casrare.blogg.se

“In certain configurations they may choose to implement the block by actively terminating the connection by injecting a reset packet.”

“In practice what they would do is define a rule in the configuration of their firewall to drop all traffic toward a certain destination,” says Arturo Filastò, an engineer at OONI. (Roskomnadzor has been contacted for comment on this story.)Īll three of these methods utilize IP blocking of some kind.

That latter method would indicate Roskomnadzor utilized deep packet inspection (DPI) to filter packets headed for Tor, suggesting they’ve been sniffing traffic as it passes through ISPs, say OONI. More still are finding their connection reset repeatedly when the TLS handshake is initiated, attempting to frustrate their access. Others appear to be subject to a man-in-the-middle attack over their TLS connection, which secures data sent over the internet end-to-end, when trying to connect. Some people are being sent to a blocked page instead of the Tor Project website. The anomalies seem to vary depending on which ISP and which user is trying to access Tor. On December 8, it was back to 16 percent. On December 1, OONI noticed 16 percent of connections to Tor in Russia recorded some kind of anomaly. And access to parts of the Tor network itself were limited. In Russia’s world of decentralized internet infrastructure, ISPs began taking action speedily. Roskomnadzor, the Russian media and telecommunications regulator, had issued a demand to ISPs around Russia to block users’ access to Tor's website. What happened at the start of December, though those in the Tor Project didn’t know it yet, was significant.

And in Russia, whose population are the second-biggest users of Tor after the United States, people use the service to subvert government restrictions. A 2020 study found 93 percent of Tor users accessed the network for the latter reason, rather than for illegal reasons. Tor is used by people worldwide to mask their activity on the internet, sometimes for illicit activity but more often than not to evade censorship in authoritarian or autocratic countries. At the same time, staff at the Open Observatory of Network Interference (OONI), which measures and tracks internet censorship, saw indications that suggested Russian internet service providers (ISPs) were blocking the Tor network. “It was not just one or two, but like 10 people asking,” says Gustavo Gus, community team lead of the Tor Project. At the start of December, the Tor Project’s support email inbox began receiving an unusual number of messages from users saying they were encountering problems accessing the digital anonymity service.