<script>
	//scroll to bottom
	//shot 935 x 1475 (1870 x 2950)
	//sips --rotate -35 a.png --out b.png ; cp -fv b.png c.png
	//crop:768x1666 + blur:5 + noise:5 + vintage:5
	//cp -fv d.png e.png ; sips -z 2556 1179 e.png
	//save:1024x1920 + grain:55
	function zz(n) { return Math.min(Math.max(0, n), 255); }
	function rr(n, m) { return (Math.floor(Math.random() * ((m - n) + 1)) + n); }
	function bb(dd, ee, ff, gg, vv, ww, oo) {
		var hh = "";
		var uu = 175, xx = 55, yy = 35;
		while (((dd-xx) > uu) || ((ee-xx) > uu) || ((ff-xx) > uu)) { xx += 15; }
		if ((dd < 55) && (ee > 95)) { xx += 75; }
		hh += ("border:"+vv+"px solid rgba("+zz(dd-xx)+", "+zz(ee-xx)+", "+zz(ff-xx)+", "+(oo*0.95)+"); background:rgba("+zz(dd+yy)+", "+zz(ee+yy)+", "+zz(ff+yy)+", "+(oo*0.95)+");");
		return hh;
	}
	function aa() {
		var ll = [];
		var l = [
			[ 75,  55,  35, 0.15, 1.0, 0.0, "brown" ],
			[ 75,  55,  35, 0.75, 1.0, 0.0, "brown" ],
			[235, 115, 115, 0.55, 1.1, 0.0, "rose"  ],
			[195,  75,  75, 0.55, 1.0, 0.0, "berry" ],
			[215,  95,  15, 0.75, 1.1, 0.0, "peach" ],
			[235, 155,  55, 0.75, 1.0, 0.2, "gold"  ],
			[255, 195, 135, 0.95, 1.0, 0.0, "light" ],
			[ 35, 195, 235, 0.75, 1.0, 0.0, "mint"  ],
			[ 15, 155, 215, 0.75, 2.0, 0.0, "blue"  ],
			[ 15,  75, 135, 0.75, 1.0, 0.0, "dark"  ],
			[ 55,  35, 115, 0.55, 1.0, 0.0, "deep"  ],
			[ 95,  35, 115, 0.95, 1.0, 0.0, "purple"],
			[ 75,  55,  35, 0.05, 1.0, 0.0, "brown" ],
		];
		var p = [];
		var o = [0.99, 0.95, 0.91];
		var hh = 15;
		var vv = 3.99;
		var ww = 3.99;
		var v = ((15 - vv) - vv);
		var h = ((15 - ww) - ww);
		var n = 7;
		var t = 0;
		var u = "";
		var z = document.getElementById("a");
		for (var i = 0; i < l.length; ++i) {
			var k = (i + 1);
			var r = l[i][3];
			var s = parseInt(l[i][4]);
			var x = (((parseInt(l[i][4] * 10) % 10) + 1) - 1);
			var y = parseInt(l[i][5]);
			var w = (((parseInt(l[i][5] * 10) % 10) + 1) - 1);
			var m = (parseInt(n * r) + (x + y));
			u += (l[i][5]+" "+i+" "+n+" "+r+" "+s+" "+m+"\n");
			if (p.length > 0) {
				l[i][0] = p[0][0]; l[i][1] = p[0][1]; l[i][2] = p[0][2];
				p = [];
			}
			for (var j = 0; j < s; ++j) {
				var d = l[i][0], e = l[i][1], f = l[i][2], g = o[1];
				var uu = (i > 1) ? 1 : 0;
				var tt = "<div style='white-space:nowrap; height:"+hh+"px; background:rgba("+zz(d)+", "+zz(e)+", "+zz(f)+", "+g+");'>";
				for (var ii = 0; ii < uu; ++ii) {
					var dd = d, ee = e, ff = f, gg = g, oo = (o[0]*0.33);
					ll.push("<span style='display:inline-block; position:fixed; top:%ypx; left:%xpx; height:%hpx; width:%wpx; "+bb(dd, ee, ff, gg, vv, ww, oo)+" border-radius:999px;'></span>");
				}
				tt += "</div>";
				z.innerHTML += tt;
				if (i < (l.length - 1)) { t += hh; }
			}
			for (var j = 0; (j < 3) && (k < l.length); ++j) {
				var d = (((l[k][j] - l[i][j]) - 1) / (m + 1));
				l[i][j] = (l[i][j] - (d * w));
			}
			for (var j = 0; (j < m) && (k < l.length); ++j) {
				var a = (((l[k][0] - l[i][0]) - 1) / (m + 1 + w));
				var b = (((l[k][1] - l[i][1]) - 1) / (m + 1 + w));
				var c = (((l[k][2] - l[i][2]) - 1) / (m + 1 + w));
				var d = (l[i][0] + (a * (j + 1))), e = (l[i][1] + (b * (j + 1))), f = (l[i][2] + (c * (j + 1))), g = o[2];
				if (j >= (m - y)) { p.push([d, e, f, g]); continue; }
				if (j >= (m - w)) { p.unshift([d + a, e + b, f + c, g]); }
				var uu = 0;
				var tt = "<div style='white-space:nowrap; height:"+hh+"px; background:rgba("+zz(d)+", "+zz(e)+", "+zz(f)+", "+g+");'>";
				for (var ii = 0; ii < uu; ++ii) {
					var dd = d, ee = e, ff = f, gg = g, oo = (o[0]*0.33);
					ll.push("<span style='display:inline-block; position:fixed; top:%ypx; left:%xpx; height:%hpx; width:%wpx; "+bb(dd, ee, ff, gg, vv, ww, oo)+" border-radius:999px;'></span>");
				}
				tt += "</div>";
				z.innerHTML += tt;
				if (i < (l.length - 1)) { t += hh; }
			}
			ll.push("");
		}
		var lasx = 5, lasy = 5, mins = parseInt(35 / 1.99), maxs = parseInt(75 / 1.99);
		for (var ii = 0; ii < (ll.length - 2); ++ii) {
			for (var jj = 0; jj < 2; ++jj) {
				if (ll[ii] == "") { continue; }
				var maxx = window.innerWidth;
				var maxy = window.innerHeight;
				while (lasx < (maxx - maxs)) {
					var size = rr(mins, maxs);
					var posx = rr(lasx, lasx + (maxs / 1.99));
					var posy = rr(lasy, lasy + (maxs / 1.99));
					document.body.innerHTML += ll[ii].replace(/%x/ig, ""+posx).replace(/%y/ig, ""+posy).replace(/%[wh]/ig, ""+size);
					lasx += size;
				}
				lasx = 15; lasy += (maxs + 5);
			}
		}
		alert(n+"\n"+t+"\n"+u);
	}
</script>
<body onload="aa();">
	<div id="a"></div>
</body>

