News for hackers. Stuff that matters.
Re:Show HN: vpnns – Per-app VPN using Linux namespaces by captainmuon on Tuesday November 01, 2016 @06:14PM (#12850576)
This is something which I can't belive wasn't already supported. It seems so obvious. Most of the time, when I use a VPN, I only want certain applications to use it, and others not.

Or, the same for Tor. I ended up using Transparent Proxy and creating a separate linux user for Tor browsing, mostly because iptables stopped being able to filter by PID. Also, it provides a bit more encapsulation. (Note, in my use case I was not too much concerned about being RE-identifyable, rather that my "ISP" and anyone nefarious on my WiFi should not see my traffic, and that I appear anonymous to websites. Most users should use something like TorBrowser to minimize their uniqueness!)

Long disgression, but I really wish you could right click on the title bar of any app, and say "route this through VPN / TOR / over cable". I never got around to implement a prototype unfortunately.

Re:Show HN: vpnns – Per-app VPN using Linux namespaces by drdaeman on Tuesday November 01, 2016 @10:27PM (#12851845)
Yes, but the implementations I saw either used LD_PRELOAD of iptables -m owner. Using cgroups looks like a much nicer way.