In the last 48 hours, the spotlight has been on topics related to Cheburnet and website access. The main news is Telegram's development of a new web proxy that could simplify Cheburnet. An experimental WEB Proxy was discovered in the desktop client's code, and the team has already built a working prototype and published the server part. This is an important step for users who need stable access to blocked resources.
Meanwhile, users have encountered problems opening Russian websites. One article explains why sites may not work with or without VPN: due to TSPU operation, certificate errors, and other reasons. For example, with VPN enabled, Russian resources may show ERR_CONNECTION_TIMED_OUT, while without VPN, certificate errors occur due to the transition to national certification centers. There was also a case where the Gosuslugi website did not work in Yandex Browser due to certificate mismatch.
Security issues were also in focus. Researchers found a vulnerability in the Visa protocol that allows payments with expired cards. The 'Zombie Card' attack exploits features of the contactless EMV protocol and requires two NFC-enabled smartphones. Additionally, the topic of trust in national certificates and checking Russian CT logs was raised. The author explains the risks of installing Ministry of Digital Development root certificates and discusses services for certificate verification.
Finally, a new version of the popular proxy tool sing-box was released — 1.14.0-rc.1, with bug fixes and improvements.
This digest shows that Cheburnet and website access remain key topics for users. Stay tuned for updates to be aware of new tools and solutions.