[Colors]

[Grain]

[Source]

~

<script>
	//scroll to bottom
	//shot 935 x 1475 (1870 x 2950)
	//sips --rotate -35 a.png --out b.png ; cp -fv b.png c.png
	//crop:768x1666 + blur:5 + noise:5 + vintage:5
	//cp -fv d.png e.png ; sips -z 2556 1179 e.png
	//save:1024x1920 + grain:55
	function zz(n) { return Math.min(Math.max(0, n), 255); }
	function bb(dd, ee, ff, gg, vv, ww, oo) {
		var xx = 33;
		var hh = "";
		var ll = ["left", "right"];
		for (var ii = 0; ii < ll.length; ++ii) {
			//hh += ("border-"+ll[ii]+":"+vv+"px dashed rgba(51, 51, 51, 0.11);");
			//hh += ("border-"+ll[ii]+":"+vv+"px dashed rgba(251, 251, 251, 0.11);");
			//hh += ("border-"+ll[ii]+":"+vv+"px solid rgba("+zz(dd)+", "+zz(ee)+", "+zz(ff)+", "+oo+");");
			hh += ("border-"+ll[ii]+":"+vv+"px dashed rgba("+zz(dd+xx)+", "+zz(ee+xx)+", "+zz(ff+xx)+", "+oo+");");
		}
		var tt = ["top", "bottom"];
		for (var jj = 0; jj < tt.length; ++jj) {
			//hh += ("border-"+tt[jj]+":"+ww+"px dashed rgba(51, 51, 51, 0.11);");
			//hh += ("border-"+tt[jj]+":"+ww+"px dashed rgba(251, 251, 251, 0.11);");
			//hh += ("border-"+tt[jj]+":"+ww+"px solid rgba("+zz(dd)+", "+zz(ee)+", "+zz(ff)+", "+oo+");");
			hh += ("border-"+tt[jj]+":"+ww+"px dashed rgba("+zz(dd+xx)+", "+zz(ee+xx)+", "+zz(ff+xx)+", "+oo+");");
		}
		return hh;
	}
	function aa() {
		var l = [
			[ 75,  55,  35, 0.15, 1.0, 0.0, "brown" ],
			[ 75,  55,  35, 0.75, 1.0, 0.0, "brown" ],
			[235, 115, 115, 0.55, 1.1, 0.0, "rose"  ],
			[195,  75,  75, 0.55, 1.0, 0.0, "berry" ],
			[215,  95,  15, 0.75, 1.1, 0.0, "peach" ],
			[235, 155,  55, 0.75, 1.0, 0.2, "gold"  ],
			[255, 195, 135, 0.95, 1.0, 0.0, "light" ],
			[ 35, 195, 235, 0.75, 1.0, 0.0, "mint"  ],
			[ 15, 155, 215, 0.75, 2.0, 0.0, "blue"  ],
			[ 15,  75, 135, 0.75, 1.0, 0.0, "dark"  ],
			[ 55,  35, 115, 0.55, 1.0, 0.0, "deep"  ],
			[ 95,  35, 115, 0.95, 1.0, 0.0, "purple"],
			[ 75,  55,  35, 0.05, 1.0, 0.0, "brown" ],
		];
		var p = [];
		var o = [0.99, 0.95, 0.91];
		var hh = 15;
		var vv = 1.99;
		var ww = 1.11;
		var v = ((19 + vv) + vv);
		var h = ((15 - ww) - ww);
		var n = 7;
		var t = 0;
		var u = "";
		var z = document.getElementById("a");
		for (var i = 0; i < l.length; ++i) {
			var k = (i + 1);
			var r = l[i][3];
			var s = parseInt(l[i][4]);
			var x = (((parseInt(l[i][4] * 10) % 10) + 1) - 1);
			var y = parseInt(l[i][5]);
