Eric Wustrow retweeted
Our TCP-based amplification attacks are being used in the wild! ☹️ Fascinating writeup from @Akamai describing the attack. It makes some mitigation suggestions (drop large SYN packets), but that only works for one of the five attacks our AI discovered. akamai.com/blog/security/tcp…
Eric Wustrow retweeted
We’ve had some incredible people come through the Cloudflare Research internship program in the last year or so. Here are some of their stories.
Eric Wustrow retweeted
We confirm that the GFW has now been able to dynamically block any seemingly random traffic in real time. Such capability potentially affects a large set of censorship circumvention protocols, including but not limited to Shadowsocks and VMess. A detailed report is coming soon.
Eric Wustrow retweeted
📢We are presenting our work on Russia’s emerging censorship technique of throttling at @ACM_IMC2021 now!
🎉🎉🎉Recognized as the Highest Scoring Short Paper at IMC’21. Read more about it: censoredplanet.org/throttlin…
Eric Wustrow retweeted
ACM FOCI'21 will be Open Access! In the spirit of truly Free and Open Communications on the Internet, we are happy to say that all published papers will have their ACM DL open access fees covered. Submit your work by May 13th! conferences.sigcomm.org/sigc…
Eric Wustrow retweeted
1/ Russia recently began throttling access to Twitter, their first acknowledged use of throttling for censorship.
My lab investigated, and what we found is an alarming consolidation of Russia's Internet controls.
#russia #throttling
Read our full report:throttletwitter.com
Eric Wustrow retweeted
Help spread the word: FOCI 2021 is happening! The Free and Open Communications on the Internet workshop has found a new home for this year: colocated with @ACMSIGCOMM! Submit work on censorship, anonymity, mis/dis-information, and more. Papers due May 13 conferences.sigcomm.org/sigc…
Eric Wustrow retweeted
It's long been assumed that there are no nontrivial reflected amplification attacks using TCP—prior attacks are UDP or simply TCP SYNs. In our just-now-accepted @USENIXSecurity 2021 paper, we apply a genetic algorithm to discover 5 reflected TCP amplification attacks + variants.
Eric Wustrow retweeted
Ok, so at the risk of adding more politics to everyone’s timelines: the Trump administration has appointed a new director to the US Agency for Global Media, which runs Voice of America and the Open Technology Fund. He has fired basically every director. amp.cnn.com/cnn/2020/06/17/m…
Eric Wustrow retweeted
A great turnout of Censorship researchers at #NDSS20, thank you @NDSSSymposium for the great session!
Eric Wustrow retweeted
Here's our @googlechrome response to the Kazakhstan government order for HTTPS interception: security.googleblog.com/2019…?
Eric Wustrow retweeted
We are grateful to hear @mozilla & @googlechrome
took actions against shameful Kazakhstan's MitM following our @CensoredPlanet report: blog.mozilla.org/blog/2019/0…
security.googleblog.com/2019…
censoredplanet.org/kazakhsta…
Eric Wustrow retweeted
As per our live tracking, Kazakhstan has stopped intercepting HTTPS traffic to popular websites as of 8:50 AM Almaty time.
xitter.cf/royaensafi/status/1158…
Eric Wustrow retweeted
Kazakhstan MitM is back again, our real-time tracking of its deployment suggests it started little after 10:50 AM at Kazakhstan. Investigation continues at #CensoredPlanet, scans done and updated every 10 minutes here: censoredplanet.org/kazakhsta… #Kazakhstan #MitM
Eric Wustrow retweeted
Kazakhstan recently began intercepting HTTPS connections using a fake root CA. We investigated the carrier-level HTTPS interception that significantly weakens Internet for Kazakh Internet users. #Kazakhstan #MitM
Our detailed report is here: censoredplanet.org/kazakhsta… (1/n)
Eric Wustrow retweeted
In this new Research Corner blog post, @srfrolov and @ewust describe their work studying the use of the Transport Layer Security (TLS) protocol in censorship circumvention tools. opentech.fund/news/research-…
Eric Wustrow retweeted
So here's the thing--I am worried that publishing is killing libraries, and that will, in turn, kill publishing.
Eric Wustrow retweeted
Following seven months of responsible disclosure, we are happy to announce that our Foreshadow attack is now public foreshadowattack.com.
Work with @MarinaMinkin @ofir1942 @jovanbulck @raoul_strackx @bariskasikci @ThomasWenisch Mark Silberstein, Daniel Genkin, Frank Piessens
