▲ 474 ▼ India blocks GitHub, after lobbying done by copyright trolls (torrentfreak.com) submitted 2 years ago by Moonrise2473@feddit.it to c/piracy@lemmy.dbzer0.com 109 comments fedilink hide all child comments Who cares if nobody can work, the important is that those illegal streams are blocked
[–] zaknenou@lemmy.dbzer0.com 40 points 2 years ago (1 child) VPN time for indians permalink fedilink source hideshow 2 child comments replies: [–] sorter_plainview@lemmy.today 22 points 2 years ago (3 children) Oh fun fact, Govt also issued an order stating that VPN providers who won't log information of users, can't function in India. permalink fedilink source parent hideshow 6 child comments replies: [–] gila@lemm.ee 17 points 2 years ago (1 child) That statement just screams "I don't understand how the internet works" permalink fedilink source parent hideshow 2 child comments replies: [–] WarmApplePieShrek@lemmy.dbzer0.com 3 points 2 years ago (1 child) They understand exactly how it works. If you're a VPN provider in india, you either keep logs, or you go to jail. permalink fedilink source parent hideshow 2 child comments replies: [–] gila@lemm.ee 2 points 2 years ago* (last edited 2 years ago) Oh, so they're aware the stated actions would have no impact on VPN accessibility beyond potentially restricting India endpoints? Either that or they're planning to play server whack-a-mole with overseas private companies whom themselves have no control over access from India Edit: or it's just a non-statement to misdirect permalink fedilink source parent [–] jabjoe@feddit.uk 4 points 2 years ago (1 child) Bet they love Tor then.... Though maybe faster to have a VPS somewhere else. Maybe do a VPN from there. They aren't going to block ssh. permalink fedilink source parent hideshow 2 child comments replies: [–] zaknenou@lemmy.dbzer0.com 2 points 2 years ago (1 child) Hey do you know of a good ssh client? I'd like to spoof SNI using one but I don't know how it is done with ssh/ssl permalink fedilink source parent hideshow 2 child comments replies: [–] jabjoe@feddit.uk 1 point 2 years ago* (last edited 2 years ago) (1 child) Not sure exactly what you are after, but would stunnel4 do? You can use it to hide SSH with SSL and then use SNI so that a specific website name is SSH and others something else. You can probably do it with Apache or NGINX to if there is real websites too. Client wise, just normal ssh, but with a custom config for that host with: ProxyCommand openssl s_client -connect %h:%p Edit: NGINX : http://nginx.org/en/docs/stream/ngx_stream_ssl_preread_module.html Edit: Apache : https://trofi.github.io/posts/295-ssh-over-https.html permalink fedilink source parent hideshow 2 child comments replies: [–] zaknenou@lemmy.dbzer0.com 1 point 2 years ago (1 child) umm, I got confused. Let tell you exactly about the use case. so on a site like this " https://sshocean.com/ssh-ssl " I create an account, and I get something like this: where do I insert this payload (what client for windows or Ubuntu)? and how do I insert the desired SNI that I want to be in front of my ISP? I know of http injector with whom the trick works on android, I mean ssh/ssl stunnel. permalink fedilink source parent hideshow 2 child comments replies: [–] jabjoe@feddit.uk 2 points 2 years ago (1 child) In your .ssh/config you want something like: Host my-ssh-ssl Hostname us01.ssh0.net User sshocean-p1r4t2br Password myparrot2 Port 443 ProxyCommand ~/.ssh/https-tunnel.sh %h %p Then you have a ~/.ssh/https-tunnel.sh something like: #!/usr/bin/env bash { printf "GET /HTTP/1.1\r\nHost:$1\r\nUpgrade:websocket\r\n"; cat } | openssl s_client -connect $1:$2 -servername $1 That last bit, -servername is the SNI bit, if you need it. BUT I think that payload might be for port 2083. I think 443 might be just the OpenSSL connect directly. permalink fedilink source parent hideshow 2 child comments replies: [–] zaknenou@lemmy.dbzer0.com 1 point 2 years ago (1 child) then I initiate this using stunnel from terminal ?(Ubuntu OS) permalink fedilink source parent hideshow 2 child comments replies: [–] jabjoe@feddit.uk 1 point 2 years ago No, stunnel is go othere end. If you doing only the client end, you.don't need it. permalink fedilink source parent [–] radioactiveradio@lemm.ee 3 points 2 years ago I thought it was just for servers tho? permalink fedilink source parent