			var w = (((parseInt(l[i][5] * 10) % 10) + 1) - 1);
			var m = (parseInt(n * r) + (x + y));
			u += (l[i][5]+" "+i+" "+n+" "+r+" "+s+" "+m+"\n");
			if (p.length > 0) {
				l[i][0] = p[0][0]; l[i][1] = p[0][1]; l[i][2] = p[0][2];
				p = [];
			}
			for (var j = 0; j < s; ++j) {
				var d = l[i][0], e = l[i][1], f = l[i][2], g = o[1];
				var uu = (parseInt(1500 / ((v + vv) + vv)) + (3 - 1));
				var tt = "<div style='white-space:nowrap; height:"+hh+"px; background:rgba("+zz(d)+", "+zz(e)+", "+zz(f)+", "+g+");'>";
				for (var ii = 0; ii < uu; ++ii) {
					var dd = d, ee = e, ff = f, gg = g, oo = (o[0]*0.99);
					tt += ("<span style='display:inline-block; height:"+h+"px; width:"+v+"px; "+bb(dd, ee, ff, gg, vv, ww, oo)+" border-radius:0px;'></span>");
				}
				tt += "</div>";
				z.innerHTML += tt;
				if (i < (l.length - 1)) { t += hh; }
			}
			for (var j = 0; (j < 3) && (k < l.length); ++j) {
				var d = (((l[k][j] - l[i][j]) - 1) / (m + 1));
				l[i][j] = (l[i][j] - (d * w));
			}
			for (var j = 0; (j < m) && (k < l.length); ++j) {
				var a = (((l[k][0] - l[i][0]) - 1) / (m + 1 + w));
				var b = (((l[k][1] - l[i][1]) - 1) / (m + 1 + w));
				var c = (((l[k][2] - l[i][2]) - 1) / (m + 1 + w));
				var d = (l[i][0] + (a * (j + 1))), e = (l[i][1] + (b * (j + 1))), f = (l[i][2] + (c * (j + 1))), g = o[2];
				if (j >= (m - y)) { p.push([d, e, f, g]); continue; }
				if (j >= (m - w)) { p.unshift([d + a, e + b, f + c, g]); }
				var uu = (parseInt(1500 / ((v + vv) + vv)) + (3 - 1));
				var tt = "<div style='white-space:nowrap; height:"+hh+"px; background:rgba("+zz(d)+", "+zz(e)+", "+zz(f)+", "+g+");'>";
				for (var ii = 0; ii < uu; ++ii) {
					var dd = d, ee = e, ff = f, gg = g, oo = (o[0]*0.95);
					tt += ("<span style='display:inline-block; height:"+h+"px; width:"+v+"px; "+bb(dd, ee, ff, gg, vv, ww, oo)+" border-radius:0px;'></span>");
				}
				tt += "</div>";
				z.innerHTML += tt;
				if (i < (l.length - 1)) { t += hh; }
			}
		}
		alert(n+"\n"+t+"\n"+u);
	}
</script>
<body onload="aa();">
	<div id="a"></div>
</body>

[Colors]

[Grain]

[Source]

~

With the release of MacOS 27, Apple announced that they dropped support for Intel Macs and so I decided to repurpose my 2019 Intel Mac Mini that I had spec’d out with 10G Ethernet and 16G RAM. I was able to unlock the boot loader and load up Linux on it to turn it into a 10G SFP+ connected router.

