News for hackers. Stuff that matters.
Re:Wikipedia’s Switch to HTTPS Has Successfully Fought Gover... by chimeracoder on Monday May 29, 2017 @11:25PM (#14442852)
> My assumption is that because wikipedia has a known plaintext and a known link graph it's plausible to identify pages with some accuracy

At least in theory, the latest versions of TLS should not be vulnerable to a known plaintext attack. TLS also is capable of length-padding, which would reduce the attack surface here as well for an eavesdropper.

My understanding is that HTTP/2 makes it even more difficult to construct an attack on this basis, because HTTP/2 means multiple requests can get rolled into one.

Of course, all this is assuming an eavesdropper without the ability to intercept and modify traffic. In practice, governments will probably just MITM the connection - we have precedent for governments abusing CAs like this in the past - and unless Wikipedia uses HPKP and we trust the initial connection and we trust that the HPKP reporting endpoint isn't blocked, then it's still possible to censor pages, without anybody else knowing[0].

[0] ie, the government censors will know, and the person who attempted to access the page will know, but neither Wikipedia nor the browser vendor would be able to detect the censorship automatically.

Re:Wikipedia’s Switch to HTTPS Has Successfully Fought Gover... by colmmacc on Monday May 29, 2017 @11:41PM (#14442889)
TLS1.2 doesn't have an effective padding scheme, and with most sites (including Wikipedia) moving to AES-GCM and ChaCha20, it is actually less effective than the primitive CBC padding, which provided some protection.

TLS1.3, which is still a draft, does have support for record-level padding, but I haven't seen any of the experimental deployments using it.

HTTP/2 does have support for padding, but again, it's not common to see it being used, at least not in the kind of sizes it would take to obscure content fingerprints.

Wikipedia is a particularly hard case for traffic analysis fingerprinting. First, the combination of page size and image sizes are just highly unique, even modulo large block/padding sizes. But more importantly, anyone can edit a wikipedia page, so if the size of a target page isn't unique, it's very easy to go ahead and edit it to make it so. It would take very large amounts of padding to defeat this.

So it's definitely possible to fingerprint which wikipedia someone is browsing. But it's probably not easy to block it; the fingerprint is only detectable after the page has been downloaded. So it's not very useful for censorship.

Re:Wikipedia’s Switch to HTTPS Has Successfully Fought Gover... by chimeracoder on Monday May 29, 2017 @11:49PM (#14442911)
> But it's probably not easy to block it; the fingerprint is only detectable after the page has been downloaded. So it's not very useful for censorship

Well, it's detectable after the request has been made and Wikipedia sends the response. Assuming that a government has the capabilities to block delivery of that response (which they do), they can still implement censorship at this level, before the page reaches the end user.

Re:Wikipedia’s Switch to HTTPS Has Successfully Fought Gover... by TorKlingberg on Tuesday May 30, 2017 @04:04AM (#14443633)
> In practice, governments will probably just MITM the connection

If they routinely MITM connections they will quickly be found out, and the CA would be removed from browsers.

Re:Wikipedia’s Switch to HTTPS Has Successfully Fought Gover... by mfjordvald on Tuesday May 30, 2017 @08:48AM (#14444891)
Except China has their own browser made by a state controlled company that a lot of people use. This browser is already demonstrated to accept the government CA and ordinary people in China don't care.
Re:Wikipedia’s Switch to HTTPS Has Successfully Fought Gover... by smcl on Tuesday May 30, 2017 @11:59AM (#14446228)
What's the browser, or do you mean Opera?
Re:Wikipedia’s Switch to HTTPS Has Successfully Fought Gover... by mfjordvald on Tuesday May 30, 2017 @01:04PM (#14446734)
360 Secure Browser by Qihoo, we saw back in 2014 that it was already compromised then: https://en.greatfire.org/blog/2014/oct/china-collecting-appl...
Re:Wikipedia’s Switch to HTTPS Has Successfully Fought Gover... by thriftwy on Tuesday May 30, 2017 @09:39AM (#14445254)
If some websites will break down in this browser while working in other browsers, people will probably notice.
Re:Wikipedia’s Switch to HTTPS Has Successfully Fought Gover... by Spoom on Tuesday May 30, 2017 @11:30AM (#14446024)
Why would they break? If the MITM certificate is trusted at the local level, everything should work fine in their browsers.
Re:Wikipedia’s Switch to HTTPS Has Successfully Fought Gover... by thriftwy on Tuesday May 30, 2017 @11:45AM (#14446117)
Except some pages won't be there (that's what censorship is isn't it?)