3 ms·
But DPI is used in Iran and just using different ports does _not_ help
by mrud 15y ago
But DPI is used in Iran and just using different ports does _not_ help
- jcr 15y agoDo you have any supporting data for your statement? I'm not trying to be an ass by asking; I'm actually curious, but testing it myself (American) is not particularly smart. Anyhow, if DPI is in place and at wire-speed (rare, but would cover everything), then the answer is obvious; ssh over http. It can be done with gothard [1] and corkscrew [2]. [1] http://www.nazgul.ch/dev.html http://www.nazgul.ch/dev.html [2] http://www.agroman.net/corkscrew/ http://www.agroman.net/corkscrew/
- mrud 15y agoOnly from the TOR guys: - https://blog.torproject.org/blog/iran-blocks-tor-tor-releases-same-day-fix https://blog.torproject.org/blog/iran-blocks-tor-tor-release... Iran detects ssl parameters and block suspicious connections (they based it on the expiry time of the session certificates) - http://www.telegraph.co.uk/news/worldnews/middleeast/iran/8388484/Iran-cracks-down-on-web-dissident-technology.html http://www.telegraph.co.uk/news/worldnews/middleeast/iran/83... - http://www.christopher-parsons.com/blog/technology/is-iran-now-actually-using-deep-packet-inspection/ http://www.christopher-parsons.com/blog/technology/is-iran-n... Btw. it is not only Iran running country wide DPI - have a look at http://www.youtube.com/watch?v=DX46Qv_b7F4 http://www.youtube.com/watch?v=DX46Qv_b7F4 about the different techniques currently used to block/prevent access to VPNs/Tor etc. (edit: added some additional links)
- jcr 15y agothank you!
- brl 15y agoHere's a presentation I gave a couple of years ago about research I performed to demonstrate exactly this: http://www.slideshare.net/bleidl/net-neutrality-and-internet-censorship http://www.slideshare.net/bleidl/net-neutrality-and-internet...