Recent comments in /f/Tech

BlackWinnerYoshi wrote

Reply to comment by awdrifter in Ruqqus Shutting Down by awdrifter

It's simply Ruqqus censorship. Maybe I should've archived the site when they started doing it, but now I'm going to wait until they make Ruqqus read-only, so I can hopefully grab everything as JSON+WARC, maybe images too.

2

Rambler wrote

Encourage them to come here.

The .win community obviously has a more sleek design, but they don't do much in terms of privacy from what I recall. Call me when they allow access through alternative networks and work properly without javascript or 3rd party elements embedded into their site.

4

Rambler wrote (edited )

While reading about this earlier I was shocked to learn just how common Facebook Messenger and WhatsApp is for everyday communication between friends, family and relatives. In some parts of the world, the vast majority of communication is now done on these platforms, all under the same umbrella.

So while I hate Facebook, it's just bizzare to me how in some areas of the world it's used predominately for their chat apps / messenger for important communication.

Like, maybe get your grandma's phone number and call her or send your girlfriend a text message.

EDIT: And from a sysadmin perspective, it always makes you feel a bit better when things like this happen. If companies like Google, Facebook, Microsoft, Playstation, etc can have widescale outages that impact millions of users/customers then it makes you feel a bit better when you goof up something relatively small that only impacts a handful of people.

4

BlackWinnerYoshi wrote

Actually, you can visit sites with an expired certificate, just not those that have HTTP Strict Transport Security enabled, which, for me, is the biggest problem when a site has Clownflare, since the way I distrust Clownflare is not by the awful addon that even Dig Deeper doesn't recommend any more (compare), but by removing the certificate in LibreWolf, so obviously, it thinks they're insecure. And that's true, since Clownflare decrypts your TLS traffic, but I still use Discord regularly, and since it has HSTS, I have to use ungoogled-chromium.

As for Chromium, there is a way to bypass HSTS there, even though the RFC 6797 standard doesn't allow that, but it also looks like they're rotating the way it's done when the awareness increases, and they might have removed it at this point? It's kind of confusing for me.

And, well, using HTTPS for these kinds of websites is useless. And yes, if you still want some kind of security, use VPN or Tor (pro tip: connect to a VPN like Mullvad first, then to Tor), but you could also use the Wayback Machine or archive.today for an easier way. You also get a permalink to the website in case something happens.

5

BlackWinnerYoshi wrote

I only know that the site might be buggy because of traffic, but they should be fixed in the next few days. As for the spd-say drop-in replacement, that would possibly using cURL, PhantomJS, whatever, to simulate requests a web browser would make, and I don't know much about both. Maybe leave that to someone else... or simply use a web browser for this (it looks like it requires enabling some 3rd-party requests in uMatrix - also, does it work in Pale Moon?)

1

TallestSkil wrote

This will not be the first time a root CA certificate has expired and I imagine it will follow the same trend as previous expirations where things break.

Translation: literally nothing is happening nor will ever happen, since they’re simply going to reissue the certificate with a new date of expiry. Like every other certificate ever.

1