• 31 Posts
  • 32 Comments
Joined 1 year ago
cake
Cake day: September 29th, 2025

help-circle



  • I will if it continues but I have to say archive.org is well aware of Tor. They used to have an onion host but it died years ago after a very brief deployment. Cloudflare has some kind of partnership with archive.org which is a bit infuriating but at least archive.org is not using CF (CF being the main cause that drives us over to archive.org).

    (update) Glad your comment inspired me to re-examine the onion situation. It’s back:

    archivep75mbjunhxc6x4j5mwjmomyxb573v42baldlqu56ruil2oiad.onion

    This is indeed the fix. Shame redirection does not work. There are 2 kinds of clearnet→onion redirection and archive.org uses neither of them.

    (edit) Many of the webpages I try have not been archived yet, which is unlikely. It seems the onion site does not share the same DB as the clearnet site. But at least the save option finally works. Strangely, after saving a page “for the first time”, I visit and the IAWB bar at the top showed 5000+ saves already made on the page I visited. So it’s buggy.

    (edit2) Fuck me… got the same error on the onion site:

    Your request is being blocked because our system has flagged it as suspected abusive bot traffic that is degrading the performance of the Wayback Machine. We recognize this might be a false positive designation, that you might be a normal human and browser just trying to use our service. We apologize if that is the case.

    Please know we are actively working to provide better service to humans and block high-volume robotic traffic that is overloading our systems. We wish that was an easier task.

    Please email info@archive.org with your OS/Browser and IP number if you would like us to look into this.








  • Start here to get an overview of advantages. It misses some factors, so I also suggest this thread.

    I want to stress the idea of taking load off the exit nodes – which the first link to torproject misses. It not only directly improves the speed for users of the repo, it also gives a better balance to the whole Tor network.

    The reddit thread is decent enough to share but I have to correct something: someone said “Onion services are about protecting the server rather than the user.” They neglected to realise that using an exit node potentially exposes users to DNS leaks. Onion links are immune to DNS leaks and DNS shenanigans (recent events with Autistici being an example of DNS creating vulnerability to bad actors like one particular orange menace).

    The linked sources are a good start but they miss some other factors:

    • Promotion of Tor. The Tor community is severely marginalised because it’s small. Small groups are easy to oppress. Tor needs promotion. Onion links help promote Tor by increasing awareness.
    • The clearnet is under constant attack including burdens added by Microsoft’s copilot and AI bots. The clearnet is generally quite enshitified in part due to self-defense measures. Onion sites tend to not need (and not deploy) the extent of full-blown defensive posture that makes the clearnet UX shit.
    • MS Copilot is probably not harvesting onion forges. Which means the clearnet variant could easily be hardened against it by (e.g.) bluntly blocking all MS IPs, as the onion would still be reachable to humans that have an MS IP for some reason.
    • An onion site /can/ optionally be implemented as a fully redundant server, so when the clearnet host goes down the onion continues offering availability. Two benefits: increased availability and also promotes Tor when it happens. (Not sure if gitea/forgejo or gitlab is better in that config).






  • I will say I find it interesting you are calling my use of mildlyinfuriating@lemmy.world as not being open/the problem, but isn’t the isolation (setting as private) infosec.pub more of a walled-garden and less open?

    Infosec.pub is not making a value judgement that permanently discriminates against demographics of people. It’s the difference between an oppressive US corporation arbitrarily systemically singling out groups for marginalisation to save a buck for the corporate as it bullies over 30% of the world’s web territory, and a small charitable volunteer instance with limited resources doing what is necessary to protect itself from an onslaught of attacks.

    I can freely share the link of the community post I made even if it is hosted through cloudfare.

    Of course. You can share Facebook links too. And those who are in the excluded groups will just waste their time on an unusable link. If you are going to be a pragmatist and not give shit about politics, it’s unclear why you are in the fedi as opposed to Twitter and Facebook.

    I imagine mildlyinfuriating@thelemmy.club didn’t exist when I subscribed to lemmy.worlds community or maybe there were only 3 people in it. Surely the expectation is not to keep monitoring all my communities and check if a better version of said community pops up.

    Subscribing is about /reading/, not /writing/. When deciding where to post, I often search communities because it’s a changing landscape with new communities emerging daily. Moderately advanced folks would do that by visiting lemmyverse.net which happens to have a filter you can use to filter out Cloudflare instances. I personally use a script instead which queries on lemmyverse’s dataset. If I were to make a post as you did, I would search the terms: infuri shitif shittif asshol dark%pattern (each token is an SQL “like” query surrounded with wildcards). So that gives:

    🏰zerobytes.monster🌩|amitheasshole “Am I the Asshole?”
    🏰zerobytes.monster🌩|assholegonewild “Gone Wild; Asshole Style”
    🏰zerobytes.monster🌩|mildlyinfuriating “jukmifgguggh”
    🏰pawb.social🌩|AITA “Am I The Asshole?”
    🏰lemmynsfw.com🌩|asshole “Asshole”
    🏰lemmynsfw.com🌩|assholebehindthong “Asshole Behind Thong”
    🏰lemmynsfw.com🌩|godasshole “GodAsshole”
    🏰lemmynsfw.com🌩|pulsatingasshole “Pulsating Assholes”
    🏰lemmy.world🌩|actually_infuriating “Actually Infuriating”
    🏰lemmy.world🌩|aitah “AmITheAsshole”
    🏰lemmy.world🌩|amitheasshole “Am I the Asshole”
    🏰lemmy.world🌩|asshole “asshole”
    🏰lemmy.world🌩|assholebehindthong “Asshole Behind Thong”
    🏰lemmy.world🌩|assholedesign “AssholeDesign”
    🏰lemmy.world🌩|assholegonewild “Asshole Gone Wild”
    🏰lemmy.world🌩|assholegw “Asshole Gone Wild”
    🏰lemmy.world🌩|bassholes “bassholes”
    🏰lemmy.world🌩|darkpatterns “darkpatterns”
    🏰lemmy.world🌩|enshittification “Enshittification”
    🏰lemmy.world🌩|enshittify “Enshittification”
    🏰lemmy.world🌩|godasshole “godasshole”
    🏰lemmy.world🌩|mildlyinfuriating “Mildly Infuriating”
    🏰lemmy.world🌩|mildyinfuriating “mildy infuriating”
    🏰lemmy.world🌩|notinfuriating “Not Infuriating”
    🏰lemmy.world🌩|qualia “Qualia: Living Ad-Free and Breaking Away from Dark Patterns, Hidden Fees, and More”
    🏰lemmit.online🌩|AmItheAsshole “Am I the Asshole?”
    🏰lemm.ee🌩|amitheasshole
    🏰sh.itjust.works🌩|amitheasshole
    🏰sh.itjust.works🌩|furiouslyinfuriating
    ↑ Kingdoms under the imperial Cloudflare empire ↑

    ⚠lemmy.ml/c/aita “Am I the Asshole?”
    ⚠lemmy.ml/c/assholedesign “Asshole Design”
    ⚠lemmy.ml/c/mildlyinfuriating “Mildly Infuriating”
    ⚠lemmy.ca/c/amitheasshole “AITAH?”
    🥧 fedinsfw.app/gaping_assholes “Gape”
    🧺 thebrainbin.org/deshittification “Deshittification”
    🗽☯ thelemmy.club/c/Mildlyinfuriating (39/0) “Mildlyinfuriating”
    🗽☯ discuss.tchncs.de/c/amitheasshole (125/1) “Am I the Asshole? ”
    🗽☯ sopuli.xyz/c/enshitification (40/2) “enshitification (not only enshittification)”
    🗽☯ infosec.pub/c/assholedesign_web (92/5) “Asshole Design (web edition)”
    🗽☯ slrpnk.net/c/asshole_crappy_design (49/12) “Asshole Design and Crappy Design”
    🗽☯ slrpnk.net/c/enshitification (942/710) “Enshittification”
    🗽☯ lemmy.cafe/c/disenshittify (147/37) “Disenshittify”

    It lists the shitty Cloudflare places first because those are the least interesting and tend to scroll off the terminal screen. Then it lists non-CF nodes that are still centralised due to their sheer disproportionate size which is indicated with a “⚠”. The “🥧” means piefed and “🧺” means kbin (which the db unfortunately has no Cloudflare flags for, thus ethics is a crapshoot and needs a deeper look). Finally, it lists known open free world places using “🗽☯” to indicate freedom and balance. The paranthesis indicate (subscriber count / active users in a month) to give an idea of activity. Those who realise this decision is inherently political and who want to promote an open free world would choose one of the last 7 in the list. I will sometimes choose the /least/ active among them and then crosspost from there so subscribers in the more active groups can see that another interesting group exists – thus encouraging subscriptions that help improve the balance. Of course in the case at hand, we know infosec.pub is closed as it is under attack, so it would not be a good link to share.

    Also, as an end user that is on Lemmy because I want a non techbro place to read news topics/share crap going on when appropriate

    You can of course choose to be low-tech if you want, but you should know your bubble will be shaped by others on your node. The in-app search on the instance is limited in scope to content and communities based on subscriptions of others on your node.

    If you want to expand your bubble help shape it, it’s useful to grok lemmyverse. I block Cloudflare nodes in my settings and I subscribe only to free world communities (“🗽☯”) to do my part in shaping the bubble for a more balanced decentralised space with minimal boot-licking.

    W.r.t. “non techbro place”, I guess you mean to refer to a place that is not for tech experts. It’s worth noting that many read “techbro” as “tech millionaires”, such as the CEO of Cloudflare, Twitter, etc.

    , like yesterday this type of stuff explains very clearly why Lemmy is and will continue to be a ghost town in comparison.

    Lemmy is not a single town. It’s a vast collection of many towns and a good number of those towns are ghost towns. Network effect is a global problem that Lemmy /tried/ and failed to correct. The devs simply assumed that having a federation of instances would automatically counter network effect. There are several oversights and defects in the software which actually exacerbate network effect.

    Lemmy certainly needs to improve but I doubt it will make much headway. It’s more likely that a different software package will emerge one day that fends off walled gardens and network effect.

