As far as I understood: - They are using virtual network kernel device (TUN/TAP, https://github.com/matiasinsaurralde/facebook-tunnel/blob/master/tun.cpp https

As far as I understood: - They are using virtual network kernel device (TUN/TAP, https://github.com/matiasinsaurralde/facebook-tunnel/blob/master/tun.cpp https://github.com/matiasinsaurralde/facebook-tunnel/blob/ma... ) - encode it as base64 - communicate with the http/web facebook client https://github.com/matiasinsaurralde/facebook-tunnel/blob/master/facebook.cpp https://github.com/matiasinsaurralde/facebook-tunnel/blob/ma... Between that they do authentication things at facebook with "gumbo". And later on everything the other way round at the server side. So if you GET google.com your traffic goes through a virtual ethernet like device. https://www.kernel.org/doc/Documentation/networking/tuntap.txt https://www.kernel.org/doc/Documentation/networking/tuntap.t... There is no cryptography involved, they could try to use openvpn to enable this feature. https://community.openvpn.net/openvpn/wiki/BridgingAndRouting https://community.openvpn.net/openvpn/wiki/BridgingAndRoutin...