HNHacker News
TopNewBestAskShowJobs

subliminalpanda

1,598 karma · joined November 20, 2014

submissionscomments
subliminalpanda··on Portal from Facebook: Voice Enabled Hands-Free Video Calling
> Facebook doesn’t listen to, view or keep the contents of your Portal video calls. Your conversations stay between you and the people you’re calling.

It's not entirely clear from their wording if the calls are E2E encrypted or not - "doesn't" isn't quite the same as "can't". I wish they would be more clear about this.

subliminalpanda··on Ask HN: I'm going to China. What privacy precautions can/should I take?
You run that on your client machine to get all the dependencies required to execute the script. From there you will be prompted which cloud provider you want to use, and just follow the prompts.
subliminalpanda··on Reddit is down; tells me to disable adblock
Sam here.
subliminalpanda··on Ask HN: Which VPN?
link?
subliminalpanda··on Don't use VPN services
You could try Viscosity[0], it's a great client but has a price tag, which I feel is worth it.

[0] https://www.sparklabs.com/viscosity/

subliminalpanda··on WireGuard: fast, modern, secure VPN tunnel
Seconded, it's a great client and the support from the devs is good.
subliminalpanda··on Tinc VPN: Secure Private Network Between Hosts
You can pick and choose which VPN daemons get installed during setup time.
subliminalpanda··on Ask HN: Traveling to China for the first time. Would love some advice
1)The great firewall: None of the Google products would work. This means no access to important stuff like Google Docs, Gmail, etc.

https://github.com/StreisandEffect/streisand installs Shadowsocks, which seems to work quite well in China, provided you find a VPS with good peering in mainland China. I hear a lot of people have good results with Vultr via Japanese data centers, other VPS providers in Hong Kong get good results too.

One of the maintainers of the project does live in China; if you have a question open up an issue in the discussions repo (https://github.com/StreisandEffect/discussions), I'm sure you'll get answers to whatever question you may have.

subliminalpanda··on Do you need a VPN?
When running the streisand script it will now prompt you if you want to customize the install, allowing you to selectively choose which VPN daemons you want to run.
subliminalpanda··on Snap blocks Al Jazeera in Saudi Arabia to “comply with local laws”
Not blocking would cause them to get censored; as a result FB would gain more market share through Instagram stories.
subliminalpanda··on Facebook’s Onavo Gives Social-Media Firm Inside Peek at Rivals’ Users
Thanks.
subliminalpanda··on Putin signs law that prohibits technology providing access to banned websites
Openvpn over stunnel can somewhat already do this, albeit at a performance hit.
subliminalpanda··on Silicon Valley Censorship
The irony in the linked article is also somewhat lost when he cites the UAE, a country which threatens people to a fine and/or a jail sentence if you empathize with Qatar in any way [0].

[1] http://www.bbc.com/news/world-middle-east-40192730

subliminalpanda··on Silicon Valley Censorship
"The Middle East Forum (MEF) is an American conservative[2] think tank founded in 1990 by Daniel Pipes, who serves as its president.[3] MEF became an independent non-profit organization in 1994. It publishes a journal, the Middle East Quarterly." [0]

A quote, emphasis mine:

"Both these groups are designated terrorist organizations in the United Arab Emirates". So the UAE doesn't like them. Why should we care that the UAE doesn't like them? Why specifically the UAE and just them?

[1] https://en.wikipedia.org/wiki/Middle_East_Forum

subliminalpanda··on VPN crackdown ‘unthinkable’ trial by firewall for China’s research world
From this link it looks like Russia is a customer already. [0]

[0] https://www.theguardian.com/world/2016/nov/29/putin-china-in...

subliminalpanda··on How to find a trustworthy VPN service
Censorship circumvention for one.
subliminalpanda··on How to build your own VPN if you're wary of commercial options
Maybe he wasn't aware of it? Just my speculation.

In any case, AES-GCM is natively supported by OpenVPN 2.4, and Streisand as it is will configure it for you as part of the NCP ciphers list, with a fallback to AES-CBC if the client is a bit older [0]

[0] https://github.com/jlund/streisand/blob/master/playbooks/rol...

subliminalpanda··on OpenVPN 2.4 Evaluation Summary and Report
Link to the paper: http://blog.quarkslab.com/security-assessment-of-openvpn.htm...
subliminalpanda··on Is WhatsApp down?
Down in Montreal Canada
subliminalpanda··on ICQ Now Supports IFTTT
uh oh
subliminalpanda··on [dead]
If that's what you need then maybe ChatSecure is what you're looking for.
subliminalpanda··on [dead]
Can you elaborate on what they are not mentioning?
subliminalpanda··on Learning Arabic from Egypt's Revolution
I see thanks for the clarification.
subliminalpanda··on Learning Arabic from Egypt's Revolution
Chess in another example. If memory serves, "Checkmate" was derived from the Arabic "Sheikh maat" (the Sheikh has died).
subliminalpanda··on Ansible playbooks for installing OpenVPN, IPsec, Tor, etc. on popular clouds
Depends. The OpenVPN role will generate five clients, however the server is configured to allow certificate re-use, effectively unlimited (for OpenVPN at least).
subliminalpanda··on Video calls for Signal now in public beta
Tried it today with a relative, the audio quality is significantly better, almost no stuttering.

Video was very smooth as well.

subliminalpanda··on Political World Embraces Encrypted-Messaging App Signal Amid Fears of Hacking
Useful if you want to preserve your chats and move to a new device however.
subliminalpanda··on Java 8: New features in ConcurrentHashMap
There's always Eclipse. It's a bit clunky at times but full featured nonetheless.
subliminalpanda··on Detailed VPN Comparison Chart
It's been a while but the last time I used PIA I noticed that their configurations were woefully insecure (BF-CBC Ciphers, no tls-auth, pre-shared keys instead of certificates). This was maybe a couple of years ago.

Has that changed recently?

subliminalpanda··on There is no WhatsApp 'backdoor'
I would simply ask if they got a new phone or re-installed WhatsApp.

A few would inquisitively ask "Yes, how did you know?", then I would explain them to them the notification I got.

← PreviousPage 2 of 7Next →