So recently a zero day vulnerability has been found in the dropbox app, though I know this sub is for VPS protection but I figured there might be people who are using their VPS with windows installed as a data uploader, and might have the app installed, this is a fair warning to you guys.

Here's an excerpt from Forbes article,



For further details, please visit here

https://www.forbes.com/sites/daveywinder...6364462089

The security researcher Johannes B. Ullrich has researched if and how DNS-over-HTTPS can be detected and broken or prevented from working WITHOUT the attempt to break the actual TLS connection.

He has managed to do so by analyzing the DoH packets. His research shows that it is possible to detect DoH by size of the payload inside the packets. He has created two forum posts #1 and #2 at the ISC SANS forums where he is sharing and discussing his findings.

In order to make it harder to detect DoH and solve this issue he suggests the use of EDNS padding. For this to work however all DoH servers have to be reconfigured to enable and support EDNS padding. In addition all clients need EDNS padding support, too. Mozilla has a discussion regarding this subject here already.

Another blow to the rollout of DoH. Hopefully a fix will be found and applied soon if all the pro DoH candidates really care about DoH as much as they say. Surely someone will be unhappy while another party will be very happy.

Hi,

A friendly reminder to those who actively read the gaming section, Steam has an ongoing winter sale and most of the games have good discounts on them, make sure you take a look!

My personal favorite is PUBG which is down to 50% of its MSRP, If you're into RPG games, Kingdom come deliverance is also 50% off

Enjoy! Let me know if you find any good game discounts

Here we go again, this time I am going to review my experience with the new KVM-based VPS 9 from Buffalo by VirMach. If you have missed my review of the OpenVZ-based, you can read it here.

Well, I think that VPS 9 don't need any big/verbose introduction: it has nice SSD capacity, it has nice RAM amount and now it is based on KVM... there isn't anything missing that you could ask for.
Like always, let's recall the amazing specs of this VPS:
** By the second migration wave, VirMach introduced a new "variable disk capacity" feature: the VPS has 100GB guaranteed but without any action it will have just the right amount you use. For example right now I am using VPS 9 with 57GB of storage. I could ask to max-out the disk again but right now there isn't any need.

Unfortunately it seems that Post4VPS's benchmark script by @sohamb03 is now unable to finish the Ipv4 test, so I can only show you a old benchmark that I did as soon as I got KVM.


After the migration to KVM, some problem occurred due to VirMach "migration method" but everything has been solved refreshing the OS. I know that some other VPS 9 got sick after the migrations, VPS 9 Phoenix holded by @deanhills at the moment. My VPS has been great and functional since the refresh, no issue with SSH.
I am now running Debian 10 with my full LNMP stack (Linux-nginx-MySQL-PHP) and docker, I am trying out a Minecraft Server dockerized .
I am running my services as always without any issue, almost every configuration I had on OpenVZ has been easily set-up.
The user-experience is still the same as before, almost nothing changed except for the updated kernel, so I don't have much to talk about. Well, comparing to the old benchmark you can see a lower Disk Speed but also a GREATER network speed, so I can't complain at all.
The only thing that I didn't understand was the "lacking" of newer KVM images, the available OSes are likely the same as OpenVZ, new OSes as Ubuntu 19.XX, CentOS 8, Fedore 31 are still unavailable.
You can refer to my old review for more information.

You can still see the on-going on the VPS following my domain: lightdestory's site

VPS 9 is a very powerful and valuable VPS, but you need to know how to use Unix-systems due to the lack of a Control Panel. VPS 9 is still a unmanaged VPS but... I can guarantee that no special action are needed to work with it. If you are brave enough you can also beat my record of "unopened support ticket".
You can run almost everything on this VPS, without worry much about vecause VirMach'TOS isn't strict!

I want to end this review thanking:

• @Dynamo for creating Post4VPS community that allowed me to use this VPS;
  
• @deanhills for supporting me when I did crazy things and I had to ask for his support to restart from scratch;
  
• @"Hidden Refuge" for his tutorials, I used some of them to set-up my environment;
  
• @sohamb03 (and again @"Hidden Refuge")for creating Post4VPS' benchmark script;
  
• Virmach for sponsoring these amazing VPSes;
  

Hi!

So recently Netflix released its new season called "The Witcher", based on the polish book series of the witcher(which is also what the famous Witcher games are based on), If you're a Witcher fan or read the books, I personally think you'd totally love the season, I still haven't completed it but just the first episode was enough to buy me, the fight scenes, storytelling, characters are all done perfectly, and though there's still room for improvement, It still turned out much better than what people anticipated.

Imo, Henry Cavill who played as Geralt, totally nailed his personality, voice acting, and will only improve in the later seasons.

Due to this season, The Witcher has also seen a sudden rise in player count, recently having as many as RDR's in the steam charts, which is highly impressive for a game that was released in 2015(yes, Its that old!)

Let me know your reactions to the show if you've watched it, or plan to watch it!