[–] sorter_plainview@lemmy.today 22 points 2 years ago (3 children) Oh fun fact, Govt also issued an order stating that VPN providers who won't log information of users, can't function in India. permalink fedilink source parent hideshow 6 child comments replies: [–] gila@lemm.ee 17 points 2 years ago (1 child) That statement just screams "I don't understand how the internet works" permalink fedilink source parent hideshow 2 child comments replies: [–] WarmApplePieShrek@lemmy.dbzer0.com 3 points 2 years ago (1 child) They understand exactly how it works. If you're a VPN provider in india, you either keep logs, or you go to jail. permalink fedilink source parent hideshow 2 child comments replies: [–] gila@lemm.ee 2 points 2 years ago* (last edited 2 years ago) Oh, so they're aware the stated actions would have no impact on VPN accessibility beyond potentially restricting India endpoints? Either that or they're planning to play server whack-a-mole with overseas private companies whom themselves have no control over access from India Edit: or it's just a non-statement to misdirect permalink fedilink source parent [–] jabjoe@feddit.uk 4 points 2 years ago (1 child) Bet they love Tor then.... Though maybe faster to have a VPS somewhere else. Maybe do a VPN from there. They aren't going to block ssh. permalink fedilink source parent hideshow 2 child comments replies: [–] zaknenou@lemmy.dbzer0.com 2 points 2 years ago (1 child) Hey do you know of a good ssh client? I'd like to spoof SNI using one but I don't know how it is done with ssh/ssl permalink fedilink source parent hideshow 2 child comments replies: [–] jabjoe@feddit.uk 1 point 2 years ago* (last edited 2 years ago) (1 child) Not sure exactly what you are after, but would stunnel4 do? You can use it to hide SSH with SSL and then use SNI so that a specific website name is SSH and others something else. You can probably do it with Apache or NGINX to if there is real websites too. Client wise, just normal ssh, but with a custom config for that host with: ProxyCommand openssl s_client -connect %h:%p Edit: NGINX : http://nginx.org/en/docs/stream/ngx_stream_ssl_preread_module.html Edit: Apache : https://trofi.github.io/posts/295-ssh-over-https.html permalink fedilink source parent hideshow 2 child comments replies: [–] zaknenou@lemmy.dbzer0.com 1 point 2 years ago (1 child) umm, I got confused. Let tell you exactly about the use case. so on a site like this " https://sshocean.com/ssh-ssl " I create an account, and I get something like this: where do I insert this payload (what client for windows or Ubuntu)? and how do I insert the desired SNI that I want to be in front of my ISP? I know of http injector with whom the trick works on android, I mean ssh/ssl stunnel. permalink fedilink source parent hideshow 2 child comments replies: [–] jabjoe@feddit.uk 2 points 2 years ago (1 child) In your .ssh/config you want something like: Host my-ssh-ssl Hostname us01.ssh0.net User sshocean-p1r4t2br Password myparrot2 Port 443 ProxyCommand ~/.ssh/https-tunnel.sh %h %p Then you have a ~/.ssh/https-tunnel.sh something like: #!/usr/bin/env bash { printf "GET /HTTP/1.1\r\nHost:$1\r\nUpgrade:websocket\r\n"; cat } | openssl s_client -connect $1:$2 -servername $1 That last bit, -servername is the SNI bit, if you need it. BUT I think that payload might be for port 2083. I think 443 might be just the OpenSSL connect directly. permalink fedilink source parent hideshow 2 child comments replies: [–] zaknenou@lemmy.dbzer0.com 1 point 2 years ago (1 child) then I initiate this using stunnel from terminal ?(Ubuntu OS) permalink fedilink source parent hideshow 2 child comments replies: [–] jabjoe@feddit.uk 1 point 2 years ago No, stunnel is go othere end. If you doing only the client end, you.don't need it. permalink fedilink source parent [–] radioactiveradio@lemm.ee 3 points 2 years ago I thought it was just for servers tho? permalink fedilink source parent
