17-Year-Old Student Exposes Germany's 'Secret' Pirate Site Blocklist

Re:17-Year-Old Student Exposes Germany's 'Secret' Pirate Sit... by kevincox on Saturday August 24, 2024 @06:55AM (#41337204)

HTTP/3 is QUIC. So you can tunnel whatever you want over a connection that is not reliably distinguishable from HTTPS. (You can do heuristics based on packet sizes and timings)

[ Parent | on HN ]

Re:17-Year-Old Student Exposes Germany's 'Secret' Pirate Sit... by ignoramous on Saturday August 24, 2024 @03:08PM (#41340612)

Much more effective, really. I built one such self-hostable proxy on Cloudflare Workers & Deno Deploy: https://github.com/serverless-proxy/serverless-proxy (http-tunneling only works on Deno Deploy, and requires an enterprise plan on Cloudflare but tunneling with websockets works on the free plan, as well).

[ Parent | on HN ]

Re:17-Year-Old Student Exposes Germany's 'Secret' Pirate Sit... by codedokode on Sunday August 25, 2024 @01:31AM (#41344653)

My observation is that if you use a tunnel not for VPN (which typically uses one long connection) but for a SOCKS proxy (which requires a new connection for every proxied connection) then the timings strongly resemble real HTTPS timings.

[ Parent | on HN ]

Re:17-Year-Old Student Exposes Germany's 'Secret' Pirate Sit... by ruthmarx on Monday August 26, 2024 @09:41PM (#41363899)

Observation as in observed and tested, or observation as in a speculation?

[ Parent | on HN ]