Live data from Hacker News

United Arab Emirates goes from 10k Tor users to 250k in days

metrics.torproject.org

71–78 of 78 posts

Re: United Arab Emirates goes from 10k Tor users to 250k in days

#71
post #28

What this really indicates, bot or not, is that once you educate people, they will act in their self (and more importantly, self+others) interests. Oppressive and controlling (controlling or controling, I can never decide) regimes will try to prevent it. But it is like trying to prevent wind. The wind will come. You must adapt and accept. And if you are against the wind, you must change.

>What this really indicates, bot or not, is that once you educate people, they will act in their self (and more importantly, self+others) interests. That's an idealistic sentiment that's unfortunately not actually true. There are abundant examples if you look at politics or gambling.

Gambling is a (serious) game, where you're totally supposed to eat you neighbour to get on top.

Politics works on a heavily skewed sample of power-hungry people. Politicians are nothing like their people. Most are among the top 1%, which is a weird bunch: they are visible, powerful, don't have the same incentives, and don't live under the same social pressures as the rest of us.

Re: United Arab Emirates goes from 10k Tor users to 250k in days

#72
post #54

The same rise was seen in Turkey last month. The phenomenon is caused by failed reconnect due to DPI-based censorship. See Annex A: https://turkeyblocks.org/2016/12/18/tor-blocked-in-turkey-vp...

I don't think DPI is the answer here:

o In the case of Turkey, they had more than 10k direct users, the DPI-based censorship yielded a 50k spike, that's a 1:5 ratio, whereas in the case of the UAE it's a freaking 1:30 ratio and it doesn't stop from increasing.

o In the case of Turkey, the spike was followed by a spike in bridge use, most using the obfs4 pluggable transport. There's however no such apparent spike for UAE, in fact it's only a nearly constant 300 obfs4 users https://metrics.torproject.org/userstats-bridge-combined.htm...

Re: United Arab Emirates goes from 10k Tor users to 250k in days

#73

Earlier quoted context omitted.

It was never released: http://motherboard.vice.com/read/carnegie-mellon-university-...

Interesting and concerning. Thanks.

It's not concerning. The flaw was 1) only about hidden services, 2) was patched the next day it was released 3) The Tor Project have been doing some extraordinary work on creating a stronger and secure onion service infrastructure which will be deployed by hopefully mid-2017.

Re: United Arab Emirates goes from 10k Tor users to 250k in days

#74
post #5

Any chance this could be a state-sponsored attack aimed at correlating traffic?

This is probably the case. I don't think that there's any indication that UAE users are starting to use Tor en masse.

My guess is that this is a state sponsored attack that uses HTTP Injection at the ISP level to hack as much users as possible, and the C&C is most probably a hidden service that's why they also deployed Tor.

Re: United Arab Emirates goes from 10k Tor users to 250k in days

#75
post #35

Earlier quoted context omitted.

Which incentives are you referring to here?

The markets and cryptocurrency.

I haven't heard that these have led people to add more capacity to the Tor network (although that's definitely plausible). Is there a public source for this connection?

Re: United Arab Emirates goes from 10k Tor users to 250k in days

#76
post #75

Earlier quoted context omitted.

The markets and cryptocurrency.

I haven't heard that these have led people to add more capacity to the Tor network (although that's definitely plausible). Is there a public source for this connection?

No source I can think of on top of my head, just the various efforts and willingness to do so.

Basically open source volunteer projects fail pretty hard until an economic incentive is added.

On another note, I2P has attempted several times to add a cryptocurrency to its protocol layer.

Re: United Arab Emirates goes from 10k Tor users to 250k in days

#77
post #73

Earlier quoted context omitted.

Interesting and concerning. Thanks.

It's not concerning. The flaw was 1) only about hidden services, 2) was patched the next day it was released 3) The Tor Project have been doing some extraordinary work on creating a stronger and secure onion service infrastructure which will be deployed by hopefully mid-2017.

It's concerning that the paper was never released.

Re: United Arab Emirates goes from 10k Tor users to 250k in days

#78
post #72
post #54

The same rise was seen in Turkey last month. The phenomenon is caused by failed reconnect due to DPI-based censorship. See Annex A: https://turkeyblocks.org/2016/12/18/tor-blocked-in-turkey-vp...

I don't think DPI is the answer here: o In the case of Turkey, they had more than 10k direct users, the DPI-based censorship yielded a 50k spike, that's a 1:5 ratio, whereas in the case of the UAE it's a freaking 1:30 ratio and it doesn't stop from increasing. o In the case of Turkey, the spike was followed by a spike in bridge use, most using the obfs4 pluggable transport. There's however no such apparent spike for…

Actually bridge use has just gone up like Turkey. It took a couple of days after your comment for the UAE charts to get updated.

Wait a week more and we'll see if the same noisy zig-zag pattern appears in unbridged connections that showed up in Turkey. That's the smoking gun.

Post reply on HN