Shakedown Social

Kevin Karhan :verified:<a href="https://mastodon.world/@mlanger" class="u-url mention" rel="nofollow noopener" target="_blank">@mlanger</a> yes, and it'll only get worse.<ul><li>I'd not be surprised if soon all sites will act like <a href="https://mastodon.social/@torproject" class="u-url mention" rel="nofollow noopener" target="_blank">@torproject</a>'s <a href="https://infosec.space/tags/BridgeDB" class="mention hashtag" rel="nofollow noopener" target="_blank">#BridgeDB</a> via mail [<code>bridges@torproject.org</code>] and only allowlist a few <a href="https://infosec.space/tags/MailProviders" class="mention hashtag" rel="nofollow noopener" target="_blank">#MailProviders</a> (in their case <a href="https://mastodon.social/@riseup" class="u-url mention" rel="nofollow noopener" target="_blank">@riseup</a> and <a href="https://infosec.space/tags/GMail" class="mention hashtag" rel="nofollow noopener" target="_blank">#GMail</a>)...</li></ul><a href="https://bridges.torproject.org/" rel="nofollow noopener" translate="no" target="_blank">https://bridges.torproject.org/</a>

Kevin Karhan :verified:<a href="https://mastodon.social/@torproject" class="u-url mention" rel="nofollow noopener" target="_blank">@torproject</a> Q: I wish there was a similar tool test <a href="https://infosec.space/tags/Bridges" class="mention hashtag" rel="nofollow noopener" target="_blank">#Bridges</a>, as <a href="https://bridges.torproject.org/scan/" rel="nofollow noopener" translate="no" target="_blank">https://bridges.torproject.org/scan/</a> is not that good and I don't want to hammer it with dozens of addresses, cuz at best that's quite antisocial if not possibly trigger responses assuming this is an intelligence gathering operation.<ul><li>Ideally sone standalone binary that one can just give a list of <a href="https://infosec.space/tags/TorBridge" class="mention hashtag" rel="nofollow noopener" target="_blank">#TorBridge</a>|s in a text file (similar to the way one can just past them in at <a href="https://infosec.space/tags/TorBrowser" class="mention hashtag" rel="nofollow noopener" target="_blank">#TorBrowser</a>) would help.</li></ul>I.e. <pre><code>bridgetest -v4 obfs4 203.0.113.0:80 … bridgetest -v6 webtunnel [2001:DB8::1]:443 … bridgetest -list ./tor.bridges.list.private.tsv </code></pre><ul><li>But maybe <a href="https://infosec.space/tags/onionprobe" class="mention hashtag" rel="nofollow noopener" target="_blank">#onionprobe</a> already does that. In that case please tell me to "<a href="https://infosec.space/tags/RTFM" class="mention hashtag" rel="nofollow noopener" target="_blank">#RTFM</a>!"…</li></ul>Similarly there needs to be a more granular way to request <a href="https://infosec.space/tags/TorBridges" class="mention hashtag" rel="nofollow noopener" target="_blank">#TorBridges</a> from <a href="https://infosec.space/tags/BridgeDB" class="mention hashtag" rel="nofollow noopener" target="_blank">#BridgeDB</a> (as it's basically impossible to get <a href="https://infosec.space/tags/IPv4" class="mention hashtag" rel="nofollow noopener" target="_blank">#IPv4</a> <a href="https://infosec.space/tags/Webtunnel" class="mention hashtag" rel="nofollow noopener" target="_blank">#Webtunnel</a> addresses nor is there an option to filter for <a href="https://infosec.space/tags/ports" class="mention hashtag" rel="nofollow noopener" target="_blank">#ports</a> like <code>:80</code> & <code>:443</code> to deal with restrictive <a href="https://infosec.space/tags/firewalls" class="mention hashtag" rel="nofollow noopener" target="_blank">#firewalls</a> (i.e. on public <a href="https://infosec.space/tags/WiFi" class="mention hashtag" rel="nofollow noopener" target="_blank">#WiFi</a>)…<ul><li>there are flags like <code>ipv6=yes</code> but neither <code>ipv4=yes</code> nor <code>ipv6=no</code> yielded me other resultd than <a href="https://infosec.space/tags/IPv6" class="mention hashtag" rel="nofollow noopener" target="_blank">#IPv6</a> <code>webtunnel</code> bridges…</li></ul>And before anyone asks: Yes, I do have a "legitimate purpose" as some of my contacts do need Bridges to get beyond a mandatory firewall and/or do use <a href="https://infosec.space/tags/TorBrowser" class="mention hashtag" rel="nofollow noopener" target="_blank">#TorBrowser</a> (through an <a href="https://infosec.space/tags/SSH" class="mention hashtag" rel="nofollow noopener" target="_blank">#SSH</a> tunnel) to circumvent Tor & <a href="https://infosec.space/tags/VPN" class="mention hashtag" rel="nofollow noopener" target="_blank">#VPN</a> blocks and maintain privacy (as many companies do block sometimes entire <a href="https://infosec.space/tags/Hosters" class="mention hashtag" rel="nofollow noopener" target="_blank">#Hosters</a>' ASNs due to rampant <a href="https://infosec.space/tags/scrapers" class="mention hashtag" rel="nofollow noopener" target="_blank">#scrapers</a>…

