Hacker Newsnew | past | comments | ask | show | jobs | submit | hectorm's commentslogin


Author of the JS bindings here. I also have a browser demo: https://ansi-o-matic.molinero.dev


Can anyone from India confirm if this proxy server [1] is enough to bypass the block?

Basically it is a proxy that alters HTTPS traffic to prevent DPI systems from detecting the domain during the TLS handshake. At least in Spain it works for me to bypass the blocking of the major ISPs [2].

[1] https://github.com/hectorm/demergi

[2] https://github.com/hectorm/demergi/blob/master/ISP.md


Can confirm that demergi works to circumvent the block, as does greentunnel [1]

[1]: https://github.com/SadeghHayeri/GreenTunnel


Can you explain in detail how this is supposed to work? Am I supposed to run this (Docker here) on my local server or on a remote server that the block is not affecting??


You should run it inside the network affected by the blockage.

If you use Docker you can run the following command to start the server and configure your browser to use it as an HTTP proxy.

  docker run -p 8080:8080 docker.io/hectorm/demergi:latest


demergi works great to open blocked sites


If anyone wants to quickly spin up a Haiku VM I leave here my Docker image [1].

It's just a proof of concept but some people are using it for CI as well [2].

[1] https://github.com/hectorm/docker-qemu-haiku

[2] https://github.com/HaikuArchives/ArtPaint/blob/7f5c49278545e...


thanks! will def check this out


The specific URL of the incident is the following, but I cannot edit the submission.

https://status.docker.com/pages/incident/533c6539221ae15e3f0...


You can of course set this up manually outside Docker, I provide this image so that you can easily have a preconfigured installation with VNC, RDP, bind shell and a Samba server.


During the installation I add Netcat to have a bind shell, this way you can get a CMD shell from Linux using the "vmshell" command included in the image.

So yes, technically it's backdoored but only for yourself :)


Effectively this is done as a POC, don't expect any security on a machine running Windows 2000 nowadays.

Regarding legality, I hope that Microsoft doesn't claim any rights, since the Windows 2000 image has been published in WinWorld for years without issues.


[flagged]


I'd guess that the "don't expect any security" comment above meant exactly that. Not that you should forgo security, but that you should expect this to provide no security at all.

Some other comments mention browsing with IE5. You should expect that to provide no security either.


The ISO is downloaded from WinWorld, which is a website dedicated to archiving old software, it's certainly community maintained but at least gets some scrutiny. I also searched the checksum and it matches with other sources, but as there is no longer an official Microsoft source you can never be entirely sure.

I've done my best to confirm the legitimacy but if anyone has an original CD it would be awesome if they could confirm it.


My suggestion is to not embed third party urls for infringing software.. that makes you a target. Inside leave that variable empty and make suggestions on where one could find the media whether it’s the original or from questionable third party websites.

This is how popular emulators survived the 90s, they emulate the bios but force you to find the firmware yourself. Even if it means downloading from an unknown source without a supply chain and running unknown code on your computer. The emulator and author are in the clear


If you connect windows 2000 to the internet, you're probably owned within a few minutes regardless. Similarly for xp pre-sp2.


What? Can you elaborate? If I spin this up in a container, even though it has access to the internet, how am I owned within a few minutes, given that my firewall is in place and I don't expose any port of this container to the internet?


Software evolves. This means that new software needs new libraries. Will be interesting if someone tries new exploits on old software.


I have a similar image with ReactOS if you want to compare :)

https://github.com/hectorm/docker-qemu-reactos


Oh nice!!!!


Thanks!


In the case that someone has any trouble configuring WireGuard, I would like to share my automatic deployment of WireGuard and Unbound with full IPv4 and IPv6 support with Packer and Terraform in Hetzner Cloud (although it can be easily adapted to other providers) [1].

In the case that no automatic deployment is necessary, it may also be useful to look directly at the WireGuard configuration [2]. Since WireGuard supports scripts in "PostUp" and "PostDown", I have automated the configuration of iptables, including some useful rules to redirect 53/UDP port traffic from the public interface to WireGuard, which helps in some cases to bypass some firewalls.

[1]: https://github.com/hectorm/wireguard-setup

[2]: https://github.com/hectorm/wireguard-setup/blob/master/packe...


This is awesome, I'll be giving it a go this week. Thanks!


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: