Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


Website Hijacked/Censorship - Page 2
New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

Website Hijacked/Censorship

2

Comments

  • joojajooja Member

    @sanvit said:
    I live in South Korea, and the government is doing that for few years now. To bypass warning.or.kr, you should either use a VPN or some kind of anti-dpi tool. Or you could use HSTS preload for now. However, the government is now enforcing SNI based blocks so you should also enable ESNI. Most porn sites and illegal gambling sites are blocked.

    Edit : yours look like it's due to game rating issue. It's illegal in south korea to published games that are not rated by the government. (Big companies like Google is allowed to thouh through their Play Store and Apple AppStore. There's a seperate law for that although I don't know how that exactly works)

    Messing with DNS/hosts/etc. won't work since it's done on the ISP level with a 302 redirect injected to the webpage.

    Thank you, looks like it isn't possible to get the game rated by the government.
    The page says that the only way would be selling or partnering with a Korean company and that foreigners can not apply and also we are required to pay a high fee.

    Any example of anti-dpi tool?

  • sanvitsanvit Member
    edited March 2019

    The easiest way to bypass this (and what most illegal websites are doing) is getting a twitter account (since it's not blocked) and get a new domain every time the old one gets blocked and tweet it. When users see that page, users can go to your twitter page and get the new domain and connect to it!

  • @jooja said:

    @sanvit said:
    I live in South Korea, and the government is doing that for few years now. To bypass warning.or.kr, you should either use a VPN or some kind of anti-dpi tool. Or you could use HSTS preload for now. However, the government is now enforcing SNI based blocks so you should also enable ESNI. Most porn sites and illegal gambling sites are blocked.

    Edit : yours look like it's due to game rating issue. It's illegal in south korea to published games that are not rated by the government. (Big companies like Google is allowed to thouh through their Play Store and Apple AppStore. There's a seperate law for that although I don't know how that exactly works)

    Messing with DNS/hosts/etc. won't work since it's done on the ISP level with a 302 redirect injected to the webpage.

    Thank you, looks like it isn't possible to get the game rated by the government.
    The page says that the only way would be selling or partnering with a Korean company and that foreigners can not apply and also we are required to pay a high fee.

    Any example of anti-dpi tool?

    I heard GoodbyeDPI works for SNI bypassing but dunno for HTTP blocks since I usually just use a VPN. It's known that setting your MTU to something like 200~400 should also work.

  • joojajooja Member

    @sanvit said:
    The easiest way to bypass this (and what most illegal websites are doing) is getting a twitter account (since it's not blocked) and get a new domain every time the old one gets blocked and tweet it. When users see that page, users can go to your twitter page and get the new domain and connect to it!

    The main problem is our launcher is HTTP based with that block people can't open or update the game, So basically everyone will be forced to download the game all over again, but thanks for the suggestion I will certainly make a twitter account.

  • For that kind of userbase, I would recommend you partner up with a VPN provider with south korean server (some datacenters don't get blocked. Hint hint :) )and sell at a discounted rate. That way you will make money and make south koreans internet browsing more private :wink:

  • @jooja said:

    @sanvit said:
    The easiest way to bypass this (and what most illegal websites are doing) is getting a twitter account (since it's not blocked) and get a new domain every time the old one gets blocked and tweet it. When users see that page, users can go to your twitter page and get the new domain and connect to it!

    The main problem is our launcher is HTTP based with that block people can't open or update the game, So basically everyone will be forced to download the game all over again, but thanks for the suggestion I will certainly make a twitter account.

    Change that launcher to HTTPS based next time

  • @sanvit said:
    The easiest way to bypass this (and what most illegal websites are doing) is getting a twitter account (since it's not blocked) and get a new domain every time the old one gets blocked and tweet it. When users see that page, users can go to your twitter page and get the new domain and connect to it!

    Haha, nice one, until they go for IP-based blocking!

    I live in Singapore and while we haven't gone to such extremes. We do some minor filtering through ISPs providing domestic connection, but commercial providers are not affected. Is it the same in South Korea?

  • joojajooja Member

    @poisson said:

    @sanvit said:
    The easiest way to bypass this (and what most illegal websites are doing) is getting a twitter account (since it's not blocked) and get a new domain every time the old one gets blocked and tweet it. When users see that page, users can go to your twitter page and get the new domain and connect to it!

    Haha, nice one, until they go for IP-based blocking!

    I live in Singapore and while we haven't gone to such extremes. We do some minor filtering through ISPs providing domestic connection, but commercial providers are not affected. Is it the same in South Korea?

