2026-08-11
A Snowflake-Inspired WebRTC Proxy PoC for Filter Evasion (Part 2): Building the TURN/TURNS and DPI Testbed
In Part 1, we showed how a Snowflake-inspired WebRTC DataChannel proxy can bypass a client-side DNS filter by offloading destination resolution to a remote proxy peer. But what happens when defenders deploy Deep Packet Inspection (DPI), strict egress firewalls, and TLS-inspecting forward proxies?
Part 2 defines the controlled testbed and evidence standard for evaluating WebRTC DataChannels under Coturn TURN/TURNS relaying, an explicit mitmproxy HTTPS baseline, and offline Suricata/Zeek analysis. The harness is implemented, but the P2-A through P2-F measurements remain in progress; this article separates protocol expectations from findings that still require captured evidence.
Read Investigation
2026-06-20
A Snowflake-Inspired WebRTC Proxy PoC for Filter Evasion (Part 1)
DNS-based content filters are a popular first line of defense. Block a domain at the resolver level and clients can't reach it — in theory. But what happens when a client never resolves the blocked domain at all? What if it tunnels its request through a peer that does the resolving on its behalf?
That question is exactly what this WebRTC proxy lab was built to explore. Driven by a desire to use and understand the Snowflake protocol further, I created this lab based on the Tor Project's Snowflake pluggable transport—which uses WebRTC DataChannels to move traffic through volunteer browser proxies. This lab recreates a stripped-down, bounded version of that pattern in Go and measures what DNS filters, firewalls, and endpoint tools actually observe when the traffic flows.
This article covers the architecture, what I found, and what defenders should take away. Part 2 will analyze the effectiveness of WebRTC DataChannels in bypassing SSL bumping and Deep Packet Inspection (DPI).
Read Investigation
2026-05-26
Guide to Securing your Browser
Your browser is the gateway to the internet, and it's very important to minimize the threats that may come through this gateway. Here is a practical list of settings to change to minimize and nearly eliminate most common threats.
Read Investigation
2026-05-23
New Outlook: Troubleshooting Guide
The "New Outlook" for Windows has had its share of criticisms, and rightly so. Microsoft's rollout of the New Outlook was less than ideal. However, since its release in September 2023, a lot of bugs have been resolved and features added, making it a viable option compared to Classic Outlook. It is quite easy to troubleshoot compared to Classic Outlook because it is essentially a glorified website wrapped in Edge WebView2. Here is how to fix issues with the New Outlook.
Read Investigation
2026-05-23
DNSFilter Agent - Wi-Fi Issues on Windows 11 24H2
DNSFilter Agent 2.2.1 appears to trigger Wi-Fi instability on some Windows 11 24H2 devices running Windows 11, version 24H2, with Realtek Wi-Fi 6, Intel AX211, or Intel AX201 adapters.
Read Investigation