uProxy: a Social Proxy for your Browser Raymond Cheng, Will Scott, - - PowerPoint PPT Presentation

uProxy: a Social Proxy for your Browser

Raymond Cheng, Will Scott, Aaron Gallant, Tom Anderson, Arvind Krishnamurthy University of Washington Seattle, WA, USA with help from our friends at Google Ideas

1/19

Takeaways

• Users need more control over their paths
• n the Internet
• uProxy is a browser extension that lets

users securely tunnel traffic through a friend’s computer

2/19

Opte Project 3/19

Takeaways

• Users need more control over their paths
• n the Internet
• uProxy is a browser extension that lets

users securely tunnel traffic through a friend’s computer

4/19

5/19

Universal Encryption has yet to come

Attacks, surveillance

3/15 Firesheep 6/19

Washington Post 7/19

8/19

9/19

Partial Internet Outages are Common

• Measured 2M outages over 2 months

○ 79% were partial

• 10% of outages lasted over 10 minutes
• Variety of causes:

route convergence delays, pathological routing policies, misconfiguration, prefix hijacking, route injection, router bugs, DDoS

Katz-Bassett, Ethan, et al. "LIFEGUARD: Practical repair of persistent route failures." ACM SIGCOMM Computer Communication Review 42.4 (2012): 395-406.

10/19

Why now?

11/19

Why now?

Social networks

11/19

Why now?

Social networks Widely Available Platforms

11/19

Why now?

Social networks Widely Available Platforms Web Standards

11/19

Centralized proxies

Connection to proxy

Legend

Censors see connection to YouTube

Users in unsafe environment

Unfettered connection

3 12/19 + Failures + Filter + Surveil + Manipulate/Misdirect

Centralized proxies

Connection to proxy

Legend

Censors see connection to YouTube

Users in unsafe environment

Unfettered connection

3 12/19 + Failures + Filter + Surveil + Manipulate/Misdirect

Proxy Server

Problems w/Proxies: + Scale: easy to find & block everyone + Trust: users need to trust proxy (e.g. password theft), and proxy needs to trust users (e.g. illegal activity)

uProxy: an experiment in distributed proxying

?

• 1. XMPP/Chat/Email/Social

connects users; HTML5 WebRTC transports data; encryption and obfuscation, hides data from attackers.

• 2. Access and security through

social network-based trust; also potential to cache/speed up connection.

• 3. Share your internet

connection’s security and access with trusted friends and family. Users in unsafe environment

…

Users in safer environment

4 13/19

User Experience Design Mocks

Explanatory intro screens Connect to social networks Home Screen 5.1 14/19

User Experience

Request Access (Alex) Accept Request (Roothu) Connection Active (Alex) 5.2 15/19

User Experience

Active Connection Stop access Settings 5.3 16/19

uProxy Client Device (Alice) uProxy Serving Device (Bob)

Architecture

TCP/IP Service (YouTube, NYT, Guardian, etc)

Web-browser

uProxy UI

display status

uProxy Core

proxies TCP requests coming in

• n WebRTC the to external TCP

service

Web-browser

uProxy UI

Displays status & sets Browser's proxy to localhost:port

uProxy Core

localhost SOCKS proxy @ localhost:port

Transport

(6) (4) (2)

Social Transport Social Social network Chat contacts (e.g. XMPP)

(1)

Stun Servers

(5) 9 17/19

WebRTC

DTLS/UDP+Obf

(3)

Luchaup, Daniel, et al. "LibFTE: a toolkit for constructing practical, format-abiding encryption schemes." Proceedings of the 23rd USENIX conference on Security Symposium. USENIX Association, 2014.

Progress

2013

• Initial support for reliable WebRTC data channels
• Prototype demonstrated at Google Ideas Summit

2014

• UX redesign
• Chrome/Firefox extensions
• Staff up team
• Security reviews
• Open source on GitHub
• Obfuscated WebRTC

18/19

Looking Ahead

Publish to the WebStore uProxy Mobile Client uProxy for Cloud Plugin support

• social networks
• alternate network transport protocols
• proxy service interfaces

19/19

https://www.uproxy.org https://github.com/uproxy info@uproxy.org uProxy: Share Your Pathway to the Internet