Hardware-Defined Networking: I was previous running a Lenovo Mini PC with a 4 port 2.5G card where I could connect the WAN, LAN, VPN In, VPN Out to the router directly. The previous setup was technically more efficient as the bulk of the traffic was flowing in and out of the router.

Software-Defined Networking: In the new setup, the bulk of the traffic is also now flowing in and out of the switch as well as the router which is technically less efficient. The M4 Pro Mac Mini is still running the VPN In / Out solution that I had previously worked on and posted about before (including the proxy backup solution as well).

Now I have the Intel Mac Mini connected with a 10G SFP+ trunk port which has the 4 separate VLANs on the switch to connect and separate those 4 different networks working along side the ARM Mac Mini!

The 4 main functions and routing paths of the VLAN network are:

• Client -> WiFi
• WiFi -> VPN
• VPN -> WAN
• WAN -> Server

The USW PRO MAX switch is now fully connected with the following ports from the right:

• Port 1: Router [VLAN Trunk] (10G)
• Port 2: WAN [VLAN Access] (2.5G)
• Port 3: WiFi Clients [VLAN Access] (2.5G)
• Port 4: WiFi Bridge [VLAN Access] (2.5G)
• Port 5: VPN In [VLAN Trunk] (2.5G)
• Port 6: VPN Out [VLAN Access] (2.5G)

~

100.64.0.0/10 = 100.64.0.0 - 100.127.255.255

Thanks to Lawrence Systems who covered his own network setup!

[SimpleShell]

~

$ curl -sL 'https://github.com/stoops/SimpleShell/commits/main/' | tr '=:,<>[]{}"\' '\n' | grep -Ei '/commit/' | head -n 1 | awk -F'/' '{ print $NF }'

$ spctl -a -v bin/SimpleShell.app
bin/SimpleShell.app: accepted
source=Notarized Developer ID

I was searching for a good quality but simple free open terminal for MacOS and I couldn’t really find what I was looking for interface wise (I used to use iTerm for a long time but it started getting more and more bloated and laggy on me – using up a lot of system power on battery and I don’t want all that AI stuff baked in).

I started a project earlier this year but got stuck on it because I was trying to implement a basic ANSI parser which was a mistake on my part. I didn’t realize how incredibly complicated that finite state machine would be, esp with bash and ansi apps sending complicated instructions into the machine! I then asked Google AI for help and it pointed me to a GitHub page that hosted a libvterm (from vim) that was compatible with Objective-C.

I’ve been working on this app non-stop for the last 9 days now and I only have the basics covered, I didn’t realize how much code it took just to make a basic text processing input/output app but I think this is one of my more complicated code bases (possibly TurnTable is the other app of mine that might be more complicated but that one is in Swift).

I still have a lot more work on my todo list for and I will continue development on it now that I got ANSI parsing to work, the rest is just mainly ViewController and functionality features. I targeted it for the bash shell so I don’t know if it works with other shells but this is just my first release post about it.

Layout List

• Date (Month / Day)
• Terminal (Rows / Cols)
• Network (LAN / WAN)
• System (CPU / RAM / NET)
• WiFi (Freq / Rate)
• Highest Process (PID / MEM)
• Shell PS1 Prompt Info (User / Directory)
• Dynamic Prompt Prefix Information Insertion (Any scriptable line items)

Feature List

• Simple Clean Minimal Functional Design
• Window / View / Layout — Colors / Opacity / Blur
• Selector / Highlighter Separator Character List (Automation)
• Auto Copy On Selection (Automation)
• Single-Line Paste Manual Enter (Safety)
• Multi-Line Paste Prevention Protection (Safety)
• Huge-Line Paste Limitation Protection (Safety)
• Multi-Window / Multi-Tab
• Left Aligned Tab Titles With Monospace Font (Readability)
• Scriptable Standard Window And Tab Title Text
• Scriptable Dynamic Shell Prompt Prefix (Found No Where Else!)
• Always Visible Command Line Prompt (Found No Where Else!)
• Live System Information Stats Bar
• Separated Open / Close Tab Buttons To Reduce Accidental Closures
• Multi-Tab Window Detection To Reduce Accidental Closures
• Dual Output Modes (line/ansi) With Separated Input Prompt (comd)
• Smooth Scroll Locking
• Clear Console Command
• Easy Use Shortcut Keys (cmd/opt + left/right)
• Regular Expression Search
• Basic Output Text Colors
• Basic Process Job Detection
• Transparent Rounded Cursor Block!
• Dock Icon!!

