Live data from Hacker News

Iran Shuts Down Major Websites and Https Protocol

news.ycombinator.com

51–60 of 151 posts

Re: Iran Shuts Down Major Websites and Https Protocol

#51
post #33

FYI, Jacob Applebaum just asked[1] people to set up TOR bridges using a new protocol called obfsproxy[2]. 1: https://twitter.com/#!/ioerror/status/167922546807812096 2: https://www.torproject.org/projects/obfsproxy-instructions.h...

I would be willing to set up a bridge but how can we get the bridge IPs to those who need them?

Re: Iran Shuts Down Major Websites and Https Protocol

#52

They control the physical network. As long as they have that control they will be able to do what they want. The only way to deal with these fuckers (not just Iran) is to start using collectively Ipsec or something similar. All SSL movement is just the beginning. I'm sure every big service will try to encrypt it's traffic more and more to protect itself from governments that try to criminalize their users. Forcing co…

>Forcing countries like China, Iran and US to go into dark ages if they don't use the new all encrypted networks.

The problem is some governments would be perfectly happy with that. In fact for the most repressive ones it's long term goal.

China wants to create a separate internet for Chinese users and they're half way there. They have their own local censored versions of Google, Twitter and Facebook. Soon most internet users in China won't care if the rest of the internet disappears. Likewise for Iran, except they have been more open about it [1].

[1] http://online.wsj.com/article/SB1000142405274870488940457627...

Re: Iran Shuts Down Major Websites and Https Protocol

#53
post #46

This is why good old analogue amateur or personal radio should still be a powerful force for people who are rebelling against their governments and corporate overlords. The Internet is easy to kill, as are digital cell-based radio networks. Proper amateur radio is not. Jamming is not that effective over a large area before anyone suggests that.

but it's easy to triangulate the broadcaster and take measures (imprison, torture, kill).

I lived through the communist era in Poland. Amateur radio stations were banned and prosecuted (you would go to jail), even possession of a CB radio was a crime. Things may be similar in Iran.

Re: Iran Shuts Down Major Websites and Https Protocol

#54
post #46

This is why good old analogue amateur or personal radio should still be a powerful force for people who are rebelling against their governments and corporate overlords. The Internet is easy to kill, as are digital cell-based radio networks. Proper amateur radio is not. Jamming is not that effective over a large area before anyone suggests that.

Sure, but it's uncommon and traceable, which means that if it becomes widely used by dissidents, that would be an excellent way of tracking them.

Re: Iran Shuts Down Major Websites and Https Protocol

#55
post #46

This is why good old analogue amateur or personal radio should still be a powerful force for people who are rebelling against their governments and corporate overlords. The Internet is easy to kill, as are digital cell-based radio networks. Proper amateur radio is not. Jamming is not that effective over a large area before anyone suggests that.

but it's easy to triangulate the broadcaster and take measures (imprison, torture, kill). I lived through the communist era in Poland. Amateur radio stations were banned and prosecuted (you would go to jail), even possession of a CB radio was a crime. Things may be similar in Iran.

I'd imagine that in principle, any wireless communication with simple technology and therefore little infrastructure is still more robust than complex, wired technology with high infrastructure needs.

Re: Iran Shuts Down Major Websites and Https Protocol

#56
post #46

This is why good old analogue amateur or personal radio should still be a powerful force for people who are rebelling against their governments and corporate overlords. The Internet is easy to kill, as are digital cell-based radio networks. Proper amateur radio is not. Jamming is not that effective over a large area before anyone suggests that.

but it's easy to triangulate the broadcaster and take measures (imprison, torture, kill). I lived through the communist era in Poland. Amateur radio stations were banned and prosecuted (you would go to jail), even possession of a CB radio was a crime. Things may be similar in Iran.

I would guess that Internet without HTTPS and SSL is much more traceable than a radio. Also if the authorities don't know there is encrypted radio communication going on they would have hard time finding out about it

Re: Iran Shuts Down Major Websites and Https Protocol

#57
post #39

Are there any solutions for web browsing like Onlive ( http://www.onlive.co.uk/ ) does for video gaming? It would be significantly harder for them to datamine a video stream..

That is actually how the iOS Flash players like iSwifter and Photon works. It's just a video stream (seen from weird MPEG-compression artifacts) to a Linux VM running Firefox.

So would this not be ideal for getting through government censors?

Re: Iran Shuts Down Major Websites and Https Protocol

#58
post #30

Earlier quoted context omitted.

What about ssh over port 80? I realize that would have to be set up in advance from outside the country, but the question is are they using port numbers to aid in their filtering or deep packet inspection?

If they are dropping all encrypted connections, it doesn't matter what port you use for ssh, it'll be dropped.

How do they know it's encrypted? I mean would they block something that looks like gibberish but was plain text over port 80?

Re: Iran Shuts Down Major Websites and Https Protocol

#59
post #36

Earlier quoted context omitted.

They drop all encrypted connections. Which means you cant even make a VPN or SSH connection.

Which basically means you need to do encryption in a manner that doesn't look like encryption, inside of something that's unencrypted. For example over DNS, inside of HTTP, or other protocols designed for moving code like RPC.

Maybe embed the cipher text in files for images, video or music?

Re: Iran Shuts Down Major Websites and Https Protocol

#60
post #20

I am really passionate about this problem. We are currently working on the VPN solution for consumers and I could dedicate some of our servers for this to develop a VPN that would work when governments shut down encrypted connections. where should we start? it it even feasible to do a secured tunnel hidden in normal traffic undetected?

You can tunnel anything over anything. You'd just start with a generic URI to negotiate the secure connection before sending the real requests/responses.
Post reply on HN