Got me thinking about hidden communication techniques using DNS queries or ICMP as the "transport" layer. That would confuse the hell out of everyone :P
IP-over-DNS: http://code.kryo.se/iodine/
Belarus finally bans Tor
81–90 of 127 posts
Re: Belarus finally bans Tor
#82Earlier quoted context omitted.
I'm from Belarus too. Consider the above a fantasy.
By the way, it it legal to _use_ Tor in Belarus? Is it correct, that Tor should be blocked by ISPs, but user can't be punished for circumvention? That's my understanding of the document http://www.pravo.by/main.aspx?guid=12551&p0=T21503059&p1=1&p...
That's my understanding too of the situation too. Thanks for the link, BTW.
Re: Belarus finally bans Tor
#83Earlier quoted context omitted.
I'm from Belarus too. Consider the above a fantasy.
I am neither from Belarus nor Russia and don't know what to think here. If either of you can provide some references to back up your positions that would be great, thanks.
My position is equal to yours: unless there are facts, it's a fantasy (modestly saying).
Moreover, in this particular case there are facts which don't fit into the idea that Russia first experiments in Belarus. For example Russia has a regulation that personal info of user should be stored inside the country (LinkeIn was banned recently for not obeying this regulation). There is no such regulation in Belarus. If Russia was experimenting first in Belarus they would try it here first.
Also, there is Chinese experience to study, I don't see any need for additional experiments.
So, it's nothing more than a conspiracy superstition.
Re: Belarus finally bans Tor
#84Got me thinking about hidden communication techniques using DNS queries or ICMP as the "transport" layer. That would confuse the hell out of everyone :P
There are VPN solutions that work over ICMP https://www.softether.org/1-features/1._Ultimate_Powerful_VP...
Re: Belarus finally bans Tor
#85Earlier quoted context omitted.
If you truly wanted anonymity why wouldn't you buy a $35 raspberry pi and stuff it between your computer and the internet and route all traffic through it through tor? Too many zero days out there in browsers, flash, java, office not to mention configuration slip ups that could nullify your tor protection.
"buy a $35 raspberry pi and stuff it between your computer and the internet and route all traffic through it through tor? Too many zero days out there in browsers, flash, java, office" How does Raspberry Pi help here? If it routes traffic at IP level, it will be transparent at an application level. Firewall/IDS won't help against zero days either.
Indeed. People are wrong with such confidence these days.
Re: Belarus finally bans Tor
#86Earlier quoted context omitted.
From wikipedia: In the Soviet Union, Belarusians were sometimes called bulbashi, a pejorative conjugation of the Belarusian word for potato.
Funny, I was just reading about how non-German residents of Germany use "Kartoffel" (potato) as a perjorative for Germans in Germany. I didn't realize "potato" was such an effective insult it would exist in another country too!
In the game Dota 2, the bracket with players that play so badly it becomes humorous, is often called the "potato bracket".
Ostensibly the term is meant to imply that the players there have about as much capability of thought as a potato.
Re: Belarus finally bans Tor
#87Earlier quoted context omitted.
And then they exploit Firefox bugs to drop phone-home malware on users. But so far, it's only been Windows malware :) And it relies on bypassing Tor's socks proxy.
If you truly wanted anonymity why wouldn't you buy a $35 raspberry pi and stuff it between your computer and the internet and route all traffic through it through tor? Too many zero days out there in browsers, flash, java, office not to mention configuration slip ups that could nullify your tor protection.
Because:
1) Pi only supports about 6MB/s on its ethernet port, meaning that you get 3MB/up and 3MB/down
2) TOR itself is just super slow, so why am I paying for a 350Mbps connection?
3) Most VPN services are fast enough for the above bandwidth, and offer sufficient security against state-based snooping.
Re: Belarus finally bans Tor
#88Earlier quoted context omitted.
If you truly wanted anonymity why wouldn't you buy a $35 raspberry pi and stuff it between your computer and the internet and route all traffic through it through tor? Too many zero days out there in browsers, flash, java, office not to mention configuration slip ups that could nullify your tor protection.
"buy a $35 raspberry pi and stuff it between your computer and the internet and route all traffic through it through tor? Too many zero days out there in browsers, flash, java, office" How does Raspberry Pi help here? If it routes traffic at IP level, it will be transparent at an application level. Firewall/IDS won't help against zero days either.
It's trivial to use iptables to block all traffic except to the SOCKS proxy port on Tor, or even forcibly redirect it all through Tor directly using the transparent proxying support.
Re: Belarus finally bans Tor
#89Earlier quoted context omitted.
Only if banned = illegal?
Normally when a government bans something it is by making it illegal.
Not exactly; there's a lot of instances where something is 'decriminalised', that is, it's technically banned but you won't be prosecuted for it. (e.g. weed in the Netherlands)
Re: Belarus finally bans Tor
#90Earlier quoted context omitted.
"buy a $35 raspberry pi and stuff it between your computer and the internet and route all traffic through it through tor? Too many zero days out there in browsers, flash, java, office" How does Raspberry Pi help here? If it routes traffic at IP level, it will be transparent at an application level. Firewall/IDS won't help against zero days either.
It's trivial to use iptables to block all traffic except to the SOCKS proxy port on Tor, or even forcibly redirect it all through Tor directly using the transparent proxying support.
You can do all that on a host PC as well. I still don't see what additional layer of security Raspberry Pi adds here. Or am I missing something?