maybe you would also qualify for that numb job.

No one's buying that shitbox.

Mullvad has proved it doesn't collect. It's laughable to even suggest it.

They have been raided multiple times, tons of audits, does bleeding edge research on privacy preserving tech, donates to GOS, etc etc. You don't see this kind of VPN company at all because none exists.

US labs are the biggest data broker in the current history. They collect everything, dumb fuck.

NSA agent getting burned?

Metadata can be attached but it's off by default.

GrapheneOS already does this, since forever. Android can't stop copying GOS. Maybe they'll add a network toggle after a few years and call it a privacy win.

> certificate pinning (dangerous)

Dangerous how? Create a CAA record which pins your CA and only allow dns01 challenge. Problem solved, a BGP hijack can't issue a valid certificate for your site.

Are every commercial filters made of plastic?

Get down to earth. That can never happen nor does it need to.

German govt is also one of the most corrupt and vastly incompetent govt. It's run by bunch of boomers. Most of the prolific ransomware gangs have terrible opsec. De-anon'ing them is child's play. Most of the opsec-aware TAs never even get attributed, let alone get caught for any breaches.

People often forget that Threat Actors (TA) are the ones keeping the infosec alive. They are doing a good job of scaring people into implementing actual security protocols and thereby improving everyone's security posture. The whole infosec would collapse without TAs, let's not forget that. They create jobs.

More than money, it's the curse of going mainstream.

Bullied? When they find out how much money there is to be made in surveillance business, they will do it voluntarily.

[flagged]

All of his dox articles are based on sloppy practices from threat actors.

Anyone looking to use jails might find BastileBSD helpful. It's a nice and modern jail manager.

Never understood why satoshi was a prime windows user.

Is there any technical writeup which explains how the isolation exactly works, on containers and VMs? I have always heard the high level arguments of weak isolation, same kernel, etc but never the implementation details.

"Since the abstraction layers have quadrupled, let's not just care about the actual performance anymore!"

Krebs lack any sort of real credibility. He's pushing out slop with a govern-mentalist propaganda. Tech journalists are the worst form to gather any actual information.

State sponsored cyber attacks are news to you? It's been a thing since more than 2 decades now.

The mentioned botnet didn't intentionally take down I2P. It's run by bunch of kids who don't know what they're doing.

It's 10, not 9. And there are severe problems with having a total of 10 DA be the essential source of truth for whole network. It would be trivial to DDoS the DAs and bring down the Tor network or at the very least, disrupt it: https://arxiv.org/abs/2509.10755.

It's the only complaint I have of the current state of Tor. Anyone should be able to run directory authority, regardless if you trust the operator or not (same as normal relays).

Almost every hobbyist reverse engineer uses cracked IDA which is easily available. I have never seen ghidra being recommended for serious work.

You're just giving the troll an audience by reacting to it.

Can you be more specific? Is it getting easier to reverse rust and go, since I have read about it being the hardest to reverse.