andrew / Andrew is on Nostr

I love fruit & people. Exploring Bitcoin code & blocks.

Last Notes

2023-01-30 03:41:43 GMT

- reply

RoR probably better than Py, especially at the time.

2023-01-05 06:49:13 GMT

- reply

So, looks like you didn’t actually try it in Safari? Still needs the resolver hack. However with a modified proxy.pac served from caddy (Safari needs SOCKS, does not respect SOCKS5), I could get it working without privoxy, thank you for that!
cat /opt/homebrew/etc/Caddyfile
{
admin off
http_port 2019
auto_https off
}
http://localhost:2019
header /proxy.pac Content-Type application/x-ns-proxy-autoconfig
respond /proxy.pac 200 {
body `function FindProxyForURL(url, host) { if (shExpMatch(host, "*.onion"))
{ return "SOCKS5 127.0.0.1:9050;SOCKS 127.0.0.1:9050"; } return "DIRECT"; }
`
close
}

2023-01-05 04:38:21 GMT

- reply

Looks smart, thanks! I didn’t know proxy auto-configuration can force Safari skip hostname resolution. Will try to simplify to this later (definitely using some non-Apache web server though haha).

2023-01-05 04:27:09 GMT

Spent too much time making Safari and Orion open onion links on macOS. Local tor, privoxy, unbound — mDNSResponder kept dropping *.onion queries.
Tracked it down to undocumented Apple code. /etc/resolver/onion did the trick on Ventura. Ugh, what a mess.
https://github.com/apple-oss-distributions/configd/blob/ebd2cef166d947659a001b076ea919351f7baf5d/Plugins/IPMonitor/controller.m#L1492-L1553
Here are the core configs:
/etc/resolver/onion:nameserver 127.0.0.1
/opt/homebrew/etc/privoxy/user.action:{+forward-override{forward-socks5t 127.0.0.1:9050 .}}
/opt/homebrew/etc/privoxy/user.action:.onion
/opt/homebrew/etc/privoxy/user.action:check.torproject.org
/opt/homebrew/etc/unbound/unbound.conf: private-domain: "onion"
/opt/homebrew/etc/unbound/unbound.conf: domain-insecure: "onion"
/opt/homebrew/etc/unbound/unbound.conf: local-zone: "onion." nodefault
/opt/homebrew/etc/unbound/unbound.conf: local-zone: "onion." redirect
/opt/homebrew/etc/unbound/unbound.conf: local-data: "onion. IN A 1.1.1.1"