[–] gila@lemm.ee 17 points 2 years ago (1 child) That statement just screams "I don't understand how the internet works" permalink fedilink source parent hideshow 2 child comments replies: [–] WarmApplePieShrek@lemmy.dbzer0.com 3 points 2 years ago (1 child) They understand exactly how it works. If you're a VPN provider in india, you either keep logs, or you go to jail. permalink fedilink source parent hideshow 2 child comments replies: [–] gila@lemm.ee 2 points 2 years ago* (last edited 2 years ago) Oh, so they're aware the stated actions would have no impact on VPN accessibility beyond potentially restricting India endpoints? Either that or they're planning to play server whack-a-mole with overseas private companies whom themselves have no control over access from India Edit: or it's just a non-statement to misdirect permalink fedilink source parent
[–] WarmApplePieShrek@lemmy.dbzer0.com 3 points 2 years ago (1 child) They understand exactly how it works. If you're a VPN provider in india, you either keep logs, or you go to jail. permalink fedilink source parent hideshow 2 child comments replies: [–] gila@lemm.ee 2 points 2 years ago* (last edited 2 years ago) Oh, so they're aware the stated actions would have no impact on VPN accessibility beyond potentially restricting India endpoints? Either that or they're planning to play server whack-a-mole with overseas private companies whom themselves have no control over access from India Edit: or it's just a non-statement to misdirect permalink fedilink source parent
[–] gila@lemm.ee 2 points 2 years ago* (last edited 2 years ago) Oh, so they're aware the stated actions would have no impact on VPN accessibility beyond potentially restricting India endpoints? Either that or they're planning to play server whack-a-mole with overseas private companies whom themselves have no control over access from India Edit: or it's just a non-statement to misdirect permalink fedilink source parent
[–] jabjoe@feddit.uk 4 points 2 years ago (1 child) Bet they love Tor then.... Though maybe faster to have a VPS somewhere else. Maybe do a VPN from there. They aren't going to block ssh. permalink fedilink source parent hideshow 2 child comments replies: [–] zaknenou@lemmy.dbzer0.com 2 points 2 years ago (1 child) Hey do you know of a good ssh client? I'd like to spoof SNI using one but I don't know how it is done with ssh/ssl permalink fedilink source parent hideshow 2 child comments replies: [–] jabjoe@feddit.uk 1 point 2 years ago* (last edited 2 years ago) (1 child) Not sure exactly what you are after, but would stunnel4 do? You can use it to hide SSH with SSL and then use SNI so that a specific website name is SSH and others something else. You can probably do it with Apache or NGINX to if there is real websites too. Client wise, just normal ssh, but with a custom config for that host with: ProxyCommand openssl s_client -connect %h:%p Edit: NGINX : http://nginx.org/en/docs/stream/ngx_stream_ssl_preread_module.html Edit: Apache : https://trofi.github.io/posts/295-ssh-over-https.html permalink fedilink source parent hideshow 2 child comments replies: [–] zaknenou@lemmy.dbzer0.com 1 point 2 years ago (1 child) umm, I got confused. Let tell you exactly about the use case. so on a site like this " https://sshocean.com/ssh-ssl " I create an account, and I get something like this: where do I insert this payload (what client for windows or Ubuntu)? and how do I insert the desired SNI that I want to be in front of my ISP? I know of http injector with whom the trick works on android, I mean ssh/ssl stunnel. permalink fedilink source parent hideshow 2 child comments replies: [–] jabjoe@feddit.uk 2 points 2 years ago (1 child) In your .ssh/config you want something like: Host my-ssh-ssl Hostname us01.ssh0.net User sshocean-p1r4t2br Password myparrot2 Port 443 ProxyCommand ~/.ssh/https-tunnel.sh %h %p Then you have a ~/.ssh/https-tunnel.sh something like: #!/usr/bin/env bash { printf "GET /HTTP/1.1\r\nHost:$1\r\nUpgrade:websocket\r\n"; cat } | openssl s_client -connect $1:$2 -servername $1 That last bit, -servername is the SNI bit, if you need it. BUT I think that payload might be for port 2083. I think 443 might be just the OpenSSL connect directly. permalink fedilink source parent hideshow 2 child comments replies: [–] zaknenou@lemmy.dbzer0.com 1 point 2 years ago (1 child) then I initiate this using stunnel from terminal ?(Ubuntu OS) permalink fedilink source parent hideshow 2 child comments replies: [–] jabjoe@feddit.uk 1 point 2 years ago No, stunnel is go othere end. If you doing only the client end, you.don't need it. permalink fedilink source parent
