Hacker Newsnew | past | comments | ask | show | jobs | submit | great-potential's commentslogin

So a VPN provieder has to check with the laws of all the countries in the world to be able to function ? does'nt make sense you cant create logs if you don't log anything ..


computers and network devices, by their very nature, log all kinds of shit.

you actually have to go in and disable default logging in applications and OS level functions in order to make a system NOT log something.

a court is just compelling them to turn it back on or more specifically, turn it on as it may apply to a singular user.

and yes, if you operate some place - you have to comply with its laws. there's no technical way around this unless you're going full darknet.


Well if you can bribe some people in the middle that does not count hence the Panama based ISPs


I deleted my proton account about a year ago when I saw that I could not login from tor anymore, kudos to tutanota for allowing to register/login without a cell phone it must be really challenging !


My solution - crappy china phone and the cheapest pre-paid sim card I can find. I turn it on, receive my SMS, then turn it off again. Doesn't track back to me because I paid cash, doesn't report my location because china phones don't have GPS, isn't on the VOIP or multiuser blacklist because its a "real" phone number.

https://www.aliexpress.com/wholesale?trafficChannel=main&d=y...


Yeah a bit overkill my threat model just encompass ISP/GAFAM not three letter agencies :D


It won't protect you against three letter agencies - it is more my double middle finger to everyone who thinks SMS verification has value, or somehow the gateway to marketing to me, or being able to harass me if they wanted. I have the telco turn off voice mail on the number so that nobody can produce phone records showing a completed call and say I was contacted.

https://www.youtube.com/watch?v=mewYpU5OSUM


> Doesn't track back to me because I paid cash

It tracks back to you if you turn it ON always in the vicinity of your real phone/home/work/etc.


There are hundreds of people in the same area, I’ll take that bet.


not always the same people? It's not a bet, it's just data/metadata that needs to be processed to de-anonymize you


Enhance.. enhance.. enhance.. override security.. pencil.. joshua.. trustn01.. 1-2-3-4-5.. Swordfish.. warmachinerox..


Just FYI for anyone having this issue, Tor 2.0 is deprecated and has been hit or miss for roughly the past year. As long as you're using their Tor 3.0 onion address you should have few issues.


Exactly, I dont see the point bragging about this nevertheless posting about it on HN ...


Dont mean to be the negative Joe but you dont need a webserver if you're serving a static-able website.


You mean use someone else's web server instead?


I mean this is just basic stuff, for me it just sounds like a developer putting a site in production, no auto-scaling, patching ... might as well outsource this to a CDN since there is no database/redis/varnish ...


So...someone else's web server instead?


[flagged]


A CDN is just a web server somewhere else.


How are you supposed to _serve_ that static _web_site then?


In terms of CPU it is not totally overkill if you're using an IPS/IDS, bare in mind you'll also be disabling most of the network card offloading in a full fledged firewall and that will ultimately result in consuming slightly more CPU cycles.


Not sure why you buy at fs.com when you have online stores in CH that are selling much cheaper:

https://www.microspot.ch/de/computer-gaming/pc-komponenten/s...


Well, hate to tell you but you'll be limited 10Gb/s with these Intel cards because they require FEC.


You mean 10 Gbit/s per link? Even on the 25 Gbit/s card?

Where can I read more about FEC (forward error correction?) and how that affects link speeds?


Yes the transceivers recommended by Init7 (bidi-LR) do not support FEC and you'll be running in degraded mode (according to the controller datasheet), and I don't think this is something that can be achieved by coding of the transceivers.


init7 requirements are at https://www.init7.net/en/support/router-information/

The specific 25G optic is https://www.flexoptix.net/en/p-b1625g-10-ad.html?co10426=972... and indeed does not support FEC.

The remote end is a Cisco C9500-48Y4C, on which one can turn off FEC.

On the Intel side, I found https://www.intel.com/content/dam/www/public/us/en/documents..., which mentions that while No-FEC might result in “poor link quality” (sure, that’s why people use FEC), it does not say anything about degraded mode or limits to 10G.

By controller datasheet, I take it you’re referring to https://www.mouser.cn/datasheet/2/612/710_series_datasheet_v...

That document contains a state machine diagram listing 25G AUI‐RS, 25G AUI‐FC and 25G AUI‐N (in order) before the fallback to 10G SFI.

Did you misread or am I missing something?

In either case, I’ll try the card. If it won’t link at 25G, I can get a different one. Any recommendations? :)


The init7 CTO confirmed he’s running that same intel card and he’s getting 25 Gbit/s speeds: https://twitter.com/spale75/status/1414644121092952065


Great news! tbh I just assumed from past exprience with Intel NICs that it will negotiate to lower speed without FEC.

Personnaly I'll probably go with some cheap mellanox card on ebay :)


I think if the OP uses this only as a router it is indeed a waste of power.

What I would probably do is also use it as nas/workstation by using virtualization, SR-IOV is now pretty standard on these cards.


I’m using the machine also as a server, so it replaces 2 existing devices. In terms of power consumption, it’s likely only a small increase, if at all.


My only rub with that is - shouldn't the router be only a router from a security perspective? Definitely combining servers for home use does make sense though.


Ideally yes. But with the resources needed for 25 Gbps, not using one machine for multiple purposes seems wasteful. The server only stores publically available data, though, so not a big deal from a security perspective.


What do you mean by resources required? expansion ports on the mb?


Yeah running your nas-bittorrent/firewall-router on the same OS is clearly not something I would do, especially that now you can use somrthing like proxmox for example and virtualize your pfsense/opnsense instance.


I am using a home server with the same CPU and I am using it for SQL, storage server and virtualization. In order to do that I changed RAM to 32GB DIMMs, 64GB in total was not enough and the CPU works just fine with 32GB DIMMS. The platform is quite limited by the number of available PCIe lanes, but without moving up to Threadripper (a lot more expensive) there is no better option, Intel is in the same place or worse. The good thing with Intel is that you can use a CPU with integrated graphics and save the PCIe lanes for the graphics card.

My previous build (Ryzen 2700, 65W) had a great feature until it was gone with a BIOS update: after installing everything it worked with the graphics card removed. As I always connected only remotely, it was not a problem but a benefit. You can try and see what happens.


Also, the user can use his freedom to build and do whatever wished for. This tone of you shouldn't do this because some COTS is available sounds very commercially driven. People have the power to create another Google, we are not powerless.


Yeah, I have an overpowered router PC (mostly in the capabilites sense --its a low power passively-coolable Xeon), but it also acts as a flash NAS, and hosts a few other containerized services that I prefer are always-on, it's a wireguard endpoint, etc. I've got a separate sometimes-on box for other VMs and containers. That one hosts a windows VM with a VFIO-attached GPU which my living room tv plugs into. Altogether it's lots of computing power for home use but draws relatively little at the wall. I'm pretty happy where I landed in terms of overall utility versus TCO, using this sort of consolidated-hardware approach.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: