News for hackers. Stuff that matters.

A comment on Russia Bans 1.8M Amazon and Google IPs in Attempt to Block Telegram. Parent comment

Re:Russia Bans 1.8M Amazon and Google IPs in Attempt to Bloc... by leo250 on Tuesday April 17, 2018 @06:11AM (#16856956)
Hello I’m from Russia. And yes, local authorities started blocking telegram IPs. It doesn’t work without proxy/vpn.
[ Parent | on HN ]
Re:Russia Bans 1.8M Amazon and Google IPs in Attempt to Bloc... by fehyjn on Tuesday April 17, 2018 @06:47AM (#16857110)
Their DPI is so dumb that it can be easily bypassed just by editing `Host` to `HOst` in http header. BTW ipv6 adresses are not blocked.
[ Parent | on HN ]
Re:Russia Bans 1.8M Amazon and Google IPs in Attempt to Bloc... by degorov on Tuesday April 17, 2018 @09:08AM (#16857889)
What does that even mean? Every ISP has it's own filtering system, some (or maybe even most of them) are custom built ones. There is no such thing as single government approved DPI.
[ Parent | on HN ]
Re:Russia Bans 1.8M Amazon and Google IPs in Attempt to Bloc... by icebraining on Tuesday April 17, 2018 @07:05AM (#16857209)
Wait, assuming they're using TLS and certificate-pinning, the DPI shouldn't be able to read the HTTP headers at all. How does that work?
[ Parent | on HN ]
Re:Russia Bans 1.8M Amazon and Google IPs in Attempt to Bloc... by fehyjn on Tuesday April 17, 2018 @07:26AM (#16857318)
That’s right, but basically dpi sends tcp reset in case of https or 302 redirect in case of http before target server response, since it’s located nearer. There’s a tool to bypass this, so you can read more there. https://github.com/ValdikSS/GoodbyeDPI
[ Parent | on HN ]
Re:Russia Bans 1.8M Amazon and Google IPs in Attempt to Bloc... by gbil on Tuesday April 17, 2018 @07:43AM (#16857396)
If I'm not mistaken use of SNI reveals the target in plain text, big discussion these days with DNS over TLS etc.
[ Parent | on HN ]
Re:Russia Bans 1.8M Amazon and Google IPs in Attempt to Bloc... by floatboth on Tuesday April 17, 2018 @09:05AM (#16857863)
Not all ISPs even have DPI, small ones just block IPs
[ Parent | on HN ]
Re:Russia Bans 1.8M Amazon and Google IPs in Attempt to Bloc... by degorov on Tuesday April 17, 2018 @09:10AM (#16857904)
It's not possible to comply with RKN's requirements by banning IPs for quite a long time already.
[ Parent | on HN ]
Re:Russia Bans 1.8M Amazon and Google IPs in Attempt to Bloc... by foka86 on Tuesday April 17, 2018 @06:56AM (#16857161)
In my case, proxy alone doesn't help. It only works with VPN now :(.
[ Parent | on HN ]