How to Help Censored Users Access the Tor Network by Just Installing a Browser Addon!
Thanks to a new Pluggable Transport called Snowflake you can now help censored users access the Tor network by just installing an addon. The way it works is pretty simple: censored users learn about a temporary proxy (a 'snowflake') from a broker (using domain fronting or other techniques) that they establish a connection with using WebRTC, the temporary proxy then transmits the requests to a bridge which then connects to the Tor network, the temporary proxy thus functions as a middle point between the censored user and the bridge <=> Tor network. The idea is that by getting a significantly large of ever changing and decaying temporary proxies it will be hard for a single censor to keep track and block all of them. As [David Fifield](https://www.bamsoftware.com/papers/thesis/#chap:snowflake) eloquently explains,
> Snowflake derives its blocking resistance from having a large number of proxies. A client may use a particular proxy for only seconds or minutes before switching to another. If the censor manages to block the IP address of one proxy, there is little harm, because many other temporary proxies are ready to take its place.
As explained earlier, when you function as a snowflake proxy **no exit traffic is generated at your level, you just transit traffic to a bridge which then connects to the Tor network. Hence there is no need to worry about which websites the clients are accessing through your proxy. Their visible browsing IP address will match their Tor exit node, not yours.** In addition Snowflake's strength comes from having a large pool of temporary proxies, so don't forget to spread the word and have a maximum of people installing this addon!
-------
The addon is available for Firefox on AMO:
* https://addons.mozilla.org/en-US/firefox/addon/torproject-snowflake/
* (and for Android) https://addons.mozilla.org/en-US/android/addon/torproject-snowflake/
And if you happen to want to install it on a Chromium based browser it is available as well on the Chrome Addon Store:
* https://chrome.google.com/webstore/detail/snowflake/mafpmfcccpbjnhfhjnllmmalhifmlcie
-----
A couple of notes:
* You need WebRTC to be enabled in your browser for this to work, this is simply owing to how Snowflake works. The extension will display a warning if it detects that WebRTC isn't enabled.
* The addon tells you when a client is connecting using your proxy and how many clients you have helped circumvent censorship in the last 24h. However, right now Snowflake is only available for the **alpha** releases of the Tor Browser and then only for Linux and Mac OS, as such [there aren't currently many Snowflake users](https://metrics.torproject.org/userstats-bridge-transport.html?transport=snowflake), so it shouldn't be surprising for you to pass an entire 24h without having any reported client connection.
* There are other ways to run a Snowflake proxy that are outlined [here](https://trac.torproject.org/projects/tor/wiki/doc/Snowflake#HowtorunaSnowflakeproxy).
-------
To learn more about Snowflake you can have a look at the following references:
* [Snowflake wiki page on trac.torproject.org](https://trac.torproject.org/projects/tor/wiki/doc/Snowflake)
* [Chapter on Snowflake from David Fifield's Phd thesis](https://www.bamsoftware.com/papers/thesis/#chap:snowflake)
* [A technical writeup by Serene Han](https://keroserene.net/snowflake/technical/)
https://redd.it/ccivq4
@r_linux
Thanks to a new Pluggable Transport called Snowflake you can now help censored users access the Tor network by just installing an addon. The way it works is pretty simple: censored users learn about a temporary proxy (a 'snowflake') from a broker (using domain fronting or other techniques) that they establish a connection with using WebRTC, the temporary proxy then transmits the requests to a bridge which then connects to the Tor network, the temporary proxy thus functions as a middle point between the censored user and the bridge <=> Tor network. The idea is that by getting a significantly large of ever changing and decaying temporary proxies it will be hard for a single censor to keep track and block all of them. As [David Fifield](https://www.bamsoftware.com/papers/thesis/#chap:snowflake) eloquently explains,
> Snowflake derives its blocking resistance from having a large number of proxies. A client may use a particular proxy for only seconds or minutes before switching to another. If the censor manages to block the IP address of one proxy, there is little harm, because many other temporary proxies are ready to take its place.
As explained earlier, when you function as a snowflake proxy **no exit traffic is generated at your level, you just transit traffic to a bridge which then connects to the Tor network. Hence there is no need to worry about which websites the clients are accessing through your proxy. Their visible browsing IP address will match their Tor exit node, not yours.** In addition Snowflake's strength comes from having a large pool of temporary proxies, so don't forget to spread the word and have a maximum of people installing this addon!
