geneva VS rethink-app

I think cryptography is a decentralizing force in general, though its intersection with ML is small, Also, related things, steganography, differential privacy, federated learning, all things that tend to decentralize. Anonymizing text fingerprint with LLMs, ML-ish censor evading algo , possibility of a decentralized vector database

China just blocks ESNI entirely, possibly Iran too, and I'd assume once ECH becomes popular they'd do just that. The paper points out it's trivial to defeat the blocking, but there needs to be at least a client or server-side modification, which is kinda out of scope for your app & service. Would Cloudflare join the cat & mouse game? Probably not, considering in China they choose to cooperate with the local entity.

> The fact that Western countries aren't spending billions to comprehensively subvert the Great Firewall is a significant strategic failure.

I have strong opinions in this matter.

The GFW is only possible because of metadata leaks that Western countries are exploiting too, for security and surveillance, or whatever.

Suppose Western countries start investing billions in subverting the great firewall, our own infrastructure and economy would suffer too.

I'll give you an example, I tried to train https://github.com/Kkevsterrr/geneva against a CheckPoint and a Fortinet ... It's not been fun for those "next gen firewalls", and CheckPoint is a NASDAQ-100, Fortinet an S&P 500.

We are aware of connectivity issues with WireGuard (ref) that we've fixed in yet-to-release version v055b. Please wait until that's out (2 days? 3?) (:

Noted. Thanks.

Also, crafting nice UI isn't our strong suit. One look at our github issue tracker (ex) and you'd know. We try our best, though (:

sky is a stub resolver, which after stripping out all request information, forwards the dns query to both Cloudflare and Google DoH servers (code), and replies from which ever responds back the fastest. Both the client app and the resolver (server) are open source, so if you find any leaks and know what's up, we're open to changes.

Could, but it'd clutter the Settings screen? Probably, Rethink could let expert users enter arbitrary IP subnets to exclude / not route? This setting will be a footgun, though! Regardless, I've noted it: https://github.com/celzero/rethink-app/issues/899

I believe it is a bug with okhttp, a library we use internally for blocklist updates: https://github.com/celzero/rethink-app/issues/875

NetGuard can block tracker and ad (albeit very basic), so you can use it on its own without Blokada. Or you can use the AdGuard app instead which has both firewall and (complete) adblocking feature. If you prefer open source app then check Rethink https://github.com/celzero/rethink-app

First one is Rethink DNS: https://github.com/celzero/rethink-app to manage and block domains when apps connecting to internet (similar to Blokada, Adguard...). Here that calculator app connects to googletagmanager after installing and opening.

In v054b, we're planning to switch back to the old behaviour -- of domain names blocked during DNS name resolution instead of (translating it to IP rules) at TCP / UDP connection time -- if the user has not set any per-app domain name rules and if the user is not using Bypass DNS and Firewall setting for any app: https://github.com/celzero/rethink-app/issues/817