Todo List

• Add settings for font text type / size
• Add settings for ansi color codes

Limitation List

• Tabs Can’t Be Transferred To Other Windows
• Only Reopens One Window / Tab On Launch
• No Previous History Or Information Is Restored

Warning List

• User Beware: This is still a brand new framework and there may be bugs (or at the very least incompatibilities)!

~

Source Code: https://github.com/stoops/SimpleShell

~

Layer 2 – Ethernet Frames – Leet ARP Spoofing

ebtables -t nat -I PREROUTING -i wifi+ -p ARP --arp-opcode Reply --arp-ip-src 192.168.1.1 -s ! 00:12:34:56:78:00 -j DROP
ebtables -t nat -A PREROUTING -i wifi+ -p ARP --arp-opcode Reply --arp-ip-dst 192.168.1.1 -s ! 00:12:34:56:78:00 -j DROP

~

Layer 3 – Second Favorites – Lazy DHCP Snooping

ebtables -t nat -I PREROUTING -i eth0.1 -p IPv4 --ip-proto udp --ip-sport 67 -j ACCEPT
ebtables -t nat -A PREROUTING -i wifi+  -p IPv4 --ip-proto udp --ip-sport 67 -j DROP

~

[kmod-nft-bridge]

table bridge ethernet {
	chain PREROUTING {
		type filter hook prerouting priority filter; policy accept;
		iifname "wifi*" arp operation reply arp saddr ether != 00:11:22:33:44:00 arp saddr ip 192.168.1.1 counter drop
		iifname "wifi*" ip protocol udp udp sport 67 counter drop
	}
}

~

OpenWRT Config

wireless.default_radio0.isolate='1'
wireless.default_radio0.bridge_isolate='1'

~

Untested Commands

bridge link set dev wlan0 hairpin off isolated on
ebtables -A FORWARD -i wlan0 -o wlan0 -j DROP

~

Note: Most of these commands won’t work on UAP-U7-PRO APs I believe due to hardware based frame/packet routing/forwarding – I have since enabled arp-proxy and dhcp-snooping in the UI network controller application, however, I don’t see them working either, possibly because I am running a third-party gateway device. I have finally enabled client-isolation, which as tested, solves the ARP and DHCP attacks completely and forces client-to-client communication through the router instead for even further filtering!

~

I have first since used a couple web based AI systems for different specific tech things and they are pretty useful if you do the extra work to verify and modify what they are telling you. I’ve found that Google Gemini AI is really good a general tech questions and configuration items (with looking it over and understanding it and modifying it of course for your specific needs) and Claude Sonnet AI is really amazing at verifying that your code is correct and other more in-depth programming related tasks (for example, memory allocation and pointer handling and file descriptor tracking). I was also trying to test and see if the AI system would learn from me or others over time and add that previous historical context for each conversation into future interactions.

I’ve been using these systems lightly whenever I get stuck and they are able to find the exact code snippets I was looking for to complete the rest of my projects – prompt engineering!

Tips:

• You need to try and give as much extra debugging info that you can for it to properly figure things out or update its answer
• It’s better to ask it small specific questions and break the problem apart into pieces and then tailor a customized solution
• There are interesting differences between asking it high-level design questions versus low-level coding questions
• It’s also interesting to ask it open-minded / open-ended questions versus asking for specific solution implementations
• It may get lost easily depending on code length, complexity, and the given language it is programmed in
• Try to connect and link the history and context in between multiple sequential questions
• Sometimes it will loop through repeated answers if it gets stuck on one specific solution
• Sometimes the quality of a given answer decreases or even may change completely the longer that you interact with it
• Sometimes you will get varying, differing, or conflicting answers if you re-ask it the same question over and over again
• Sometimes it gets stuck on one specific solution that won’t work in the end but if you try to ask it how to approach the problem from a different angle it can provide steps for you to get extra info for it to either re-fine or re-suggest its solution

Note: It’s a shame that AI resources are being used on social or political issues rather than solving technology and scientific issues to help progress humanity. I’m still amazed that I was able to feed a 1000 lines of C code to Claude as a test and it was able to determine the components purposes and the network proxy applications of it all…

Google AI seems a little more friendly and personable whereas Claude is more on task and professional ha 🙂

~

I wanted to eventually experiment with using the AES hardware instruction but for the ARM architecture because there are ways to turn block ciphers into stream ciphers for future usage. There appears to be a C header include file that exists on both Mac and Ubuntu (arm_neon.h) and you can compile this small C program file with standard gcc options (no special arguments needed). The hardware instruction method names appear very cryptic, however, they do seem to work when I tested the hex output against other sites!

