Kajo 📷 May 29, 2025

Nochmal: #FediHelp

Nachdem der #SquidProxy (https://www.kuketz-forum.de/t/maximaler-datenschutz-windows-hinter-einem-proxy-betreiben/8428/1) nun funktioniert, hätte ich da eine Frage, die mir kein Suchlauf bisher beantworten konnte:

Kann ich mit der internen Windows-VM über den Proxy auch ne Verbindung zu meinem WLAN-Drucker (192.168.178.38) herstellen? Damit ich über ihn in die interne VM scannen kann?

Wenn ja, wie? 🤔
(Kann mir kaum vorstellen, dass es über sowas wie z.B. "acl localnet src 192.168.178.38" funktioniert.
Vielleicht eher so? acl aclname src ip-address/mask)

Maximaler Datenschutz: Windows hinter einem Proxy betreiben

Häufig trifft man auf Fragen wie „Wie bekommt man Windows-Systeme datenschutzfreundlich?“. Empfohlen werden dann meistens diverse Software-„Lösungen“ eines Drittanbieters, Blocklisten für Pi-hole o.ä. oder irgendwelche Konfigurationen, die man wie eine Art Checkliste abarbeiten soll, empfohlen. Dabei hängen all diese „Lösungen“ aus Prinzip der Realität immer etwas hinterher und mit Bordmitteln lässt sich das sowieso nicht vollständig, zuverlässig und dauerhaft abstellen. Problematisch ist dabei...

Kuketz IT-Security Forum • IT-Sicherheit | Datenschutz
BrantskyNov 23, 2024

A revised tutorial on how to install Squid caching proxy on Fedora Server:

1. dnf install squid -y
2. systemctl start squid
3. Job for squid.service failed because the control process exited with error code.
See "systemctl status squid.service" and "journalctl -xeu squid.service" for details.
4. Do that, get the details, search the Internet, find no help whatsoever.
5. Give up 🤷‍♀️

#squidproxy #linux #shit

sekurak NewsOct 31, 2024

Nierozwiązana podatność w proxy squid dotycząca przetwarzania języka ESI

ESI (Edge Side Includes) to prosty język pomocny przy dynamicznym składaniu treści strony internetowej, który został stworzony, aby rozwiązywać na urządzeniach brzegowych problemy związane ze skalowaniem infrastruktury. Tagi ESI są umieszczone w kodzie HTML i instruują procesor ESI, co powinien umieścić w finalnym kodzie strony. Przykładowo:<esi:include src="http://example.com/1.html" alt="http://bak.example.com/2.html" onerror="continue"/> spowoduje pobranie pierwszego URLa, a...

#WBiegu #Cve #Denialofservice #Esi #Squidproxy

https://sekurak.pl/nierozwiazana-podatnosc-w-proxy-squid-dotyczaca-przetwarzania-jezyka-esi/

Job BautistaSep 26, 2024
Fuck it, if we're going to break #HTTPS this much already by using MitMs like #Cloudflare then let power users like us choose how to break it! 

https://forum.palemoon.org/viewtopic.php?f=5&t=31631

#proxy #Squid #SquidProxy #Polipo #TLS #web #webdev #openweb #browser #browsers #HTTP #HTTPSEverywhere #PaleMoon
Feature request: Allow disabling certificate validation on the sites you visit when an HTTP(S) proxy is set - Pale Moon forum

Show threadPaul RichardsApr 25, 2024
@lx I think you can just use a Squid cache. So long as you’re using http in your sources list (not https) - it ought to cache packages just fine.. https://www.squid-cache.org/ #squidproxy
squid : Optimising Web Delivery

FreemindOct 15, 2023

It’s important to note that more than 2.5 million Squid instances are currently exposed on the internet.

#Cybersecurity #OpenSource #Vulnerabilities #SquidProxy

https://cybersec84.wordpress.com/2023/10/15/critical-squid-proxy-vulnerabilities-remain-unpatched-after-2-years/

Critical Squid Proxy Vulnerabilities Remain Unpatched After 2 Years

Numerous vulnerabilities affecting the widely used Squid caching and forwarding web proxy have remained unpatched for two years, despite being responsibly disclosed to developers. Squid, an open-so…

CyberSec84 | Cybersecurity news.
Show threadLisPiOct 12, 2023

@fh0 @aburka @LionsPhil If you're getting it from an untrusted source? Yes preferably (and even if you do get it from a trusted source, it's good to know if what you're relying on is a mess, like #SquidProxy https://mastodon.top/@lispi314/111219338179003360).

If you can however get it from your distro? Insofar as you trust your distro you don't.

If you don't trust your distro? Well... why are you running it?

LisPi (@[email protected])

In case the #SquidProxy security audit (https://mastodon.sdf.org/@ParadeGrotesque/111218095926190827 https://megamansec.github.io/Squid-Security-Audit/) has you a bit stressed, remember that #nginx *does* support acting as a caching reverse-proxy, so depending on your use-case that could be a viable replacement. #cache #ReverseProxy

Mastodon.top
LisPiOct 12, 2023

In case the #SquidProxy security audit (https://mastodon.sdf.org/@ParadeGrotesque/111218095926190827 https://megamansec.github.io/Squid-Security-Audit/) has you a bit stressed, remember that #nginx *does* support acting as a caching reverse-proxy, so depending on your use-case that could be a viable replacement.

#cache #ReverseProxy

Parade du Grotesque 💀 (@[email protected])

55 vulnerabilities in Squid, including 35 0days. That... hurts. List of vulns and technical details: https://megamansec.github.io/Squid-Security-Audit/ "In 2021, I performed a security audit of The Squid Caching Proxy. Squid is by far the most well known open-source forwarding HTTP proxy [...] The majority of these vulnerabilities have not been fixed." Ouch ouch ouch... 🤕

Mastodon @ SDF
AnisseOct 11, 2023

Squid Caching Proxy Security Audit: 55 Vulnerabilities, 35 0days.
https://www.openwall.com/lists/oss-security/2023/10/11/3 h/t @beorn

#SquidProxy

oss-security - Squid Caching Proxy Security Audit: 55 Vulnerabilities, 35 0days.

Show threadAPT Ate My HomeworkDec 8, 2022

Forgot to set my proxy like a proper dingus didn't I?

export http_proxy and export https_proxy fixed that right up. Anyone familiar with that port (3128)? That's the default listen port for the #squidproxy service, just in case some arsehole ever thinks it's clever to throw you some curve balls on a port bingo question in an interview.