Kevin Karhan :verified:<a href="https://venera.social/profile/tails_live" class="u-url mention" rel="nofollow noopener" target="_blank">@tails_live</a> <a href="https://fosstodon.org/@tails" class="u-url mention" rel="nofollow noopener" target="_blank">@tails</a> <a href="https://mastodon.social/@torproject" class="u-url mention" rel="nofollow noopener" target="_blank">@torproject</a> plus support for <code>meek</code>, <code>snowflake</code>, <code>webtunnel</code> and non-<a href="https://infosec.space/tags/obfs4" class="mention hashtag" rel="nofollow noopener" target="_blank">#obfs4</a> <a href="https://infosec.space/tags/Bridges" class="mention hashtag" rel="nofollow noopener" target="_blank">#Bridges</a> seems missing in <a href="https://infosec.space/tags/Tails" class="mention hashtag" rel="nofollow noopener" target="_blank">#Tails</a>.<ul><li>It would also help if <a href="https://infosec.space/tags/BridgeDB" class="mention hashtag" rel="nofollow noopener" target="_blank">#BridgeDB</a> allowed to actually select <a href="https://infosec.space/tags/IPv4" class="mention hashtag" rel="nofollow noopener" target="_blank">#IPv4</a> <a href="https://bridges.torproject.org/options" rel="nofollow noopener" target="_blank">and not just</a> <a href="https://infosec.space/tags/IPv6" class="mention hashtag" rel="nofollow noopener" target="_blank">#IPv6</a> and select ports (i.e. 80 & 443) on top of that.</li></ul>Cuz to this day I've to yet see an IPv4-<a href="https://infosec.space/tags/webtunnel" class="mention hashtag" rel="nofollow noopener" target="_blank">#webtunnel</a> <a href="https://infosec.space/tags/bridge" class="mention hashtag" rel="nofollow noopener" target="_blank">#bridge</a>…<a href="https://infosec.space/tags/meek" class="mention hashtag" rel="nofollow noopener" target="_blank">#meek</a> <a href="https://infosec.space/tags/snowflake" class="mention hashtag" rel="nofollow noopener" target="_blank">#snowflake</a> <a href="https://infosec.space/tags/Tor" class="mention hashtag" rel="nofollow noopener" target="_blank">#Tor</a> <a href="https://infosec.space/tags/privacy" class="mention hashtag" rel="nofollow noopener" target="_blank">#privacy</a> <a href="https://infosec.space/tags/InternetCensorship" class="mention hashtag" rel="nofollow noopener" target="_blank">#InternetCensorship</a>

Kevin Karhan :verified:Right now the problem with <a href="https://mastodon.social/@torproject" class="u-url mention" rel="nofollow noopener" target="_blank">@torproject</a> <a href="https://infosec.space/tags/BridgeDB" class="mention hashtag" rel="nofollow noopener" target="_blank">#BridgeDB</a> is that I can't get <a href="https://infosec.space/tags/webtunnel" class="mention hashtag" rel="nofollow noopener" target="_blank">#webtunnel</a> bridges on <a href="https://infosec.space/tags/IPv4" class="mention hashtag" rel="nofollow noopener" target="_blank">#IPv4</a> even when I try to specify those by setting <code>ipv6=no</code> at the URL:<a href="https://bridges.torproject.org/bridges?transport=webtunnel&ipv6=no" rel="nofollow noopener" translate="no" target="_blank">https://bridges.torproject.org/bridges?transport=webtunnel&ipv6=no</a>And no, removing IPv6 from the URL doesn't yield any IPv4 results either. <a href="https://bridges.torproject.org/bridges?transport=webtunnel" rel="nofollow noopener" translate="no" target="_blank">https://bridges.torproject.org/bridges?transport=webtunnel</a>It would be better if <a href="https://infosec.space/tags/BridgeDB" class="mention hashtag" rel="nofollow noopener" target="_blank">#BridgeDB</a> would have a radio button / switch to choose IPv4 & <a href="https://infosec.space/tags/IPv6" class="mention hashtag" rel="nofollow noopener" target="_blank">#IPv6</a> for this reason.

