Remove almost all online garbage using Dnsmasq

Re:Remove almost all online garbage using Dnsmasq by zamadatix on Sunday November 17, 2019 @06:10PM (#21560675)

Please don't get hung up on terminology - for the sake of conversation assume the name for the way the black box app gets information from the outside world is termed a "socket". It's a name, it doesn't really matter. What matters is you are taking information from the outside and giving it to the black box.

So say you give the black box in your sandbox a socket (from the above definition). Say it is a news app. This news app loads headlines and articles. How does your sandbox know if the headline/article text contains some form of encoding? How does it know the timing of requests isn't leaking information out about your viewing patterns?

[ Parent | on HN ]

Re:Remove almost all online garbage using Dnsmasq by jakeogh on Sunday November 17, 2019 @06:54PM (#21560885)

Ah, I misunderstood your mention of black boxes. This is not for black boxes. It only makes sense for open source. I agree it wont work for a black box that you cant audit. If the browser is side-channeling by asking for scheme://some.thing/enc_data_sent_here -> enc_data_recieved when the middleware hands the GET back, then atleast the user can decide if they want to honor that GET request and figure out why the browser made it, and remove that code. The browser should have no crypto code in it. Linking to a SSL/crypto lib would be a bug as I mentioned.

I spend quite a bit of time railing on JS. Executing arb code is fundamentally a bad idea (Halting Problem).

https://hn.algolia.com/?dateRange=all&query=jakeogh%20%22dis...

[ Parent | on HN ]

Re:Remove almost all online garbage using Dnsmasq by a1369209993 on Sunday November 17, 2019 @09:40PM (#21561501)

> https://hn.algolia.com/?dateRange=all&query=jakeogh%20%22dis...

> This page will only work with JavaScript enabled

Really!? Why the hell would you link to that?

[ Parent | on HN ]

Re:Remove almost all online garbage using Dnsmasq by jakeogh on Sunday November 17, 2019 @10:19PM (#21561649)

I know, it's rough! I had to start FF to generate it. For some reason it wont work with webkit(surf ctrl-shift-s to JS).

[ Parent | on HN ]