HackerTrans
TopNewTrendsCommentsPastAskShowJobs

dhaavi

no profile record

Submissions

Things I Do to Improve My Linux Computer's Security

itsfoss.com
1 points·by dhaavi·2 years ago·0 comments

Australia Threatens to Force Companies to Break Encryption

schneier.com
6 points·by dhaavi·2 years ago·1 comments

Mycoria: Secure-by-Default Overlay Network

mycoria.org
1 points·by dhaavi·2 years ago·0 comments

What's Going on with the National Vulnerability Database?

cybersecuritydive.com
2 points·by dhaavi·2 years ago·0 comments

Show HN: Build your own MMDB geoip database

github.com
2 points·by dhaavi·3 years ago·0 comments

Fastly to block domain fronting in February 2024

lists.torproject.org
4 points·by dhaavi·3 years ago·0 comments

Portmaster Application Firewall v1.4

safing.io
3 points·by dhaavi·3 years ago·1 comments

comments

dhaavi
·10 months ago·discuss
Can you communicate the value of Octelium in 25 words or less?
dhaavi
·11 months ago·discuss
This is the correct capitalisation.

Thanks. Made my day.
dhaavi
·last year·discuss
Mycoria is built for resilience - so not relying on the current Internet backbone working flawlessly.

Even if the current Internet works "normally", many users of similar network have reported better connectivity with the overlay network routing. Eg. routing on the IANA Internet is highly influenced.

If you let Mycoria generate a config for you, it will include your current public Interfaces on the device, so this will only be true for servers. Mycoria does not rely on IANA addresses, but uses them to improve the network structure automatically: Finding better routes between routers over the IANA Internet.
dhaavi
·last year·discuss
For the use case given by Zrok, Mycoria is very similar.

Nothing can access your device by default. You will have to define services and add "friends" (your other devices) to allow them to access.
dhaavi
·last year·discuss
Latency is considered in routing.

Every router announces itself on the network. Routers can optionally publish their IANA IP addresses.

Buckets live on the routers themselves.
dhaavi
·last year·discuss
Interesting idea - thanks! Will think about this more.
dhaavi
·last year·discuss
Thanks for the feedback. I will re-evaluate.
dhaavi
·last year·discuss
It's quite fast. Especially if you host a server near you and connect to it.
dhaavi
·last year·discuss
If nobody knows who you are, you are still anonymous, even if there is an ID.

With private addresses (in the future) this will also be solved, as Mycoria will be able to temporary addresses / IDs.
dhaavi
·last year·discuss
I understand what you mean. Yes, the technology can do that. I was thinking about the WireGuard as a software in itself.
dhaavi
·last year·discuss
Thanks for taking the time for this feedback.

This is what I hope to solve with the private addresses: These are not geo-marked and not routable. Eg. they are randomly generated and cannot be attributed to a geographic location (easily).
dhaavi
·last year·discuss
Probably - depending on your use case. Mycoria is still more or less MVP though.
dhaavi
·last year·discuss
Veilid is new to me, will have to read about it first. Thanks the pointer!
dhaavi
·last year·discuss
Switch labels are effectively interface IDs on the servers, there is no data to be stored.

Geo encoding simply improves routing to unknown routers, kind of as a baseline structure to the whole network.
dhaavi
·last year·discuss
Yes, this is correct.

Mycoria has in integrated firewall for this, just in case that information got lost somewhere.

This also means that devices of the company will help other devices of the company to reach their destination, adding to resilience in outages and emergencies.

You can of course build bridges between these networks. This definitely something that is planned.
dhaavi
·last year·discuss
Mycoria is secure by default: It has an integrated firewall that only allows access from explicitly defined addresses, or, optionally from anyone in the network.

Also, multicast is completely disabled on Mycoria.
dhaavi
·last year·discuss
Nope. I did that with the last network I built: https://safing.io/spn/

Mycoria focuses a more on scalability, but still has some privacy focus.
dhaavi
·last year·discuss
Currently, this is just a fun project for me. I have technical ideas, but I don't have growths plans or the like - and it is nice that it does not have to.

Yes, I would expect the privacy would increase by some degree with more users, but I don't know by how much.

Although I will be using the technology in future projects, so Mycoria will benefit from that.
dhaavi
·last year·discuss
Thanks!

I wasn't really aware segment routing, tbh. However, I do think with where Mycoria is going, the additional control to change things as needed will be required.

I have used VerifPal https://verifpal.com/ for security analysis before, but not yet with Mycoria.
dhaavi
·last year·discuss
I think I have seen it, but that was a while ago.

Will read through it later! Thanks!