[–] zaknenou@lemmy.dbzer0.com 2 points 2 years ago (1 child) Hey do you know of a good ssh client? I'd like to spoof SNI using one but I don't know how it is done with ssh/ssl permalink fedilink source parent hideshow 2 child comments replies: [–] jabjoe@feddit.uk 1 point 2 years ago* (last edited 2 years ago) (1 child) Not sure exactly what you are after, but would stunnel4 do? You can use it to hide SSH with SSL and then use SNI so that a specific website name is SSH and others something else. You can probably do it with Apache or NGINX to if there is real websites too. Client wise, just normal ssh, but with a custom config for that host with: ProxyCommand openssl s_client -connect %h:%p Edit: NGINX : http://nginx.org/en/docs/stream/ngx_stream_ssl_preread_module.html Edit: Apache : https://trofi.github.io/posts/295-ssh-over-https.html permalink fedilink source parent hideshow 2 child comments replies: [–] zaknenou@lemmy.dbzer0.com 1 point 2 years ago (1 child) umm, I got confused. Let tell you exactly about the use case. so on a site like this " https://sshocean.com/ssh-ssl " I create an account, and I get something like this: where do I insert this payload (what client for windows or Ubuntu)? and how do I insert the desired SNI that I want to be in front of my ISP? I know of http injector with whom the trick works on android, I mean ssh/ssl stunnel. permalink fedilink source parent hideshow 2 child comments replies: [–] jabjoe@feddit.uk 2 points 2 years ago (1 child) In your .ssh/config you want something like: Host my-ssh-ssl Hostname us01.ssh0.net User sshocean-p1r4t2br Password myparrot2 Port 443 ProxyCommand ~/.ssh/https-tunnel.sh %h %p Then you have a ~/.ssh/https-tunnel.sh something like: #!/usr/bin/env bash { printf "GET /HTTP/1.1\r\nHost:$1\r\nUpgrade:websocket\r\n"; cat } | openssl s_client -connect $1:$2 -servername $1 That last bit, -servername is the SNI bit, if you need it. BUT I think that payload might be for port 2083. I think 443 might be just the OpenSSL connect directly. permalink fedilink source parent hideshow 2 child comments replies: [–] zaknenou@lemmy.dbzer0.com 1 point 2 years ago (1 child) then I initiate this using stunnel from terminal ?(Ubuntu OS) permalink fedilink source parent hideshow 2 child comments replies: [–] jabjoe@feddit.uk 1 point 2 years ago No, stunnel is go othere end. If you doing only the client end, you.don't need it. permalink fedilink source parent
[–] jabjoe@feddit.uk 1 point 2 years ago* (last edited 2 years ago) (1 child) Not sure exactly what you are after, but would stunnel4 do? You can use it to hide SSH with SSL and then use SNI so that a specific website name is SSH and others something else. You can probably do it with Apache or NGINX to if there is real websites too. Client wise, just normal ssh, but with a custom config for that host with: ProxyCommand openssl s_client -connect %h:%p Edit: NGINX : http://nginx.org/en/docs/stream/ngx_stream_ssl_preread_module.html Edit: Apache : https://trofi.github.io/posts/295-ssh-over-https.html permalink fedilink source parent hideshow 2 child comments replies: [–] zaknenou@lemmy.dbzer0.com 1 point 2 years ago (1 child) umm, I got confused. Let tell you exactly about the use case. so on a site like this " https://sshocean.com/ssh-ssl " I create an account, and I get something like this: where do I insert this payload (what client for windows or Ubuntu)? and how do I insert the desired SNI that I want to be in front of my ISP? I know of http injector with whom the trick works on android, I mean ssh/ssl stunnel. permalink fedilink source parent hideshow 2 child comments replies: [–] jabjoe@feddit.uk 2 points 2 years ago (1 child) In your .ssh/config you want something like: Host my-ssh-ssl Hostname us01.ssh0.net User sshocean-p1r4t2br Password myparrot2 Port 443 ProxyCommand ~/.ssh/https-tunnel.sh %h %p Then you have a ~/.ssh/https-tunnel.sh something like: #!