    The barrier to entry/understanding is up there which is not welcoming imho.

    The dumb users pile onto the Cloudflare nodes. I doubt the tech is too over their heads to give a bad UX. The refined sophisticated users avoid the centralised instances and their understanding improves. The fact that there is more to learn does not create a “barrier to entry” AFAICT. You can get started and function without understanding the evils of Cloudflare and centralisation. You can make adjustments as your knowledge and wisdom improves.





  • Normally I would say the best link for sharing is that of the host for the community, not the host of your account. But in this case you posted in Lemmy.world, which is jailed in the exclusive walled-garden of Cloudflare™. I highly suggest not posting in Cloudflare. It’s a centralized walled garden by an oppressive US-based tech giant. Might as well use Facebook at that point.

    There is one open free-world “Mildlyinfuriating” community: !Mildlyinfuriating@thelemmy.club. I suggest posting there first, and then share that link. If you cannot stomach the idea of less reach/engagement or cannot resist the urge to use LW, at least make your first post in the free world and crosspost into the walled gardens so the ignorant walled-gardeners at least learn about the existence of free world communities.

    Now to answer your question, the infosec.pub admin is also the fedia.io admin. This post could¹ give some insight:

    https://fedia.io/m/fedia/t/2188602/Fedia-io-performance-issues-and-blocking-anonymous-access

    That is, anonymous access to infosec.pub could have been blocked for the same sort of reason.

    ¹ But you may need to create an account on fedia.io to read that… LOL.

    copy of linked post

    Hi all. Fedia.io has for a long time been subject to ddos attacks, including many that are “accidental”, caused by myriad scrapers constantly hammering the site. I gave up on trying to play whack-a-mole with blocking them based on IP address (they do not honor robots.txt and do not use a conspicuous user agent string) since I was inadvertently blocking some legitimate users. So, I’ve restricted access to the content of fedia.io to only those that are logged in. That will mean we don’t show up in search engines and whatnot, which for some will considered a good thing and will likely cause others to leave.

    There is a remaining problem related to the login form. Calls to the login page are breathtakingly expensive, computationally speaking, and so I also have a script that monitors unusual numbers of calls to that form and blocks at the firewall any offenders. I strongly suspect I’m catching some legitimate users with this too, and so I continue to try to tune it, but it’s maddening, y’all.

    These issues have been causing performance problems for everyone (despite the fedia.io app running on a dedicated 96 core, 256GB server with nvme disks), and became unavailable for certain people that accidentally tripped various thresholds. I’m hoping most of this is resolved now.

    Thanks for the patience.

    update

    Found this: https://infosec.pub/post/45546187

    I erroneously assumed you would have already looked in !infosecpub@infosec.pub so I did not initially look myself.

















  • I mean… Just get it from old storefronts. Its right on the headers in Google results.

    I would certainly be curious what result you got that from specifically.

    I never search Google directly. I use a Google-fed searx instance which came up dry. If I were to use Google directly, it would not be the same results you get as Google is highly personalized. So I just tried the one (and only) Google syndicate: startpage.com, which gives a non-personalized but pure Google result to try to get neutralized rankings (the best approximation to what others would get). And only got two pages of nothing useful.

    It appears to use an A10-5750M CPU and integrated graphics

    HP pavilion 17-f048nb does not show up on that page, so I assume that link is just to show the CPU specs. Richland is indeed what I would be interested in generally.

    The graphics architecture is circa 2010, pre GCN, so not well supported.

    I appreciate the tip. I did not know what GCN was so you’ve got me thinking I should look for a Richland chip that has it. I suppose that should be possible because GCN emerged Jan.2012.

    The CPU is not fast, idles hot, and is notoriously inefficient. And it is an HP Pavilion.

    It’s probably fast enough for me considering I’m currently satisfied with a 2008 thinkpad. Idles hot concerns me for sure since I am not doing much heavy lifting.

    A TDP of 35W seems about average for quad core richland, but I would of course prefer to find one of the TDP 17 or 19W richland quads.


  • This is not generally an option in my case. I go to a street market where stuff is dirt cheap because it’s untested and has risk. Sometimes there is someone at the market who will rent their power generator for a buck to test something, but most laptops do not have their power supply. So I would have to be equipped with the correct PSU (and the universals don’t usually do 19.5v which is what many HP’s are, plus HP has some lock-in tech that forces a PSU to be HP). Some don’t even have the RAM and thus would not boot even if I had a Knoppix drive.

    I’m signing up for some risk. But what I don’t want is the risk that the CPU is not even what I am after. It’s central to my buying decision so I need to know early before wasting time and money.

    Worth noting that we know think/suspect from this page that Elitebooks and Probooks possibly indicate AMD or Intel in the 3rd digit of their model number. And it seems likely because some Lenovos also use a 0 or 5 to make the same designation in their model numbers. But this is apprently useless for HP Pavilions AFAICT.

    It would be nice to force HP to talk. I wonder if a FOIA request could be used somehow, perhaps targetted at the FCC who licenses the radios in a laptop and thus may have some info on the specs.