I had something of hmm today, which is a nice topic to talk about. I came up with the idea to find out how high your fastest 3G, 4G, 4G + or (where possible) 5G connection to share. Below I show you a small option how you do it.

How do I share it ?:
1.) Go to your speed test app or on a website.
2.) Run a speed test of your 3, 4 or 5G (Check if you are on your mobile network, so NO WIFI.
3.) After you have done the test, copy the link with your test and paste it as an image in your thread with the rule and let me know if you are also satisfied and if you live in a city or town.
4.) What do you think should be an improvement on your results?

My best test was at Monday 25 Feb. I'd like to see yours too. (I have a unlimited subscription at T-Mobile so I can do unlimited tests, if you have a data limit on it, do it at your own risk. A speedtest can take around 100 till 250MB taken.)

My test was made in Heerde.

I'm not sure for the rest of you but I feel like this board is in dire need for an Internet Section and a Web development section. Be it forums or subforums doesn't matter, at least section where all the threads relating to Internet technologies (network and protocol issues) are lumped together. The same for the Web development topic, where the front-end and the back-end issues, be it scripting or management/admin aspects coexist in a coherent way.

The 'Web design' exists but for me that's too narrow of a topic, while 'Scripting & Programming' is too broad, IMHO :-)

This topic stems from the 'Heads-Up: Firefox rolling DNS-over-HTTPS (DoH)' thread and will try to present in a non-technical overview, the big picture of the current state of our privacy on the Web and the emerging technologies that promise, when adopted, a new wave of the famous 'Going Dark' meme.

Till fairly recently (june 2013 -the Snowden revelation moment) the Web was still largely transmitted in plain text. You would connect to a forum like this one and login without any encryption at all, not even for the login forum to secure your password!... But that was then. By 2015, the Web (or a large section of it) adopted the HTTPS as its new medium of transmission in a move to reassure its users that its actors are doing something against the industrial scale of spying that Snowden revealed... That was the first 'Going Dark' moment.

Thus, the push towards TLS (and the fact that Windows XP was becoming EOL by 2014) made even the ubiquitous shared hosting services to start offering it to their users by making use of the TLS SNI extension (Windows XP didn't support SNI.) At first people were starting to use self-signed keys for their personal websites, but by December 2015, Let's Encrypt, the non-profit certificate authority, entered the Web scene and made TLS certificate affordable for everyone... No more excuses!..

With an HTTPS-powered Web, a bit of intimacy and privacy started to exist on the Web, especially when TLS v1.2 was adopted; this version was the first to support Perfect Forward Secrecy (PFS), which is a TLS feature that make use of 'volatile' session keys assuring the safety of the encryption even if the private key of the server is compromised somehow. [As an aside -and will probably comeback later on this in another post -PFS is now mandatory in TLS v1.3.]

Alas, with all the progress outlined above, we're still too short to claim any privacy on the Web, and here is why: we are leaking the site's own identity even if that communication is done via HTTPS (be it TLS v1.2 or even v1.3.) On that simple information, anyone sitting between you and that server will be able to get a pretty good idea about YOU!.. and that's a gold mine for a lot of reasons, starting from the trivial (business related stuff-i.e. selling that info to the highest bider) to the sensitive (legal related matters.)

So, to protect the identity of the sites we visit we have to deal with 4 different leaks:

• DNS name resolution: this leak is dealt with when using DoH (DNS over HTTPS on port 443) or DoT (DNS over TLS on port 853.)
  
• the TLS certificate message: this leak is suppressed when we use TLS v1.3, which encrypts the server certificate by default.
  
• the TLS Server Name Indication extension (SNI): the fix for this leak (i.e. the encryption of the the SNI field, hence “encrypted SNI” or ESNI) was dropped from the TLS v1.3 standard but still Mozilla & Cloudflare engineers are currently testing a use-case for it.
  
• the IP address of the server: this is a hard one to crack; no wonder, it's at the heart of the Internet mechanics. But on shared hosting and/or behind a CDN (like Cloudflare) and/or behind a VPN ..etc.. things get indeed a lot fuzzier.
  

Those are the trends that , as of this end of 2019, are presented to us to shore up our privacy defences for whom is still willing to fight back against this ongoing online striptease... To test your 'leakage level', Cloudflare has setup a page that tests out all the 4 above mentioned 'fixes' for you (ie: Secure DNS -for DNS privacy-, DNSSEC -for DNS integrity, TLS 1.3, and Encrypted SNI.)

Now, I'll be posting about the specifics of all the 4 technologies in a bit more details later on.

Stay tuned.

VPS Holders who completed their number of posts for December:

@deanhills
@GodLikeGill
@"Hidden Refuge"
@Honey
@humanpuff69
@ikk157
@LightDestory
@Rehan
@rudra
@sagher
@sohamb03
@tryp4vps
@youssefbasha
@xdude

VPS Holders with missing posts:

None