...Just don't use your ISP's DNS.
this post was submitted on 19 Oct 2023
345 points (95.3% liked)
Piracy: ꜱᴀɪʟ ᴛʜᴇ ʜɪɢʜ ꜱᴇᴀꜱ
54539 readers
476 users here now
⚓ Dedicated to the discussion of digital piracy, including ethical problems and legal advancements.
Rules • Full Version
1. Posts must be related to the discussion of digital piracy
2. Don't request invites, trade, sell, or self-promote
3. Don't request or link to specific pirated titles, including DMs
4. Don't submit low-quality posts, be entitled, or harass others
Loot, Pillage, & Plunder
📜 c/Piracy Wiki (Community Edition):
💰 Please help cover server costs.
 |
 |
|---|---|
| Ko-fi | Liberapay |
founded 1 year ago
MODERATORS
Sadly doesn't work for gov level blocks that look at the SNI rather than blocking at DNS level
Edit: correction from ESNI to SNI
You mean SNI, not ESNI. ESNI is the Encrypted Server Name Indication that gets around that, though the newer ECH (Encrypted Client Hello) is better in many ways. Not all sites support either though.
If I utilise a DNS provider who supports ECH (mullvad) with a browser that supports ECH (Librewolf) will I still not be able to access certain websites? I haven't come across a website blocked by my ISP yet so don't know
Most ISP blocking is pretty superficial, usually just at the DNS level, you should be fine in the vast majority of cases. While parsing for the SNI flag on the client hello is technically possible, it's computationally expensive at scale, and generally avoided outside of enterprise networks.
With that siad, When in doubt, VPN out. ;)
load more comments
(4 replies)
load more comments
(2 replies)
load more comments
(5 replies)
You can try the new ECH feature, in the FF browser for example. It encrypts the SNI on compatible websites
load more comments
(1 replies)
I don’t know where you’re from and therefore don’t know what laws affect you but unless the ISP is involved in the media game (i.e HBO & AT&T) they don’t care about restricting access. In fact, they’re against it in most scenarios because if a competitor that doesn’t restrict access to piracy related websites exists, that competitor is likely to siphon customers from ISPs who impose restrictions.
On top of that, most ISPs do the absolute bare minimum to restrict your access so that you can bypass it easily, the most common being the modification of DNS records which you can easily bypass by changing your resolver.
TL:DR blame your lawmakers not your isp
The DNS modification is slightly off. Some ISPs check UDP packets since they are insecure and will modify query results regardless of the DNS server you are sending to. Mediacom is known to do this for their billing and DMCA systems. They use DNS redirection to assist in MITMing the connection to load their own certificate to your browser. With that done, they can prepend their own Javascript to the response they receive from whatever web server you are trying to contact. That's how they get their data usage and DMCA popups loaded when you load up whatever site.
ISP mitm sounds infuriating
Even if it is not being done for a malicious reason, it is still a malicious practice. Websites can help prevent this by adopting wildcard Subject Alternate Names in their certificates thereby making the redirection much less likely to succeed, but you shouldn't have to view your own ISP as a threat actor.
load more comments
(1 replies)
They already do restrict you from using lemmy by charging full Internet price for it, and allowing special free data plans for Facebook.
Net neutrality matters.
My state of residence restricts access to certain sites. It's all bullshit.
Anyway... The ISP is either a common carrier or a content provider. Pick a fucking lane. You can't have half and half. Either you are responsible for ALL content provided or NONE.
If you choose none then you MUST NOT restrict access to any content.
If you chose ALL then you may restrict content based on what you are willing to take responsibility for. But in that case if someone does something illegal with content you provided you are liable.
Utah?
California. The internet contains chemicals known to the State of California to cause cancer and birth defects or other reproductive harm.
The list is growing: Utah, Florida, Kansas, South Dakota, and West Virginia, Arkansas, Mississippi, and Virginia all have legislation in progress
This is why we need more competition in the ISP space. And use a VPN.
Or the FCC to make internet a utility and strip their ability to restrict access, throttle speeds, or be bias in any way. Always use a VPN. Getting Mullvad on my next paycheck.
Getting Mullvad on my next paycheck.
Good choice
No offense but if they can do that you have to blame your government not the ISP.... as those are the ones allowing this to happen.
The government are the ones telling the ISPs to do it, not just allowing it.
load more comments
(3 replies)
load more comments
(4 replies)
Yeah this is government level. They tell the ISPs what to block and they do what’s ordered. ISPs want your money. All the legal crap they have to do is part of business.
my isp inserts ads into any http website
Holy hell that sounds cursed. How obnoxious are they? Can you share a screenshot?
Next time I'm cursing Spectrum I'll remind myself that they aren't doing that at least.
Next they put ads in your ads as well.
this is UW website at http://washington.edu(they seem to offer https but dont redirect to it by default)
besides those "news" ads there is also a popup video ad that i didnt manage to capture this time
load more comments
(2 replies)
Before Wikipedia default to https, I remember being surprised seeing ads in a Wikipedia page. I was so disappointed that Wikipedia has stoop so low before eventually realizing my cursed ISP was the real culprit.
Does http sites exist at this point though?
my uni's timetable :D
but yes otherwise its pretty obscure
Shenanigan like this was one of the main driving force to push website operators to use https by default. The other driving forces are the computational cost of serving https got significantly cheaper thanks to modern CPU with accelerated cryptography instructions support, and letsencrypt providing free TLS certificate to everyone.
[This comment has been deleted by an automated system]
load more comments
(2 replies)
Censorship is wrong. Every rational, adult human being should have the fundamental right to their autonomy, without third party intervention, with full awareness of the laws that apply to them.
If they decide to abuse that freedom and awareness by accessing illegal content (even CSAM), then they are taking the risk of being discovered, prosecuted, and punished accordingly. And, in many cases (like CSAM), I hope they are caught and punished.
Regardless of the outcome, it still starts with the freedom for that individual to make that decision for themselves.
That's part of the price of freedom. Tor is a browser that makes it hard to be tracked down, so people use it to facilitate illegal activities. Crypto is a currency that makes it hard to be tracked down, so the same occurs. While most of us use and support these services for legal activities, just to be free from corporate and government oppression, there will always be people who use them to be from legal consequences.
Sadly, making it easier to find people who do things like post CSAM in turn makes it easier to find people who want to watch Porn without supplying a government ID. (Still can't believe my state of Virginia passed that law.)
people who want to watch Porn without supplying a government ID
Yeah, and this is where the part of my comment that discussed "laws that apply" is nuanced. If the laws that apply are designed to abridge people's autonomy, and right to privacy,, then that's an unjust law.
load more comments
(3 replies)
https://github.com/ValdikSS/GoodbyeDPI, https://www.f-droid.org/packages/ru.evgeniy.dpitunnelcli/ enjoy. Fuck cencorship!
Switch over to an ISP that doesn't do that. Leave record with your country's customer protection service and/or open press / open culture office that's why you did it. There. Done.
Lots of people come have a choice in who their ISP is. I don't. For my area, there's one provider. If I want to change that, I have to move.
load more comments
(4 replies)
Where are you from?
view more: next ›