Giter Club home page Giter Club logo

Comments (4)

wkrp avatar wkrp commented on July 28, 2024 1

On mobile, by default, sites open with the https://google.com/amp/s/ without requesting *.ampproject.org.

But in the source code, www.google.com/amp (the "AMP viewer") contains an iframe that still loads the main content from cdn.ampproject.org.

$ curl https://www.google.com/amp/s/www.bbc.com/persian.amp -A 'Mozilla/5.0 (iPhone; CPU iPhone OS 11_0 like Mac OS X) AppleWebKit/604.1.38 (KHTML, like Gecko) Version/11.0 Mobile/15A372 Safari/604.1'
...
<iframe name="https://www.bbc.com/persian.amp" src="https://www-bbc-com.cdn.ampproject.org/v/s/www.bbc.com/persian.amp?..." ...></iframe>

See the comments around https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/issues/25985#note_2592342 for some more discussion.

from bbs.

wkrp avatar wkrp commented on July 28, 2024 1

The block was short enough that it was not caught by any OONI measurements. Here are the measurements around that time:
https://explorer.ooni.org/search?until=2020-07-31&domain=cdn.ampproject.org&probe_cc=IR&test_name=web_connectivity (archive)

The nearest measurements are at 2020-07-27 12:44:54 and 2020-07-30 10:53:09, and they are both normal. The block of cdn.ampproject.org must have begun and ended in between.

I do not find the incident reported in Google's transparency report for Iran (archive)

from bbs.

xhdix avatar xhdix commented on July 28, 2024

On mobile, by default, sites open with the https://google.com/amp/s/ without requesting *.ampproject.org. Blocking it has no effect on preventing unpleasant sites for governments!

image

from bbs.

xhdix avatar xhdix commented on July 28, 2024

I tested it manually at that particular time, and DNS, HTTP, and HTTPS were blocked.
The commands were like:

dig cdn.ampproject.org @1.1.1.1 # returned 10.10.34.35
curl -4v --trace-time -m 31 --connect-to ::www.example.com: http://cdn.ampproject.org/  # returned <ifram src="http://10.10.34.35/">...
curl -4v --trace-time -m 31 --connect-to ::www.example.com: https://cdn.ampproject.org/ # timeout after Client hello

However, on some ISPs ampproject.com and ampproject.org are still blocked:
https://explorer.ooni.org/search?since=2020-07-26&until=2020-08-06&domain=ampproject.org&probe_cc=IR&test_name=web_connectivity
https://explorer.ooni.org/search?since=2020-07-26&until=2020-08-06&domain=ampproject.com&probe_cc=IR&test_name=web_connectivity

from bbs.

Related Issues (20)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.