Reliance Jio and MITM

Old article.

Indian Tycoon Goes From Drilling Oil to Mining Data – Fortune

“For Reliance…data is the new oil, and intelligent data is the new petrol,” Ambani said in March, explaining his drive to move closer to India’s consumers.

Reliance has said little publicly about Jio, and even less about the potential for wide-scale data mining in a country where consumers have not, to date, made a big deal about online privacy. But top executives are clear on the opportunity.

“It’s called Deep Packet Inspection, and what you can do with the analytics of that is mind-boggling,” said a senior Reliance executive, referring to a practice that digs into “packets” of data created by computers for efficiency, mining them for information.

Click to expand...

Jio blocking whoer.net no idea why 🙄

Maybe they misspelled whore.

Seems to happen only on mobile for now.


Source


Wouldn't take long to apply it for fiber infrastructure, though.

too bad, i aint selling my data for 100gb fup.

nice try mota bhai.

This doesn't surprise me, I have multiple Jio mobile connections. MITM/packet inspection and other attacks are done by many ISPs worldwide at the behest of Govt. and Intelligence operatives. Hence VPNs are required if you need privacy

pothi said:

Seems to happen only on mobile for now.


Source


Wouldn't take long to apply it for fiber infrastructure, though.

Click to expand...

Not opening on Jio Fiber.

ISP which wants to profit from selling user data is a very big red flag.

MITM is pretty much dead from years on big sites, now it can be used only on sites not properly configured. Letsencrypt, cloudflare makes it super easy to implement https on your site.

DPI can be used for optimizing network too like serving youtube peering or cdn stuff from isp servers etc. Not much information can be extracted from https sites. IP, site name info can be used for blocking sites, creating vague profiles.

On mobile DPI will be more useful for profiling because its a personal device like your activity hours can indicate if you are employed or not etc but thats still pretty vague. On broadband with multiple active device profiling would be more mess, too much effort for not so useful data.

With DOH, cloudflare ESNI DPI will be even more difficult. Big sites like youtube, netflix etc would like ISP to be able to identify their traffic so it can served from nearby server according to their peering agreements.

@C3PO using VPN would actually put you on govt naughty list because your traffic would stand out from other users.

Smh said:

@C3PO using VPN would actually put you on govt naughty list because your traffic would stand out from other users.

Click to expand...

Using a VPN is not illegal...as of now. So there's no worry. To a packet sniffer there's no difference between a VPN and https traffic. What I think is govt. using backdoors in different encryption algorithms/methods to snoop on users. I can tell you based on inputs from a person in the know...that backdoors are more common then we think. I'll leave it at that. If you want perfect privacy disconnect from the 'net. Period.

@C3PO I never said its illegal to use VPN. With https traffic isp can still the ip of sites you visit, with vpn all your traffic would connect to vpn servers so thats easy to differentiate.

Backdoors is software, android, windows, some hardware based is kinda open knowledge now but I don't think they can break encryption yet or if they have super computers for that then it will used only for important stuff.

Confirmed working with Jio 4G in Delhi. I can access 1337, ph and blocked sites like that



Specifically chose Internet Explorer to make sure nothing else is messing with DNS.