Will Strafach @chronic

building great things. breaking others. | founder @guardianiosapp (acq @dnsfilter) | @[email protected] guardianapp.com San Francisco, CA Joined October 2009

Tweets

6K
Followers

49K
Following

6K
Likes

29K

Will Strafach @chronic

7 months ago

interested in working with very unique and high volume network data to discover emerging threats? come work with me at DNSF! job-boards.greenhouse.io/dnsfilter/jobs…

3 0 5 2K 1

View Details

@JHDN @BrendanEich @powerpig @brave @guardianiosapp @mullvadnet just as a data point - we don’t retain data related to connectivity attribution either, and do not have the ability for any party, raid/subpoena/hackers/scammers/otherwise, to do so. we are a neutral carrier of network traffic and it is not our business who is doing what.

0 0 2 115 0

View Details

Will Strafach @chronic

a year ago

@BrendanEich @powerpig @brave it’s an interesting feature idea for sure, since we intentionally use vanilla WireGuard and IKEv2, the credentials can technically be used manually on a router like GL iNet models, though officially we focus support on endpoints.

0 0 0 78 0

View Details

Will Strafach @chronic

2 years ago

@mert @usedjpgtrader @BrendanEich @zooko @guardianiosapp @DNSFilter correct! it uses native system (iOS, macOS, Windows, Android) APIs to switch on system-wide.

0 0 8 544 1

View Details

Will Strafach @chronic

2 years ago

@BrendanEich @Lin1985N @richardkoo @DJRawDeal_MD @brave @lukemulks I would love to know as well. we’re always trying to get better, and dealing with GFW is a big one.

0 0 1 175 0

View Details

Will Strafach @chronic

2 years ago

@richardkoo @BrendanEich @DJRawDeal_MD @brave @lukemulks further, GFW sometimes allows things only to later disrupt/devgrade the connection.

0 0 1 127 0

View Details

Will Strafach @chronic

2 years ago

@richardkoo @BrendanEich @DJRawDeal_MD @brave @lukemulks China is tricky. I have anecdotally heard that our WireGuard support works, but not IKEv2, but allegedly it also may depend on the region and network (I guess hotel networks may be more relaxed). honestly we haven’t done a comprehensive study.

0 0 2 311 0

View Details

Will Strafach @chronic

2 years ago

@DefuseSec please be careful if anyone reaches out. there is no publicly available method to get a “true” forensics image of the device. it may be wise to do a backup in Apple Configurator ASAP though to preserve any traces of whatever the border people did

0 0 2 56 0

View Details

Will Strafach @chronic

2 years ago

@matthew_d_green @cryptoishard it was some wild west shit. per my recollection, I am fairly confident that they did not even constrain it to only the analytics FQDNs. I went back-and-forth with senator Blumenthal’s office to try to help craft something that’d elicit more details from FB, but FB blew it off.

Will Strafach @chronic

7 years ago

from an instructional video for Project Atlas users. this is how they guide the user through trusting the Facebook Researxh Root Certificate. does this sound like a “rigorous consent flow” to anyone?

4 20 79 0 3

0 0 2 488 1

View Details

Will Strafach @chronic

2 years ago

@malwrhunterteam 👀 interesting catch

0 0 1 83 0

View Details

Will Strafach @chronic

2 years ago

@drunknbass @lorenzofb yup

0 0 0 212 0

View Details

Will Strafach @chronic

3 years ago

@HowitzJame12303 @brave @BrendanEich @brianbondy happy to try to help out here! a few questions: 1. by Desktop, would that be Windows or macOS? 2. are you using an In-App Purchase, or do you have a Brave account? 3. have you used “Contact Technical Support” in the app to send us device information and debug data?

1 0 1 93 0

View Details

Will Strafach @chronic

3 years ago

@justinschuh @KimZetter how would the technique apply to an iPhone 5c, though?

0 0 0 84 0

View Details

Will Strafach @chronic

3 years ago

@EnglishManDanB @BrendanEich if you’d be willing to indulge on testing to see if using the Brave VPN helps resolve your Brave Search problem, it’d be very interesting to find out (we’d especially want to know if the same issue occurs, as that should never happen). there should be a free 7-day trial, btw.

0 0 1 94 0

View Details

Will Strafach @chronic

3 years ago

@EnglishManDanB @BrendanEich this is a hard problem to solve, but one idea I have is to consider looking through the Proton server list and finding a server in your area with the lowest amount of congestion; it may or may not help, but my thinking is that lesser-used servers might not be classified that way.

1 0 1 114 0

View Details

Will Strafach @chronic

3 years ago

@EnglishManDanB @BrendanEich ah, that output actually helps explain it - it looks like they’ve got their IPs classified as a Network Sharing Device on one or more anti-abuse lists. this can happen when many users are exiting traffic through one single IPv4 address. (1/2)