News for hackers. Stuff that matters.

A comment on Identifying Airtel middleboxes that censor HTTPS traffic. Parent comment

Re:Identifying Airtel middleboxes that censor HTTPS traffic by airtelblock on Tuesday September 29, 2020 @09:04AM (#24627255)
Setting esni to enabled in Firefox partially works.

But Airtel really, really wants to run scripts and show ads on blocked pages.

Duckduckgo - https://i.postimg.cc/SqkRhpRC/Mozilla-Firefox-29-09-20-w-PA....

Pirate Bay - https://i.postimg.cc/qMmwMXVY/t-29-09-20-9-Dv.png

[ Parent | on HN ]
Re:Identifying Airtel middleboxes that censor HTTPS traffic by dannyw on Tuesday September 29, 2020 @09:12AM (#24627364)
DuckDuckGo is blocked in India??
[ Parent | on HN ]
Re:Identifying Airtel middleboxes that censor HTTPS traffic by uname_amiy on Tuesday September 29, 2020 @09:41AM (#24627668)
Yes, ISPs are blocking DDG. Airtel(ISP) is blocking DDG but HTTPS version is accessible.

https://imgur.com/a/y7wnOjD

[ Parent | on HN ]
Re:Identifying Airtel middleboxes that censor HTTPS traffic by smolder on Tuesday September 29, 2020 @10:02AM (#24627911)
What reason could they have for blocking DDG? Is it easier to find pirated content there than on Google or something? That's my best guess. I can't imagine they'd block on behalf of a competitor or something.
[ Parent | on HN ]
Re:Identifying Airtel middleboxes that censor HTTPS traffic by pjc50 on Tuesday September 29, 2020 @10:13AM (#24628045)
I suspect it's political censorship/surveillance of some sort. Some suggest it's collateral damage from the ban on Chinese apps. https://www.themobileindian.com/news/duckduckgo-blocked-by-m...

Whether that's a mistake or they've made an enemy of some sort is not clear. India is a democratic country but not an especially free one.

[ Parent | on HN ]
Re:Identifying Airtel middleboxes that censor HTTPS traffic by justDankin on Tuesday September 29, 2020 @10:12AM (#24628030)
You never know. Could be a mistake where they were trying to block a certain path due to some search result of copyright infringement, but ended up banning the domain itself. One can only guess.

Reddit and Github have previously been temporarily banned in India due to similar "mistakes"

[ Parent | on HN ]
Re:Identifying Airtel middleboxes that censor HTTPS traffic by walrus01 on Tuesday September 29, 2020 @10:50AM (#24628495)
https://en.wikipedia.org/wiki/Internet_censorship_in_India
[ Parent | on HN ]
Re:Identifying Airtel middleboxes that censor HTTPS traffic by jacquesm on Tuesday September 29, 2020 @10:30AM (#24628254)
DDG is a strong advocate for user privacy, that might be all it takes.
[ Parent | on HN ]
Re:Identifying Airtel middleboxes that censor HTTPS traffic by imglorp on Tuesday September 29, 2020 @03:18PM (#24631802)
Is it possible the big guys will provide (sell?) query surveillance feeds to random governments while DDG can't/won't?
[ Parent | on HN ]
Re:Identifying Airtel middleboxes that censor HTTPS traffic by IceWreck on Tuesday September 29, 2020 @10:43AM (#24628410)
even the http version is accessible to me
[ Parent | on HN ]
Re:Identifying Airtel middleboxes that censor HTTPS traffic by perryizgr8 on Tuesday September 29, 2020 @11:59AM (#24629412)
Not blocked for me on my home and mobile (Jio) connection. I think airtel is just crap. Just switch.
[ Parent | on HN ]
Re:Identifying Airtel middleboxes that censor HTTPS traffic by vinay_ys on Tuesday September 29, 2020 @09:28AM (#24627547)
Nope
[ Parent | on HN ]
Re:Identifying Airtel middleboxes that censor HTTPS traffic by Tepix on Tuesday September 29, 2020 @09:33AM (#24627605)
How do they inject stuff into HTTPS pages?
[ Parent | on HN ]
Re:Identifying Airtel middleboxes that censor HTTPS traffic by eggsnbacon1 on Tuesday September 29, 2020 @01:32PM (#24630615)
Unless the site uses certificate pinning its possible to do a downgrade attack that forces browser off of HTTPS. The extension HTTPS Everywhere is a stopgap against this
[ Parent | on HN ]
Re:Identifying Airtel middleboxes that censor HTTPS traffic by walrus01 on Tuesday September 29, 2020 @10:13AM (#24628041)
things that do stuff like this can't, they try whatever tricks are possible to push javascript or redirects to send the client browser to something non https, on port 80
[ Parent | on HN ]
Re:Identifying Airtel middleboxes that censor HTTPS traffic by kzrdude on Tuesday September 29, 2020 @09:40AM (#24627667)
it does say "Not secure" for the https info, so I guess they intercept the request
[ Parent | on HN ]
Re:Identifying Airtel middleboxes that censor HTTPS traffic by disiplus on Tuesday September 29, 2020 @10:49AM (#24628481)
yeah but not secure is regular http. on https they cannot do that without triggering a browser warning.
[ Parent | on HN ]
Re:Identifying Airtel middleboxes that censor HTTPS traffic by codezero on Tuesday September 29, 2020 @12:26PM (#24629788)
Heads up, that site was injected with a ton of malware/adware and redirects. Possibly their ad network got hosed, but that site doesn't seem safe unless you are locked down.
[ Parent | on HN ]