[193149] in North American Network Operators' Group
Re: Wanted: volunteers with bandwidth/storage to help save climate
daemon@ATHENA.MIT.EDU (Jason Hellenthal)
Thu Dec 22 00:03:51 2016
X-Original-To: nanog@nanog.org
From: Jason Hellenthal <jhellenthal@dataix.net>
Date: Wed, 21 Dec 2016 23:03:45 -0600
To: "nanog@nanog.org list" <nanog@nanog.org>
In-Reply-To: <CA+E3k93+0kQ8+FVMQc7si3Zp8r4x-UHdLOzOt4suODKUsoPzeg@mail.gmail.com>
Errors-To: nanog-bounces@nanog.org
Simply put=E2=80=A6 if the data that is hosted on the sites =
aforementioned then cough up the damn space and host it. Data space is =
cheap as hell these days, parse it and get the hell on with it already.
*Disclaimer*
not meant to single out any one party in this conversation but the whole =
subject all together. Need someone to help mirror the data ? I may or =
may not be able to assist with that. Provide the space to upload it to =
and the direction to the data you want. But beyond all that. This =
subject is plainly just off topic.
> On Dec 21, 2016, at 22:16, Royce Williams <royce@techsolvency.com> =
wrote:
>=20
> On Tue, Dec 20, 2016 at 7:08 AM, Royce Williams =
<royce@techsolvency.com> wrote:
>=20
> [snip]
>=20
>> IMO, *operational, politics-free* discussion of items like these =
would
>> also be on topic for NANOG:
>>=20
>> - Some *operational* workarounds for country-wide blocking of
>> Facebook, Whatsapp, and Twitter [1], or Signal [2]
>=20
> [snip]
>=20
>> 2. =
http://www.nytimes.com/aponline/2016/12/20/world/middleeast/ap-ml-egypt-ap=
p-blocked.html
>=20
> Steering things back towards the operational, the makers of Signal
> announced today [1] an update to Signal with a workaround for the
> blocking that I noted earlier. Support in iOS is still in beta.
>=20
> The technique (which was new to me) is called 'domain fronting' [2].
> It works by distributing TLS-based components among domains for which
> blocking would cause wide-sweeping collateral damage if blocked (such
> as Google, Amazon S3, Akamai, etc.), making blocking less attractive.
> Since it's TLS, the Signal connections cannot be differentiated from
> other services in those domains.
>=20
> Signal's implementation of domain fronting is currently limited to
> countries where the blocking has been observed, but their post says
> that they're ramping up to make it available more broadly, and to
> automatically enable the feature when non-local phone numbers travel
> into areas subject to blocking.
>=20
> The cited domain-fronting paper [2] was co-authored by David Fifield,
> who has worked on nmap and Tor.
>=20
> Royce
>=20
> 1. https://whispersystems.org/blog/doodles-stickers-censorship/
> 2. http://www.icir.org/vern/papers/meek-PETS-2015.pdf
--=20
Jason Hellenthal
JJH48-ARIN
