Activity: Hike Mount Si (not Little Si)
Location: Snoqualmie Region
Time Spent: 6 hours
Price: $10 per car per trip OR $33 for the year
Web: Goverment Site

The view is amazing! I could praise the clean air, the mesmerizing trees, or the quality trail, but all are beaten by the view you see once you make it up to the summit. I actually had other plans on the same day, so I had to jog the last 2 (and the steepest) miles of the hike to be able to make it in time. And I only got a sneak peak of the summit view, but I still believe that taking the jog was the best decision I made. You shouldn't do the same, allow at least 8 hours once you arrive to complete your hike. The drive takes around 90 minutes from Seattle and you need a discovery pass that can be purchased online per trip or annually. The full hike is 8 miles with 3000 feet elevation gain, but is not too hard and can be completed by anyone give enough time, including these little guys. People were very friendly and we saw a lot of dogs. We were also glad we brought around 2 liters of water per person, lots of snacks, and a good lunch (bought from a nearby QFC store) for the summit. Be on the lookout for other good picture spots as you hike, and don't forget to feed the Chipmunks once you make it to the top. I highly recommend hiking shoes (my feet were sour for the next 2 days) and even heavier gear if you want to climb the rocks at the summit to get an even better view. I took over 4 long hikes during my Seattle visit and this was by far the best experience, so check out my personal score for it below.

Personal Score: 9/10

Activity: weekent trip to Lopez Island
Location: San Juan Islands, North Washington
Time Spent: 2 days
Price: ~$280
Web: Island Guide

Any one of the San Juan Islands is a perfect weekend get away location. We picked Lopez because it was the one with best housing options. We booked an Airbnb yacht to sleep in! This was definitely an interesting experience, not as comfy as a hotel room but much more fun and cozy. The yacht was in an artificially built bay and thus did not really rock like a crib. Sleeping on open water would definitely have been more fun because of this reason. When we first arrived on the island the first thing we realized was how friendly the local people were. When I asked for a plastic bottle to use for hiking at a neighborly shop, the lady was nice enough to gift me an entire jar I could use on any trip! They also gave us tips on what we should see and do there. Our first stop after having brunch was the local library.

This library was miniature like the rest of the town! I don't think I would be mistaken by calling this the cutest library I have ever been to. We bought some second-hand books and some postcards here. Later we took a 10-minute drive to the Iceberg Point which is on the other side of the island. On the way, we realized that everyone wawed at each other on this island, even if they were complete strangers. By taking a short (2-mile) hike from Iceberg Point we were able to reach the lighthouse and see Seattle, San Juan Island, and Victoria (Canada) all at the same time.

We also visited the Shark Reef Sanctuary, hoping to see sharks. We failed. But we kept driving/walking around the island and ended up at a very high-end but local and healthy dinner. Our second day was a complete disaster. One of the Washington state ferries broke down and the entire ferry schedule got canceled. The authorities were not able to publish a new schedule so no one knew what was going on. Our island was told that there won't be a ferry to the mainland for 7 hours. We were supposed to visit Friday Harbor on our second day to do more of the touristic activities and attend the Tulip Festival. But we were stranded instead. We took advantage of the beaches on the island but mostly spent the day waiting in ferry lines. By the time we made it home we had sworn not to use the Washington state ferry system again. Regardless, we were in love with Lopez Island.

Personal Score: 8/10

Activity: visit Chihuly Garden and Glass Museum
Location: Downtown Seattle
Time Spent: 1 hour
Price: $29
Web: Exhibition Website

Located in central Seattle the Chihuly Glass Museum is a relatively small exhibit featuring the work of Chihuly, no surprise, throughout his entire career. By the time of this writing Chihuly is 75 years old and is still visiting his museum and refactoring his work. So don't expect anything historical when you visit, like the rest of the city this is also a new establishment. Most of the work is from Chihuly's past years but he also added new custom pieces to make the museum feel like a whole. The artwork is impressive given that it is ALL made out of glass. There is also an outdoor exhibit which resembles a garden, and you can take pretty good pictures here if you come in on a semi-cloudly day when there are no shadows. You should also attend one or two of the info sessions where a guide talks about the details of a specific exhibit, making your visit more meaningful. Given that the museum is located right next to the Space Needle and costs so much, I had high expectations when going in. But because of the small scale, and the short journey I have to say I was a bit disappointed. I would rather have spent that time at the Pop Culture museum next door. Or maybe I don't how to appreciate art as much. Still, it's a piece of Seattle and a must see.

