‹ BackHN Continuity

Thread

Xray-core concealed a certificate verification bypass vulnerability

75 points · 10 comments · timbill

  1. usernomdeguerre · · focus · HN ↗
    I get the impression that much of Xray's usage is in mainland China, do many other ecosystems use it? If not, why not?

    Naively I would expect solutions out of Mainland China to be more sophisticated due to the internet restrictions within the country and the number of people who are digitally-connected.

    But perhaps they cover for usecases one doesn't see outside the gfw.

    1. ranger_danger · · focus · HN ↗
      There are other countries that routinely block traffic like Iran or Russia, but there are also some simple methods that go right past the GFW many times, like VPN traffic that is tunneled through regular TLS, or even just plain SSH.

      The "new hotness" is randomizing your TLS fingerprints and masquerading as legitimate web traffic/domains, as well as tunnel/proxy/VPN setups that utilize multiple endpoints at once to spread out the "suspicion" of all your traffic going through a single host all the time.

      1. [deleted] · · focus · HN ↗

        [deleted]

Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.