- anti-censorship-team - lists.torproject.org

Re: [anti-censorship-team] Snowflake (DTLS) block in Russia
by ValdikSS 07 Dec '21

07 Dec '21

Do I understand it right that if I enable the switch on https://snowflake.torproject.org/ page or install the extension in the browser, people will connect using my browser (and hence default WebRTC implementation which won’t be blocked) eventually? I can ask people to do that. On 07.12.2021 13:28, meskio wrote: > Quoting ValdikSS via anti-censorship-team (2021-12-06 18:53:55) >> There's ongoing Tor block on certain Russian ISPs, which on top of everything >> else includes Snowflake censorship using DPI. >> >> DTLS connection never establishes and gets filtered in >> ClientHello/ServerHello sequence. >> >> Check the attached dumps from Tele2 cellular operator (as12958) made on >> 3 and 6 December 2021. >> >> More information here: >> https://ntc.party/t/ooni-reports-of-tor-blocking-in-certain-isps-since-2021… > > The related issue: > https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… > > Thanks for the dumps. >

2 1

Snowflake (DTLS) block in Russia
by ValdikSS 07 Dec '21

07 Dec '21

Hello eveyone, There's ongoing Tor block on certain Russian ISPs, which on top of everything else includes Snowflake censorship using DPI. DTLS connection never establishes and gets filtered in ClientHello/ServerHello sequence. Check the attached dumps from Tele2 cellular operator (as12958) made on 3 and 6 December 2021. More information here: https://ntc.party/t/ooni-reports-of-tor-blocking-in-certain-isps-since-2021…

2 1

Snowflake (DTLS) block in Russia
by ValdikSS 06 Dec '21

06 Dec '21

Hello eveyone, There's ongoing Tor block on certain Russian ISPs, which on top of everything else includes Snowflake censorship using DPI. DTLS connection never establishes and gets filtered in ClientHello/ServerHello sequence. I wanted to attach the dump but the message got held. Visit this link for dumps and more information: https://ntc.party/t/ooni-reports-of-tor-blocking-in-certain-isps-since-2021…

1 0

Couple of questions about Snowflake
by protonmailareliars 23 Nov '21

23 Nov '21

Hello all, First of all I really appreciate all the work that the anti-censorship team has been putting on building better censorship circumvention tools, and I hope snowflake becomes even more successful than obfs4. I have a few questions about current developments, 1. What's the status on Snowflake Mobile development? Looks like the last commit was more than 1 year old: https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… Is there any roadmap for getting it out? 2. Right now I assume the broker tends to hand out standalone-snowflake IPs first rather than web-ext-snowflake IPs (that's how it was working if I remember correctly, please correct me if I'm wrong). Is this still the case? I'm asking since I noticed a very impressive improvement when it comes to speed with snowflake and I would like to know if it was just due to me ending up with a standalone-snowflake or rather if issues with performance and speed got ironed out for web-ext-snowflakes. 3. The browser addon currently shows "Your snowflake has helped X users circumvent censorship in the last 24 hours". But this might be bad UX, it should be in the last week or even month since even though there are about ~2k snowflake users, the ratio of snowflakes/users is still big enough that a lot of users might be under the impression that they never helped any user/or that the extension isn't working correctly. 4. It might be a good idea to display the data in https://snowflake-broker.torproject.net.global.prod.fastly.net/metrics directly in https://metrics.torproject.org. Thanks in advance for any answers.

2 1

Firefox Add-ons policy changes 2021-12-01
by David Fifield 09 Nov '21

09 Nov '21

Mozilla will change the policy for add-ons on December 1: https://blog.mozilla.org/addons/2021/11/03/add-on-policy-changes-2021/ https://extensionworkshop.com/documentation/publish/add-on-policies-dec-202… By my reading, the parts that may apply to us have to do with a privacy policy and possible consent form. From the blog: > If your add-on collects technical data, user interaction data, or > personal data, you must show a consent experience at the first run of > the add-on. > Most add-ons require a privacy policy. For add-ons listed on > addons.mozilla.org, the policy must be included in the listing in its > full text. I don't think the Snowflake add-on currently has a privacy policy on addons.mozilla.org.

