[tor-bugs] #22369 [Metrics/Censorship analysis]: Increase of users in Ukraine due to block of Russia-based services

[Tor Bug Tracker & Wiki]

#22369: Increase of users in Ukraine due to block of Russia-based services
-----------------------------------------+------------------------------
 Reporter:  dcf                          |          Owner:  metrics-team
     Type:  project                      |         Status:  new
 Priority:  Medium                       |      Milestone:
Component:  Metrics/Censorship analysis  |        Version:
 Severity:  Normal                       |     Resolution:
 Keywords:  censorship block ua          |  Actual Points:
Parent ID:                               |         Points:
 Reviewer:                               |        Sponsor:
-----------------------------------------+------------------------------

Comment (by dcf):

 Replying to [comment:1 dcf]:
 > A large fraction of the increase may be attributable to the use of
 [https://freeu.online/ FreeU Browser], a browser containing Tor. The
 browser was produced by Mail.ru and prominently featured on VKontakte
 starting 2017-05-20.
 >  * https://tjournal.ru/44669-vkontakte-predlozhila-ukraincam-
 peredelannii-brauzer-amigo-s-tor-dlya-obhoda-blokirovok
 ([https://web.archive.org/web/20170524221422/https://tjournal.ru/44669
 -vkontakte-predlozhila-ukraincam-peredelannii-brauzer-amigo-s-tor-dlya-
 obhoda-blokirovok archive link])
 > > Approximately on May 20, "VKontakte" began to offer users from Ukraine
 to install a desktop FreeU browser to bypass the locks of Russian social
 networks. ... The browser was also promoted with advertising posts in
 "VKontakte", "Twitter" and "Classmates", as well as through banners on
 YouTube. ... On its website FreeU is positioned as a browser "with access
 to blocked sites and social networks". ... As explained by TJ developer
 from a major Russian company, the code for FreeU shows that this is
 actually a reworked browser "Amigo" with built-in technology Tor.
 >
 > valdikss inspected the bundle and found a tor executable renamed to
 `freeu_helper`, along with `torrc` and other dependencies:
 > [[Image(11pW7Vg.png)]]
 >
 > The article also says that the browser only unblocks some sites (maybe
 those operated by Mail.ru) and not others. Presumably they have a proxy
 configuration that only sends some domains through the tor proxy.
 > > FreeU gives access only to blocked sites in Ukraine. If you use it in
 Russia, it does not give you access to resources included in the
 Roskomnadzor blacklist. In the "Amigo" function there is no circumvention
 of the restriction of access to sites and blocker advertising.

 cacahuatl found a script that generates a PAC file to send certain domains
 through the SOCKS proxy at 127.0.0.1:9050 and do others DIRECT:
  * freeu_setup.exe
    * Chrome.7z
      * Chrome-bin/56.1.2924.38/amigo_resources.pak/background.js
 {{{
 var BASE_PROXY_CONFIG = { scope: 'regular' };

 var JSON_HOSTS = ['updtbrwsr.com', 'updtapi.com', 'brwsrapi.com',
 'mrbrwsr.com', 'savebrwsr.com', 'svbrwsr.com'];

 var generateProxyConfig = function generateProxyConfig(hostnames) {
   return {
     mode: 'pac_script',
     pacScript: {
       data: '\n      function FindProxyForURL(url, host) {\n        const
 blackList = [' + hostnames.map(function (i) {
         return '"' + i + '"';
       }).join(',') + '];\n        for (let item of blackList) {\n
 if (dnsDomainIs(host, item))\n            return \'SOCKS5 ' + '127.0.0.1'
 + ':' + 9050 + '\';\n        }\n        return \'DIRECT\';\n      }\n    '
     }
   };
 };
 }}}

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22369#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online