#Americans always claims that they're angry & oppose about the #Genocide happening, yet their state is assisting It's regional #proxy in carrying out the worse crimes of humanity: The complete Erasure of an entire #culture & people like the #Palestinians.
VLESS+Reality и Multi-hop: Архитектура VPN-цепочки для нового поколения блокировок / Хабр
https://habr.com/ru/articles/926786/
> Системы глубокого анализа трафика (DPI) стали умнее.
Но на хитрый болт с резьбой всегда найдется жопа с лабиринтом.
Разбирается рабочая и относительно устойчивая схема proxy на базе VLESS+Reality и Multi‑hop.
Разве РКН научился детектить VLESS?
Частично - да, с эвристикой на длину пакетов при XTLS-Reality с SNI другого сайта и, соответственно, TLS 1.3. Пакеты больше 16-20 байт отбрасываются после 5 сек.
Решение: перейти на XTLS-Reality с самоворовством (self-steal/steal oneself), то есть со своим доменом, что вроде бы либо понижает TLS до 1.2, либо уменьшает длину пакета. Не знаю, но фиксится именно переходом на SNI своего домена.
Делайте хорошо. Плохо не делайте.
Easy setup of VLESS-REALITY VPN within Docker on 3X-UI panel
**VLESS-REALITY VPN**
Currently VLESS-REALITY looks to be a future-proof solution for VPN which is hard to detect at least at the moment.
**VLESS**
According to Project X website VLESS is a stateless lightweight transport protocol, which is divided into inbound and outbound parts, and can be used as a bridge between Xray clients and servers.
It is important to note that VLESS itself does not have built-in encryption, so you need to use a reliable layer of encryption, such as TLS or REALITY.
**REALITY**
REALITY implements full TLS using the SNI of a camouflage website. This eliminates the TLS fingerprint of the server, while preserving perfect forward secrecy and preventing certificate chain attacks. It is not only more convenient, it also provides greater security than conventional TLS.
#proxy #VPN #vless #xtls #cloudflare #этаСтрана #РосКомПозор
Туннели CloudFlare.com: делаем вебсервер дома без публичного IP
#proxy #VPN #vless #xtls #cloudflare #этаСтрана #РосКомПозор
Леонид Каганов 2025_07_04
Ллео разродился запоздавшей инструкцией как сделать веб-сервер без публичного IP-адреса.
Вкратце: предлагается использовать туннель от Cloudflare. Который успешно банится ТСПУ от РосКомПозора в сетях мобильных операторов.
#infosecurity #proxy #youtube #nodpi #android
Для тех, кто не успел решить проблему доступа к Youtube.
Доступ к статьям заблокирован на территории РФ. Поэтому дампы не помешают.
Смотрите и не говорите что не видели.
NoDPI4Android_YouTube_Android.7z (5.93 MB)
Истекает: воскресенье, 3 августа 2025 г., 13:26
Ссылка на скачивание:
https://upload.disroot.org/r/Bpaeujhq#iNaWZIj/AKZo/vhWBqCQkZYE8fqQ5Y5JAD2sQFfG2MM=
---
YouTube_NoDPI.7z (6.08 MB)
Истекает: воскресенье, 3 августа 2025 г., 13:26
Ссылка на скачивание:
https://upload.disroot.org/r/jxBVjtCj#TsZFEqw6bSx7MUyvBWXMQgPCuSrZ3x3dXWoTHLscBpw=
'Sudan has been wracked by a civil war since fighting broke out between the army and the Rapid Support Forces (RSF) in April 2023, causing one of the world's worst humanitarian crises with more than 12 million people forced to flee their homes. '
Nginx Proxy Manager 2.12.4 lands with API schema fixes, performance improvements, and a batch of new DNS providers for Certbot plugin support.
https://linuxiac.com/nginx-proxy-manager-2-12-4-released-with-certbot-enhancements/
#mastoaiuto conoscete una lista #proxy free funzionate?
@BrodieOnLinux I am pretty shure @torproject / #TorBrowser and any #App that does #Proxy through @guardianproject / #Orbot for #Tor access is not affected but I do encourage both #Tor and Orbot devs to test against #LocalhostTracking!
Oh snap! `YARR - Yet Another RSS Reader` has a new version and I missed it in March!
https://github.com/nkanaev/yarr/releases/tag/v2.5
YARR is like Feedly or NewsBlur, except more like TinyRSS or FreshRSS - you can self-host.
UNLIKE those, you can tell yarr to run at `<ip:port>`, so you can stick it at port 7666 for your reverse #proxy. And its lightweight, I run my own AND 3 other instances for fam. members on the same host accessed via different subdomains re-proxied by #nginx.
#Cybercriminals Are Hiding #Malicious Web Traffic in Plain Sight
In an effort to evade detection, cybercriminals are increasingly turning to “residential proxy” services that cover their tracks by making it look like everyday online activity.
#security #privacy #malware #proxy
https://www.wired.com/story/cybercriminals-are-hiding-malicious-web-traffic-in-plain-sight/
My homelab got it's final touches. I finally removed #Nextcloud and switched completely to #Stalwart, i added automatic #database backups using #cronjobs for all my #databases, i've set up most of my publicly exposed services to run behind the #cloudflare #proxy, improved the directory structure for my #docker #containers, and finally set up pihole as the #dns server on my router. This feels so good.
Cloudflare or not Cloudflare? I have to confess I've been using it for a while, and while I do enjoy its multiple benefits (proxy, WAF, DNS management, security rules, automatic email obfuscation...), I dont like the idea of transmitting all the data through a 3rd party, especially based in the USA.
Mastodon tech people, I summon you!
What are your thoughts?
Do you use Cloudflare?
Or is it a non negociable no to you?
Have you tried European based solutions like Bunny.net?
Do you just live without such tools?
I'm interested in hearing your thoughts!
Boosts appreciated 
Just released: #swad 0.11 -- the session-less swad is done!
Swad is the "Simple Web Authentication Daemon", it adds cookie/form #authentication to your reverse #proxy, designed to work with #nginx' "auth_request". Several modules for checking credentials are included, one of which requires solving a crypto challenge like #Anubis does, to allow "bot-safe" guest logins. Swad is written in pure #C, compiles to a small (200-300kiB) binary, has minimal dependencies (zlib, OpenSSL/LibreSSL and optionally libpam) and *should* work on many #POSIX-alike systems (#FreeBSD tested a lot, #Linux and #illumos also tested)
This release is the first one not to require a server-side session (which consumes a significant amount of RAM on really busy sites), instead signed Json Web Tokens are now implemented. For now, they are signed using HMAC-SHA256 with a random key generated at startup. A future direction could be support for asymmetric keys (RSA, ED25519), which could open up new possibilities like having your reverse proxy pass the signed token to a backend application, which could then verify it, but still not forge it.
Read more, grab the latest .tar.xz, build and install it ... here: 
https://theintercept.com/2025/05/22/intel-agencies-buying-data-portal-privacy/ This is a #privacy nightmare that's turned into a total disaster. If this were my #government doing this I'd seek to give as little information to all companies as possible Avoid all social media, and if you don't use only #anonymous accounts with a #proxy. Use #adblockers on every device. Network wide ad blocking would be ideal. Ditch #Apple and #Google products and install #Grapheneos and avoid connecting to cell towers and use only wifi. Proxy all data connections. 1/2
China-Nexus Threat Actor Actively Exploiting Ivanti Endpoint Manager Mobile (CVE-2025-4428) Vulnerability
A critical vulnerability in Ivanti Endpoint Manager Mobile (EPMM) is being actively exploited by a China-nexus threat actor, UNC5221. The exploitation targets internet-facing EPMM deployments across various sectors including healthcare, telecommunications, and government. The attackers utilize unauthenticated remote code execution to gain initial access, followed by the deployment of KrustyLoader malware for persistence. They leverage hardcoded MySQL credentials to exfiltrate sensitive data from the EPMM database. The threat actor also uses the Fast Reverse Proxy (FRP) tool for network reconnaissance and lateral movement. The compromised systems span multiple countries in Europe, North America, and Asia-Pacific, indicating a global espionage campaign likely aligned with Chinese state interests.
Pulse ID: 682e5bbc1075b03f94642762
Pulse Link: https://otx.alienvault.com/pulse/682e5bbc1075b03f94642762
Pulse Author: AlienVault
Created: 2025-05-21 23:03:24
Be advised, this data is unverified and should be considered preliminary. Always do further verification.
