The big difference is that VPNs encrypt all traffic between your computer and the VPN computer, while this is usually not the case with a proxy. The lack of encryption and decryption can make a proxy slightly faster, but obviously less secure if you’re tying to hide what you’re doing.
ELI5 version:
VPN - You write a note in code, pass it to your friend who then decodes it, and then gives the decoded note to your crush. Your crush doesn’t know it came from you, and if the teacher caught you passing the note, they wouldn’t be able to tell what it was.
Proxy - You just pass a note to your friend, who then hands it to your crush. Your crush doesn’t know if came from you, but If the teacher catches you, they can read it. It’s faster than having to write in code and decode.
I would recommend actually getting into contact with your crush. You could then establish means to use OTP and won’t need to trust your friend at all.
You know, exchange each in and out OTP keys each of you will use, agree on a checkerboard to use, write a codebook for common words/phrases you will use, how you’ll notifiy the other party of potentially compromised key(s).
Functionally the same for most people. A VPN is a virtual LAN so you can access other computers on it. Ex. company’s internal websites from a remote location
Proxy just forwards traffic like a gateway. In both cases the source is hidden. LANs have gateways too
Arch Linux. All the software at their latest version (which is usually the best one), within a couple of commands, either from the huge official repos or the AUR.
I was concerned this was going to be a comment about what I put in my shopping cart.
But I can tell I’m an individual of extreme self-discipline because after I filled my shopping cart with chocolate and vodka I return it to the carousel.
Bending the question a little but my second “first impression” of Arch’s “simplicity” surprised me the most.
I was running Gentoo for a while before deciding to move back, and I was surprised that somehow I had
saved space
gotten faster at doing new things (…)
didn’t lose any boot speed or anything like that
Granted, I had jumped on Gentoo because of misconceptions (speed, ricing, the idea that I needed USE flags), but going back, I saw things more clearly:
the AUR being basically a shell script download + 300 MB of base-devel was simpler and more space-efficient than /var/db/repos (IIRC – since the portage and guru ebuilds were all held locally anyway after syncing, an on-demand AUR saved space).
the simple automatic build file audits on Arch felt more clean to me. I like checking my build files; had to make a script for the guru ebuild equivalent (but maybe there’s a portage arg i missed somewhere – wouldn’t be the first time)
Arch repos separating parts of packages in case you don’t need some part (like splitting some font into its languages, or splitting a package into x and x-doc and x-perl) was almost a simple USE flag-ish thing already
/etc/makepkg.conf was Gentoo’s make.conf. And its build flags looked similar to the CFLAGS I manually set up anyway.
My boot time (btrfs inside LUKS with encrypted /boot) was the same with systemd vs. openrc
I realized I liked systemd (because of the completeness of my systemctl muscle memory, like with systemctl status and journalctl, or managing systemd-logind instead of using seatd and friends).
Not bashing on Gentoo or anything, but it’s when I realized why Arch was “simple.” Even me sorely missing /etc/portage/patches was quelled by paru -S <pkg> --fm vim --savechanges.
And Arch traveling at the speed of simplicity even quantifiably helped: Had to download aur/teams the other day with nine-minute warning.
I’m from California, been on various trips around Spain, and France, with under a week spent in both Italy and Switzerland.
I love everywhere I’ve been. I’d be happy to live somewhere in western Europe.
I don’t know if European healthcare is better, but it’s far more civilized in its availability. I haven’t seen much difference between EU and USA for equivalent-quality grocery prices, with the exception of Zurich. I’ve found Europe to be generally safe. There seems to be more “sneaky” crime, whereas the States has more confrontational crime.
Freeway etiquette is far better in France and Spain than California. Trains, of course, are better too.
One major difference is labor laws. The EU has far more protection, but far less mobility. I remember telling a German friend that I had gotten a new job operating a fairly large power system, after working in a tangentially related field, without any additional study or licenses, and his response was “Only in America!” I hadn’t even considered that this move would be far more difficult in other countries.
One major difference is labor laws. The EU has far more protection, but far less mobility. I remember telling a German friend that I had gotten a new job operating a fairly large power system, after working in a tangentially related field, without any additional study or licenses, and his response was “Only in America!” I hadn’t even considered that this move would be far more difficult in other countries.
Also very German to rely a lot of degrees and certifications. Other countries like the UK (European still even after Brexit) would care more about experience than degrees.
