Ben Tasker's Blog

An Open Letter on Medicinal Cannabis in the UK

Details: Published: Friday, 23 February 2018 22:50; Written by Ben Tasker

Today, I watched as one of our representatives denied the opportunity to even debate the benefits of Medicinal Cannabis. Such was his disregard for those suffering, he seems to have acted to prevent simple discussion of the pros and cons.

I'm ashamed to say that he's the MP for the Town I grew up in. For years I've watched people fruitlessly try to convince our MPs to listen, today was too much and I've decided that I need to put my head above the parapet and share my experience in this area.

Below is an open letter which I've sent to the leaders of the 3 main UK political parties

A guide to designing Account Security Mechanisms

Details: Published: Sunday, 26 March 2017 14:53; Written by Ben Tasker

The history of the Internet is rife with examples of compromises arising both from poor security hygiene, and also from misguided attempts to "make it more secure" without first considering the implications of changes.

In this post, I'll be detailing some of the decisions you should be making when designing account security and user management functionality.

There's likely little in here that hasn't already been stated elsewhere, but I thought it might be helpful to put it all together in one post.

The post itself is quite long, so headings are clicky links to themselves. For those with limited time, there's a Cheat Sheet style summary towards the bottom.

Scheduled Downtime

Details: Published: Thursday, 15 December 2016 10:20; Written by Ben Tasker

This site will be unavailable for a short period later whilst the hosting company performs some essential hardware maintenance on my origin server.

As a result, some pages on the site may be unavailable.

https://mailarchives.bentasker.co.uk will also be unavailable as a result, other subdomains (such as http://projects.bentasker.co.uk) should remain available, although service may be limited.

Update 12:50 16/12

The maintenance has now been completed successfully and all services should be back online. Anyone experiencing issues should Contact me

Don't Use Web2Tor/Tor2Web (especially Onion.cab)

Details: Published: Saturday, 04 March 2017 19:12; Written by Ben Tasker

Web2Tor and Tor2Web are reverse proxies which allows clearnet users to access Tor Onion Sites (AKA Hidden Services), and there are a variety of services available online (such as onion.to, onion.cab, onion.city and onion direct) running this service.

This post details why using these is such a bad idea, as well as detailing some of the changes I'm making to the site to help discourage use of these services.

Building a Tor Hidden Service CDN

Details: Published: Wednesday, 10 August 2016 17:04; Written by Ben Tasker

Last year I started experimenting with the idea of building a Hidden Service CDN.

People often complain that Tor is slow, though my domain sharding adjustments to the bentasker.co.uk onion have proven fairly effective in addressing page load times.

On the clearnet, the aim traditionally, is to try and direct the user to an edge-node close to them. That's obviously not possible for a Tor Hidden service to do (and even if it were, the users circuit might still take packets half-way across the globe). So, the primary aim is instead to spread load and introduce some redundancy.

One option for spreading load is to have a load balancer run Tor and then spread requests across the back-end. That, however, does nothing for redundancy if the load-balancer (or it's link) fails.

The main aim was to see what could be achieved in terms of scaling out a high traffic service. Raw data and more detailed analysis of the results can be seen here. Honestly speaking, It's not the most disciplined or structured research I've ever done, but the necessary information should all be there.

This document is essentially a high-level write up along with some additional observations

BenTasker.co.uk

Ben Tasker's Blog

An Open Letter on Medicinal Cannabis in the UK

A guide to designing Account Security Mechanisms

Scheduled Downtime

Update 12:50 16/12

Don't Use Web2Tor/Tor2Web (especially Onion.cab)

Building a Tor Hidden Service CDN

More Articles ...