A list of ways to “Break the Internet” for the 48 hours before the FCC vote

Re:A list of ways to “Break the Internet” for the 48 hours b... by lowbloodsugar on Tuesday December 12, 2017 @06:24PM (#15910484)

Then they charge the maximum price for the VPN. Only business persons and people trying to not pay the extra for netflix use a VPN (they will say).

[ Parent | on HN ]

Re:A list of ways to “Break the Internet” for the 48 hours b... by esaym on Tuesday December 12, 2017 @06:55PM (#15910690)

If a VPN is over port 443 and using TCP, there really wouldn't be any way to know whether it was HTTPS or VPN.

[ Parent | on HN ]

Re:A list of ways to “Break the Internet” for the 48 hours b... by lowbloodsugar on Tuesday December 12, 2017 @07:08PM (#15910768)

"Well, sir, if you look in our terms of service, it says quite clearly that if most of your traffic goes to a set of services that we have determined are most likely VPNs because we control most of the end-traffic on the internet, well then we can disconnect you. I know, sir, machine learning is wonderful as I'm sure you've read on Hacker News that you visit regularly. What's that? You swear it isn't VPN traffic? Ok, can you provide any evidence to that effect? You can't? Ok, well, you have been disconnected sir, and if you like, you can pay a $300 fee to get reconnected and rejoin our new VPN plan at $150 per month. If you want to use our VPN plan that will be $30 per month on top of all the other services you will need to select"

[ Parent | on HN ]

Re:A list of ways to “Break the Internet” for the 48 hours b... by cmurf on Wednesday December 13, 2017 @07:37AM (#15913828)

I suspect Google, Apple, Microsoft, Facebook soon thereafter jump into the always on VPN market in some form or another.

[ Parent | on HN ]

Re:A list of ways to “Break the Internet” for the 48 hours b... by zaphar on Tuesday December 12, 2017 @07:09PM (#15910776)

They don't have to inspect the traffic for this scenario. They can do it purely based on the routing requested.

[ Parent | on HN ]

Re:A list of ways to “Break the Internet” for the 48 hours b... by nl on Tuesday December 12, 2017 @09:10PM (#15911452)

VPN handshake detection is pretty easy for modern packet-inspection hardware.

Yes, you can beat this, but it is inaccurate to characterize it as being completely unstoppable.

[ Parent | on HN ]

Re:A list of ways to “Break the Internet” for the 48 hours b... by cjhanks on Tuesday December 12, 2017 @09:39PM (#15911605)

I suspect you can. You can certainly analyze the timing and lifetime's to identify VPN's vs HTTPS (at the expense of a few websocket false positives). And I suspect you could even characterize entropy.

[ Parent | on HN ]

Re:A list of ways to “Break the Internet” for the 48 hours b... by drvdevd on Wednesday December 13, 2017 @12:14AM (#15912183)

It’s a game of cat and mouse for sure. See Tor plugable transports for some more circumvention ideas.

I believe it is a game ISPs acting in bad faith will ultimately lose.

[ Parent | on HN ]

Re:A list of ways to “Break the Internet” for the 48 hours b... by digitalsushi on Wednesday December 13, 2017 @09:42AM (#15914469)

Even if this were true, it would be very easy for an ISP to insist that their own certificates be trusted as part of the terms of usage. This would give the ISP data access.

[ Parent | on HN ]

Re:A list of ways to “Break the Internet” for the 48 hours b... by aaomidi on Tuesday December 12, 2017 @07:09PM (#15910774)

Depends on the VPN. Https handshakes are very different than say openvpn. But you can definitely hide your vpn behind the https protocol.

[ Parent | on HN ]

Re:A list of ways to “Break the Internet” for the 48 hours b... by ajr0 on Tuesday December 12, 2017 @11:19PM (#15911998)

most modern NGFW's identify traffic by the layer 7 application. many (but not all) are identified by the time a tcp handshake completes.

[ Parent | on HN ]