Skip Navigation

Posts
5
Comments
306
Joined
3 yr. ago

  • From how I understand it, in Veilid everyone is both and entry, relay and an exit node - there's no distinction. Because you have to have exit nodes - the communication has to go though somewhere, so the receiving server will always know the IP of the last node (the exit one). It just has to go through somewhere. The whole main point of TOR (and Veiled, which seems based on the same thing) is that since you go through three nodes, each node can tell where is the request coming from, and where to send it. So the server doesn't know where did the request came from, but knows the IP of the exit node.

    The issue is that if they bust someone for doing illegal shit, your IP may be investigated. They don't know what communication came from you, but something may have, since just by using veiled, you become an exit node. Or I'm misunderstanding it, but that's what I understood from the description.

  • So, if I get it right, it's basically a TOR network where every user is both an entry node, exit node and middle nodes, so the more users you get, the more private it is.

    However, wouldn't this also mean that just by using any of the apps, you are basically running an exit node - and now have to deal with everything that makes running a TOR exit node really dangerous and can get you into serious trouble, swatted or even ending up in jail?

    From a quick google search, jail sentences for people operating TOR exit nodes are not as common as I though, but it still can mean that you will have to explain at a court why was your computer trasmitting highly illegal data to someone they caught. And courts are expensive, they will take all of your electronics and it's generally a really risky endeavor.

  • Now that I read this, I'm kinda glad that our company doesn't do anything like that. But it's just a small indie team porting games to consoles, so I guess what you're mentioning is the bigger corp problem.

  • I work as a pentester and Red Teamer, I can attest that even for some large companies, you always stumble upon something that's just dumb, and completely renders their multi-million investment they are probably making into security tools and solutions worthless.

  • Now I want a Pepper Cannon. Would you recommend getting it, before I ruin my hype by looking up the price or what is actually is? :D

  • What does git pull rebase do? If I understand it correctly, it pulls in the remote changes but rebases your changes to be on top of them, instead of merging the remote and local branch? What is the intended usage of it, it sounds like a lot better way how to pull, why not to use it as default pull?