Personal Score: 6/10

Activity: weekent trip to Olympic National Park
Location: West Washington
Time Spent: 2.5 days
Price: ~$220
Web: Government Website

Just 3 hours from Seattle (5 hours if you take the ferry on a busy day, so I recommend just driving down highway 16) is the grand Olympic National Park. This park encapsulates an area of 1400 square miles, so it's huge! There are beaches, small towns, campgrounds, hot springs and even a mini rain forest. We first headed for Lake Crescent on a Friday evening, passing by Port Angeles but ignoring it so we could visit it on the way back. We stayed at an Airbnb cabin very close to the lake.

On our second day, we headed for the Sol Duc Hotsprings Resort Campground, which is rated as one of the best places to camp in the park. We did not have a reservation but took the risk and were lucky enough to find an open spot. Locals reserve spots 3 months ahead of time here. Since July is a very warm month in Washington we only brought an air bed and a blanket to sleep in and did not run into any issues. There were also hot spring pools in the area, available for a reasonable fee, but were way too crowded to even try to go in.

During the same day, we visited the Hoh Rain Forest and stopped by a local clothing shop. The shop was run by a lady that moved there from Seattle when she got married. I bought my favorite t-shirts and hoodies from here, so I definitely recommend you stop by at this hidden shop (it's not on Google Maps). The trails in the rain forest were amazing, the trees went up hundreds of feet. Later that day we visited Ruby Beach and ate some decent hamburgers in Beaver. On our last day, Sunday, we packed up and drove to Port Angelas. It was just like any other city except with an emphasis on tourism. We had the best brunch at a place called First Street Haven before heading back to Seattle. The journey consisted of a lot of driving, around 5 hours a day, which was tiring. But it wasn't that bad as all roads went through nature and were all open.

I should have split all these various experiences into their own post to provide more detail but didn't have the time. Maybe I'll to that later.

Personal Score: 10/10

Activity: theater titled "Yaşamaya Dair"
Location: various theater halls
Time Spent: 1.5 hours screening + transportation
Price: 40TL
Web: Artist Website

Genco Erkal is an amazing actor. His words make you feel every emotion deeper than usual, and every sentence gives you goose bumps. It's like his voice has its own character. This means you should sign up for any play that features him. This is the level of expectation I had when I was driving to this event. However, because the play was a musical with all the lyrics being a compilation of Nazım Hikmet poems, the overall experience felt disjoint. It was especially hard to follow the story flow as I hadn't read all of the poems that were referenced. A deep background knowledge about Nazım Hikmet's life is also necessary to understand the story completely. (My friend whispering me the references to his life wasn't sufficient.) But the acting of Genco Erkal and the singing of Tülay Günal was spectacular. Even though I felt like the poem excerpts didn't fit together, the theme, the joy of living, was very well established.

Tickets: search on Google as the Biletix link changes frequently
Personal Score: 5/10

Activity: Ali Baba Kofte Salonu
Location: Catalca
Time Spent: 1 hour
Price: ~25TL per person
Web: Foursqaure

After spending our day at the Incegiz Caves we stopped by Catalca for a filling meal here. Considering the state of the town, the restaurant is very clean and modern. Sincere waiters provide fast and friendly service. After only 10 minutes our Kofte was ready and it was remarkably well done. Some might argue that the Kofte was a bit chewy but I don't think they were so. Don't forget to order an extra side of the amazing spicy spread. I can only criticize the bill because it was a bit expensive given how cheap everything else is in town. Also, make sure you have water with you after you eat because the Kofte is salty and you will be thirsty a lot.

Personal Score: 8/10

Activity: Inecegiz Caves
Location: Catalca
Time Spent: 6 hours
Price: 12TL per car
Web: Goverment Site

This is a good spot if you want to spend a day outside the city and closer to nature. After an hour drive, you arrive at the historical site which is just 15 minutes from Catalca city. There are two sets of caves: the caves before the paid entrance are larger and more worthwhile to see. However, after you pay and enter the picnic area you will find yourself more immersed in nature. It would be preferable to bring food for a picnic but you can also just walk around the natural forest surrounding the caves and take some amazing pictures. The biggest downside is that the entire site is full of leftover trash and not even the toilets are usable. Please don't litter here and take a couple pieces of other people's litter with you when you leave. Regardless, nature, the cave explorations, the short hiking paths, and the closeness to Istanbul (compared to Sile for example) makes this place a viable option for visit.

Personal Score: 6/10

Activity: Istanbul Toy Museum
Location: Goztepe
Time Spent: 4 hours
Price: 12TL (regular), 9TL (student)
Web: Link

The museum is founded and maintained by the famous poet Sunay Akın. Even though the collection ranges back to the 1700s, it is very likely that you will recognize a good amount of these toys even if you were born in the 90s. In order to say "I had this" I recommend you go with a peer. You should definitely do some research ahead of time about the story behind some of the most famous toys so you can get the full experience. You also get to see one of Charlie Chaplin's toys. This was a heart-warming experience that brought me back to my childhood.

Tickets: search on Google as the Biletix link changes every 2 weeks
Personal Score: 9/10

Activity: tasting Kup Griye
Location: Bebek
Time Spent: 1 hour
Price: 21TL
Web: Menu

If you are near Bebek definitely visit Baylan Pastanesi not just because it has a great view of the Bosphorus from its terrace, but also because it offers a variety of delights. This famous dish was ice-cream topped with caramel and biscuits. If you ignore the fact that the top looked like a sunny-side-up egg, it tasted great. A bit pricey but worth to try.

Personal Score: 7/10

Activity: Dialogue in The Dark
Location: Gayrettepe
Time Spent: 1-2 hours
Price: 30TL (regular), 22TL (student)
Web: Link

A stroll through Istanbul in complete darkness. Instead of your eyes, you use your walking stick to guide you. You get on the ferry, cross the street, and have something to eat while chatting with your visually impaired tour guide. This made me realize how little we apprehend about our world with our eyes open and how little attention we pay to our other senses. I am surprised that this place is not packed with people given how unique of an experience it is.

Tickets: search on Google as the Biletix link changes every 2 weeks
Personal Score: 9/10

Disclaimer: Using tools such as the ones described in this guide for the purposes of overcoming company policies is illegal and unethical. The techniques presented here were conducted for proof of concept only and the possible loophole, if any, was reported to the respective authorities.

After taking the undergraduate Computer Security class at Berkeley (CS161) I wanted to apply what I learned to practice. Having learned about DNS and DNSEC packets we were told to look into iodine as a way to expand on these principles. Iodine is an open source tool written by yarrick for easy DNS tunneling. It can embed TCP traffic in DNS packets so that they don't get filtered by firewalls. Most paid internet services like the ones at cafes or on airplanes simply block TCP packets going to/from your MAC address until you pay. However, they occasionally leave DNS open (port 53) so that they can redirect you to their payment page. The fact that DNS packets get sent out to the internet no matter what leaves a backdoor open to the web.

The following steps are a guide to setup iodine without any cost (server and software can be accessed for free). This methodology has been proof tested out in the open and is confirmed working in multiple scenarios. But again, even though it might be possible, you should not use such a tool for your own benefit.

0. Remarks

This guide assumes you read the documentation at given external links and have prior experience with Linux and the terminal. If you are stuck at any point feel free to shoot me an email. Also, steps 1-3 (inclusive) require internet access while the remainder can be performed behind a firewall.

