4 ms·
I can't imagine shadowsocks will continue to work for long. There's not much traffic like that on the Internet, meaning it is extremely susceptible to identific
by Godel_unicode 9y ago
I can't imagine shadowsocks will continue to work for long. There's not much traffic like that on the Internet, meaning it is extremely susceptible to identification via machine learning. Add on all the opsec problems associated with point-to-point VPN tunnels and you're going to have a bad time.
See also:
https://github.com/madeye/sssniff https://github.com/madeye/sssniff
- yjftsjthsd-h 9y agoIt looks like sssniff just checks whether a handful of packets are smaller size than expected; isn't that completely trivial to fix? Granted, it's one step in a long game of cat-and-mouse.
- Godel_unicode 9y agoNot really, it's actually measuring entropy of the first few payloads. This is one example of the larger problem; typical wire protocols, even privacy focused ones like TLS/IPsec, tend to have some red content before the black starts. If your goal is to hide in the noise, the best way is to find a source of noise and sound like it. Just being quiet doesn't do it. Edit: nvm, can't get the code to paste. Look at the if elif elif elif block at the end.