[liberationtech] popular circumvention tools have been blocked in Iran

[Collin Anderson]

On Wed, Feb 10, 2016 at 11:09 AM, Joseph Lorenzo Hall <joe at cdt.org> wrote:

> Do we have any indication as to how they are blocking (e.g., given Iran's
> past history, I'd tend to think it involves fingerprinting circumvention
> tech protocols). best, Joe
>

I don't believe its traffic classification on circumvention tools; the
proliferation of obfsproxy-style and meek transports beyond Tor seems to
made this more difficult. For the particular tools that I have checked, it
appeared to be enumeration of network entry points through the censors
running the tool or collecting aggregated network statistics from users,
and then blocking found addresses. In certain cases, this layer three
blocking and in others through in-line blocking on the application layer.
In the latter scenario, the intention seems though to simply block SSL
connection for addresses, and nothing more fine grain, e.g.
whitelisting/blacklisting.

Would be happy to test any tools, maybe FreeGate is next.
-- 
*Collin David Anderson*
averysmallbird.com | @cda | Washington, D.C.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.stanford.edu/pipermail/liberationtech/attachments/20160210/5c69360c/attachment.html>