News for hackers. Stuff that matters.
Re:Help seed Z-Library on IPFS by hellfish on Wednesday November 23, 2022 @09:38AM (#33719625)
We're talking about seeding a library full of copyrighted content. The person who made this site couldn't take 2 seconds to set up HTTPS? They're either incompetent or part of a honeypot. In either case, it's best to steer clear

Keep in mind, the first post on this site was in 2022. 2022, and no https... is this some kind of joke?

And in this case the adversary isn't necessarily the three letters, it's the copyright holders and legal system. No https makes ISP logs even more useful

Re:Help seed Z-Library on IPFS by capableweb on Wednesday November 23, 2022 @09:46AM (#33719731)
Again, how does no HTTPS makes it more likely to be a honeypot than not? Everything on that website is about being a "pirate archivist", they don't even need to know what page you visited, just that you visited the domain, so the SNI and Host header already gives it away, TLS or not.
Re:Help seed Z-Library on IPFS by hellfish on Wednesday November 23, 2022 @10:11AM (#33720094)
> so the SNI and Host header already gives it away, TLS or not

Couldn't you just use ech/esni, ISP wouldn't see the domain only IP (and dns provider)?

Re:Help seed Z-Library on IPFS by NotEvil on Wednesday November 23, 2022 @10:34AM (#33720452)
We can't because nobody supports it. Only firefox has support for esni and it's behind an about:config