Live data from Hacker News

Help users in Iran reconnect to Signal

signal.org

231–240 of 417 posts

Re: Help users in Iran reconnect to Signal

#231
post #224
post #114

Earlier quoted context omitted.

I noticed the same thing, and filed an issue [1]. The first reply does not fill me with a lot of confidence (but it's unclear to me whether the person is affiliated with the project or not). [1] https://github.com/signalapp/Signal-TLS-Proxy/issues/6

They have completely disabled issues on that repository. Wow I used to really like Signal...

And it seems they've fixed the issue, without any kind of public comment.... still not great: https://github.com/signalapp/Signal-TLS-Proxy/commit/39a97da...

Re: Help users in Iran reconnect to Signal

#232
post #228

Almost everyone in these comments is asking questions of various degrees of pedantry or outright dissing signal/moxie/no federation/whatever... Just spin up a server if you can spare the expense and help some people out. Action > inaction. edit: you can get the connection details via @appliedlambdas on twitter!

Whoa whoa whoa… there can be legal consequences for spinning-up a proxy in countries sanctioning Iran. This is a case where action can in fact be way worse for someone than inaction. I still can't find any discussion about that and it's worth investigating.

I imagine that you're right, but it feels like a really weird case to choose to prosecute.

Re: Help users in Iran reconnect to Signal

#233
post #175

Earlier quoted context omitted.

And this new way, while less convenient, is arguably superior due to its decentralisation. They’re not just going after one service they’re now going after people all around the world running these proxies. Just set one up myself took 15 minutes and that includes setting up a fresh VPS. Just thinking what the best way to share it is.

I've been mulling this over today, as your ability to get the name/IP of the proxy has to be censorship resistant as well. The best idea I've had so far is using a CNAME response to a very common DNS query which would pass a basic filter, like I'd ask for "mail.mydomain.com" and it would respond with a CNAME pointing to the actual proxy. I have dead domains which I have configured with null records for MX and stuff (…

Using innocent sounding CNAMEs on abandoned domains is definitely a smart idea.

I’ve definitely got some old domains kicking about, I’ll see how far off they are from expiration and do something similar if they have at least a few months left in them.

The proxies themselves can also be hosted at normal sounding domains and subdomains like cdn.technology.memes or whatever.

And when you point other domains to them as CNAMEs use equally regular looking subdomains no algorithm would pick up as a proxy like webmail.abandoned.tld.

Re: Help users in Iran reconnect to Signal

#234

Signal should be federated. This censorship problem would not exist, or would be organically routed around, were the service federated. Without federation, Signal is just another stepping stone in the long path of eventually abandoned instant messengers, all the way back from ICQ. We will get to an SMTP-like protocol, and email-like service, at some point. If not Signal, some other one.

I’m not so sure. Moxies reasons about how federation leads to protocol development slowing and then freezing are solid. It’s why we re not using smtp for chat. SMTP can’t be extended enough so replacements are built instead. Similarly if signal federated, eventually it would freeze and a few years later users would move to wherever they could get new features. Federation is a good thing but only when the protocol is…

Not really kept up with the latest with this, but chat over IMAP is a thing

https://archive.fosdem.org/2020/schedule/event/coi/

Re: Help users in Iran reconnect to Signal

#235
post #220

Earlier quoted context omitted.

Correct, both Google and Amazon told Signal not to use them for domain fronting: https://signal.org/blog/looking-back-on-the-front/

Gross! I wonder what motivated these decisions inside Amazon & Google. This likely affects the Tor project domain fronting as well. We really should not have let the majority of internet traffic be served by a small handful of giant companies without some legal protections as to what they're allowed to do.

Probably malware using domain fronting techniques for C2 traffic played a role in that decision. E.g. https://threatpost.com/apt29-used-domain-fronting-tor-to-exe...

Re: Help users in Iran reconnect to Signal

#236
It's an irony how American companies try circumvents another country's law (regardless of whether you call it censorship or not, it is still a law) and boast about it.

Yet, in the US these companies help the mainstream narrative to enforce censorship by banning (Google and Apple App market) or simply not offering other point of views basic hosting services (AWS).

I am an Iranian and don't agree with all of our government actions but I can clearly see a tech neo-colonialism/neo-imperialism here. I am sure Signal's intention and people wanting to help is genuinely good but this does not change this double-standard.

I would like to see your supportive reaction if an Iranian company offers hosting to Parler. I imagine you would call it foreign intervention!

Re: Help users in Iran reconnect to Signal

#237
post #231
post #224

Earlier quoted context omitted.

They have completely disabled issues on that repository. Wow I used to really like Signal...

And it seems they've fixed the issue, without any kind of public comment.... still not great: https://github.com/signalapp/Signal-TLS-Proxy/commit/39a97da...

I (partially) fixed this issue, and I'm not affiliated in any way with Signal. It's public (https://github.com/signalapp/Signal-TLS-Proxy/pull/2), and it looks like they welcome contributions, because they merged mine.

Re: Help users in Iran reconnect to Signal

#238
So their government is blocking Facebook, Twitter, Youtube, Telegram, Signal, BBC, CNN, Netflix, and probably many other social and media platforms.

Meanwhile we are blocking Iranians to access Docker, Slack, Gitlab, Google Code, Github(Github until recently), Paypal, Apple Store, Play Store, AWS, Coursera, Adobe, Nvidia, AVG, Avast, Symantec, McAfee, Matlab!!, Oracle and many more.

It should be really fun to use Internet in Iran.

Re: Help users in Iran reconnect to Signal

#239
post #102

Earlier quoted context omitted.

Unless the government can seize Starlink's assets, or shut down/harm their operations, they can't really tell Starlink to do anything. E.g. if they can shoot down satellites, they'd have influence. This is especially true for economies that are as disconnected from the US as the Iranian one is. The only thing a state has control over is payments from users. But if smuggling in transceiver equipment with pre paid traf…

Starlink will need a license to broadcast in the country. And the dishes also need to transmit which will give away your position.

Dishes don't have to transmit, only if you want an upload channel. It's entirely thinkable that important content like websites or feeds by important influencers is pushed to all users.

Re: Help users in Iran reconnect to Signal

#240

Hi, from Iran with love! First of all, thank you moxie and signal team for this proxy. Until 2018, many Iranians used telegram but Iran's regime after Russia blocked this messenger. telegram released mtproxy and this proxy was helpful. Russia lifted the ban on telegram but this app is still blocked on my country. but with VPNs, many iranians still use this app. after 2018, second most popular messaging app in iran wa…

Thx Sherwin! Just out of curiosity: is iMessage working ok in Iran?
Post reply on HN