Comments (4)
On mobile, by default, sites open with the
https://google.com/amp/s/
without requesting*.ampproject.org
.
But in the source code, www.google.com/amp (the "AMP viewer") contains an iframe that still loads the main content from cdn.ampproject.org.
$ curl https://www.google.com/amp/s/www.bbc.com/persian.amp -A 'Mozilla/5.0 (iPhone; CPU iPhone OS 11_0 like Mac OS X) AppleWebKit/604.1.38 (KHTML, like Gecko) Version/11.0 Mobile/15A372 Safari/604.1'
...
<iframe name="https://www.bbc.com/persian.amp" src="https://www-bbc-com.cdn.ampproject.org/v/s/www.bbc.com/persian.amp?..." ...></iframe>
See the comments around https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/issues/25985#note_2592342 for some more discussion.
from bbs.
The block was short enough that it was not caught by any OONI measurements. Here are the measurements around that time:
https://explorer.ooni.org/search?until=2020-07-31&domain=cdn.ampproject.org&probe_cc=IR&test_name=web_connectivity (archive)
The nearest measurements are at 2020-07-27 12:44:54 and 2020-07-30 10:53:09, and they are both normal. The block of cdn.ampproject.org must have begun and ended in between.
I do not find the incident reported in Google's transparency report for Iran (archive)
from bbs.
On mobile, by default, sites open with the https://google.com/amp/s/
without requesting *.ampproject.org
. Blocking it has no effect on preventing unpleasant sites for governments!
from bbs.
I tested it manually at that particular time, and DNS, HTTP, and HTTPS were blocked.
The commands were like:
dig cdn.ampproject.org @1.1.1.1 # returned 10.10.34.35
curl -4v --trace-time -m 31 --connect-to ::www.example.com: http://cdn.ampproject.org/ # returned <ifram src="http://10.10.34.35/">...
curl -4v --trace-time -m 31 --connect-to ::www.example.com: https://cdn.ampproject.org/ # timeout after Client hello
However, on some ISPs ampproject.com
and ampproject.org
are still blocked:
https://explorer.ooni.org/search?since=2020-07-26&until=2020-08-06&domain=ampproject.org&probe_cc=IR&test_name=web_connectivity
https://explorer.ooni.org/search?since=2020-07-26&until=2020-08-06&domain=ampproject.com&probe_cc=IR&test_name=web_connectivity
from bbs.
Related Issues (20)
- Some IP addresses used for DNS censorship in India HOT 3
- Defense against AI-guided Traffic Analysis (DAITA)
- Blocking of fully encrypted protocols (Shadowsocks, VMess) in Russia, targeting HTTPS traffic fingerprints HOT 12
- Blocking of *.pages.dev in Russia HOT 4
- I have my own VPN application, and I published it in the app markets. What is the difference between LTE and Home internet? HOT 3
- Snowflake, a censorship circumvention system using temporary WebRTC proxies (USENIX Security 2024) HOT 1
- Bleeding Wall: A Hematologic Examination on the Great Firewall (FOCI 2024)
- Assistance Needed to Bypass Restrictions on Irancell Network HOT 5
- VPN blocking in Myanmar since 2024-05-30 reportedly implemented by a Chinese company, Geedge Networks HOT 6
- Is TLS fragment available in China? HOT 1
- Firefox Add-ons blocks access to some proxy extensions from Russia HOT 6
- vmess://
- Is it possible to implement a man-in-the-middle (MITM) tool to bypass censorship? HOT 11
- ss://
- Issues with Trading & Banking Apps and Google Services HOT 6
- Free livestream of FOCI, PETS, and HotPETs, 2024-07-15 to 2024-07-19 HOT 4
- Russia forces Apple to remove dozens of VPN apps from App Store HOT 5
- Turkmenistan:"Internet amnesty? 3 billion IP addresses, hosting and CDNs unblocked" (2024-07-17)
- Looking at the Clouds: Leveraging Pub/Sub Cloud Services for Censorship-Resistant Rendezvous Channels (Update)
- 使用Google新部署的W开头的中间证书签发的网站在TLS 1.2下100%阻断 / Sites issued with Google's newly deployed intermediate certificates starting with W are 100% blocked under TLS 1.2 HOT 6
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from bbs.