    Since we using cloudflare they would block alot of websites together i guess?

  • @poisson said:

    @sanvit said:
    The easiest way to bypass this (and what most illegal websites are doing) is getting a twitter account (since it's not blocked) and get a new domain every time the old one gets blocked and tweet it. When users see that page, users can go to your twitter page and get the new domain and connect to it!

    Haha, nice one, until they go for IP-based blocking!

    I live in Singapore and while we haven't gone to such extremes. We do some minor filtering through ISPs providing domestic connection, but commercial providers are not affected. Is it the same in South Korea?

    They can't do IP based filtering because guess what if they block CloudFlare IPs ;)

    Didn't get the last part though. Can you explain a bit please?

  • sanvitsanvit Member
    edited March 2019

    @jooja said:

    @poisson said:

    @sanvit said:
    The easiest way to bypass this (and what most illegal websites are doing) is getting a twitter account (since it's not blocked) and get a new domain every time the old one gets blocked and tweet it. When users see that page, users can go to your twitter page and get the new domain and connect to it!

    Haha, nice one, until they go for IP-based blocking!

    I live in Singapore and while we haven't gone to such extremes. We do some minor filtering through ISPs providing domestic connection, but commercial providers are not affected. Is it the same in South Korea?

    Since we using cloudflare they would block alot of websites together i guess?

    For now they only block based on domain (SNI block) or domains & url (HTTP block)

  • It means that internet providers who serve residential or home customers can block through DNS, but if you directly plug into the internet through a data center there is no block.

  • @poisson said:
    It means that internet providers who serve residential or home customers can block through DNS, but if you directly plug into the internet through a data center there is no block.

    In Korea, all residential connections are blocked and some datacenters are also blocked.

    Thanked by 1eol
  • @Chuck said:

    @gwnd1989 said:
    Respect the law?

    Which is created by politicians are above the law?

    People appoint the politicians, politicians make the laws. This means the people are making the laws indirectly. Indirect democracy.
    It doesnt mean the politicians are above the law.

  • NeoonNeoon Community Contributor, Veteran

    As long you do a non encrypted request, obviously they are able to manipulate it.

  • ChuckChuck Member

    @gwnd1989 said:

    @Chuck said:

    @gwnd1989 said:
    Respect the law?

    Which is created by politicians are above the law?

    People appoint the politicians, politicians make the laws. This means the people are making the laws indirectly. Indirect democracy.
    It doesnt mean the politicians are above the law.

    I still wonder why my tax money is using to pay for politicians jet fuel.

    Thanked by 1jooja
  • I just did some Google-fu and found the entire backstory.

    Anyway I think living in the internet age, a VPN account is a must-have to be activated when network security is in doubt (like free WiFi) or when visiting countries with censorship. Cat and mouse game.

  • poissonpoisson Member
    edited March 2019

    @sanvit said:
    In Korea, all residential connections are blocked and some datacenters are also blocked.

    At least we are not crazy enough to block our datacenters. fingers crossed

    Thanked by 1sanvit
  • eoleol Member

    @jooja said:

    @eol said:

    @jooja said:
    Any solution for IE?

    IE?
    Use it to dl firefox, then uninstall.

    South Koreans use Internet Explorer: It's the law.
    A government online system requires users to enter information and receive a digital certificate which South Korean online merchants can use to identify consumers. But the system relies on an ActiveX control, and therefore requires the use of Internet Explorer.

    Whiskey Tango Foxtrott!
    OK.
    I mean it's not OK but OK.

  • @Neoon said:
    As long you do a non encrypted request, obviously they are able to manipulate it.

    That's actually not true. KISA (Korea Internet & Security Agency)'s RootCA was denied by Mozilla because they created fake certs for test.com and someother. Also Korean private owned company who reselled symantec's certs issued a cert for google.com which lead Chrome to untrust Symantec's ssl anymore. Who knows what now...

  • NeoonNeoon Community Contributor, Veteran

    @sanvit said:

    @Neoon said:
    As long you do a non encrypted request, obviously they are able to manipulate it.

    That's actually not true.

    Read the Thread. Stop bullshitting me.

    KISA (Korea Internet & Security Agency)'s RootCA was denied by Mozilla because they created fake certs for test.com and someother. Also Korean private owned company who reselled symantec's certs issued a cert for google.com which lead Chrome to untrust Symantec's ssl anymore. Who knows what now...

    Did you really trust CA's? Really? Big suprise.

  • @sanvit said:

    @Neoon said:
    As long you do a non encrypted request, obviously they are able to manipulate it.

