[Noisebridge-discuss] Anti-piracy / anti-Pirate Bay law currently in Congress

Matt Joyce matt at nycresistor.com
Wed Sep 29 17:24:15 UTC 2010


What is baha?  Got link?  So Sunday after this coming one?
On Sep 28, 2010 7:48 AM, <travis at subspacefield.org> wrote:
> On Mon, Sep 27, 2010 at 09:07:04PM -0700, Matt Joyce wrote:
>> I'd be willing to come up and talk about chaosvpn
>
> Well if you could come to NB 2nd Sunday, we could do a joint talk at
> BAHA:
>
> http://baha.bitrot.info/
>
> That would be cool.
>
> Here's my VPN talk for Erik, who is not local:
> http://www.subspacefield.org/security/vpn/vpn.pdf
>
> Target audience is those wanting to connect their home, servers,
> laptops, work.
>
> I've got a few other points which aren't in the slides yet:
>
> Do you trust DNS for VPN endpoints?
> Why you want to run own DNS
> OpenVPN - simple, xplatform
> tunnel all traffic with redirect-gateway
> bad when you want to hit intranet sites
> you may not even be able to resolve internal DNS
> IPSec - interop is problem, very complex
> Isakmpd - OpenBSD hotness, does it work on Linux? Not well, last time I
checked
> bypass egress filters
> RDR/DNAT trick for mapping them*
> port TCP 80/UDP 53 for bypass
> make your homepage in browser about:blank or localhost; after it loads is
too late
> note about WIFI IPs - can attack them directly, then get onto VPN
>
> [*] That's a simple way to determine what the egress filter set is,
> and tunnel your VPN out. Works nearly 100% of the time.
>
> For further discussion, consider joining the BAHA list.
> --
> I find your ideas intriguing and would like to subscribe to your
newsletter.
> My emails do not have attachments; it's a digital signature that your mail
> program doesn't understand. | http://www.subspacefield.org/~travis/
> If you are a spammer, please email john at subspacefield.org to get
blacklisted.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.noisebridge.net/pipermail/noisebridge-discuss/attachments/20100929/bf4f7916/attachment-0003.html>


More information about the Noisebridge-discuss mailing list