Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Tunneling Wikipedia through WhatsApp to (maybe?) get around WiFi restrictions

alexanderell.is

Post reply on HN
Print view View original

121–130 of 137 posts

Re: Tunneling Wikipedia through WhatsApp to (maybe?) get around WiFi restrictions

#121

Post by Matthias247 »

dapids wrote: post #90
Matthias247 wrote: post #59

Earlier quoted context omitted.

Zero-rating at ISPs via SNI inspection is pretty common practice

It's also a preferred hardware inspection as its dead easy to rip the header than to seek mid-message to do message entropy/fingerprinting.

It's indeed pretty simple for TLS over TCP, since the whole ClientHello is part of the first packet and relatively easy parse or seek for. With QUIC it becomes a major pain, since it's not obvious anymore for middleboxes which QUIC packet is the first in a connection, and since Crypto data can be fragmented and reordered (Chrome is doing that by purpose even inside single packets). Therefore hardware inspection would require a pretty full-featured QUIC protocol parser and understanding.

Re: Tunneling Wikipedia through WhatsApp to (maybe?) get around WiFi restrictions

#122

Post by toast0 »

vgb2k18 wrote: post #80
2Gkashmiri wrote: post #33

Earlier quoted context omitted.

Back in 2019 when Indian government put a city of 8 million into a 9 month curfew including internet blackout, I was anxious yo get online. Then they permitted only dozen of "white listed websites", just ones that did not allow anti India propaganda. Anyways, I found amazon India worked. I went to aws, set up a vps and simply used ssh tunnel to it. It worked, for a bit. They closed the default port and I could not sp…

>Used foxyproxy btw HAProxy is also really useful for this purpose, I dare say more-so. For my use-case it solved this problem: "Using 1 port on the remote server (port 443), how can I serve HTTPS (serve a website) and SSH or SOCKS5 (use the server as a proxy)?". HAProxy was good for the task. It could be used to tunnel SSH through HTTPS too, in the case where a corp firewall is using DPI to block standard SSH. What…

Sure. If you run an https proxy that allows CONNECT, that can tunnel ssh, but if you do GET without a fully qualified url, that can serve whatever according to the host header. If you just wanted to tunnel ssh over tls, it's trickier because ssh is server speaks first and http is client speaks first, so as a server, you'd have to guess if your client wants one or the other.

Re: Tunneling Wikipedia through WhatsApp to (maybe?) get around WiFi restrictions

#123

Post by toast0 »

Matthias247 wrote: post #121
dapids wrote: post #90

Earlier quoted context omitted.

It's also a preferred hardware inspection as its dead easy to rip the header than to seek mid-message to do message entropy/fingerprinting.

It's indeed pretty simple for TLS over TCP, since the whole ClientHello is part of the first packet and relatively easy parse or seek for. With QUIC it becomes a major pain, since it's not obvious anymore for middleboxes which QUIC packet is the first in a connection, and since Crypto data can be fragmented and reordered (Chrome is doing that by purpose even inside single packets). Therefore hardware inspection would…

It's easier to just block QUIC. (And UDP in general, might as well)

Re: Tunneling Wikipedia through WhatsApp to (maybe?) get around WiFi restrictions

#124

Post by dapids »

Matthias247 wrote: post #121
dapids wrote: post #90

Earlier quoted context omitted.

It's also a preferred hardware inspection as its dead easy to rip the header than to seek mid-message to do message entropy/fingerprinting.

It's indeed pretty simple for TLS over TCP, since the whole ClientHello is part of the first packet and relatively easy parse or seek for. With QUIC it becomes a major pain, since it's not obvious anymore for middleboxes which QUIC packet is the first in a connection, and since Crypto data can be fragmented and reordered (Chrome is doing that by purpose even inside single packets). Therefore hardware inspection would…

Interesting, thanks for the insight.

Re: Tunneling Wikipedia through WhatsApp to (maybe?) get around WiFi restrictions

#125

Post by toast0 »

cranekam wrote: post #56
axiosgunnar wrote: post #24

Earlier quoted context omitted.

This is a very good question. I would also assume that Whatsapp might change the servers used with updates of the app. How would Delta deal with that? Just wait for the complaints to come in?

WhatsApp (now, since it moved into FB's infra) connects to g.whatsapp.net, which is a CNAME to chat.cdn.whatsapp.net, which in turn is an A record to a VIP on Facebook's edge network. The A record you're returned can change — it's intended to be one that's closest to you (as determined by your DNS resolver's location and probably EDNS Client Subnet) but traffic engineering policies might cause different responses ove…

> Updates to the app almost certainly won't change the address it connects to.

Well, they have before. There's four generations of hostnames that were used before g. But g seems likely to work for quite a while.

Re: Tunneling Wikipedia through WhatsApp to (maybe?) get around WiFi restrictions

#126

Post by Drblessing »

nyuszika7h wrote: post #119
Drblessing wrote: post #60

Earlier quoted context omitted.

Shockingly Signal was working on my last flight - maybe telegram works but they don't advertise?

Maybe it has to do something with WhatsApp also using the Signal protocol, though you'd think generally they'd whitelist IPs or hostnames rather than doing DPI.

What's DPI? I have no idea how this whitelisting works but I'm curious!

Re: Tunneling Wikipedia through WhatsApp to (maybe?) get around WiFi restrictions

#127

Post by blacksmith_tb »

Drblessing wrote: post #126
nyuszika7h wrote: post #119

Earlier quoted context omitted.

Maybe it has to do something with WhatsApp also using the Signal protocol, though you'd think generally they'd whitelist IPs or hostnames rather than doing DPI.

What's DPI? I have no idea how this whitelisting works but I'm curious!

Deep Packet Inspection:

https://www.fortinet.com/resources/cyberglossary/dpi-deep-pa...

Re: Tunneling Wikipedia through WhatsApp to (maybe?) get around WiFi restrictions

#128

Post by jamal-kumar »

anaganisk wrote: post #61
jamal-kumar wrote: post #46

I've tried this before, it's a fucking nightmare lol it's not full-duplex at all so this severely limits your ability to do things at a reasonable speed for most shit. For me it was because at the time Zuckerbutt was giving out 'free' internet in the third world, but only for whatsapp, instagram, and facebook, so me and my friends wanted to see if this was exploitable, but it was just way too slow. It really gave me…

What nefarious needs other than probably playing shrek2 on the inflight entertainment systems?

I think someone I read about on a link from here actually demonstrated a badusb attack

Re: Tunneling Wikipedia through WhatsApp to (maybe?) get around WiFi restrictions

#129

Post by jenrzzz »

t-0 wrote: post #55
jjeaff wrote: post #30

Earlier quoted context omitted.

I carry one of those tiny wireless routers in my carry on wherever I go. If I have to buy internet on the plane or if I am in a hotel that limits the number of devices, I always connect through the router and use it as an access point for all the other devices. The other added benefit is that all my other devices already have my AP's wifi creds and will connect to it automatically.

I've been thinking about doing somethign similar and am really interested in what hardware you're using for this and what your setup looks like. Do you run a VPN service directly on your router, for example?

I use the TP-Link TL-WR902AC for this, it's cheap and has a MAC cloning feature that makes it pretty easy. Unfortunately the firmware isn't updated anymore and it's missing a VPN client, but apart from that it gets the job done.
Post reply on HN