Hacker News Reader

Hacker News

Comment by airtelblock | Hacker News Reader

Parent Full thread

airtelblock

Setting esni to enabled in Firefox partially works.

But Airtel really, really wants to run scripts and show ads on blocked pages.

Duckduckgo - https://i.postimg.cc/SqkRhpRC/Mozilla-Firefox-29-09-20-w-PA....

Pirate Bay - https://i.postimg.cc/qMmwMXVY/t-29-09-20-9-Dv.png

View on HN

DuckDuckGo is blocked in India??

Nope

Yes, ISPs are blocking DDG. Airtel(ISP) is blocking DDG but HTTPS version is accessible.

https://imgur.com/a/y7wnOjD

What reason could they have for blocking DDG? Is it easier to find pirated content there than on Google or something? That's my best guess. I can't imagine they'd block on behalf of a competitor or something.

You never know. Could be a mistake where they were trying to block a certain path due to some search result of copyright infringement, but ended up banning the domain itself. One can only guess.

Reddit and Github have previously been temporarily banned in India due to similar "mistakes"

I suspect it's political censorship/surveillance of some sort. Some suggest it's collateral damage from the ban on Chinese apps. https://www.themobileindian.com/news/duckduckgo-blocked-by-m...

Whether that's a mistake or they've made an enemy of some sort is not clear. India is a democratic country but not an especially free one.

DDG is a strong advocate for user privacy, that might be all it takes.

https://en.wikipedia.org/wiki/Internet_censorship_in_India

Is it possible the big guys will provide (sell?) query surveillance feeds to random governments while DDG can't/won't?

even the http version is accessible to me

Not blocked for me on my home and mobile (Jio) connection. I think airtel is just crap. Just switch.

How do they inject stuff into HTTPS pages?

it does say "Not secure" for the https info, so I guess they intercept the request

yeah but not secure is regular http. on https they cannot do that without triggering a browser warning.

things that do stuff like this can't, they try whatever tricks are possible to push javascript or redirects to send the client browser to something non https, on port 80

Unless the site uses certificate pinning its possible to do a downgrade attack that forces browser off of HTTPS. The extension HTTPS Everywhere is a stopgap against this

Heads up, that site was injected with a ton of malware/adware and redirects. Possibly their ad network got hosed, but that site doesn't seem safe unless you are locked down.

Reply on news.ycombinator.com