Live data from Hacker News

Help users in Iran reconnect to Signal

signal.org

251–260 of 417 posts

Re: Help users in Iran reconnect to Signal

#252
I love how everyone here jumps on this, spread the love and joy for Iran, meanwhile much of the same group of people is perfectly OK with an entire cohort of our population being utterly censored and shunned. Best of all, the same cult will down vote this comment into oblivion, and while doing it they will convince themselves that they are doing it to make this prediction a self-fulfilling prophecy, and then when they read this last part they will then again feel doubly justified. In the end, we all lose because of politics and ignorance. A couple will add a snide and "clever" reply, in order to justify their down vote to themselves and to others. Inside, everyone is lying to themselves, because they know the truth.

Re: Help users in Iran reconnect to Signal

#253
post #37

Damn, I've read the code. This won't work against an active probe. Censors just use signal domains and non-signal domains to test your proxy. If signal domains get passed and non-signal domains got denied, you are fucked. Besides, TLS in TLS is highly identifiable by simple packet length dpi. I'd hope there's better plan.

> Censors just use signal domains and non-signal domains to test your proxy. If the censor already knows about your proxy they would have no reason to test it... The whole point is that there isn't a central list of proxies for them to easily block.

No but look, they're blocking connections country-wide. Apparently they have government boxes installed on the outside lines. If you're looking at IP headers and deciding to drop or pass based on that, it's trivial to collect the IPs you don't yet know, check if they're running a proxy (Signal, Tor, I2P, whatever), then add them to the block list if they are.

If it's trivial to figure out (by doing a nice handshake) whether something is a certain kind of proxy, then the cat-and-mouse game is reduced from finding lots of mice to updating the cat system to test whether passing animals are mice and instantly wiping out the mice population.

Re: Help users in Iran reconnect to Signal

#254

It's an irony how American companies try circumvents another country's law (regardless of whether you call it censorship or not, it is still a law) and boast about it. Yet, in the US these companies help the mainstream narrative to enforce censorship by banning (Google and Apple App market) or simply not offering other point of views basic hosting services (AWS). I am an Iranian and don't agree with all of our govern…

"I would like to see your supportive reaction if an Iranian company offers hosting to Parler. "

This is a hacker forum and not a US foreign ministry praise board, even though it is mainly US based. In other words, I doubt the reaction here would be rage, if a iranian company would do that. Hackers usually are not in favor of censorship or information restriction.

So who do you mean, with "you"?

Re: Help users in Iran reconnect to Signal

#255
post #47

Earlier quoted context omitted.

Not yet. https://code.briarproject.org/briar/briar/-/issues/445

Apple devices are fairly rare in Iran.

They're fairly rare compared to Android in most countries, actually, also rich countries. That it doesn't work on Apple devices being seen as a blocker was the last thing I expected when clicking that link.

Re: Help users in Iran reconnect to Signal

#256

This proxy failed to be probing resistant. The PoC code is released by studentmain: https://github.com/signalapp/Signal-TLS-Proxy/issues/3#issue...

That's the sort of PoC that should be PGP encrypted to the Signal authors instead of publicly posted. Iran will have a field day with it being posted like this.

Except, of course, that posting public keys is too 1990s for him https://moxie.org/2015/02/24/gpg-and-me.html (which contains some good arguments but offers no solutions, so whatcha gonna do, post a phone number and trust the signal servers to give you the right public key? That's better than self-published public keys? For an anarchist? Is it smart to post phone numbers publicly anyway, see e.g. SS7?) Perhaps just ignore this paragraph, I'm just a confused person seeing mixed signals.

Re: Help users in Iran reconnect to Signal

#257

It's an irony how American companies try circumvents another country's law (regardless of whether you call it censorship or not, it is still a law) and boast about it. Yet, in the US these companies help the mainstream narrative to enforce censorship by banning (Google and Apple App market) or simply not offering other point of views basic hosting services (AWS). I am an Iranian and don't agree with all of our govern…

"I would like to see your supportive reaction if an Iranian company offers hosting to Parler. " This is a hacker forum and not a US foreign ministry praise board, even though it is mainly US based. In other words, I doubt the reaction here would be rage, if a iranian company would do that. Hackers usually are not in favor of censorship or information restriction. So who do you mean, with "you"?

Fair enough, you have a good point. By, "you" I mean a tech person who is supportive of Signal action and is willing to setup a proxy without realizing that this is circumventing another country's law.

I agree I could have said it more clearly and less emotionally.

Re: Help users in Iran reconnect to Signal

#258

Why can't they just ship signal with a Tor client? This is precisely what Tor was built for. They can donate some money to charities running Tor nodes while they're at it, or run some themselves. Iran tried to censor Tor too, but it's pretty much impossible to do so fully. At least the Tor devs are usually on top of it, while Signal is inexperienced dealing with things like this.

What makes you think that it’s hard to block Tor? Even Kazakhstan blocked Tor many years ago. They’re using DPI: connection opens, client can write data, but can’t read anything which is frustrating from user PoV.

> What makes you think that it’s hard to block Tor?

The fact that it is?

There are secret bridges and Tor is able to disguise its traffic as other 'legitimate' protocols.

Post reply on HN