1. Get A Server

If you have a server with a public IP address you can skip this step. For the purposes of this guide, we will use a Linux Red Hat distribution server. You can get a free server from AWS (the signup requires a credit card and a phone number for verification but you don't get charged and don't need a student discount). Once you have an account go ahead and create an EC2 instance picking Red Hat Linux as the operating system. You can SSH into your server (once it's ready) using a command similar to the following:

ssh -i IodineDemo.pem ec2-user@xxx.compute.amazonaws.com

2. Setup your domain

You need to own a domain for this part. Any domain works. If not yarrick recommends the following:

If you don't have a domain, it seems you can get a free subdomain with DNS control capable of NS records at http://freedns.afraid.org/

Assuming you have access to a domain control panel you need to pick a short subdomain to be your tunnel domain. I will use t.duman.me here since I own duman.me and t is the abbreviation for tunnel. Add an A record that points the tunnel domain (t.duman.me) to the IPv4 address of your server (such as 34.210.28.116). Then add an NS record that points the tunnel domain to the public IP of your server (can be IPv6 or IPv4, such as xxx.compute.amazonaws.com). After making sure that the DNS cache is updated (you can run dig in the terminal to check this), head over to this link and type in your tunnel domain. The page will tell you if your domain is setup correctly. At this point, all DNS queries for subdomains of your tunnel domain (for example, abc.t.duman.me) will be directed to your server. And this is how we will port information to our server even when behind a firewall.

3. Install Iodined on the Server

SSH into your server and run the following commands. If you are using Ubuntu instead you can substitute apt-get for yum.

sudo yum install git gcc make zlib-devel screen
git clone https://github.com/yarrick/iodine.git
cd iodine && sudo make install && cd bin
screen -R iodine
sudo ./iodined -f -c -P myPass 10.0.0.1 t.duman.me

This will run the iodined server in a screen (like a new tab in terminal) so that when you close your terminal (or loose connection to the server) the process does not terminate. For the last line make sure to choose a secure password and replace t.duman.me with your own tunnel domain. Once you see the string Listening to dns for domain t.duman.me displayed in the console you are good to go. You can leave the screen by hitting Ctrl+A+D or stop the iodined instance by pressing Ctrl+C. When you reconnect to your server using SSH you can access the same screen using the following command:

screen -x iodine

The iodined server will run continually and accept connections from multiple clients until you terminate it.

4. Install Iodine on the Client

Now that the server side is up and running we can connect to it from the client (aka your laptop behind the firewall). Run the following commands in your laptops terminal:

FILE="localhost 127.0.0.1\nnameserver $(scutil --dns | grep -oE "\b([0-9]{1,3}\.){3}[0-9]{1,3}\b" | head -1)"
echo $FILE | sudo tee /etc/resolv.conf
sudo iodine -f -P myPass t.duman.me

Again, for the last line use your password and your tunnel domain. The first two lines read the DNS Resolver IP as indicated to your laptop by the DHCP response from the WiFi network and write it to resolv.conf. These two lines are only necessary because newer versions of macOS don't update this file automatically. You can try leaving them out first and see if it works that way. Once you see the string Connection setup complete, transmitting data the client is connected to the server. Make sure not to close the current terminal tab or press Ctrl+C as these actions will break the connection. If you want you can install screen locally and run this process in a screen instance.

5. Setup SSH Tunnel

We can now connect to the server using SSH by only sending DNS packets. The server will appear on our local network thanks to iodine. Run the following command to setup an SSH tunnel on port 9999:

ssh -i IodineServer.pem ec2-user@10.0.0.1 -D 9999

You should also keep this terminal tab open for the connection to persist. At this stage we are using port 9999 to talk to the server and iodine is forwarding all our communication through port 53.

6. Tell Chrome to use SOCKS proxy

We need to tell Chrome to use the tunnel when sending HTTP requests. This can be achieved by downloading the Chrome Plugin SwitchyOmega. Head to the plugin options page and create a new profile with the following properties:
Profile Name: DNS Tunnel
Protocol: SOCKS5
Server: localhost
Port: 9999
After applying your changes you can use the plugin icon to switch to the profile you created and every page you load after this point will be forwarded through iodine.

7. Profit

Now you can surf the web freely (even establish TLS connections) behind a firewall as described in the introduction section. The connection speed will be slow as DNS packets are not large in size by nature. You can fine tune the iodine flags to optimize your speed. Make sure to switch back your SwitchyOmega profile to default and terminate the SSH tunnel and iodine instance once you are done testing the tool.

This is my first blog post! Let me know what you think below.

FAQ
Getting many SERVFAIL errors? Try using the flag -L0 when launching iodine.
Can't point a NS record to IPv6? Ask your domain service provider to do it for you manually.