-------
The addon is available for Firefox on AMO:
* https://addons.mozilla.org/en-US/firefox/addon/torproject-snowflake/
* (and for Android) https://addons.mozilla.org/en-US/android/addon/torproject-snowflake/
And if you happen to want to install it on a Chromium based browser it is available as well on the Chrome Addon Store:
* https://chrome.google.com/webstore/detail/snowflake/mafpmfcccpbjnhfhjnllmmalhifmlcie
-----
A couple of notes:
* You need WebRTC to be enabled in your browser for this to work, this is simply owing to how Snowflake works. The extension will display a warning if it detects that WebRTC isn't enabled.
* The addon tells you when a client is connecting using your proxy and how many clients you have helped circumvent censorship in the last 24h. However, right now Snowflake is only available for the **alpha** releases of the Tor Browser and then only for Linux and Mac OS, as such [there aren't currently many Snowflake users](https://metrics.torproject.org/userstats-bridge-transport.html?transport=snowflake), so it shouldn't be surprising for you to pass an entire 24h without having any reported client connection.
* There are other ways to run a Snowflake proxy that are outlined [here](https://trac.torproject.org/projects/tor/wiki/doc/Snowflake#HowtorunaSnowflakeproxy).
-------
To learn more about Snowflake you can have a look at the following references:
* [Snowflake wiki page on trac.torproject.org](https://trac.torproject.org/projects/tor/wiki/doc/Snowflake)
* [Chapter on Snowflake from David Fifield's Phd thesis](https://www.bamsoftware.com/papers/thesis/#chap:snowflake)
* [A technical writeup by Serene Han](https://keroserene.net/snowflake/technical/)
https://redd.it/ccivq4
@r_linux
Recommended Torrent?
New to debian and linux as a whole. I was wondering what torrent you guys use and recommend.
The other question is do you guys run it straight on your os or do it by running a VM?
https://redd.it/ccjhkg
@r_linux
New to debian and linux as a whole. I was wondering what torrent you guys use and recommend.
The other question is do you guys run it straight on your os or do it by running a VM?
https://redd.it/ccjhkg
@r_linux
reddit
r/linux - Recommended Torrent?
0 votes and 0 comments so far on Reddit
Linix installation help
Hi guys,
​
I want to install MX Linux on my Lenovo PC that came preinstalled with Windows 10.
I did not create any partitions and so have a single C drive.
I plan to use Drive Droid on Android to boot the MX Linux ISO.
​
What do I need to do beforehand to ensure Windows stays in tact after installation?
Also, I want to make MX Linux the primary OS, especially for things like system related (partitioning etc), browsing, torrents, etc. Do I need to do anything else to achieve that seeing that Windows 10 was installed first?
​
Hope the questions are clear.
​
Thanks a lot!
https://redd.it/ccmxay
@r_linux
Hi guys,
​
I want to install MX Linux on my Lenovo PC that came preinstalled with Windows 10.
I did not create any partitions and so have a single C drive.
I plan to use Drive Droid on Android to boot the MX Linux ISO.
​
What do I need to do beforehand to ensure Windows stays in tact after installation?
Also, I want to make MX Linux the primary OS, especially for things like system related (partitioning etc), browsing, torrents, etc. Do I need to do anything else to achieve that seeing that Windows 10 was installed first?
​
Hope the questions are clear.
​
Thanks a lot!
https://redd.it/ccmxay
@r_linux
reddit
r/linux - Linix installation help
0 votes and 1 comment so far on Reddit
AutoHotKey to AutoKey
So in making a complete switch from windows to ubuntu on my other computer too, I've stumbled upon an issue. I am using some fairly complex AHK noscripts there, and I don't want to see them lost, yet I cannot simply import them to AK. Any ideas on how to do this?
https://redd.it/ccnb7l
@r_linux
So in making a complete switch from windows to ubuntu on my other computer too, I've stumbled upon an issue. I am using some fairly complex AHK noscripts there, and I don't want to see them lost, yet I cannot simply import them to AK. Any ideas on how to do this?
https://redd.it/ccnb7l
@r_linux
reddit
r/linux - AutoHotKey to AutoKey
0 votes and 0 comments so far on Reddit
KDE userbase, the wiki where users can learn about everything KDE, gets a make over: cleaner, clearer and easier to use.
https://carlschwan.eu/2019/07/12/new-userbase.html
https://redd.it/ccnuz3
@r_linux
https://carlschwan.eu/2019/07/12/new-userbase.html
https://redd.it/ccnuz3
@r_linux
Carl Schwan Website
The new userbase wiki
KDE userbase, the wiki where users can learn about everything KDE, gets a make over: cleaner, clearer and easier to use.
