[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #22369 [Metrics/Censorship analysis]: Increase of users in Ukraine due to block of Russia-based services

#22369: Increase of users in Ukraine due to block of Russia-based services
-----------------------------------------+------------------------------
 Reporter:  dcf                          |          Owner:  metrics-team
     Type:  project                      |         Status:  new
 Priority:  Medium                       |      Milestone:
Component:  Metrics/Censorship analysis  |        Version:
 Severity:  Normal                       |     Resolution:
 Keywords:  censorship block ua          |  Actual Points:
Parent ID:                               |         Points:
 Reviewer:                               |        Sponsor:
-----------------------------------------+------------------------------

Comment (by dcf):

 Replying to [comment:4 dcf]:
 > cacahuatl wrote a deobfuscator and produced this output:
 >  * attachment:blckd.json.decoded

 Each of the `host`s has an associated `endpoint` and `hash`. There are
 only two distinct values of `endpoint` and `hash`:
 {{{
   "records": [
     {
       "host": "vk.com",
       "endpoint": "http://vk.com/ping.txt";,
       "hash": "b5b607d573e6a901ef215db6b1247404c92bb9ce"
     },
     ...
     {
       "host": "ok.ru",
       "endpoint": "http://ok.ru/google55e918a7d2970a76.html";,
       "hash": "526aabc2501699fdcfe5c58f98db82eed849c904"
     },
     ...
 }}}

 The `hash` is the sha1sum of what you get if you fetch those two URLs.

 http://vk.com/ping.txt
 {{{
 WulbqygHXe
 idjxMb2pJF
 qORaQtmSWo
 SF32HldC2U
 dMVhUpEEbt
 LwBNJubmVq
 j03L2D3Lyp
 z9z76x6caZ
 z2Vv7uVT1M
 phZwKcVHVT
 }}}

 http://ok.ru/google55e918a7d2970a76.html
 {{{
 google-site-verification: google55e918a7d2970a76.html
 }}}

 cacahuatl found a verifyDomain function that seems related:
  * attachment:verifyDomain.js

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22369#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs