Project V Channel(Unofficial)

New FunctionsVMess's new header format experiment begins. You can now enable VMessAEAD to be better protected. Documents EN CH are updated. See extra-VMessAEADdoc.zip for a more detailed explanation available in both Chinese and English.mKCP can now be encrypted to resist recognition, address issue mentioned in #2530 #2253 #2131. Documents EN CH are updated.Breaking ChangesTo slow down certain replay attacks, taint mechanic for VMess MD5 authentication data is introduced. Unless the server is under attack, a well-behaved client is not influenced. Pay attention to this change if you are designing a "V2Ray Panel", "Airport" or "V2Ray Service Provider". Documents EN CH are updated.Minor fixes from v2fly#12 v2fly#10 included.Updated Golang tool-chain. Thanks @rprxLocalAddr() in UDP workers will now return correct local addr. Thanks @zhuobixinAbout AV warningsWe are aware some anti-virus software detects V2Ray as malware, which it isn't, but we can't afford to pay the fee needed to make them not detect V2Ray as malware. Microsoft's AV detects V2Ray as "Trojan:Win32/Wacatac.C!ml" , "Program:Win32/Wacapew.C!ml" each time we release a new version, and I have to manually contact them each time to remove it from the malware database. If you have more information to report please leave them here. These AVs are known to generate false-positive results: "Microsoft", "McAfee", "Cylance", "Symantec", "F-Secure", "SecureAge APEX", "Cybereason", "Cynet", "MaxSecure", "F-Secure", "Avira", "AVAST", "AVG", "Rising"(瑞星).

via Release notes from v2ray-core https://ift.tt/2AZ7TSl

GitHub

mKCP加密设计不当可导致流量被精准识别（附PoC） · Issue #2530 · v2ray/us/Project V Channel Unofficial/com.v2ray-core

先说结论：mKCP的加密方案（其实应该称作混淆）引入的特征，可导致mKCP流量，以极低的开销被精准识别 目前没有找到除了重新设计mkcp加密以外的缓解措施。我个人的建议是，用标准的加密系统替代当前的混淆方式。 PoC比较简单，下面是核心部分，完整代码放在最后 func IsMKCPPacket(packet []byte) bool { auth := NewSimpleAuthentica...

www.tg-me.com/us/Project V Channel Unofficial/com.v2ray/74

99.1K viewsJun 10, 2020 at 15:33

New FunctionsVMess's new header format experiment begins. You can now enable VMessAEAD to be better protected. Documents EN CH are updated. See extra-VMessAEADdoc.zip for a more detailed explanation available in both Chinese and English.mKCP can now be encrypted to resist recognition, address issue mentioned in #2530 #2253 #2131. Documents EN CH are updated.Breaking ChangesTo slow down certain replay attacks, taint mechanic for VMess MD5 authentication data is introduced. Unless the server is under attack, a well-behaved client is not influenced. Pay attention to this change if you are designing a "V2Ray Panel", "Airport" or "V2Ray Service Provider". Documents EN CH are updated.Minor fixes from v2fly#12 v2fly#10 included.Updated Golang tool-chain. Thanks @rprxLocalAddr() in UDP workers will now return correct local addr. Thanks @zhuobixinAbout AV warningsWe are aware some anti-virus software detects V2Ray as malware, which it isn't, but we can't afford to pay the fee needed to make them not detect V2Ray as malware. Microsoft's AV detects V2Ray as "Trojan:Win32/Wacatac.C!ml" , "Program:Win32/Wacapew.C!ml" each time we release a new version, and I have to manually contact them each time to remove it from the malware database. If you have more information to report please leave them here. These AVs are known to generate false-positive results: "Microsoft", "McAfee", "Cylance", "Symantec", "F-Secure", "SecureAge APEX", "Cybereason", "Cynet", "MaxSecure", "F-Secure", "Avira", "AVAST", "AVG", "Rising"(瑞星).

via Release notes from v2ray-core https://ift.tt/2AZ7TSl

BY Project V Channel(Unofficial)