K: [00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ]
R: [00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 62 63 63 63 62 63 63 63 62 63 63 63 62 63 63 63 aa fb fb fb aa fb fb fb aa fb fb fb aa fb fb fb 6f 6c 6c cf 0d 0f 0f ac 6f 6c 6c cf 0d 0f 0f ac 7d 8d 8d 6a d7 76 76 91 7d 8d 8d 6a d7 76 76 91 53 54 ed c1 5e 5b e2 6d 31 37 8e a2 3c 38 81 0e 96 8a 81 c1 41 fc f7 50 3c 71 7a 3a eb 07 0c ab 9e aa 8f 28 c0 f1 6d 45 f1 c6 e3 e7 cd fe 62 e9 2b 31 2b df 6a cd dc 8f 56 bc a6 b5 bd bb aa 1e 64 06 fd 52 a4 f7 90 17 55 31 73 f0 98 cf 11 19 6d bb a9 0b 07 76 75 84 51 ca d3 31 ec 71 79 2f e7 b0 e8 9c 43 47 78 8b 16 76 0b 7b 8e b9 1a 62 74 ed 0b a1 73 9b 7e 25 22 51 ad 14 ce 20 d4 3b 10 f8 0a 17 53 bf 72 9c 45 c9 79 e7 cb 70 63 85 ]
I: [00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ]
O: [dc 95 c0 78 a2 40 89 89 ad 48 a2 14 92 84 20 87 ]
I: [dc 95 c0 78 a2 40 89 89 ad 48 a2 14 92 84 20 87 ]
O: [00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ]

~

Source Code: github.com/stoops/aes/blob/main/aes.c

~

Thanks to Google’s AI code snippets, I was able to finally implement multiple threads all reading from a singular tun interface as well as each thread performing larger batch reads/writes in one singular syscall (up to 65536 bytes per call)! Here are the parameters (IFF_MULTI_QUEUE | IFF_VNET_HDR) and calls you need to set to get it:

[xorcipher.com]

~

Source Code: github.com/stoops/vpn/blob/main/gtun.c

EC ElGamal
point=f(x, y)
G - point (public)
k - integer (private)
Q=kG - point (public)
r - integer [random integer] (private)
s - integer [secret integer] (private)
M=sG - point [secret point] (private)
C=rG - point [reference point] (public)
E=rQ+M - point [encrypted point] (public)
(C, E) - message [(rG, rkG+M)] (public)
D=k*C - point [decryption point] (private)
M=E−D - point [((rkG+M)-krG)] (private)
note: must generate a unique r/M value/coordinate each time for a given key
note: encryption only works in one direction from public key to private key

~

EC DH
- each side generates a secret integer (r) and multiplies with point G (rG)
- each side sends their point multiplication result (rG) to the other
- each side multiplies their secret integer (r) with the exchanged point r(xG)
- each side can encrypt their results before sending with EC ElGamal

~

You can see point S has the same X, Y coordinates in the client as in the server and only points C and E were published!

~

Source Code: github.com/stoops/vpn/blob/main/lib/key.c

Key Generator: github.com/stoops/eckx/blob/main/ecdh.c

~

So a little while back I upgraded all my lan components to 2.5gbps and I recently upgraded my wan to 1.5gbps and I wanted to tune up both the VPN solution I had previously made as well as the long since passed Proxy solution. The proxy solution, which is essentially a “Monkey-in-the-Middle” proxy on behalf of all network clients (no TUN interface read/writes are required) but the down side is managing thousands of client based UDP/TCP socket connections and firewall states and file descriptors and memory allocs. On a side note though, as a long time select caller, I finally learnt how to use poll as a better replacement.

With the VPN solution, I like and prefer the clean routing setup, however, I was only able to achieve ~900mbps whereas with the Proxy solution, it’s all pure sockets only where I am able to get ~1300mbps!

I wanted to retest what the performance would be of the MITM Proxy network solution over WiFi 6GHz@2400mbps and I was able to hit pretty fast VPN-style speeds over the network! I will have to retest to see how the VPN solution performs, however, I am trying to explore how multiple bulk IP packets can be read/written to/from the TUN interface in one singular syscall or being able to process larger size packet data before they get broken up by the interface MTU in the Linux Kernel… IFF_VNET_HDR / IFF_MULTI_QUEUE

Over 1.21 Jiggawatts! I mean Gigabits!!