ulauncher-mpd - added icons
ulauncher-mpd, a ulauncher extension to control mpd, does now have icons. As I suck at making icons, they might not be beautiful :D
​
[https://github.com/codyfish/ulauncher-mpd](https://github.com/codyfish/ulauncher-mpd)
https://redd.it/ccopze
@r_linux
ulauncher-mpd, a ulauncher extension to control mpd, does now have icons. As I suck at making icons, they might not be beautiful :D
​
[https://github.com/codyfish/ulauncher-mpd](https://github.com/codyfish/ulauncher-mpd)
https://redd.it/ccopze
@r_linux
GitHub
codyfish/ulauncher-mpd
Contribute to codyfish/ulauncher-mpd development by creating an account on GitHub.
Basic directory denoscription for refresh your mind, keep it on your mind :-)
https://redd.it/ccp5ga
@r_linux
https://redd.it/ccp5ga
@r_linux
Linux May Gain Protection Against Hyper-Threading Attacks
https://www.tomshardware.com/news/linux-kernel-intel-hyperthreading-cpus-security,39855.html
https://redd.it/ccqfh2
@r_linux
https://www.tomshardware.com/news/linux-kernel-intel-hyperthreading-cpus-security,39855.html
https://redd.it/ccqfh2
@r_linux
Tom's Hardware
Linux May Gain Protection Against Hyper-Threading Attacks
Devs have built a feature that aims to protect apps running in the Linux kernel against side-channel attacks on Intel CPUs using Hyper-Threading.
Cemu has better performance on Linux through Wine than natively on Window$
Lately I have been playing around with cemu, and i saw [this guide](http://compat.cemu.info/wiki/Serfrosts_Cemu_Setup_Guide) suggesting that there is performance to be gained by switching to Linux, so I fired up my Manjaro installation, used [this noscript](https://github.com/CEMULinux/cemutil) and was playing just 5 minutes after that! (I already had the games dumped on another drive)
This really made a difference for me, as on windows I was averaging about 15/18 fps while being CPU bound by my x4 860k, while on Linux i get around 20/28 fps, with the occasional dip in the high 10-15s.
I think we should encourage the cemu team for their efforts, they have a patreon [here](https://www.patreon.com/cemu)!
Maybe we could even go as far as to push for a native Linux port (although the team is small, so it might be more feasible to get them to open source the emulator and fork it with linux support)
https://redd.it/ccr78g
@r_linux
Lately I have been playing around with cemu, and i saw [this guide](http://compat.cemu.info/wiki/Serfrosts_Cemu_Setup_Guide) suggesting that there is performance to be gained by switching to Linux, so I fired up my Manjaro installation, used [this noscript](https://github.com/CEMULinux/cemutil) and was playing just 5 minutes after that! (I already had the games dumped on another drive)
This really made a difference for me, as on windows I was averaging about 15/18 fps while being CPU bound by my x4 860k, while on Linux i get around 20/28 fps, with the occasional dip in the high 10-15s.
I think we should encourage the cemu team for their efforts, they have a patreon [here](https://www.patreon.com/cemu)!
Maybe we could even go as far as to push for a native Linux port (although the team is small, so it might be more feasible to get them to open source the emulator and fork it with linux support)
https://redd.it/ccr78g
@r_linux
So I nuked my root directory
And I don't even know what I did wrong.
I had lots of files and libraries I wanted to put in another system, so what I decided to do was to make a directory in which I reproduced the filesystem hierarchy (/bin, /lib, /usr/bin, etc.), and placed all the files in those folders. I then, inside that directory, created a tarball containing those folders (tar -cvf files.tar *).
I moved that files.tar tarball to the root (/) of my target system, and extracted it there (tar -xvf files.tar). What I expected to happen was for all those files to be placed inside /bin, /lib, /usr/bin, etc. What actually happened is that those files were placed inside those folders, but also that *everything that was inside those folders before was deleted by tar*. So I have completely borked my system.
This might be the first time I do something this dumb, but it certainly won't be the last.
https://redd.it/ccrqu4
@r_linux
And I don't even know what I did wrong.
I had lots of files and libraries I wanted to put in another system, so what I decided to do was to make a directory in which I reproduced the filesystem hierarchy (/bin, /lib, /usr/bin, etc.), and placed all the files in those folders. I then, inside that directory, created a tarball containing those folders (tar -cvf files.tar *).
