Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ask HN: The government of my country blocked VPN access. What should I use?

news.ycombinator.com

Post reply on HN
Print view View original

431–440 of 775 posts

Re: Ask HN: The government of my country blocked VPN access. What should I use?

#431

Post by EE84M3i »

trod1234 wrote: post #353
myshoemouth wrote: post #236

Earlier quoted context omitted.

I'm curious. How does a state actor do actual DPI without pushing certs to end user devices?

There are a couple of ways. The main one is called an Eclipse Attack in cyber circles, and it can be done at any entity operating at the ASN layer so long as they can position themselves to relay your traffic. The adversary can invisibly (to victim PoV) modify traffic if they have a cooperating rootPKI cert (anywhere in the ecosystem) that isn't the originating content provider, so long as they recognize the network…

I've studied and worked in computer security for over a decade and have never heard of an "eclipse attack" before. Is this blockchain specific terminology? It seems like an adversarial network partition?

Re: Ask HN: The government of my country blocked VPN access. What should I use?

#434

Post by andunie »

rd07 wrote: post #355

I live in Indonesia, and I don't find any recent news that mention X (formerly Twittwr) and or Discord being blocked by the government. The only relevant news from a quick Google search I can find is about the government threatened to block X due to pornography content in 2024. You can even check for yourself if a domain is blocked by visiting https://trustpositif.komdigi.go.id/ . Also for your unability to access th…

How can it be that one person living in Indonesia says everything is blocked and the country is in chaos and another, very calmly, is completely unaware and can't even find any news about it? This is so odd. What is the truth?

Re: Ask HN: The government of my country blocked VPN access. What should I use?

#436

Post by mmwelt »

dongcarl wrote: post #50

Give Obscura a try, we get around internet restrictions by using QUIC as transport, which looks like HTTP/3 and doesn't suffer from TCP-over-TCP meltdown: https://obscura.net/ Technical details: https://obscura.net/blog/bootstrapping-trust/ Let us know what you think! Disclaimer: I'm the creator of Obscura.

Looks like MacOS and iOS only, which is unfortunate. Support for at least Windows and Android is needed for wider adoption. Linux would also be nice.

Re: Ask HN: The government of my country blocked VPN access. What should I use?

#437

Post by andunie »

nneonneo wrote: post #338

An expensive but functional option is to enable roaming on a foreign eSIM. Getting an eSIM is relatively easy. Roaming mobile traffic is routed from the country in which the SIM is from, not the country that you're in, meaning that an eSIM from e.g. an American carrier will not be subject to the censorship in your country. I've used this on multiple trips to China over the past decade (including a trip last year). Yo…

I don't know if these work or not for the specific case mentioned here, but the cheapest eSIMs by a huge margin are from https://silent.link/ if anyone is interested. They definitely do work under normal internet circumstances.

Re: Ask HN: The government of my country blocked VPN access. What should I use?

#438

Post by onesociety2022 »

ultim8k wrote: post #371
akho wrote: post #339

Earlier quoted context omitted.

Starlink, by policy, connects you through a ground station in the same country. They wouldn't be allowed to operate otherwise.

Why? Can someone block the sky? (I have 0 satellite knowledge)

Starlink is a legitimate business (ISP) that wants to make money from customers in that country. They will comply with all of the regulations and bans imposed by the government in that country or risk getting banned completely.

Re: Ask HN: The government of my country blocked VPN access. What should I use?

#439

Post by breve »

protocolture wrote: post #412
breve wrote: post #347

Earlier quoted context omitted.

Nope. The outside doesn't matter. The problem is on the inside. External websites will never fix the internal problem. There are no technical solutions to what is fundamentally a problem of political culture.

>External websites will never fix the internal problem. Except the internal problem is censoring internal information sources. They can only trust external sites to remain neutral. Not to mention that, politically and historically speaking, there are so many examples of revolutionaries needing to go overseas to organize. The Bolshies literally got started in a London pub.

Nope. They can simply talk to each other. I talk to people inside Indonesia routinely. I do it via SMS, via the phone, via iMessage, via Microsoft Teams. It's not difficult.

You're not understanding the circumstances on a practical level. All you're doing is running away from the work to solve the fundamental political problem and that avoidance won't solve anything.

Re: Ask HN: The government of my country blocked VPN access. What should I use?

#440

Post by QuadmasterXLII »

mezyt wrote: post #135
drake99 wrote: post #30

In this scenario, Chinese have very rich experience. you need to use the advance proxy tool like clash ,v2ray, shadowsocks etc.

shadowsocks was the winner of the state of the art I had to do at work. It address the "long-term statistical analysis will often reveal a VPN connection regardless of obfuscation and masking (and this approach can be cheaper to support than DPI by a stat)" comment.

Someone should create a vpn protocol that pretends to be a command and control server exfiltrating US corporate secrets from hacked servers. The traffic pattern should be similar, and god forbid Xi blocks the real exfiltrations
Post reply on HN