3 ms·
Yes, "High Entropy" or even "HighE" is a more accurate than "Fully Encrypted Traffic". It's interesting that the filter was observed to operate at specific rang
by luke-stanley 3y ago
Yes, "High Entropy" or even "HighE" is a more accurate than "Fully Encrypted Traffic".
It's interesting that the filter was observed to operate at specific ranges of entropy in the paper, and the repo has it mostly reproduced here: https://github.com/apernet/OpenGFW/blob/1dce82745d0bc8b3813aea147954ba3a2294ef30/analyzer/tcp/fet.go#L46 https://github.com/apernet/OpenGFW/blob/1dce82745d0bc8b3813a...
But presumably to keep people on their toes, the real filter, only operates some of the time. It be a cursed, "hex ensemble".