News for hackers. Stuff that matters.
Re:Russia has started indiscriminately blocking all OpenVPN/... by yellow_lead on Saturday January 20, 2024 @10:07AM (#39068261)
Can anyone confirm Shadowsocks works anymore? When I tried to use it a few years ago, it got blocked in a few days.

To be honest, I think they are blocking anything that exchanges a lot of data with oversesas IPs, after hitting a certain threshold.

Re:Russia has started indiscriminately blocking all OpenVPN/... by apfsx on Saturday January 20, 2024 @10:29AM (#39068524)
Shadowsocks and ShadowsocksR don’t work anymore in my experience in China or Iran. V2ray does which is the successor to those.
Re:Russia has started indiscriminately blocking all OpenVPN/... by superkuh on Saturday January 20, 2024 @10:58AM (#39068835)
Shadowsocks does work against MITM attacks by my US ISP Comcast though. It is great software.
Re:Russia has started indiscriminately blocking all OpenVPN/... by apfsx on Saturday January 20, 2024 @11:45AM (#39069443)
Wouldn’t plain WireGuard also do that?
Re:Russia has started indiscriminately blocking all OpenVPN/... by superkuh on Sunday January 21, 2024 @11:17AM (#39079805)
WireGuard is a lot heavier than shadowsocks-libev. shadowsocks-libev is literally under 5MB of ram used and very little CPU. Also very quick to compile and config. WireGuard is a full fledged heavy VPN. Shadowsocks can be used as a simple socks proxy if you want; and that's plenty for stopping Comcast from injecting malicious javascript into my HTTP connections.
Re:Russia has started indiscriminately blocking all OpenVPN/... by gruez on Saturday January 20, 2024 @12:07PM (#39069753)
What "MITM attacks" are you talking about?
Re:Russia has started indiscriminately blocking all OpenVPN/... by cj on Saturday January 20, 2024 @12:25PM (#39069991)
Not the person you're replying to, but most ISPs and cellular providers log DNS queries and use that to profile you or resell to data brokers.

If you want to have some fun understanding this better, call up (for example) Verizon and have them send you the data they have on you. It's surprisingly detailed, including timestamped logs of every DNS query (in addition to specific profiling data, like "how likely you are to buy a new phone" or "household income", etc).

https://www.verizon.com/support/download-and-view-vpd-file/

After doing this myself, I always (at a minimum) use a privacy centric DNS and never the ISP's default.

Re:Russia has started indiscriminately blocking all OpenVPN/... by michael1999 on Saturday January 20, 2024 @01:18PM (#39070550)
Stream-downscaling, ad injection, etc. US isp shenanigans.
Re:Russia has started indiscriminately blocking all OpenVPN/... by polski-g on Saturday January 20, 2024 @05:48PM (#39073274)
Comcast intercepts and rewrites your DNS queries to their own servers. I spent hours figuring out why I wasn't getting NXDOMAIN back from 8.8.8.8 until I realized Comcast was MITMing me.
Re:Russia has started indiscriminately blocking all OpenVPN/... by superkuh on Sunday January 21, 2024 @11:23AM (#39079853)
Comcast started attacking it's customers via MITM about ~2013 or so. Initially it was ads, https://www.google.com/search?hl=en&source=hp&biw=&bih=&q=co... . This would break things like, say, the Steam browser and prevent it from working. I literally had this happen to me. Eventually Comcast changed it's terms of service and violated it's contracts with existing customers and started limiting total data transfer to about 1 TB/mo. When it started doing this it also started MITM injecting JS about your usage into HTTP connections: https://rietta.com/blog/comcast-insecure-injection/

Comcast is the only non-56k ISP available in my area still in 2024. So I use them... but I also have to make sure to protect myself from their attacks. If I did what they're doing I'd go to prison. But some types of legal persons have more rights than human persons.

Re:Russia has started indiscriminately blocking all OpenVPN/... by bbarnett on Saturday January 20, 2024 @10:47AM (#39068719)
I wonder how many of these services are just state actors, who can then track people more directly.
Re:Russia has started indiscriminately blocking all OpenVPN/... by yellow_lead on Saturday January 20, 2024 @10:52AM (#39068782)
These are open source proxies, not centralized services, so I think it's unlikely.

At least shadowsocks was well researched in the past, I'm not sure about v2ray.

Re:Russia has started indiscriminately blocking all OpenVPN/... by EasyMark on Saturday January 20, 2024 @05:24PM (#39073066)
If I was in Russia I would be a lot less afraid of USA/Britain/Germany MITM than I would of Putin's agents catching wind of the free flow of information and coming for me and my family and throwing us off the roof or putting polonium in our water supply.
Re:Russia has started indiscriminately blocking all OpenVPN/... by bbarnett on Sunday January 21, 2024 @03:40AM (#39076737)
Interesting. I said 'state actor' not 'western actor'.

The state, any state, often employs such tactics to make people believe they are protected, and therefore said people will act more openly. There are a myriad of such known cases, in fact the examples are endless.

So if one is in Russia... beware, for ways to get around blocking which work, may be ways secretly controlled by the Russian state. An example is a VPN service which is secretly run by the state, regardless of where it is incorporated or physically located.

Another example is blocking products which are effective, but letting products which are easily MITM by the state to "work", thereby providing the illusion of security and safety.

These tactics are thousands of years old, the employment of such methods is all that has changed. Make those which you distrust, use methods you control to organize. An example; the pub which is uses for meetings, is actually owned by state sympathizers, who claim otherwise.