5 ms·

Hm, does that mean other IMs gave their encryption keys to Russian government? Also could someone from Russia confirm telegram/AWS are blocked?

deleted 9y ago
[deleted]
leo250 9y ago
Hello I’m from Russia. And yes, local authorities started blocking telegram IPs. It doesn’t work without proxy/vpn.
- fehyjn 9y ago
  Their DPI is so dumb that it can be easily bypassed just by editing `Host` to `HOst` in http header. BTW ipv6 adresses are not blocked.
  - icebraining 9y ago
    Wait, assuming they're using TLS and certificate-pinning, the DPI shouldn't be able to read the HTTP headers at all. How does that work?
    - fehyjn 9y ago
      That’s right, but basically dpi sends tcp reset in case of https or 302 redirect in case of http before target server response, since it’s located nearer. There’s a tool to bypass this, so you can read more there. https://github.com/ValdikSS/GoodbyeDPI https://github.com/ValdikSS/GoodbyeDPI
    - gbil 9y ago
      If I'm not mistaken use of SNI reveals the target in plain text, big discussion these days with DNS over TLS etc.
  - floatboth 9y ago
    Not all ISPs even have DPI, small ones just block IPs
    - degorov 9y ago
      It's not possible to comply with RKN's requirements by banning IPs for quite a long time already.
  - degorov 9y ago
    What does that even mean? Every ISP has it's own filtering system, some (or maybe even most of them) are custom built ones. There is no such thing as single government approved DPI.
- foka86 9y ago
  In my case, proxy alone doesn't help. It only works with VPN now :(.
floatboth 9y ago
Maybe they just don't have enough balls to go after the biggest ones (WhatsApp and Viber). Plus, other IMs don't have public channels anyone can subscribe to. IIRC that was the original problem, "extremist" channels. Why did they ask for encryption keys instead of blocking channels? Who knows lol. Telegram still works without (manually adding) proxies :D EC2 Ireland (at least the subnets where my servers are) also works.
- pmlnr 9y ago
  > other IMs don't have public channels anyone can subscribe to snap?
Vinnl 9y ago
Depends on the other IMs, but as far as I know, at least Signal and WhatsApp have no keys they can give the government. WhatsApp could potentially sneak a backdoor in their closed-source code, but I don't think that's something they'd have incentive enough to do.

deleted 9y ago

[deleted]

leo250 9y ago

Hello I’m from Russia. And yes, local authorities started blocking telegram IPs. It doesn’t work without proxy/vpn.

fehyjn 9y ago
Their DPI is so dumb that it can be easily bypassed just by editing `Host` to `HOst` in http header. BTW ipv6 adresses are not blocked.
- icebraining 9y ago
  Wait, assuming they're using TLS and certificate-pinning, the DPI shouldn't be able to read the HTTP headers at all. How does that work?
  - fehyjn 9y ago
    That’s right, but basically dpi sends tcp reset in case of https or 302 redirect in case of http before target server response, since it’s located nearer. There’s a tool to bypass this, so you can read more there. https://github.com/ValdikSS/GoodbyeDPI https://github.com/ValdikSS/GoodbyeDPI
  - gbil 9y ago
    If I'm not mistaken use of SNI reveals the target in plain text, big discussion these days with DNS over TLS etc.
- floatboth 9y ago
  Not all ISPs even have DPI, small ones just block IPs
  - degorov 9y ago
    It's not possible to comply with RKN's requirements by banning IPs for quite a long time already.
- degorov 9y ago
  What does that even mean? Every ISP has it's own filtering system, some (or maybe even most of them) are custom built ones. There is no such thing as single government approved DPI.
foka86 9y ago
In my case, proxy alone doesn't help. It only works with VPN now :(.

floatboth 9y ago

Maybe they just don't have enough balls to go after the biggest ones (WhatsApp and Viber). Plus, other IMs don't have public channels anyone can subscribe to. IIRC that was the original problem, "extremist" channels. Why did they ask for encryption keys instead of blocking channels? Who knows lol. Telegram still works without (manually adding) proxies :D EC2 Ireland (at least the subnets where my servers are) also works.

pmlnr 9y ago
> other IMs don't have public channels anyone can subscribe to snap?

Vinnl 9y ago

Depends on the other IMs, but as far as I know, at least Signal and WhatsApp have no keys they can give the government. WhatsApp could potentially sneak a backdoor in their closed-source code, but I don't think that's something they'd have incentive enough to do.