Live data from Hacker News

Ask HN: The government of my country blocked VPN access. What should I use?

news.ycombinator.com

331–340 of 775 posts

Re: Ask HN: The government of my country blocked VPN access. What should I use?

#331
post #32

Blocking Twitter is a good start, now Facebook, Instagram, Whatsup and TikTok. This is a good start but more should be blocked. Then force ISP to block ads. Not just for Indonesia but all countries. But we still have a lot more to do to fix the web.

[dead]

Re: Ask HN: The government of my country blocked VPN access. What should I use?

#332

Earlier quoted context omitted.

I have a little, maybe enough to be dangerous. SSH won’t be sufficient to avoid all traffic analysis. Everyone can see how much traffic and the pattern of that traffic, which can leak info about the sort of things you’re doing. If you’re worried about ending up on a list, using things that look like VPNs while the VPNs are locked down is likely to do so. Also… your neighbors in Myanmar didn’t do a lockdown during the…

>Also… your neighbors in Myanmar didn’t do a lockdown during the genocide and things got pretty fucking dire as a result The genocide in Myanmar was incited _by_ the government there; giving it more power to censor it's citizens' communications would have done absolutely nothing to help the people being genocided. Genocides don't just suddenly happen; the vast majority of genocide over the past century (including Ind…

This has been simmering for a very long time. The first I heard of it was violence that broke out after the defacement of a Buddhist temple statue. That would have been almost 20 years ago. Buddhists murdering people tends to lead one to ask a lot of questions.

At that time I think the government was hands off, let it happen rather than tried to stop it.

Regardless of who was behind the violence, the whole region has thought about what to do in such situations and they aren’t the same answers the West would choose.

Re: Ask HN: The government of my country blocked VPN access. What should I use?

#333
post #187

XRay / XTLS-Reality / VLESS work rather fine, and is said to be very hard to detect, even in China. I followed [1] to set up my own proxy, which works pretty fine. More config examples may be helpful, e.g. [2]. [1]: https://cscot.pages.dev/2023/03/02/Xray-REALITY-tutorial/ [2]: https://github.com/XTLS/Xray-examples/blob/main/VLESS-TCP-XT...

im curious, isn't ALL of your traffic appearing to be to just one website the most obvious giveaway?

*ray clients typically allow configuration of routing. So you can send only blocked stuff through the tunnel; or, in reverse, send some known-working stuff (e. g. local domain) direct. Also works as adblock.

Re: Ask HN: The government of my country blocked VPN access. What should I use?

#334
post #186

Earlier quoted context omitted.

Normally I would agree with you, but the ability to pull this kind of thing off hinges on there being enough shadows that the Eye doesn't look at for prolonged periods of time. And the overall trajectory of technological advance lately is such that those shadows are rapidly shrinking. First it was the street cameras (and UK is already one of the most enthusiastic adopters in the world). And now comes AI which can aut…

I wouldn’t worry about it. They can barely handle wolf-whistlers let alone pedophile rape gangs consisting of the lowest IQ dregs of our society. I know it’s only painfully stupid people who think the law is stupid, but dodgy Dave down the way tends to fly under the radar. Otherwise there wouldn’t be so many of them.

One of the problems with authoritarianism is that even though most dodgy Daves will be fine because the political apparatus doesn't have the time or energy to arrest everyone for everything, they retain the ability to arrest anyone for anything.

The moment your dodgy Dave offends your local cadre, even for reasons entirely other than being dodgy, they'll throw the book at him. And because there is now unpredictability around who will be arrested and for what reason, it acts as a chilling effect for everyone who values some degree of stability in their lives. So the arc of dodgy Daves bends toward compliance.

Re: Ask HN: The government of my country blocked VPN access. What should I use?

#335
A question related to the question, for which I apologize:

It seems to me that using WireGuard (UDP) in conjunction with something like Raptor Forward Error Correction would be somewhat difficult to block. A client could send to and receive from a wide array of endpoints without ever establishing a session and communicate privately and reliably, is that correct?

Re: Ask HN: The government of my country blocked VPN access. What should I use?

#336

Hello! I've got experience working on censorship circumvention for a major VPN provider (in the early 2020s). - First things first, you have to get your hands on actual VPN software and configs. Many providers who are aware of VPN censorship and cater to these locales distribute their VPNs through hard-to-block channels and in obfuscated packages. S3 is a popular option but by no means the only one, and some VPN prov…

Thank you very much for a detailed answer. Might I rudely ask -- as you're knowledgeable in this space, what do you think of Mullvad's DAITA, which specifically aims to defeat traffic analysis by moving to a more pulsed constant bandwidth model?

If you are on a limited data plan, beware, DAITA produces a lot of traffic.

Re: Ask HN: The government of my country blocked VPN access. What should I use?

#337
You should use people power to work to make Indonesia a more open, democratic society.

Yes, it's hard work. Yes, it will take a long time. Yes, you personally may not get very far with your efforts.

But if Indonesians don't take responsibility for and work to improve Indonesia then the rest of it doesn't matter.

Re: Ask HN: The government of my country blocked VPN access. What should I use?

#338
An expensive but functional option is to enable roaming on a foreign eSIM. Getting an eSIM is relatively easy. Roaming mobile traffic is routed from the country in which the SIM is from, not the country that you're in, meaning that an eSIM from e.g. an American carrier will not be subject to the censorship in your country.

I've used this on multiple trips to China over the past decade (including a trip last year). You can find carriers that will charge very low (or even no) roaming rates.

Post reply on HN