News for hackers. Stuff that matters.
Re:Iraq Blocks Telegram, Leaks Blackhole BGP Routes by dilyevsky on Saturday August 19, 2023 @04:29PM (#37192821)
The internet doesn't interpret anything - it's a just a bunch of networks and technologies to pass packets around with some level of redundancy (originally to withstand nuclear strikes on the comms centers).
Re:Iraq Blocks Telegram, Leaks Blackhole BGP Routes by explaininjs on Saturday August 19, 2023 @04:40PM (#37192939)
It’s a metaphor.
Re:Iraq Blocks Telegram, Leaks Blackhole BGP Routes by dilyevsky on Saturday August 19, 2023 @04:53PM (#37193080)
Ok sure but if router rules say “send these packets over there” that’s where they will go (to die). There are no way to “interpret” if the packets are going to the right destination for downstream devices which are totally oblivious to this process if that makes sense
Re:Iraq Blocks Telegram, Leaks Blackhole BGP Routes by salawat on Saturday August 19, 2023 @05:12PM (#37193255)
What you are homing in on is the problem of trust.

And yes. It is a problem. If your upstream does skulduggerous things, you can't "route around it" from the standpoint of being an endpoint. Your packets will go where your ISP says they go.

Unless...

You take a bit of the routing decision out of their hands, which takes a bit of footwork on your part. For instance, setting up a VPN to a network zone unpolluted by the faulty prefix announcement, which is basically going to be any non downstream of the hostile ISP provider.

Once you're out of that routing zone, normal network visibility is restored. Odds are even a national scale backbone provider is not going to be able to effectively block traffic that's routing out to a proxy, so all the the ISP has really done is made life more difficult for people unaware of how to set up such an arrangement.

Which now that you know about this, it is your duty to spread the knowledge of how to do so far and wide. If someone wants to block it, then that's all the justification needed for frustrating those efforts.

Re:Iraq Blocks Telegram, Leaks Blackhole BGP Routes by dilyevsky on Saturday August 19, 2023 @05:34PM (#37193473)
VPN traffic is trivially blocked at the ISP level which has been proven by china, russia and others. So no you can't really prevent mass censorship with technology.
Re:Iraq Blocks Telegram, Leaks Blackhole BGP Routes by Forbo on Saturday August 19, 2023 @11:50PM (#37195941)
And trivially circumvented, which has been proven by Tor. https://support.torproject.org/censorship/connecting-from-ch...
Re:Iraq Blocks Telegram, Leaks Blackhole BGP Routes by dilyevsky on Sunday August 20, 2023 @01:44AM (#37196458)
Lol trivial as in running your own bridge outside of great firewall?
Re:Iraq Blocks Telegram, Leaks Blackhole BGP Routes by Forbo on Sunday August 20, 2023 @02:16AM (#37196641)
As is stated in the link I posted, you don't have to run your own bridge. With snowflake, there are more entry nodes than ever, and you don't need to know anything about them in advance.
Re:Iraq Blocks Telegram, Leaks Blackhole BGP Routes by dilyevsky on Monday August 21, 2023 @04:42AM (#37206867)
Yes and it’s been classified and blocked before (though not for long). Eventually they will just start blocking fastly completely or whoever else will agree to domain front them and that’s that
Re:Iraq Blocks Telegram, Leaks Blackhole BGP Routes by Forbo on Monday August 21, 2023 @08:26AM (#37208521)
Snowflake isn't dependent on domain fronting like Meek-Azure. It works, so why the defeatist "may not even try" attitude?