~

~

Warning: Long Screenshot

Connection Management

🙂

MTUN: github.com/stoops/vpn

MITM: github.com/stoops/mitm

~

The kick.com live stream video experience on the web is not the best overall, it seems to constantly lose track of a previously buffered section of the live stream and then sends you to the live portion but mine also gets stuck on reconnecting again and remains frozen until a manual refresh! I tried to write a series of hacky javascript modifications to help solve the following issues:

• Always show the bottom video controls bar on the live stream video
• Always set the volume level to 100% instead of the continually defaulted 50%
• Accepts a basic timestamp parameter to seek to in a live stream video
• Keeps track of your latest buffered video seek position
• Auto reseeks to the last known tracked timestamp if the buffered video jumps forward to live stream and auto reloads the page with the timestamp parameter if the stream connection becomes frozen

// ==UserScript==
// @name         klol
// @namespace    http://tampermonkey.net/
// @version      2026-08-19
// @description  try to take over the world!
// @author       You
// @match        https://kick.com/*
// @icon         https://www.google.com/s2/favicons?sz=64&domain=kick.com
// @grant        GM_addStyle
// @noframes
// ==/UserScript==

(function() {
    'use strict';

    GM_addStyle('#channel-chatroom { display: none !important; }');
    GM_addStyle('#sidebar-wrapper[data-nosnippet="true"] { display: none !important; }');
    GM_addStyle('div[class*="sidebar-collapsed-width"][class*="xl:hidden"] { display: none !important; }');
    function hide() {
        const elements = document.querySelectorAll('[class*="group-data-[chat"]');
        const filtered = Array.from(elements).filter(el => !el.classList.contains('data-[is-resizing=true]:transition-none'));
        filtered.forEach(el => {
            el.style.setProperty('display', 'none', 'important');
        });
        const bloc = document.querySelector('a[href="/category/just-chatting"]')?.closest('div.flex');
        if (bloc) { bloc.style.display = 'none'; }
    }
    if (!location.href.match(/^.*\/videos.*$/)) { setInterval(hide, 1.75 * 1000); }

    var join = "?s=";
    var murl = location.href;
    var wait = 5;
    var redo = 0;

    function mmov(time) {
        const targets = document.querySelectorAll('video');
        targets.forEach(target => {
            ['mousedown', 'mouseup', 'click'].forEach(eventType => {
                target.dispatchEvent(new MouseEvent(eventType, {
                    bubbles: true,
                    cancelable: true
                }));
            });
        });
        setTimeout(() => {
            const target = document.querySelector('span[data-orientation="horizontal"]');
            const event = new PointerEvent('pointerdown', {
                bubbles: true,
                cancelable: true,
                composed: true,
                pointerId: 1,
                pointerType: 'mouse',
                isPrimary: true,
                clientX: 151,
                clientY: 521,
                button: 0,
                buttons: 1,
                pressure: 0.5
            });
            target.dispatchEvent(event);
            setTimeout(() => {
                document.querySelector("video").currentTime = time;
                const target = document.querySelector('span[data-orientation="horizontal"]');
                target.dispatchEvent(new PointerEvent('pointerup', {
                    bubbles: true,
                    cancelable: true,
                    composed: true,
                    pointerId: 1,
                    pointerType: 'mouse',
                    isPrimary: true,
                    clientX: 151,
                    clientY: 521,
                    button: 0,
                    buttons: 0
                }));
            }, 357);
        }, 135);
    }

    function msec(inpt) {
        var info = inpt.split(":");
        if (info.length == 3) {
            return ((parseInt(info[0]) * 3600) + (parseInt(info[1]) * 60) + parseInt(info[2]));
        }
        return 0;
    }

    function mbuf(objc, urls, time) {
        if (urls == "") {
            /*var left = new KeyboardEvent("keydown", { bubbles:true, cancelable:true, keyCode:37, which:37, key:"ArrowLeft", code:"ArrowLeft" });
            objc.dispatchEvent(left);
            objc.currentTime = time;*/
            mmov(time);
        } else {
            location.href = (urls + join + time);
        }
    }

    function rsec(time) {
        const hour = Math.floor(time / 3600);
        const mins = Math.floor((time % 3600) / 60);
        const secs = Math.floor(time % 60);
        const hhxx = String(hour).padStart(2, "0");
        const mmxx = String(mins).padStart(2, "0");
        const ssxx = String(secs).padStart(2, "0");
        return (hhxx + ":" + mmxx + ":" + ssxx);
    }

    function cvid(objc) {
        return (objc && (objc.src == "") && (!location.href.match(/^.*\/videos\/.*$/)));
    }

