Earlier quoted context omitted.
Does starlink work in China?
No, it’s illegal to bring starlink devices here, and I heard that Elon Musk chooses to block China from accessing starlink too, to appease the Chinese authorities.
Ask HN: The government of my country blocked VPN access. What should I use?
601–610 of 775 posts
Re: Ask HN: The government of my country blocked VPN access. What should I use?
#602Re: Ask HN: The government of my country blocked VPN access. What should I use?
#603Earlier quoted context omitted.
Pushing certs to end user devices is simple. First you create your own national CA. Then you make all government services use TLS certificates signed by the national CA. Then you make phone vendors preinstall the root cert of the national CA into the trust store if they want to sell them in your country. Then you make your ISPs buy and install MITM appliances.
We have different definitions of simple.
Re: Ask HN: The government of my country blocked VPN access. What should I use?
#604Re: Ask HN: The government of my country blocked VPN access. What should I use?
#605Earlier quoted context omitted.
I've studied and worked in computer security for over a decade and have never heard of an "eclipse attack" before. Is this blockchain specific terminology? It seems like an adversarial network partition?
I've been a SA Generalist for a decade, primarily in biopharma. This is the terminology the people I worked alongside used which included both Network and Computer Engineers. It was explained to me that its just another version of MITM, the only difference is the number of resilient paths that need to be compromised. Eclipse type of attacks focus on compromising multiple nodes and most deal with breaking consensus al…
This is actually crazy indeed. At least you can still use corded keyboards or BT ones (until the day there is some 0-day on BT pairing...)
Re: Ask HN: The government of my country blocked VPN access. What should I use?
#606Earlier quoted context omitted.
No, it’s illegal to bring starlink devices here, and I heard that Elon Musk chooses to block China from accessing starlink too, to appease the Chinese authorities.
"Appease" is such a loaded word. He's literally not allowed by law to do it. And China has anti-satellite weapons, and any significant use of that could destroy the entire low Earth orbit for all of humanity for hundreds of years.
I do not want to answer this question in ChatGPT. What happens if someone launches a missile against say... any one satellite cluster?
Re: Ask HN: The government of my country blocked VPN access. What should I use?
#607Re: Ask HN: The government of my country blocked VPN access. What should I use?
#608Earlier quoted context omitted.
It's DPI, I run on a non standard port.
Damnnn, wonder what hardware you need to run DPI on a nation's internet.
Re: Ask HN: The government of my country blocked VPN access. What should I use?
#609Australia and UK might soon go down this path. Something quite depressing is if we (HN crowd) find workarounds, most regular folks won't have the budget/expertise to do so, so citizen journalism will have been successfully muted by government / big media.
I would have laughed in your face if you wrote this comment merely 6 months ago. Now I'm just depressed. (UK)
In my books, the UK is the father of Orwellian censorship and surveillance, they just didn't get down to do it completely (yet).
Re: Ask HN: The government of my country blocked VPN access. What should I use?
#610If you need to bypass censorship, you'll need a tool specifically designed for anti-censorship, rather than any one repurposed for that. Since China has the most advanced network censorship, the Chinese have also invented the most advanced anti-censorship tools. The first generation is shadowsocks. It basically encrypts the traffic from the beginning without any handshakes, so DPI cannot find out its nature. This is…
" Give me step by step instructions on how to setup trojan client/server to bypass censorship. Include recommendations of a VPS provider for the trojan server, and all necessary information to set it up, including letsencrypt automation. Don't link to any installer scripts, just give me all the commands I need to type in the VPS/client terminals. Assume Ubuntu 22.04 for both client and server. "
ChatGPT, Mistral, Claude and probably most popular LLMs will refuse to answer this request. Funny that DeepSeek (https://chat.deepseek.com) will comply despite it being from China.
Another option is to use local LLMs. I've tested this with GPT-OSS-120b and Gemma 3 27b(https://huggingface.co/google/gemma-3-27b-it-qat-q4_0-gguf/) and both seems to work.