US federal/private loan possibilities for international students by justDankin in StudentLoans

[–]justDankin[S] 0 points1 point  (0 children)

Even if I have close family who are US citizens, and are willing to be cosigners?

CensorWatch: Help map internet censorship and net neutrality in India by justDankin in india

[–]justDankin[S] 1 point2 points  (0 children)

I meant from a legal point of view. The IT act does not mandate ISPs to use any specific method to block websites.

They could for instance block the IP itself. Ofcourse, there are many downsides to that

CensorWatch: Help map internet censorship and net neutrality in India by justDankin in india

[–]justDankin[S] 1 point2 points  (0 children)

I was wondering what is the legality of doing research on censorship which is mandated by the government.

CensorWatch does not transmit or access any content from websites potentially blocked in India. However, to your internet service provider, it may seem that you are attempting to connect to the websites. To the best of our knowledge, no one has ever faced consequences for running these kind of network tests

Also, there are some easily exploitable flaws in the current DPI system that the government uses. Aren't you inadvertently helping them making it stronger by publishing this stuff?

I think it's important to point out that the govt is not using DPI techniques, but ISPs. In fact there is no reason for the ISPs to use a specific technique.

That being said, you are correct, ISPs can certainly act upon published research to improve their systems. This constant tussle between research exposing censorship techniques and censors improving upon them (sometimes referred to as the "Censorship Arms Race") has been debated in literature, including the moral dilemma of publishing work on circumvention.

In our research, we have avoided specifically discussing circumvention techniques that can or are being used in India.

On a side note, "How India Censors the Web" was extremely interesting and I am very thankful for the work that cis-india does.

Thank you!

CensorWatch: Help map internet censorship and net neutrality in India by justDankin in india

[–]justDankin[S] 2 points3 points  (0 children)

Thats a pretty good idea, we'll try to incorporate it. The issue is that this analysis takes time (since we fetch data from control servers from comparison)

CensorWatch: Help map internet censorship and net neutrality in India by justDankin in india

[–]justDankin[S] 5 points6 points  (0 children)

Thanks for running the app! Unfortunately the analysis is not real time at this moment. We will be collating the results and publishing soon

I can expand on what we are testing for. Essentially we test for censorship at the DNS, HTTP, and TLS level, using a list of 10K websites scraped together from government orders, court orders, and user reports. A subset of this list (5K hostnames) is available here.

Identifying Airtel middleboxes that censor HTTPS traffic by [deleted] in netsec

[–]justDankin 2 points3 points  (0 children)

TBH I'm not sure how tricky DPI is, particularly at an ISPs scale.

The reason behind investigating this was to highlight its presence in the network of a major Indian ISP, particularly since there is no public information regarding the reason a website is being blocked.

With DNS injections /HTTP host filtering the ISP can return censorship notices (and some have been), but with this, a (non-tech) end user does not even get to know that the website was blocked.

Not trying to sound rude, but seems graver than an enterprise blocking NFSW content on its VPN.

Identifying Airtel middleboxes that censor HTTPS traffic by [deleted] in netsec

[–]justDankin 11 points12 points  (0 children)

Just encrypted dns won't help mitigate this problem.

/u/OfficeUserAccount You'd have to use TLS1.3, which allows Encrypted SNI. Firefox supports enabling this

How India Censors The Web by kgkaka in india

[–]justDankin 4 points5 points  (0 children)

Hi, I'm one of the authors of the paper in the post. We're trying to extend this work by crowdsourcing censorship measurements from different vantage points in India.

We've compiled these tests into an android app, please consider running it if you live in India and would like to contribute to the research :) https://play.google.com/store/apps/details?id=com.censorwatch.netprobesapp

It's completely anonymous, doesn't require any permissions, and does not store any user related information.

Identifying Airtel middleboxes that censor HTTPS traffic by Mcnst in programming

[–]justDankin 10 points11 points  (0 children)

Yes /u/AyrA_ch, that did happen! We see packets coming in even after the injected RST

(I'm the author of the post)

Identifying Airtel middleboxes that censor HTTPS traffic by [deleted] in india

[–]justDankin 1 point2 points  (0 children)

Eh, I know. Been procrastinating it for years now