Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Snowflake

snowflake.torproject.org

Post reply on HN
Print view View original

41–50 of 61 posts

Re: Snowflake

#41

Post by jeroenhd »

anyfactor wrote: post #5

> If you switch on the Snowflake below and leave the browser tab open, a user can connect through your new proxy! I am not even sure, if I am getting this right. If I embed an iframe in my website, traffic from Tor users will get tunneled through my user visitor's IP? How does consent works with relay.love? Does my website vistor's IP show up as TOR exit node?

You can disable WebRTC in most decent browsers if you're afraid this will be abused. WebRTC can be used for worse things (like port scanning your internal network) and for great things (video calling with millisecond latency, Peertube).

However, it should be noted that this mechanism doesn't just allow remote sockets to be created through Javascript. It can only communicate with other servers that either use some version of WebRTC/WebSockets or plaintext services that ignore the extra protocol overhead as garbage and happily parse the rest (some IRC servers and WebSockets are a nice example).

As you can see in the technical overview, people use peer to peer technology to connect to your browser, which then uses WebSockets to communicate with a WebSocket server for a normal Tor entry point.

Re: Snowflake

#42

Post by VWWHFSfQ »

We block every Tor IP we can find because we don't have the time nor patience to deal with the 99% burpsuite spam originating from these servers. Very cheap and effective solution.

Re: Snowflake

#44

Post by Timon3 »

trompetenaccoun wrote: post #32
rejectfinite wrote: post #26

I have it installed and like seeing the number go up. NUMBER BIGGER = DOPAMINE!! I'm lucky to be born in Scandinavia, so there is really 0 internet censor, for now.

[flagged]

You are willfully misrepresenting the situation. The issue isn't that she wrote "men cannot be mothers", it's that she is telling a trans woman "you are a man". If people were running around and telling feminine-looking men "you are a woman" it would be the same situation and handled the same.

Re: Snowflake

#45

Post by bauruine »

VWWHFSfQ wrote: post #42

We block every Tor IP we can find because we don't have the time nor patience to deal with the 99% burpsuite spam originating from these servers. Very cheap and effective solution.

How do you "find" them? You can just download the list with all exit node IPs.

https://check.torproject.org/torbulkexitlist

Re: Snowflake

#46

Post by whiatp »

tialaramex wrote: post #23
mike_d wrote: post #18

Snowflake uses domain fronting[1] for rendezvous. It is the digital equivalent of a spy having their secret meetings inside an unsuspecting friends house, and it always eventually it goes bad for that friend. The technique is heavily used by bad actors and is being blocked by default[2] by some cloud providers. AWS went as far as sending a nastygram to Signal[3] when they tried to roll it out on a wide basis for fear…

When I last looked, the intent was that eventually ECH endpoints offer the same effective service that you got with Domain Fronting, but without messing with the backend in a way which is disruptive for the cloud providers so they support it. Encrypted Client Hello is the in-progress work to have even the client's initial contact to an HTTPS server be encrypted. https://datatracker.ietf.org/doc/draft-ietf-tls-esni/ W…

I think the primary problem with domain fronting that ECH would solve is that ECH doesn't involve using a third party's domain name, potentially dragging a single third party into the censorship muck. My read of the support email signal shared is that AWS was unhappy that a domain they owned would likely become entangled. While ECH will still increase everyone else's risk that is sharing the same load balancer as a censorship target, it is at least a fully distributed risk, rather than requiring the client pick a specific domain or set of domains to pull into their fight.

Re: Snowflake

#47

Post by bauruine »

jdthedisciple wrote: post #43
costco wrote: post #39

Earlier quoted context omitted.

What’s the incentive to donate to charity? There’s no risk to you because it’s not an exit node.

The difference being that a donation is one-off. Running a node is continuous.

You can also do recurring donations. Running a Snowflake proxy is basically free if you don't pay for internet traffic so it's a very cheap and low work way to help censored people.

Re: Snowflake

#48

Post by mandmandam »

rejectfinite wrote: post #30
Kjeldahl wrote: post #28

Earlier quoted context omitted.

You're just lucky YOU aren't affected yet. Try telling that norwegian poker player who is unable to wire legal poker earnings from a tournament abroad to his bank home. Or to any of the people who made money on crypto who they want to use as security for an appartment loan. Or to someone trying to wire gains from legal online casinos abroad. Or to someone trying to access a web site that the norwegian authorities do…

My 2c on your scenarios. >Try telling that norwegian poker player who is unable to wire legal poker earnings from a tournament abroad to his bank home. Probably blocked due to terror laws. If you can't Western Union money, there is a REALLY good reason. Wait until you hear about how we are a cashless society and our bank app for money transfer. That you need mobile ID and bank account to use :) Max tracking. But its…

> If you can't Western Union money, there is a REALLY good reason.

That isn't remotely true. Why on Earth would you ever give Western Union this kind of authority, lol.

They've proven they can't be trusted many times over, most notably when they participated in the blockade of donations to Wikileaks.

It's viscerally disgusting to me that just a few years after that, someone would put them on a pedestal as some kind of moral arbiter. What the fuck.

> Good, I hate crypto shit and I want it to go away. It is all a scam.

Yawn. What a tired and ignorant sentiment. The fact is, people saying things like this are making exactly the same destructive mistake as people saying 'all politicans are bad' - you're throwing out a very important baby with the bathwater.

Fortunately, digital money doesn't give a flying fuck about your opinion.

> Get a real job and invest in a real bank. Crypto is all tax fraud scam shit.

Ugh. See above.

> Good, I hate gambling and online casinos. If you have to gamble, do it in my country so the taxes benefit.

You lack the minimum required table stakes of tax knowledge to be saying things like this.

Re: Snowflake

#49

Post by orthecreedence »

jdthedisciple wrote: post #31

What's my incentive to run a snowflake node?

What's the inentive?? Try the ALL NEW TORBUX!! A new ERC20 token with only an 80% pre-mine used to incentivise the participation in the Tor network! Now instead of giving back to a community you derive benefit from, you can pervert the relationship with monetary rewards that benefit an elite class who are planning on disappearing to the Cayman Islands after extracting enough wealth from you and your peers!

Re: Snowflake

#50

Post by dmix »

jeroenhd wrote: post #40
mike_d wrote: post #18

Snowflake uses domain fronting[1] for rendezvous. It is the digital equivalent of a spy having their secret meetings inside an unsuspecting friends house, and it always eventually it goes bad for that friend. The technique is heavily used by bad actors and is being blocked by default[2] by some cloud providers. AWS went as far as sending a nastygram to Signal[3] when they tried to roll it out on a wide basis for fear…

I ran a Snowflake server at home for a while. I shut it off because it used too much CPU for my liking, but I haven't seen any kind of negative impact whatsoever. Domain fronting is not exactly a holy grail. Signal and Tor ran into issues when cloud providers blocked domain fronting (or rather, stopped supporting a feature that never was meant to work anyway) but I don't think that was intended to interrupt anything.…

Thanks for contributing to anti-cesnsorship, I respect anyone who puts that effort it.
Post reply on HN