Your last paragraph is a good one. I fell in love with Sweden when I was there. Then I talked to some teenagers and they said they really wanted to live in America. It caught me off guard. I didn’t understand why they would want to leave a place that seemed so safe, secure, and comfortable. They said they wanted more flexibility and opportunity. Sure, they could get a stable living-wage job and keep it for their whole career, but in America they thought they would have more chances to try new things and reinvent themselves.
Whether our perceptions of each other’s countries are correct or not, for all of us the grass certainly looked greener on the other side of the fence.
In a technical sense, a consumer VPN service is really more of an encrypted proxy than anything else. It tries to obfuscate what network traffic and activity you’re actually participating in by both appearing as the endpoint for your connection, and the destination for the connection of the sites you visit and internet services you use.
A true VPN does more than that, allowing multiple computers that are not sharing a router to communicate with each other as if they are. For context, certain IP addresses are local-only, such as any IP starting with 192.168.x.x. This means that when you access the broader internet, your IP is different than the one used when you try to use your WiFi printer on your same network. They’re both your addresses, you have them at the same time, but one is really the address of your whole network while the other is the address of your computer in that network. Think “building street address” and “office number in that building”
For businesses and other organizations, a VPN is a useful way to allow users to connect using these local-only addresses without physically being connected to the network those local addresses are valid in. You don’t have to expose the printer to the Internet, you just need to expose the VPN service to the Internet, and then allow VPN users to connect to the network when they need to use the printer
A computer can have more than one network interface, right? (Like, you can be plugged into ethernet at home but also connected to the WIFI of the coffee shop across the street.)
A VPN gives you a whole new network device (“virtual ethernet card” if you will) that works as if that card was connected to some LAN somewhere else. Typically, you’d forward “all” of your computer’s/smartphone’s/etc traffic through the VPN so that your computer “thinks it’s on that remote LAN” rather than on your home WIFI or whatever.
Proxies… well the term can mean a few different things in different contexts, really. But generally you’re not forwarding “all” traffic through them, just HTTP traffic (and usually only a subset of all HTTP traffic) or just traffic that is specifically told to be forwarded through them.
An opaque web proxy is one that you can point your browser (or other HTTP interface) to. It won’t handle protocols other than HTTP. And when you want to use an opaque web proxy, your HTTP client has to know how to do that. (Whereas with VPN’s, it’s your operating system, not your individual applications, that need to know how to forward through it.)
A transparent web proxy can be something you (and your apps and OS) don’t know you’re even using. When you point your browser or app to a Lemmy instance, it’s almost certain that the domain is pointed not at an application server that actually runs the Lemmy code, but rather at a transparent web proxy that does stuff on the instance-owner’s end like preventing spamming or whatever. This type of proxy is sometimes called a “reverse web proxy” and can also only work with HTTP.
A SOCKS proxy, like an opaque web proxy, requires applications to know how to use it. (Ok, technically that’s not 100% true. It’s possible in some cases to have a transparent proxy of some sort forward through a SOCKS proxy in a way that the application doesn’t know SOCKS is involved. There are also some cool OS-level hacks that can force an app to go through a SOCKS proxy without the app knowing anything about SOCKS. But if you’re doing those things, you’re a hacker.) And with a SOCKS proxy, your computer doesn’t “think” it’s connected to a whole different LAN. Individual applications know that they’re forwarding through SOCKS. SOCKS supports more protocols than just HTTP. Probably all TCP-based protocols, but I don’t think it has any support for UDP. So you won’t be torrenting through SOCKS.
That’s all I can think to say at the moment. There are special-purpose proxies for things like security auditing (like Burp Suite, for instance.) But I’m guessing that’s not the sort of thing you’re asking about.
voidlinux: gave me much better battery life - I assume because it starts as a minimal system and one adds only the essentials to do the job - compared to the soup-to-nuts distros that pile everything in so that newbies are acccomodated. Of course, the voidlinux approach needs more linux skills - but it’s not that hard and the doco is great.
Also, I love the back to basics runit init system and runsv service runner (I’m old so I like that stuff) and the ultra fast xbps packaging system.
I sync my entire home directory to a google drive i bought the maximum size plan and only use about 5% of it. All my passwords are in plaintext .csv files and sent to the backup along with scans of all my important documents and financial info. The google password is 1234 and i turned off 2FA for convenience. :)
kbin.life
Oldest