    That's actually not true. KISA (Korea Internet & Security Agency)'s RootCA was denied by Mozilla because they created fake certs for test.com and someother. Also Korean private owned company who reselled symantec's certs issued a cert for google.com which lead Chrome to untrust Symantec's ssl anymore. Who knows what now...

    Wow. The South Korean government takes on the Internet. grabs popcorn

  • @Neoon said:

    @sanvit said:

    @Neoon said:
    As long you do a non encrypted request, obviously they are able to manipulate it.

    That's actually not true.

    Read the Thread. Stop bullshitting me.

    KISA (Korea Internet & Security Agency)'s RootCA was denied by Mozilla because they created fake certs for test.com and someother. Also Korean private owned company who reselled symantec's certs issued a cert for google.com which lead Chrome to untrust Symantec's ssl anymore. Who knows what now...

    Did you really trust CA's? Really? Big suprise.

    What I was saying is that even if you encrypt your request, no one knows... :(

  • @Chuck said:

    @gwnd1989 said:

    @Chuck said:

    @gwnd1989 said:
    Respect the law?

    Which is created by politicians are above the law?

    People appoint the politicians, politicians make the laws. This means the people are making the laws indirectly. Indirect democracy.
    It doesnt mean the politicians are above the law.

    I still wonder why my tax money is using to pay for politicians jet fuel.

    @Chuck said:

    @gwnd1989 said:

    @Chuck said:

    @gwnd1989 said:
    Respect the law?

    Which is created by politicians are above the law?

    People appoint the politicians, politicians make the laws. This means the people are making the laws indirectly. Indirect democracy.
    It doesnt mean the politicians are above the law.

    I still wonder why my tax money is using to pay for politicians jet fuel.

    @Chuck said:

    @gwnd1989 said:

    @Chuck said:

    @gwnd1989 said:
    Respect the law?

    Which is created by politicians are above the law?

    People appoint the politicians, politicians make the laws. This means the people are making the laws indirectly. Indirect democracy.
    It doesnt mean the politicians are above the law.

    I still wonder why my tax money is using to pay for politicians jet fuel.

    @Chuck said:

    @gwnd1989 said:

    @Chuck said:

    @gwnd1989 said:
    Respect the law?

    Which is created by politicians are above the law?

    People appoint the politicians, politicians make the laws. This means the people are making the laws indirectly. Indirect democracy.
    It doesnt mean the politicians are above the law.

    I still wonder why my tax money is using to pay for politicians jet fuel.

    That s because the majority of people voted politicians to make such laws that enable them to receive free fuel.
    You can never blame the politicians. We vote and appoint them.

  • eoleol Member
    edited March 2019

    @gwnd1989 said:
    You can never blame the politicians. We vote and appoint them.

    I don't remember voting for any politician.

    EDIT2:
    Neither do I remember appointing any one of them.

    Thanked by 2uptime Chuck
  • joojajooja Member
    edited March 2019

    Apparently just AS9644 SK Telecom is doing the hijack managed to get it partially working with HSTS

    Thank you!

    If anyone has any other suggestion of how to improve the situation/bypass the hijack will be great!

  • sanvitsanvit Member
    edited March 2019

    @jooja said:
    Apparently just AS9644 SK Telecom is doing the hijack managed to get it partially working with HSTS

    Thank you!

    If anyone has any other suggestion of how to improve the situation/bypass the hijack will be great!

    Can you PM me the url? I have KT on my home and using SK for mobile.

    P.S. AFAIK if one ISP blocks, it won't take long for others to block because the blocklist is managed by the government, not the ISP.

  • Ive searched and looks like getting a rating costs around 100USD. If your userbase is that big, and if you are making profit with it, you might want to get a rating on it?

    Thanked by 1poisson
  • Host your site on the .onion network.

    Thanked by 2eol uptime
  • eoleol Member

    @Janevski said:
    Host your site on the .onion network.

    I recommend the .potatoe network.
    Superior potassiums.

  • doghouchdoghouch Member
    edited March 2019

    @jooja said:

    @Pilzbaum said:
    I think HSTS preloading would help in this case. But as you are using Cloudflare i dont know if thats doable (mabye with a paid subscription?)
    But HSTS might have some drawbacks too

    Any example of drawbacks?
    Apparently HSTS isnt supported by IE(Top 1 popular browser in Korea)

    South Korea (being one of the most technologically advanced nations in the world) still uses Internet Explorer?

    Thanked by 1eol
Sign In or Register to comment.