Live data from Hacker News

Ask HN: The government of my country blocked VPN access. What should I use?

news.ycombinator.com

511–520 of 775 posts

Re: Ask HN: The government of my country blocked VPN access. What should I use?

#511
post #318
post #265

Earlier quoted context omitted.

Mullvad worked okay in China in June for me. I imagine it will be better in Indonesia with their less sophisticated blocking.

This makes no sense. On the one hand they do DPI with ML. On the other hand a major player is open! Something is not right here...

FWIW, Mullvad did not work for me in June in China :)

Re: Ask HN: The government of my country blocked VPN access. What should I use?

#512
post #67

You've come to a wrong place to ask. Most people here (judging by recommendations of own VPN instances, Tor, Tailscale/other Wireguard-based VPNs, and Mullvad) don't have any experience with censorship circumvention. Just look for any VPNs that are advertised specifically for China, Russia, or Iran. These are the cutting edge tech, they may not be so privacy-friendly as Mullvad, but they will certainly work.

[flagged]

Please don't do this here.

Re: Ask HN: The government of my country blocked VPN access. What should I use?

#513
post #455

Earlier quoted context omitted.

50 kb/s x 1000 bits/kb x 3600 s/hr x 24 hr/day x 1 byte/8 bits x 1 MB / 1000000 bytes = 540 MB/day. That's enough to download VPN software and a Linux distribution to run it on in a day. If you've already got a Linux system, the Debian openvpn package is under 1 MB and at 50 kb/s would take under 3 minutes to download. I don't know if openvpn in particular is suitable for people who are trying to evade their governme…

You never used dialup did you?

300 baud. Was enough to download grainy porn pics. With a proper download tool that continues after hangups etc you can just leave it on for a week and I have when downloading software end 70s. No problem. Also via the airwaves: we had software via the radio every sunday. Works fine. Modern software is shitty large: it would be nice if a VPN provider would just release the driver and a cli which should not weigh over a mega (far less but outside mr Whitney i am not sure if that type of software dev still exists) for this type of transfer.

Re: Ask HN: The government of my country blocked VPN access. What should I use?

#515
post #448

Earlier quoted context omitted.

If you're going to be using USB drives anyway, then using them to move files into the country would be faster.

More dangerous though. You'd need something like truecrypt, too.

Nah, just drop a few thousand 1GB flash drives from a plane. Load them with a tor browser, a wireguard client, and instructions on finding a remote exit. Only one copy needs to survive and it can spread very quickly and irreversibly by foot.

Re: Ask HN: The government of my country blocked VPN access. What should I use?

#516
post #298

Earlier quoted context omitted.

When I worked in China (not for long periods but frequently enough that the Great Firewall became an irritant) I hosted an OpenVPN server on port 443 and/or port 22 of a server I owned. That worked sufficiently well most of the time.

This doesn't work anymore; the GFW no longer detects VPN connections by port but instead by performing deep packet inspection to characterize the type of traffic going over every connection. Using this technique in combination with some advanced ML systems, they're able to detect any encrypted VPN connection and cut it off; it's basically not possible to run any kind of outbound VPN connection (even to private server…

When I lived in China 10 years ago, GFW had a pretty effective way by slowing constant traffic that goes to an outside china ip address more and more over time. I had about 6 hours per ip (it starting to get slower and slower during that time) before having to rotate because even basic webpages didn't get through and ssh was unusable.

Re: Ask HN: The government of my country blocked VPN access. What should I use?

#518
post #494

Earlier quoted context omitted.

I understand where you are coming from but there’s a flip side to this. Cloudflare obfuscating such a huge segment of origin servers gives a privacy advantage to anyone using a private DNS, since most of the IPs you can be seen connecting to are just…Cloudflare.

Or, at least, that’s how it would work if it wasn’t for SNI…

Cloud Flare supports ECH. https://developers.cloudflare.com/ssl/edge-certificates/ech/

Re: Ask HN: The government of my country blocked VPN access. What should I use?

#519

I’m not sure this is the right conversation right now, but is this thread heading towards “how do we make totalitarian governments become liberal democracies?” It’s a nice technical question on how to run a VPN but the ultimate goal is not the best technical solution but the ability to avoid detection by the state. And that’s not a technical problem but an opsec one If someone is participating in online discussions (…

> Our job in the very lucky liberal West is to keep what our forefathers won, and then push it further to show why our values are worth the sacrifice in copying

Would it be possible for you to 'keep what our forefathers won', and then just stay at home?

Re: Ask HN: The government of my country blocked VPN access. What should I use?

#520
post #455

Earlier quoted context omitted.

There isn't enough bandwidth in HF to transmit data. Digital HF audio is 20 kHz wide so maybe 50kbps. The entire HF band is only 3-30 MHz.

50 kb/s x 1000 bits/kb x 3600 s/hr x 24 hr/day x 1 byte/8 bits x 1 MB / 1000000 bytes = 540 MB/day. That's enough to download VPN software and a Linux distribution to run it on in a day. If you've already got a Linux system, the Debian openvpn package is under 1 MB and at 50 kb/s would take under 3 minutes to download. I don't know if openvpn in particular is suitable for people who are trying to evade their governme…

Wireguard ships with the Linux kernel so you only need to receive ~60 bytes of configuration information.
Post reply on HN