    var r = -1;
    var d = -2;
    var z = -3;
    function mtxt() {
        var q = document.querySelector("video");
        var s = location.href.replace(/\?.*$/mig, "");
        if (cvid(q)) {
            var t = parseInt(q.currentTime);
            var u = (q.duration == Infinity) ? 0 : parseInt(q.duration);
            var c = document.getElementById("channel-content");
            if (c) {
                var o = document.querySelector('[data-testid="follow-button"]');
                if (o) {
                    o.parentNode.innerHTML = ("<span style='font-family:Monaco;'><span id='stop' style='display:none;'></span><span id='last' style='display:none;'>0</span> &nbsp; <a href='" + s + "'><b>&lt;---&gt;</b></a> &nbsp; <a href='javascript:void(0);' onclick='location.href = \"" + s + "?s=\" + document.getElementById(\"secs\").innerText.replace(/[^0-9]/ig, \"\");'><span id='secs'>[X]</span></a> &nbsp; <a href='javascript:void(0);' onclick='var o = document.getElementById(\"stop\"); var v = document.querySelector(\"video\"); if (o.innerText == \"\") { o.innerText = \"stop\"; v.pause(); } else { v.play(); o.innerText = \"\"; }'><span id='time'>" + rsec(t) + "</span></a> &nbsp; </span>");
                }
                var w = document.getElementById("time");
                if (w) {
                    if (murl.includes(join)) {
                        //var q = document.querySelector("video");
                        var p = (parseFloat(murl.replace(/^.*=/mig, "")) - 5.0);
                        console.log(" TIME " + q.readyState + " p:" + p);
                        z = p;
                        mbuf(q, "", p);
                        murl = "";
                    }
                    var stop = document.getElementById("stop");
                    if ((q.readyState != 4) && (stop.innerText == "")) {
                        console.log(" LOAD " + q.readyState + " r:" + r);
                        if (wait > 0) {
                            wait -= 1;
                        } else {
                            if (r > 15) {
                                location.href = (s + join + r);
                            } else {
                                location.href = s;
                            }
                            stop.innerText = "x";
                        }
                    }
                    if ((r > 0) && (z > 0)) {
                        r = z;
                        z = -3;
                    }
                    var last = document.getElementById("last");
                    var h = parseInt(last.innerText);
                    var y = document.getElementById("secs");
                    var e = parseInt(r + ((u - r) * 0.75));
                    if (u != 0) {
                        if ((r > 0) && ((t < 15) || (e < t))) {
                            console.log(" KICK " + q.readyState + " w:" + w.innerText + " t:" + t + " u:" + u + " h:" + h + " e:" + e + " r:" + r);
                            mbuf(q, s, r);
                            redo = 5;
                        } else {
                            y.style.color = "#31e531";
                            y.innerText = (" [" + t + "] ");
                            r = t; d = -9;
                            last.innerText = t;
                            document.getElementById("time").innerHTML = ("-" + rsec(u - t));
                        }
                    } else {
                        y.style.color = "#e95555";
                        y.innerText = (" [" + t + "] ");
                        r = -9; d = t;
                        last.innerText = "0";
                        document.getElementById("time").innerHTML = ("+" + rsec(t));
                    }
                }
            }
        }
    }

    function maud() {
        var vido = document.getElementById("vido");
        var volu = document.querySelector("video");
        if (cvid(volu)) {
            if (!vido) {
                var main = document.querySelector("main").parentNode;
                document.body.innerHTML = "<div id='vido'></div>";
                document.body.appendChild(main);
                //const newd = document.createElement("div");
                //newd.id = "vido";
                //document.body.appendChild(newd);
                setInterval(mtxt, 1.91 * 1000);
            } else {
                volu.volume = 1;
            }
        }
    }
    setInterval(maud, 1.91 * 1000);
})();

When reading packets or network data from a tunnel interface, the order in which they are read does matter as they can impact connectionless protocols and also cause stateful protocols to spend time re-ordering data! There were three techniques that I tried implementing to solve this issue:

• Map a packet address to a thread index during the entire time of every connection state
• Index and order every packet read by number and wait to write them out in the same sequence
• Lock and time and order each threaded process just like many pistons firing inside of an engine block

One other observation I noticed is speed tests may seem lower which I believe is because of all the extra inner header data being prepended to the buffers in addition to the outer IPv4 + TCP headers:

• MITM: Encryption header/trailer
• MTUN: Encryption header/trailer + Inner IPv4 header + Inner protocol header
• GTUN: Encryption header/trailer + Inner IPv4 header + Inner protocol header + Batch read header

Added note: Making a VPN-style MITM Proxy service which handles thousands of network states and file descriptors is all about connection management and thread management!

Final note: Building these solutions on top of TCP allows for larger payloads, ordered delivery, auto keepalives, and connection management – full size MTU!

~

MTUN: github.com/stoops/vpn

MITM: github.com/stoops/mitm

~

https://fossjon.com

https://xorcipher.com

https://icanhazdns.com

~

It is inspired by icanhazip.com but it returns a little more information as well!

curl icanhazdns.com

~