Live data from Hacker News

Ask HN: The government of my country blocked VPN access. What should I use?

news.ycombinator.com

531–540 of 775 posts

Re: Ask HN: The government of my country blocked VPN access. What should I use?

#531

Earlier quoted context omitted.

I’m curious about what makes it difficult to block a vpn provider long term. You said getting the software is difficult, but can a country not block known vpn ingress points?

A country can and absolutely will block known VPN ingress points. There are two tricks that we can use to circumvent this: - Host on a piece of infrastructure that's so big that you can't effectively block it without causing a major internet outage (think: S3, Cloudflare R2, etc). Bonus points if you can leverage something like ECH (ex-ESNI) to make it harder to identify a single bucket or subdomain. - Keep spawning…

you can also throttle

for instance AWS hosted things in China are typically just severly throttled and flaky. Github is the best example. it works but webpage assets often either dont load or load incredibly slowly. this pushes people to local services without breaking the web entirely

Re: Ask HN: The government of my country blocked VPN access. What should I use?

#532

Earlier quoted context omitted.

This is no 'nothing special' with Obfs4proxy. DPI sees it as random byte stream, thus your government can decide to block unknown protocols. Instead, you should trick DPI into thinking it sees HTTPS. Unless your government decides to block HTTPS.

Unless your government decides to block HTTPS. In which case you use stenography, but I believe even the Great Firewall of China doesn't block HTTPS completely.

Nit: you likely mean steganography, stenography is what court reporters do :)

I encourage you and anyone else here to read into the GFW if you're interested. It's more like the Great Firewalls -- there's regional fragmentation with different vendors, operators, implementations and rules between different parts of the country.

Predictably this means there's no one-size-fits-all solution to circumventing censorship on the Chinese internet, and research into this area's difficult since China has both the technical means to identify violations very efficiently as well as the bureaucratic infrastructure to carry out enforcement actions against a considerable portion of those people who violate the GFW rules (with enforcement action being anything from a "cooldown period" on your internet connection where you can't make any connections for some amount of time between minutes and days, fines, or imprisonment depending on the type of content you were trying to access).

So, the ethics of digging into this get very muddy, very fast.

Re: Ask HN: The government of my country blocked VPN access. What should I use?

#533

Earlier quoted context omitted.

I would have laughed in your face if you wrote this comment merely 6 months ago. Now I'm just depressed. (UK)

America's Founders saw civil rights as inherent in the Constitution's framework, rooted in natural law. They added the Bill of Rights as an explicit bulwark. That's why we have the 1st Amendment's free speech, and if that falls, the 2nd Amendment ensures we have guns.

Only to watch the GOP completely disregard every aspect of it.

Re: Ask HN: The government of my country blocked VPN access. What should I use?

#534

Earlier quoted context omitted.

How's that working for you at the moment? Sorry for the snide comment, but considering the last 6 - 8 months in the US, at least from what is being reported in the outside world, the 1st amendment doesn't seem to be providing much in the way of protection, and unless I'm missing something the general public doesn't seem to have the level of interest that would be required for your 2nd amendment to play out in any mea…

It’s working fantastic. US media is great at generating hysteria (competitive market pressures in the war for attention), but the US is at essentially very little risk for speech suppression at the level of the UK right now.

UK too, and concerned. I agree that amendment 1 and 2 provisions effectively underpin individual freedom in the US due to founder perspicacity. My fear re US constitutional provision is on separation of powers, and transfer of power. Fortunately Pence held to the constitution. Nobody ever willingly takes their hands of the levers of power!

Re: Ask HN: The government of my country blocked VPN access. What should I use?

#535

Earlier quoted context omitted.

How's that working for you at the moment? Sorry for the snide comment, but considering the last 6 - 8 months in the US, at least from what is being reported in the outside world, the 1st amendment doesn't seem to be providing much in the way of protection, and unless I'm missing something the general public doesn't seem to have the level of interest that would be required for your 2nd amendment to play out in any mea…

It’s working fantastic. US media is great at generating hysteria (competitive market pressures in the war for attention), but the US is at essentially very little risk for speech suppression at the level of the UK right now.

Yeah just physical suppression with active military patrolling major cities.

Re: Ask HN: The government of my country blocked VPN access. What should I use?

#538

There are many options, but avoiding the legal consequences may be a grey area: https://www.stunnel.org/index.html https://github.com/yarrick/iodine https://infocondb.org/con/black-hat/black-hat-usa-2010/psudp... ..and many many more, as networks see reduced throughput as an error to naturally route around. =3

DNS tunnels with iodine works well, it's easy to setup and work in a lot of place.

You can also connect to some random corporate wifi and it's very likely that this will work (not necessary in "direct" mode).

Re: Ask HN: The government of my country blocked VPN access. What should I use?

#540
nextdns recently created geo spoofing methods, I may be wrong, I usually am but I am curious as to if these censorship can be fixed by nextdns.

I don't know if indonesia is becoming exactly like china/ so a complete crackdown as people are discussing things as if its for china, but I feel like that there are definitely some easier things than hosting your own server or using shadowsocks.

Check if proton vpn/mullvad vpn are working once please, they are definitely plug n play and proton even offers a free tier.

Post reply on HN