fraud

Sabotage. Property made unusable. Passengers were literally stranded in the middle of a journey.

It’s worse. They are saying that the EU copyright law, as written, only allows decompiling/reverse engineering to “fix bugs”. A bug fix would involve a software patch of some sorts. But the security researchers did not have time to write a patch yet, what they did is tell the customer “Yep, it’s fucked. Your vendor put in a killswitch to make the trains brick themselves.” So that does tell them where the problem is, but it is not a bona fide bug fix from the Bugfix region of France, and therefore illegal.

Newag [train maker] claims that the Dragon Sector [whitehat hacker] team endangered passengers’ safety by modifying the software without proper experience. But Newag then turns right around and claims that Dragon Sector did not modify the software at all. They point out that EU law only allows reverse engineering of software in order to fix bugs. And if Dragon Sector did not actually modify the software, it cannot have fixed any bugs, in which case their reverse-engineering must be illegal.

I ended up doing a recheck. On the plus side, the verification found several instances of bitrot from the old failing SSD. Fortunately, all the 99%-complete torrents quickly re-downloaded themselves. The whole internet is my backup!

Yep! The “save response as” works in more cases because it already includes all the correct cookies/referrers that sites use to protect against hotlinking.

As the other comment said, if you inspect page html source (ctrl-U) and ctrl-F search for “mp3”, the URL of the embedded audio file is also right there in plaintext in the middle of javascript code, but it’s merely good fortune that the developer left it easily visible and not renamed or obfuscated in some way. Saving from the network tab works in more cases in general.

You don’t need to use yt-dlp to fetch files :D. It will let itself be used as wget, sure, but the browser is already capable of saving files - that’s it’s job! Paste the link into the address bar.

Open up developer console (F12) network tab and reload page/play audio. In the list of network requests, look for something that looks like the resource you want (e.g. in this case, filename: “mp3”, initiator: “media”, type: “mpeg”), right-click and “save response as”. This doesn’t work on every site, but works on yours!

Fancier sites do not serve media files directly but fetch encoded chunks of data and recombine them using javascript. To get the whole file back you need to re-implement the javascript, which is what yt-dlp does, but only works for sites it knows how to handle.

There has never been a law that someone selling something must offer the same price to everyone. Outside of some government regulation, like banning discrimination based on a few specific protected groups under the 1964 Civil Rights Act, government-set energy prices on state-granted monopoly electrical grids, annual rent increase percentage caps, etc. merchants have always been free to set any price on any product or to any customer.

can be configured per application

wireguard can too using network namespaces

not exclusively as an interface in kernel mode

Which devices are you people running where you want VPN/proxy but don’t have kernel permissions to run wireguard? Firefox on iPhone? Porn on wifi washing machine?

Curious, what is SOCKS5 used for that regular wireguard cannot do? I’m only familiar with the use case of telling Firefox to connect through a SOCKS5 proxy, which may be convenient as a form of split tunneling - only firefox traffic goes through the VPN and everything else through clearnet - but wireguard can be configured into a split tunnel form as well with a bit more work, and works for all software not just the ones aware of SOCKS proxies. Is it for use on a system where your permissions are too limited to turn on wireguard but not so limited that you cannot change Firefox proxy settings?

Talescale is a VPN, “private network” is what P and N stand for. It’s just one with only forwarded ports and no outbound traffic. The question was are forwarded ports important, and yes they are. So important that some users pay for a VPN twice! Once for something like Mullvad with no port forwarding, and once for Talescale for port forwarding. It’s true it has benefits like static IP, but even on my commercial VPN I get the same forwarded IP and port when connecting to the same server, so I don’t want to pay twice.

I run a Minecraft server. Couldn’t have done it without port forwarding.

New York City reporting in, can confirm the subways have been plastered in Mullvad ads for months. I’m so glad I switched away last year, so that at least I know none of my money is used to spam my own eyeballs. Though in some sense it is nice that VPNs are common in public discourse now.

Didn’t even need to translate to foot-pounds-force, since .50 BMG was already in freedom-loving units.

Use wireshark and listen on your ethernet interface. When you use tailscale, are the packets coming in/out from the tailscale server IP or the VPN ip? Check through the ip route routing table and figure out which pathway a packet will take in each use case. Might need to add a route exception specifically for the tailscale server IP to go out on the ethernet device.

PostUp = ip route add 100.64.0.0/10 dev tailscale0

Looks like you need to stick this line in the tailscale service file, since it’s the only time that the existence of the tailscale0 device is guaranteed. If you don’t want to modify the service file inside the package, could you write your own systemd service file and include the tailscale service as a prerequisite?

Also make sure that when you start the VPN first and then tailscale, you don’t get a double tunnel situation where tailscale goes out through the VPN (unless that’s what you wanted).

That allows sending packets inside the VPN tunnel, but the outer envelope packets still need to be able to reach the VPN server.

sudo ufw default deny outgoing

I’m guessing this would block the VPN packets themselves as well.

IMHO if you don’t have a globally-reachable address or forwarded port, you are not really a participant of the internet, you are just a receptacle xD

One service I never see mentioned is OVPN. They have a 1-to-1 feature parity with mullvad and were an easy drop-in replacement when mullvad closed their ports:

• wireguard
• port forwarding
• no usernames/emails/registration, only account numbers
• crypto payments/cash in the mail
• same price as mullvad
• multiple device keys
• multihop
• no bandwidth limits
• setup guides
• status dashboard

I used mullvad for years, sad to see them go, and all my scripts basically worked without any change other than the server addresses/public keys. Only downside is they don’t have as many users so not as many servers. I wish more people would join up so I get more IPs to choose from :D

I knew that motion sickness is triggered by frequent starts and stops and frequent turns, but even I was not aware of how big a contribution the engine vibration makes until I got to experience a ride without it.