|
|
Less than a week ago this article was published, noting how the secure version of The Pirate Bay was bypassing the ISP blockade:
http://torrentfreak.com/secure-pirate-bay-unblocked-...
Now, BT seem to have joined Sky in using a deep packet inspection system, rather than the previous Cleanfeed content blocking system. The secure HTTPS versions of The Pirate Bay and KickassTorrents are now blocked on BT.
Now ever previous workarounds such as using Opera Turbo mode, or a SOCKS web proxy set up seem to also be blocked. The only way I can get around it is by using a VPN (I don't like or trust the proxy versions of The Pirate Bay).
|
|
|
Now, BT seem to have joined Sky in using a deep packet inspection system, rather than the previous Cleanfeed content blocking system.
How would this deep packet inspection work, since HTTPS is encrypted?
Oliver.
|
|
|
Less than a week ago this article was published, noting how the secure version of The Pirate Bay was bypassing the ISP blockade:
http://torrentfreak.com/secure-pirate-bay-unblocked-...
Now, BT seem to have joined Sky in using a deep packet inspection system, rather than the previous Cleanfeed content blocking system. The secure HTTPS versions of The Pirate Bay and KickassTorrents are now blocked on BT.
Now ever previous workarounds such as using Opera Turbo mode, or a SOCKS web proxy set up seem to also be blocked. The only way I can get around it is by using a VPN (I don't like or trust the proxy versions of The Pirate Bay).
I still access the site via a configured proxy sitting on my server. Of course it does help that I have two fibre connections one linked to BT, one to Zen. However, in using the proxy on the BT connection I see no blocking to HTTPS as reported. And certainly no deep packet inspection.
|
|
Register (or login) on our website and you will not see this ad.
|
|
|
|
Works fine for me
|
|
|
Does the entire site work for you - once you click through to the torrent listings - the front page sometimes works for me - but most of the torrents do not?
Edited by deleted (Sun 22-Mar-15 11:42:21)
|
|
|
|
So how could they be blocking HTTPS (if they are) without deep packet inspection?
|
|
|
|
That's the question. DNS perhaps?
|
|
|
|
BatBoy - Does the entire site work for you - once you click through to the torrent listings - the front page sometimes works for me - but most of the torrents do not? Thanks
|
|
|
Fine here. Are you using BT DNS?
dig @62.6.40.178 thepiratebay.se
thepiratebay.se. 0 IN A 193.113.9.167
dig @8.8.8.8 thepiratebay.se
thepiratebay.se. 29 IN A 173.245.61.146
thepiratebay.se. 29 IN A 173.245.60.146
Edited by Zadeks (Sun 22-Mar-15 12:24:04)
|
|
|
|
Are you using BT DNS servers?
|
|
|
|
Yes, I am using BT DNS.
|
|
|
|
This is why you're having an issue. Please see my edited post.
The BT DNS server returns the IP 193.113.9.167, which is the site that censored addresses redirect to.
http://193.113.9.167
|
|
|
|
|
|
|
This is why you're having an issue. Please see my edited post.
The BT DNS server returns the IP 193.113.9.167, which is the site that censored addresses redirect to.
http://193.113.9.167
Thanks. Have BT deliberately altered their DNS to block the HTTPS site?
|
|
|
|
Quite possible. I don't know for sure because I have been using Google DNS for years.
|
|
|
I think you are right, but I am not totally sure:
http://security.stackexchange.com/questions/20814/do...
The "Host" HTTP header will be encrypted over HTTPS, and the blocking system would need to read that in order to know what site is being accessed over the Cloudflare proxy. So DPI would not be responsible for any blocking.
Oliver.
|
|
|
That's the question. DNS perhaps?
Or the IP of the Cloudflare proxy. Of course that can also cause "collateral damage" to other websites.
Oliver.
|
|
|
|
Unlikely, as I said it works for me.
|
|
|
Unlikely, as I said it works for me.
Well, the process for blocking HTTPS proxies in general I mean. I have no means to test this specific issue. Sky use IP blocking.
Oliver.
Edited by Oliver341 (Sun 22-Mar-15 13:34:49)
|
|
|
|
So it's blocked on Sky?
|
|
|
So it's blocked on Sky?
I'm not on Sky any more, maybe someone else can check.
Either way, given that other proxies have been shut down in the past (e.g. the original Immunicity), it's interesting to see what happens with Cloudflare here.
Oliver.
|
|
|
|
Pirate Bay worked for me yesterday.
|
|
|
|
I am using BT DNS and it still works for me.
|
|
|
it was other week
not sure about now
switched to TBB.
|
|
|
Post deleted by MrSaffron
Edited by deleted (Mon 20-Apr-15 09:24:03)
|
|
|
First post and a link to trying to sell something so post removed.
|
|
The author of the above post is a thinkbroadband staff member. It may not constitute an official statement on behalf of thinkbroadband.
|
|
|
|
Still works to this day!
|
|
|
|
I am using BT DNS - because we have Parental Controls turned on and HTTPS The Pirate Bay and HTTPS Kick Ass both just time out. You only get the blocked page on the HTTP versions. Does not give the parental control block page either.
This is deliberate blocking by changing the HTTPS DNS entry of these torrent sites to that of the blocked HTTP site.
|
|
|
This is deliberate blocking by changing the HTTPS DNS entry of these torrent sites to that of the blocked HTTP site.
That doesn't sound right. The DNS entry is looked up before the client chooses a protocol.
Oliver.
|
|
|
|
Standard setup here, BT DNS, straight through with HTTP not S.
|
|
|
|
If you look in the address bar, has it been redirected to https:// ?
|
|
|
|
Nope
|
|
|
|
Well that's what happens on mine so I'm guessing you're probably mistaken.
|
|
|
|
Nope, not at all.
|
|
|
There appears to be a redirect on content to the https: site for me too.
tim@vmdx:~$ wget -S http://thepiratebay.se
--2015-04-24 08:00:42-- http://thepiratebay.se/
Resolving thepiratebay.se (thepiratebay.se)... 141.101.118.194, 141.101.118.195
Connecting to thepiratebay.se (thepiratebay.se)|141.101.118.194|:80... connected.
HTTP request sent, awaiting response...
HTTP/1.1 301 Moved Permanently
Date: Fri, 24 Apr 2015 07:00:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d04ca4f56657d519a00282e29195d33e71429858840; expires=Sat, 23-Apr-16 07:00:40 GMT; path=/; domain=.thepiratebay.se; HttpOnly
Location: https://thepiratebay.se/
Server: cloudflare-nginx
CF-RAY: 1dbfeebac3bf1353-LHR
Plusnet unlimited FTTC load balanced with BT Infinity 2 and BT TV
|
|
|
|
Yes they're both using Cloudflare to give them SSL. It's easy to miss if you don't know what to look for.
|
|
|
I know exactly what to look for 
|
|
|
|
That's nice
|
|
|
|
I am certainly pleased that pirate bay is working perfectly well for me, TOR Browser certainly does seem to be worthwhile.
|
|
|
I don't believe you know what you're talking about. This may help: What is in the Tor Browser?
It contains Tor, a modified Firefox ESR, Torbutton, TorLauncher, NoScript, and HTTPS-Everywhere.
|
|
|
I am surprised you are not aware of TOR Browser 
|
|
|
I am certainly pleased that pirate bay is working perfectly well for me, TOR Browser certainly does seem to be worthwhile.
I can access it from my ISP without any extra browser
|
|
|
I have a feeling BatBoy is just being grizzly because his milk was not warm enough
|
|
|
|
You've managed to demonstrate your lack of clue very well.
|
Pages in this thread: 
Print Thread
