3 ms·

FWIW UC Browser is prob the most popular web browser used on Android phones in China. Every device ive seen, or owned, has it pre-loaded or is top choice for ge

FWIW UC Browser is prob the most popular web browser used on Android phones in China. Every device ive seen, or owned, has it pre-loaded or is top choice for getting loaded. I have also tried it out myself, but as other posters has written already, its awful. Wondering out loud i would ask if the vulnerability to MiTM is actually required. From reports here in HN 2-3 years ago MiTM is basically what the GFW achieves, and it inserts its own headers to route away from intended(and blocked) servers and to benign local China servers(such as baidu). Perhaps this vulnerability exists in their need to be compliant to local Chinese law which basically prevents one bypassing/nullifying the GFW without permission? This is an open and honest question, not an opinion. Hope someone can answer with facts. I lived in China past 12 years and have had enough hearsay, rumour, and opinion to last me multiple lifetimes :-)

bgee 8y ago
> and it inserts its own headers to route away from intended(and blocked) servers and to benign local China servers(such as baidu) I was never aware that GFW would route traffic to local China servers such as Baidu's, can you kindly provide some links?
- zoom6628 8y ago
  Here you go - happy reading. https://www.tuicool.com/articles/6vqyqan https://www.tuicool.com/articles/6vqyqan https://www.netresec.com/?page=Blog&month=2015-03&post=China%27s-Man-on-the-Side-Attack-on-GitHub https://www.netresec.com/?page=Blog&month=2015-03&post=China...
  - bgee 8y ago
    If I'm reading them correctly, those two posts are the opposite of what the parent post tried to say. Those DDoS were carried by directing traffic to GitHub while that traffic should go to Baidu. Did I miss something?