161–170 of 198 posts
I wish you the best of luck. When similar events unfolded in Syria, people created redundant social networks of fake Facebook accounts. This seemed to work well. When captured and tortured, people would hand over credentials for one account. People would detect that network was "burned" and move to the next one. This gave the officials very little information, since the accounts did not reference real names, and loca…
Please if you're having trouble setting up Shadowsocks consider using Outline (getoutline.org) asl19.org and their Telegram bot for generating Outline access keys. This team has put in years of effort to make Shadowsocks usable by regular people
Also, the copyright notice at the bottom of their help center is Google: https://support.getoutline.org/s/article/Data-collection?lan...
A tiny bit more digging and it is actually Google in sheep's clothing: https://jigsaw.google.com/
That's gonna be a no for me, dawg.
the servers inside Iranian data centers still have access to the outside world. Knowing that, the simplest and easiest solution that would avoid detection is to SSH tunnel into that datacenter and SSH-ProxyForward out of that datacenter into Amazon AWS via SSH and use that SSH proxy chain as a SOCKS proxy for browsers. Make sure the browser is using the SOCKS proxy (SSH) for its DNS. Many sites will make your friends…
Would traffic shaping still enable to guess this is a browser usage rather than a typical ssh?
SSH can be used for file transfers via sftp so it is not uncommon to have long transfers of data. In this edge case however one could set up a simple rate limited rsync over ssh and then rate limit ssh slightly higher so that the browsing shares the bandwidth creating a relatively smooth data stream. Data streams are not expected to be perfectly constant across the internet so a little fluctuation would be fine.
If Multiplexing is being used via ControlMaster ControlPath in the client then the people browsing will be riding the extra SSH channels without having to re-authenticate after their first authentication. The first SSH channel would be used for the SFTP transfer.
rsync -aq --bwlimit=600 /some/dir/big-file ssh-first-hop:/dev/null
tc qdisc add dev eth0 handle 101: root cake diffserv3 bandwidth 6mbit internet nat egress ack-filter triple-isolate ethernet memlimit 32M
All of this said, I do not believe this step is required unless a datacenter's SSH traffic patterns were already being traffic profiled and I would theorize that for this to be the case Iran's intelligence agency would have been watching them for other reasons.
the servers inside Iranian data centers still have access to the outside world. Knowing that, the simplest and easiest solution that would avoid detection is to SSH tunnel into that datacenter and SSH-ProxyForward out of that datacenter into Amazon AWS via SSH and use that SSH proxy chain as a SOCKS proxy for browsers. Make sure the browser is using the SOCKS proxy (SSH) for its DNS. Many sites will make your friends…
This is a good recommendation. Using Tor sounds good in theory, but it's too far easy to identify all of the Tor connections and identify the residences connected to them. I would suggest using SSH tunnels on whatever port a given server normally communicates on. If this is 443, connections should just look like normal web browsing on an ISP level. If the server is used to transmit other data over TLS using that port…
The connection to the residence would be the last hop in the SSH proxy foward chain meaning that all Iran will see is Datacenter -> AWS. Then it is AWS -> residence. Iran would not have visibility into AWS egress traffic, rather Five-Eyes [1] would see everything in and out of AWS.
Datacenter -> Non-Iranian-AWS Region -> Non-Iranian Residence -> Internet.
The flow from the DC to AWS is all they would see.
Back in the 80's, I remember that people were protesting without internet and mobile phones, with very successful results. They bought down the iron curtain after all. The most sophisticated technology they used was the printing press, for printing and distributing fliers, newspapers and censored books. Underground groups were organized in cells too, without phones, email or apps. Right now, it seems like those who u…
Just curious, is there some sort of special license or permission required to get access to computing resources like these in Iran, like there is with the Chinese website license number thing? I have thought about trying to run a VPN server on my EC2 web server for my friends in Iran but not sure if regular VPN protocols are even allowed through. I don't think they know what Tor is much less how to set it up with a c…
Mostly not. Censorship works by elimination, not by requiring initial permission. The main exception is internet access to blocked services. Government supporters get access to services that are otherwise blocked to the public.
> They claimed to believe that it was blocked because of US sanctions and denied that the government blocked any websites
The government and their supporters are bad liers. By bad, I mean they don't even try to make it convincing. The president told a foreign journalist that covering is optional in Iran. That is while their "morality police" has killed a woman and the whole country is burning in riots. This is while that same journalist is wearing scarf to be allowed to talk to the president, in US!
Funny how the women's rights situation in Iran became bad enough to prompt large scale protests within two weeks of Iran joining SCO. Not two months earlier. Not two months later. Just within weeks.
SCO? The country code for Scotland? The Santa Cruz Operation? What's SCO in this context? My (30 seconds of) searching turned up nothing plausible.
We all sympathize with the death of Mahsa Amini. However, don't be a fool and destabilize and destroy your own country at the hands of foreigners. What do you intend to achieve with the chaos? Syria? Iraq? Afghanistan? Division of Iran into ethnic and religious enclaves? Because that is what the CIA/NSA/Mossad is working for. I'm all for protests by and for Iranians but this is no longer something related to Iran. An…
Both parts benefit. Educating people how to avoid the government in a open and public forum has the collateral of educating the Iranian government (the only part holding real, unlimited access outside the country) into where to look for and what signals to catch. They will learn the tricks fast, so is unclear if this will be good or bad for the Iranian people in the end.
I wonder, just wondering... if hair is forbidden and so disturbing for the male in that country, women with a full shaved head could just appear in public in mass without neither hiding their head, nor breaking the law, and [in theory] avoiding the entire legal trap without frontally opposing the power. Right?.
"You don't stand women hair, is dirty and lascivious for you?, okay, hair is gone, will not hidden anymore the purple spots in my head where you hit me. Are you happy now, manchild?"
I know that things are not so simple, but... oblique seems the way to go.
Funny how the women's rights situation in Iran became bad enough to prompt large scale protests within two weeks of Iran joining SCO. Not two months earlier. Not two months later. Just within weeks.
Yeah, murdering a woman for not wearing her hijab properly is just a western plot. Iranians can't possibly have any agency. Is that what you're saying?
> Iranians can't possibly have any agency. Is that what you're saying?
As someone who grew up in a country that had experienced FOUR US backed coups, multiple 'spontaneous people's movements' of the same nature, yes. That's precisely what Im saying.
The agency that the locals have in such situations is co-opted and subverted by the source that organizes the protests, leaving only a husk of their original intention represented by various symbolism and paraphernalia. The resulting government NEVER does anything in line with the original protests. The policies are always privatizing the nation's resources, setting up US bases, borrowing more from US-controlled financial institutions, reduction of labor protections, deregulation. The same ills that plague the US.
Even if one is not a student of geopolitics or has no knowledge of recent political history, he or she can easily tell who backed such a regime change operation by the resulting policies.