/usr/bin/env bash { printf "GET /HTTP/1.1\r\nHost:$1\r\nUpgrade:websocket\r\n"; cat } | openssl s_client -connect $1:$2 -servername $1 That last bit, -servername is the SNI bit, if you need it. BUT I think that payload might be for port 2083. I think 443 might be just the OpenSSL connect directly. permalink fedilink source parent hideshow 2 child comments replies: [–] zaknenou@lemmy.dbzer0.com 1 point 2 years ago (1 child) then I initiate this using stunnel from terminal ?(Ubuntu OS) permalink fedilink source parent hideshow 2 child comments replies: [–] jabjoe@feddit.uk 1 point 2 years ago No, stunnel is go othere end. If you doing only the client end, you.don't need it. permalink fedilink source parent
[–] zaknenou@lemmy.dbzer0.com 1 point 2 years ago (1 child) umm, I got confused. Let tell you exactly about the use case. so on a site like this " https://sshocean.com/ssh-ssl " I create an account, and I get something like this: where do I insert this payload (what client for windows or Ubuntu)? and how do I insert the desired SNI that I want to be in front of my ISP? I know of http injector with whom the trick works on android, I mean ssh/ssl stunnel. permalink fedilink source parent hideshow 2 child comments replies: [–] jabjoe@feddit.uk 2 points 2 years ago (1 child) In your .ssh/config you want something like: Host my-ssh-ssl Hostname us01.ssh0.net User sshocean-p1r4t2br Password myparrot2 Port 443 ProxyCommand ~/.ssh/https-tunnel.sh %h %p Then you have a ~/.ssh/https-tunnel.sh something like: #!/usr/bin/env bash { printf "GET /HTTP/1.1\r\nHost:$1\r\nUpgrade:websocket\r\n"; cat } | openssl s_client -connect $1:$2 -servername $1 That last bit, -servername is the SNI bit, if you need it. BUT I think that payload might be for port 2083. I think 443 might be just the OpenSSL connect directly. permalink fedilink source parent hideshow 2 child comments replies: [–] zaknenou@lemmy.dbzer0.com 1 point 2 years ago (1 child) then I initiate this using stunnel from terminal ?(Ubuntu OS) permalink fedilink source parent hideshow 2 child comments replies: [–] jabjoe@feddit.uk 1 point 2 years ago No, stunnel is go othere end. If you doing only the client end, you.don't need it. permalink fedilink source parent
[–] jabjoe@feddit.uk 2 points 2 years ago (1 child) In your .ssh/config you want something like: Host my-ssh-ssl Hostname us01.ssh0.net User sshocean-p1r4t2br Password myparrot2 Port 443 ProxyCommand ~/.ssh/https-tunnel.sh %h %p Then you have a ~/.ssh/https-tunnel.sh something like: #!/usr/bin/env bash { printf "GET /HTTP/1.1\r\nHost:$1\r\nUpgrade:websocket\r\n"; cat } | openssl s_client -connect $1:$2 -servername $1 That last bit, -servername is the SNI bit, if you need it. BUT I think that payload might be for port 2083. I think 443 might be just the OpenSSL connect directly. permalink fedilink source parent hideshow 2 child comments replies: [–] zaknenou@lemmy.dbzer0.com 1 point 2 years ago (1 child) then I initiate this using stunnel from terminal ?(Ubuntu OS) permalink fedilink source parent hideshow 2 child comments replies: [–] jabjoe@feddit.uk 1 point 2 years ago No, stunnel is go othere end. If you doing only the client end, you.don't need it. permalink fedilink source parent
[–] zaknenou@lemmy.dbzer0.com 1 point 2 years ago (1 child) then I initiate this using stunnel from terminal ?(Ubuntu OS) permalink fedilink source parent hideshow 2 child comments replies: [–] jabjoe@feddit.uk 1 point 2 years ago No, stunnel is go othere end. If you doing only the client end, you.don't need it. permalink fedilink source parent
[–] jabjoe@feddit.uk 1 point 2 years ago No, stunnel is go othere end. If you doing only the client end, you.don't need it. permalink fedilink source parent
[–] radioactiveradio@lemm.ee 3 points 2 years ago I thought it was just for servers tho? permalink fedilink source parent