Live data from Hacker News

Tunneling Internet traffic over FB chat

github.com

61–70 of 111 posts

Re: Tunneling Internet traffic over FB chat

#65

I've been wondering if something like this could be helpful to breach the great firewall. Find some high traffic site in China and smuggle in content via various site features such as chat, messaging, forums, etc. The content could be obfuscated to appear benign while embedding hidden data in text, images, or binary attachments.

That's how the Tor network manages to bypass the Great Firewall. Google "Tor Bridges" if you want to get some fine examples. I think the newest tor bridge can smuggle the traffic over Google servers.

Links for whoever is interested:

meek-google: https://trac.torproject.org/projects/tor/wiki/doc/meek#Googl...

meek-amazon: https://trac.torproject.org/projects/tor/wiki/doc/meek#Amazo...

Re: Tunneling Internet traffic over FB chat

#66
I am pretty much a beginner dev, so can anyone briefly explain how this works? It's not really clear to me from the code.

It's mentioned in the README that packets are being sent as base64. Let's say I would like to send a GET request to google.com. How does Facebook Chat serve me with google's page?

Re: Tunneling Internet traffic over FB chat

#68
post #24
post #6

I once read a story about tunneling IP over DNS. Something about free Internet/DNS for Microsoft-Update. But I can't find it.

Perhaps http://dnstunnel.de/ ?

Yeah, I've played with that a bit..it was fun. It worked in airports, as DNS was available, even though you had to pay for actual surfing. Not surprisingly, it was quite slow.

Re: Tunneling Internet traffic over FB chat

#69

I am pretty much a beginner dev, so can anyone briefly explain how this works? It's not really clear to me from the code. It's mentioned in the README that packets are being sent as base64. Let's say I would like to send a GET request to google.com. How does Facebook Chat serve me with google's page?

As far as I understood:

- They are using virtual network kernel device (TUN/TAP, https://github.com/matiasinsaurralde/facebook-tunnel/blob/ma... )

- encode it as base64

- communicate with the http/web facebook client https://github.com/matiasinsaurralde/facebook-tunnel/blob/ma...

Between that they do authentication things at facebook with "gumbo". And later on everything the other way round at the server side.

So if you GET google.com your traffic goes through a virtual ethernet like device. https://www.kernel.org/doc/Documentation/networking/tuntap.t...

There is no cryptography involved, they could try to use openvpn to enable this feature. https://community.openvpn.net/openvpn/wiki/BridgingAndRoutin...

Re: Tunneling Internet traffic over FB chat

#70
To me, the worst part of this is that there are places where Facebook is free but you need to pay for an internet connection. If the average user can only access the mindless corporate money-making machines and not the real internet, we are moving in the wrong direction.
Post reply on HN