Re:Uganda Bans VPNs to Prevent Users from Dodging Its New So...
by drenvuk on Friday July 06, 2018 @12:54PM
(#17472964)
So then we randomize the padding, what's next?
How else do they figure it out? My mind jumps directly to funny traffic patterns like a single person using the domain or maybe a non-normal looking website that doesn't serve static assets to non-vpn users or other normal things, etc. Can they probe the server somehow and and figure out it's a vpn?
Does the user need to visit other sites unrelated to the vpn in order to mask their own usage and appear normal?
Re:Uganda Bans VPNs to Prevent Users from Dodging Its New So...
by lqdc13 on Friday July 06, 2018 @01:26PM
(#17473303)
It would be quite laborious to figure out "normal" user traffic patterns and then adjust to those. You would have to collect data on a bunch of users and then shape your own traffic to match.
Only makes sense if you are doing it for a bunch of people and at that point you are another VPN provider.
Encapsulated TCP SYN packets, for example, smaller than any HTTP request inside TLS would be.
Want to beat that by padding? Everything always being the same size is an anomaly too.