Domain: kryo.se
Stories and comments across the archive that link to kryo.se.
Comments · 10
-
DNS and ICMP Tunnels
Why pay? Connect to their access point and tunnel all of your traffic over DNS or ICMP. The firewalls that they use rarely block ICMP and almost never block UDP port 53. All you need is to have a client installed on your machine and run a server out on the interwebs somewhere that is running the right server software and acts as a proxy. The tech to do this has been around for quite a while, and most linux distros have the clients and servers in their repositories. The main system used for DNS is called iodine and there are two different, very good ICMP tunnels that I know of. One is here and another here. If you search through your favorite linux or BSD distro's repository search for "ip over icmp" or "ip over dns" and you'll find what you need.
-
Re:Or just do both
That or a home TV.
The purpose of such a Ubuntu phone is to have Ubuntu at your disposal while on the road. At home, you've got your fully fledged PC with big keyboard, ergonomic mouse, nice screen...
Yes, I do have a Nokia N900, and being able to open up a terminal locally (on the built-in screen) and use the command line is really nice
:-)bus stops
I carry a netbook for these situations.
Whenever you take the bus, you've got your netbook with you? The advantage of a phone is, it fits into your pocket, no backpack needed. Or maybe, the backpack is not just for the netbook, but also as a protection against mad shooters?
In the dual-boot scenario I mentioned, Android still works.
Either Android has the application you need (terminal, iodine, whatever), or it doesn't. In the first case, why bother with Ubuntu at all? In the second case, you will miss your application without a TV (or other external screen)... defeating the point of having it on the phone.
-
IP over DNS using Iodine
I've played with IP over DNS, and it works surprisingly well. It can break through most firewalls. I think there was something like a 50% performance hit, but considering how convoluted it is, that's pretty good.
It shouldn't be difficult to port it to Android if you install a kernel with tun/tap support.
-
Re:Step 1
It turns out you can already disguise all of your traffic as a DNS request.
-
Re:DNS not counted?
-
Re:You have web? So you have DNS.
And for anybody who's wondering: the name of the program is iodine (as in Ip over Dns, or as in atomic number 53).
-
Re:ssh is permitted?
Yeah, I've used iodine successfully in the past. You need to get your own domain, though.
You know the nice part? It uses their DNS servers to tunnel your data
;) -
what about iodine
Iodine is IP over DNS. Since it is actually the DNS protocol (and not just using the DNS ports), it might not be susceptible to Deep Packet Inspection. However, it could presumably still be detected.
-
Re:Sounds like fun
And Iodine too.
-
Build a email to HTTP to email gateway.
Why not whip up some code that will wait for you to send an email to it containing some sort of pass code and a URL, then it fetches the page and all images, lzma and yEncs it, and then emails it back to you. It may not work so nicely with complicated sites, but for things like Wikipedia it would work great. I'm willing to bet however, that with enough effort you could write a fully fledged proxy. Latency may be really crap, but it would be undeniably cool. Also, have a look at programs such as http://code.kryo.se/iodine that allow you to run IPv4 over DNS.