Why not just set up an http proxy on a linode box which only listens to localhos... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		tytso on Jan 13, 2014 \| parent \| context \| favorite \| on: Bypassing a DNS man-in-the-middle attack against G... Why not just set up an http proxy on a linode box which only listens to localhost. Then use ssh -L to set up a port forwarding from your local host port 3128 to your linode host's port 3128, and then configure your browser to use localhost:3128 as your http proxy. Easy! (Alternatively, I just pull out my Nexus 7 with LTE support, and either turn on the portable wifi hotspot feature, or plug it into my laptop, and turn on USB tethering. Problem solved. :-P)

twinge on Jan 13, 2014 [–]

You don't even need to run a proxy on the linode host: just use ssh's SOCKS proxy (the -D flag).

https://mikeash.com/ssh_socks.html

Though this might require some more work to avoid DNS MITM, because it only tunnels TCP.

eru on Jan 13, 2014 | [–]

You can tunnel DNS via socks, too.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact