Как диагностировать сбои VLESS-подключения: время, DNS, SNI и логи клиента

·4 views

Разработчик сервиса Unlimited VPN описывает практическую методику поиска причин, по которым VLESS-соединение не работает. Сначала предлагается определить уровень сбоя: доступность сервера по сети, установку защищённого рукопожатия, проксирование трафика и разрешение доменных имён. Значительной частой причиной отказа названо расхождение системного времени между клиентом и сервером, особенно на Android TV-приставках. Автор советует читать журнал клиента, ища первую ошибку после подключения, и различать таймауты, сбросы соединения и проблемы DNS. Также рекомендуется импортировать конфигурацию целиком, а не вручную, и сравнивать работу через разные сети и устройства. Материал содержит рекламный фрагмент о собственном сервисе автора.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Rejetto HFS 3.0.0-3.2.0 Flaw Lets Attackers Forge Admin Sessions

Rejetto HFS, a widely deployed single-executable file server with a browser admin page, has a vulnerability tracked as CVE-2026-61500. Affected versions 3.0.0 through 3.2.0 derive the session cookie signing key from JavaScript's Math.random(), a non-cryptographic generator. Because its outputs are exposed during login, an attacker can reconstruct its internal state and recover the key to forge administrator sessions. Such access can escalate to code execution through the server_code feature, potentially under a local administrator account. Version 3.2.1 contains the fix, and administrators are advised to restrict admin interface exposure, reduce service privileges, and treat pre-upgrade sessions as suspect.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

CS graduate joins DEV Community, plans to share Web3 and development learning

A computer science graduate has introduced themselves as a new member of the DEV Community. Their interest in tech began with web development and later extended to Web3, hackathons, and other areas of software engineering. They say they plan to explore new technologies, share their projects and challenges, and connect with other developers. The post also encourages readers to share which technology they are currently excited about.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

AI Agents Logging In With Owners' Passwords Alarms Banks

Developers have commonly handed their own passwords or equivalent keys to AI agents so the agents can access dashboards, cloud consoles, and banking sites. US banks are reportedly detecting unverified agentic activity on customer accounts, and Chase has warned customers against sharing credentials with third-party agents. Banks cannot easily distinguish a legitimate agent using a password from a criminal using stolen credentials, since both produce similar signals. Actions taken by an agent under a shared login are attributed to the account owner, creating accountability and fraud risks. The article recommends giving each agent its own scoped, time-limited identity with auditing and revocation, citing new products from 1Password and IDENTOS as early examples.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

SlothSync Uses Gemini to Turn Task Lists into Gentle, Manageable Steps

SlothSync is an open-source Python web app that takes a cluttered list of errands and obligations and converts it into a few small next steps. It also separates out tasks that can safely wait. The backend sends the list to Google's Gemini API using a key stored in a local .env file, while the browser saves drafts and the latest plan in local storage. Because the tasks are processed through a hosted API, the app needs an internet connection and does not run an open-weight model offline, which the challenge brief asked for. The author has not yet measured how much time the tool saves.

0 comments Read more at DEV Community