Search Mailing List Archives

Limit search to: Subject & Body Subject Author
Sort by: Reverse Sort
Limit to: All This Week Last Week This Month Last Month
Select Date Range     through    

[liberationtech] An Eventful Few Weeks in Iran: DNS Tampering, Content-Type Filtering and SSL Blocking on Google

Collin Anderson collin at
Fri Oct 12 13:54:55 PDT 2012


I was made aware that dumping data onto Twitter and Pastebin is not always
the most useful way of providing public documentation, so I have collected
some recent developments into a blogpost. I wanted to share it here because
there are more than a few lessons for privacy tool providers, including
that if your site or service does not authenticate itself properly to the
user, you are demonstrably now much more exposed to having sessions
hijacked. There are a number of people, including Amin Sabeti, that deserve
all the credit for bringing these changes to light.


*As is the historical trend, an eventful month of political and economic
instability, not the least reflected in the return of Mehdi Hashemi, the
dive of the Toman, Ahmadinejad at the U.N. General Assembly, and the arrest
of Ali Akbar Javanfekr, has led to an increase in the aggressiveness of
Internet censorship by the state. This was most evident in the filtering of
SSL access to Google and Gmail, however, what has received less attention
are two development, the filtering of foreign-hosted media files and the
fulltime implementation of DNS tampering. Since such moments are the time
when the government tips its hand on what it can do, I offer some brief


*Collin David Anderson* | @cda | Washington, D.C.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the liberationtech mailing list