2 1

What is this
by enricocrivellaro2＠libero.it 03 Nov '21

03 Nov '21

-- Inviato da Libero Mail per Android

1 0

Reboot of Snowflake VPSes is needed
by David Fifield 28 Oct '21

28 Oct '21

I got an email saying that the snowflake bridge and broker VPSes need to be restarted to migrate them to a new storage backend. If we don't do it, it will happen automatically some time next week. Is there a better time to schedule the restart? ----- Forwarded message from "eclips.is" <support(a)eclips.is> ----- Date: Wed, 27 Oct 2021 11:52:08 +0000 From: "eclips.is" <support(a)eclips.is> Dear eclips.is user, We are performing an update on our virtualization platform, this requires a change in the configuration of the storage backend. Due to this update your VPS needs to be stopped/started. We will execute this for you next week. If you prefer to plan this on your own, please feel free to stop/start your VPS yourself. By doing so, the VPS will be moved to the updated platform. Note: A reboot from within the machine itself will not be sufficient. ----- End forwarded message -----

2 1

configure router NAT for snowflake proxy
by meskio 25 Oct '21

25 Oct '21

Hello, I thought I could host a snowflake standalone proxy in my home fiber. Following the instructions[0] it says that is "especially recommended": > A full-cone NAT (you can use this NAT behaviour tool to test what type of NAT > you have. The properties you are looking for are address-independent mapping > and either address-independent or address-dependent filtering) Using the "NAT behaviour tool" I get: * NAT mapping behavior: endpoint independent (good) * NAT filtering behavior: address and port dependent (bad) My home router is an openwrt on which I have total control, it gets the public IP from my ISP and provides NAT to my home network. I tried playing a bit with the NAT Rules and the firewall settings, but all that is magic for me. Any tips how to fix the NAT filtering in openwrt or what do I need to look into iptables for it? Thanks. [0] https://community.torproject.org/relay/setup/snowflake/standalone/ -- meskio | https://meskio.net/ -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- My contact info: https://meskio.net/crypto.txt -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Nos vamos a Croatan.

1 0

SCTP-Based Pluggable Transport Prototype
by Alexander Mages 18 Sep '21

18 Sep '21

Hello Anti-Censorship Team, I was advised by Cecylia to share my project with this mailing list for the wider community to see and critique. For the past couple of months, I have been doing research under the advisory of Prof. Eugene Vasserman (CC) at Kansas State University, and this project is the result. I intend to continue working on privacy and anonymity, so if this project has potential I would be happy to keep working on it, as well as exploring other ways to contribute. The concept for this transport was derived from this wiki page: https://gitlab.torproject.org/legacy/trac/-/wikis/doc/PluggableTransports/i… . The transport is functional but not yet tested with the Tor Browser. I prototyped this transport using Ncat for SCTP and Telnet for TCP. It is written in Python 3 and SCTP functionality was implemented using C/POSIX-like socket parameters, removing the necessity of a third-party library. A write-up attached to this email denotes functionality, dependencies, limitations, and instructions for running the transport. I look forward to hearing everyone's thoughts! Regards, Alex Mages

2 3

ansible role - snowflake - updates
by Jacobo Nájera 27 Aug '21

27 Aug '21

Hello, I added new features to the ansible role of snowflake: - Support for: Debian Bullseye and Ubuntu Focal - Variable to update the standalone version of Snowflake If you are using the ansible role you can update snowflake via your playbook. First, upgrade ansible role ansible-galaxy install -f nvjacobo.snowflake Then add snowflake_update var: - hosts: all vars: snowflake_update: yes roles: - nvjacobo.snowflake Finally run your playbook. Documentation of ansible role snowflake: https://www.jacobo.org/en/ansible-for-snowflake-proxies-of-the-tor-network/ Thanks, Jacobo

1 0

2025

2024

2023

2022

2021

2020

2019

anti-censorship-team