181–190 of 417 posts
edit: https://twitter.com/alsdkjflasdkjf1
edit2: You can drop me a mail here, too: jegzc4na8j7@temp.mailbox.org
I'd be happy to run this, but I don't really feel like spreading this (for everyone I know) useless info into my social network (which would be via email for me?) I would gladly sent a link to Signal for my proxy though so they can forward it to people that need it? Hmm, I'm beginning to see the problem now..
Earlier quoted context omitted.
Does this use TCP over TCP (painful in the face of packet loss[1]) or can you do something like using QUIC for the forward proxy to try to avoid breaking the tunneled TLS connection's retry timers? [1]: http://sites.inka.de/sites/bigred/devel/tcp-tcp.html
It looks like a normal HTTP proxy supporting CONNECT (i.e. TLS over TLS), which wouldn't suffer from the problem you mention. Note that TLS over TLS is _not_ the same thing as TCP over TCP. TCP over TCP is usually only a problem for VPNs or something similar (i.e. anything that sends raw IP packets over TCP).
Earlier quoted context omitted.
Iran blocks every major foreign messaging app, except WhatsApp. Signal escaped it until now only because they had so few users. Also keep in mind that while WhatsApp claims to use the Signal protocol, they installed a backdoor that allows them to MITM conversations. So yes, I’d say it’s virtually guaranteed that WhatsApp is sending unencrypted message data to Iran, and of course to the US too.
https://signal.org/blog/there-is-no-whatsapp-backdoor/
— Perhaps the door is cracked (or ajar) and a microphone is listening in ... still?
Hi, from Iran with love! First of all, thank you moxie and signal team for this proxy. Until 2018, many Iranians used telegram but Iran's regime after Russia blocked this messenger. telegram released mtproxy and this proxy was helpful. Russia lifted the ban on telegram but this app is still blocked on my country. but with VPNs, many iranians still use this app. after 2018, second most popular messaging app in iran wa…
Regarding Tor: if you want a Signal-like app that uses an onion router look at Session. [2]
It uses the same encryption protocol and very similar UI to Signal but routes all traffic through the Loki network so your traffic passes through three nodes. It is an onion network like Tor.
One other benefit of Session is the lack of metadata inherent to its design. No phone numbers or even usernames are attached to your account. You get a set of characters that looks similar to a bitcoin address and a QR code to make sharing it easier.
Of course this lacks the convenience of Signal but it’s as hard to block as Tor.
Hi, from Iran with love! First of all, thank you moxie and signal team for this proxy. Until 2018, many Iranians used telegram but Iran's regime after Russia blocked this messenger. telegram released mtproxy and this proxy was helpful. Russia lifted the ban on telegram but this app is still blocked on my country. but with VPNs, many iranians still use this app. after 2018, second most popular messaging app in iran wa…
I'm surprised that Tor isn't integrated already. Moxie was pushing that at Twitter - a prototype was even built.
I'd be happy to run this, but I don't really feel like spreading this (for everyone I know) useless info into my social network (which would be via email for me?) I would gladly sent a link to Signal for my proxy though so they can forward it to people that need it? Hmm, I'm beginning to see the problem now..
Agreed, I'd happily run a server but I would need some kind of aggregator service to post my proxy on. Surprisingly enough I don't have many contacts in Iran lol
Moreover, should I run this from my personal server? Could it become a target for nefarious stuff? I feel the same as I do when I think about running a TOR exit node. I want to be like my hero Edward Snowden but... I'm afraid of the stuff that gets associated with my IP address.
Also, a https://www.linuxserver.io/ Docker image would be cool ;)
For instance, Virgil Griffith is being held and charged for giving a high level description of bitcoin transactions at an academic conference in North Korea.
This is incredibly more specific and more technical of an act.
https://www.coindesk.com/usa-v-virgil-griffith-what-we-know-...
Earlier quoted context omitted.
That's the trick isn't it: having an entire population know something an oppressive government doesn't. Even if you teach everyone how to deploy their own servers, then that's the knowledge the government will start targeting. You can make blocks expensive, i.e. blocking other major, useful services that would disrupt society too much for them to want to deal with, but this of course has its own costs. It's censorshi…
At some point, the easier option is for there to be a revolution or some sort of governmental change.
Earlier quoted context omitted.
> can they break whatsapp encryption They don’t have to, they just need Facebook to cooperate.
I think you mean the phone vendors, as they are the ones holding the unencrypted chat history in the users cloud storage. Facebook themselves do not have access to the chat logs (unless they are compelled to inject keys).
To be clear I’m not suggesting this is absolutely happening. I’m merely pointing out it’s entirely possible from a technological perspective given it’s closed source software owned by Facebook. That’s not a recipe for privacy.