I moved that files.tar tarball to the root (/) of my target system, and extracted it there (tar -xvf files.tar). What I expected to happen was for all those files to be placed inside /bin, /lib, /usr/bin, etc. What actually happened is that those files were placed inside those folders, but also that *everything that was inside those folders before was deleted by tar*. So I have completely borked my system.
This might be the first time I do something this dumb, but it certainly won't be the last.
https://redd.it/ccrqu4
@r_linux
reddit
r/linux - So I nuked my root directory
0 votes and 3 comments so far on Reddit
Took me 10 hours to install gentoo on a VM, but I finally did it!
​
https://i.redd.it/i9x5c7v3z3a31.png
https://redd.it/ccs5h1
@r_linux
​
https://i.redd.it/i9x5c7v3z3a31.png
https://redd.it/ccs5h1
@r_linux
AMD Ryzen 3000: The company launches an AGESA microcode that solves the problem with Destiny 2 and Linux
https://hardwaresfera.com/noticias/amd-ryzen-3000-la-compania-lanza-un-microcodigo-agesa-que-soluciona-el-problema-con-destiny-2-y-linux/
https://redd.it/ccuh7l
@r_linux
https://hardwaresfera.com/noticias/amd-ryzen-3000-la-compania-lanza-un-microcodigo-agesa-que-soluciona-el-problema-con-destiny-2-y-linux/
https://redd.it/ccuh7l
@r_linux
HardwarEsfera
AMD Ryzen 3000: La compañía lanza un microcódigo AGESA que soluciona el problema con Destiny 2 y Linux - HardwarEsfera
Rápida respuesta por parte de AMD, que ya ha distribuido un nuevo microcódigo AGESA para BIOS que corrige los problemas de Destiny 2 y Linux.
On Nightly, WebRender is now enabled by default for Nvidia with Mesa 18.2 and later.
https://www.reddit.com/r/firefox/comments/ccsd52/on_nightly_webrender_is_now_enabled_by_default/
https://redd.it/ccurir
@r_linux
https://www.reddit.com/r/firefox/comments/ccsd52/on_nightly_webrender_is_now_enabled_by_default/
https://redd.it/ccurir
@r_linux
reddit
r/firefox - On Nightly, WebRender is now enabled by default for Nvidia with Mesa 18.2 and later.
6 votes and 0 comments so far on Reddit
Is it possible (and useful) to enable Meltdown and Spectre mitigations only while browsing?
Hi. I was wondering if this is possible with a noscript? Could I run mitigations=on when my browser starts and runs mitigations=off when it closes? Because I really only worry about JavaScript with regards to those vulnerabilities.
Or since it's a kernel thing I would require a reboot to make things effective?
I am one complete newcomer and would like some guidance.
Thanks!
https://redd.it/ccw4zn
@r_linux
Hi. I was wondering if this is possible with a noscript? Could I run mitigations=on when my browser starts and runs mitigations=off when it closes? Because I really only worry about JavaScript with regards to those vulnerabilities.
Or since it's a kernel thing I would require a reboot to make things effective?
I am one complete newcomer and would like some guidance.
Thanks!
https://redd.it/ccw4zn
@r_linux
reddit
r/linux - Is it possible (and useful) to enable Meltdown and Spectre mitigations only while browsing?
0 votes and 3 comments so far on Reddit
Looking for a tool that can virtually traverse an entire iptables chain stack (or one chain) in userland
I'm looking for a tool that can take a "packet object" and with it, virtually traverse an iptables chain or the entire iptables filter/nat/mangle stack. Using the TRACE target isn't what I'm looking for, as I need to test offline traffic (for example, replaying from tcpdump captures). Ideally, I should be able to specify incoming interface, L2 src/dst MAC, L3 src/dst IP, protocol, L4 src/dst ports, tcp flags, etc, and view the path the crafted packet takes through all the iptables rulesets, printing each matching rule.
I've seen people ask about something like this in the past, but nobody's asked recently, and nobody's gone back to those threads with new developments.
If this doesn't exist, is there a path to take the iptables/netfilter/conntrack code into a userland library and allow someone to inject crafted packets into it while showing match-logic debugging output?
https://redd.it/ccwv2w
@r_linux
I'm looking for a tool that can take a "packet object" and with it, virtually traverse an iptables chain or the entire iptables filter/nat/mangle stack. Using the TRACE target isn't what I'm looking for, as I need to test offline traffic (for example, replaying from tcpdump captures). Ideally, I should be able to specify incoming interface, L2 src/dst MAC, L3 src/dst IP, protocol, L4 src/dst ports, tcp flags, etc, and view the path the crafted packet takes through all the iptables rulesets, printing each matching rule.