Kevin Karhan :verified:<a href="https://infosec.space/tags/WhatsMissing" class="mention hashtag" rel="nofollow noopener" target="_blank">#WhatsMissing</a>: A tool to check if <a href="https://infosec.space/tags/TorBridges" class="mention hashtag" rel="nofollow noopener" target="_blank">#TorBridges</a> are still available/online/reachable that one can use either <a href="https://infosec.space/tags/standalone" class="mention hashtag" rel="nofollow noopener" target="_blank">#standalone</a> (with <a href="https://infosec.space/tags/TorBrowser" class="mention hashtag" rel="nofollow noopener" target="_blank">#TorBrowser</a> and/or <a href="https://infosec.space/tags/Tor" class="mention hashtag" rel="nofollow noopener" target="_blank">#Tor</a> Expert Bundle) or on <a href="https://venera.social/profile/tails_live" class="u-url mention" rel="nofollow noopener" target="_blank">@tails_live</a> / <a href="https://fosstodon.org/@tails" class="u-url mention" rel="nofollow noopener" target="_blank">@tails</a> / <a href="https://infosec.space/tags/Tails" class="mention hashtag" rel="nofollow noopener" target="_blank">#Tails</a>. <ul><li>Cuz I do run into issues and kinda want to sort <a href="https://infosec.space/tags/Bridges" class="mention hashtag" rel="nofollow noopener" target="_blank">#Bridges</a> by availability so I don't waste time on a <a href="https://infosec.space/tags/TorBridge" class="mention hashtag" rel="nofollow noopener" target="_blank">#TorBridge</a> that is down and also thin-out the list of bridges that ain't online anymore.</li></ul>Whilst I do acknowledge that <a href="https://mastodon.social/@torproject" class="u-url mention" rel="nofollow noopener" target="_blank">@torproject</a> do disrecommend having a huge list of Tor Bridges on hand, I do regularly need them for contacts who are behind a <a href="https://infosec.space/tags/GreatFirewall" class="mention hashtag" rel="nofollow noopener" target="_blank">#GreatFirewall</a> and can't <a href="https://infosec.space/tags/SSH" class="mention hashtag" rel="nofollow noopener" target="_blank">#SSH</a>-Tunnel out of it.<ul><li>Sadly <a href="https://infosec.space/tags/BridgeDB" class="mention hashtag" rel="nofollow noopener" target="_blank">#BridgeDB</a> <a href="https://bridges.torproject.org" rel="nofollow noopener" target="_blank">doesn't offer</a> good <a href="https://infosec.space/tags/filtering" class="mention hashtag" rel="nofollow noopener" target="_blank">#filtering</a> options so one can't just query types effectively like "I need <a href="https://infosec.space/tags/webtunnel" class="mention hashtag" rel="nofollow noopener" target="_blank">#webtunnel</a> on <a href="https://infosec.space/tags/IPv4" class="mention hashtag" rel="nofollow noopener" target="_blank">#IPv4</a>" or "I can only use Ports 80 & 443 on <a href="https://infosec.space/tags/IPv6" class="mention hashtag" rel="nofollow noopener" target="_blank">#IPv6</a>" which may work.</li></ul>Espechally being able to filter for <a href="https://infosec.space/tags/IPv4only" class="mention hashtag" rel="nofollow noopener" target="_blank">#IPv4only</a> and not just <a href="https://infosec.space/tags/IPv6only" class="mention hashtag" rel="nofollow noopener" target="_blank">#IPv6only</a> is something I miss, alongside the filter for <a href="https://infosec.space/tags/PluggableTransports" class="mention hashtag" rel="nofollow noopener" target="_blank">#PluggableTransports</a> type as <a href="https://social.librem.one/@guardianproject" class="u-url mention" rel="nofollow noopener" target="_blank">@guardianproject</a> <a href="https://infosec.space/tags/Orbot" class="mention hashtag" rel="nofollow noopener" target="_blank">#Orbot</a> seems to only handle <a href="https://infosec.space/tags/obfs4" class="mention hashtag" rel="nofollow noopener" target="_blank">#obfs4</a> and not webtunnel or <a href="https://infosec.space/tags/meek" class="mention hashtag" rel="nofollow noopener" target="_blank">#meek</a> at all...<ul><li>I'm pretty certain that merely pinging a bridge at it's port isn't working as a shure-fire way to check for it's availability.</li></ul>

Kevin Karhan :verified:There are several issues I have with <a href="https://mastodon.social/@torproject" class="u-url mention" rel="nofollow noopener" target="_blank">@torproject</a> 's <a href="https://mstdn.social/tags/BridgeDB" class="mention hashtag" rel="nofollow noopener" target="_blank">#BridgeDB</a>: For once, it's good and convenient but it's filtering options are half broken.For example <a href="https://bridges.torproject.org/bridges/?transport=webtunnel&ipv6=yes" rel="nofollow noopener" translate="no" target="_blank">https://bridges.torproject.org/bridges/?transport=webtunnel&ipv6=yes</a> will get me a <a href="https://mstdn.social/tags/Webtunnel" class="mention hashtag" rel="nofollow noopener" target="_blank">#Webtunnel</a> <a href="https://mstdn.social/tags/TorBridge" class="mention hashtag" rel="nofollow noopener" target="_blank">#TorBridge</a> that has <a href="https://mstdn.social/tags/IPv6" class="mention hashtag" rel="nofollow noopener" target="_blank">#IPv6</a>, but setting ipv6=no or ipv4=yes doesn't work.Nor can I add ports=80,443 or port=443&port=80 or similar.So it would be really cool if one could just query stuff like that [OFC I'm not talking about the CAPTCA, that exist for reasons]...

Recent searches

Search options

Administered by:

Server stats:

#bridgedb