I've seen people ask about something like this in the past, but nobody's asked recently, and nobody's gone back to those threads with new developments.
If this doesn't exist, is there a path to take the iptables/netfilter/conntrack code into a userland library and allow someone to inject crafted packets into it while showing match-logic debugging output?
https://redd.it/ccwv2w
@r_linux
reddit
r/linux - Looking for a tool that can virtually traverse an entire iptables chain stack (or one chain) in userland
0 votes and 0 comments so far on Reddit
Will changing a hard drive from an LVM volume system result in data loss?
I'm planning to build a NAS based on Proxmox with four 8TB disks and put it to use as my home NAS. As I don't want any capacity loss due to redundancy or parity, I've decided to create a logical volume from sda1\~sdd1. AFAIK, LVM would work like JBOD and write data consecutively from sda to sdd, so at least data that span two disks should be lost if one of the hard disks failed/got changed according to my understanding. However, there's plenty of articles depicting the method of changing hard disk(s) out there on the Internet, which really confuses me. Anyone can share any thoughts on that plz?
https://redd.it/cd044q
@r_linux
I'm planning to build a NAS based on Proxmox with four 8TB disks and put it to use as my home NAS. As I don't want any capacity loss due to redundancy or parity, I've decided to create a logical volume from sda1\~sdd1. AFAIK, LVM would work like JBOD and write data consecutively from sda to sdd, so at least data that span two disks should be lost if one of the hard disks failed/got changed according to my understanding. However, there's plenty of articles depicting the method of changing hard disk(s) out there on the Internet, which really confuses me. Anyone can share any thoughts on that plz?
https://redd.it/cd044q
@r_linux
reddit
r/linux - Will changing a hard drive from an LVM volume system result in data loss?
0 votes and 0 comments so far on Reddit
KDE Usability & Productivity: Week 79
https://pointieststick.com/2019/07/13/kde-usability-productivity-week-79/
https://redd.it/cd0s1u
@r_linux
https://pointieststick.com/2019/07/13/kde-usability-productivity-week-79/
https://redd.it/cd0s1u
@r_linux
Adventures in Linux and KDE
KDE Usability & Productivity: Week 79
After a somewhat light week, we’ve back with week 79 in KDE’s Usability & Productivity initiative, and there’s a ton of cool stuff for you! New Features The popular Picture of…
Language switch on GNOME?
Hi people. I'm on a remote farm in Serbia where I'm trying to set up a laptop for my good buddy Slaviča Maksimovic, so he can have foreign volunteers on his farm, because he needs it and loves it. <-- short version.
Slaviča doesn't speak English. I don't speak Serbian so I set up the computer in English (Ubuntu, regular). I'll soon switch it to Serbian so he can actually use it. But he'll run into issues instantly (prediction) and I'm going to need to do a lot of switching back and forth between Serbian and English to help him figure shit out.
Now, all my research about a quick language switcher points to keyboard layouts. But no, I need to be able to switch the system language quickly with maybe a menu entry between the Bluetooth menu and the battery menu. There can't not be something like that. Anyone?
https://redd.it/cd1clh
@r_linux
Hi people. I'm on a remote farm in Serbia where I'm trying to set up a laptop for my good buddy Slaviča Maksimovic, so he can have foreign volunteers on his farm, because he needs it and loves it. <-- short version.
Slaviča doesn't speak English. I don't speak Serbian so I set up the computer in English (Ubuntu, regular). I'll soon switch it to Serbian so he can actually use it. But he'll run into issues instantly (prediction) and I'm going to need to do a lot of switching back and forth between Serbian and English to help him figure shit out.
Now, all my research about a quick language switcher points to keyboard layouts. But no, I need to be able to switch the system language quickly with maybe a menu entry between the Bluetooth menu and the battery menu. There can't not be something like that. Anyone?
https://redd.it/cd1clh
@r_linux
reddit
r/linux - Language switch on GNOME?
0 votes and 3 comments so far on Reddit
“Installing Linux is sort of the equivalent of moving to Canada when one doesn’t like US political trends.”
https://redd.it/cd22sp
@r_linux
https://redd.it/cd22sp
@r_linux