Live data from Hacker News

Ask HN: The government of my country blocked VPN access. What should I use?

news.ycombinator.com

601–610 of 775 posts

Re: Ask HN: The government of my country blocked VPN access. What should I use?

#601
post #590

Earlier quoted context omitted.

Does starlink work in China?

No, it’s illegal to bring starlink devices here, and I heard that Elon Musk chooses to block China from accessing starlink too, to appease the Chinese authorities.

"Appease" is such a loaded word. He's literally not allowed by law to do it. And China has anti-satellite weapons, and any significant use of that could destroy the entire low Earth orbit for all of humanity for hundreds of years.

Re: Ask HN: The government of my country blocked VPN access. What should I use?

#603

Earlier quoted context omitted.

Pushing certs to end user devices is simple. First you create your own national CA. Then you make all government services use TLS certificates signed by the national CA. Then you make phone vendors preinstall the root cert of the national CA into the trust store if they want to sell them in your country. Then you make your ISPs buy and install MITM appliances.

We have different definitions of simple.

This is not that complicated for a state actor.

Re: Ask HN: The government of my country blocked VPN access. What should I use?

#605

Earlier quoted context omitted.

I've studied and worked in computer security for over a decade and have never heard of an "eclipse attack" before. Is this blockchain specific terminology? It seems like an adversarial network partition?

I've been a SA Generalist for a decade, primarily in biopharma. This is the terminology the people I worked alongside used which included both Network and Computer Engineers. It was explained to me that its just another version of MITM, the only difference is the number of resilient paths that need to be compromised. Eclipse type of attacks focus on compromising multiple nodes and most deal with breaking consensus al…

> Its mad how sophisticated things are now. On some campuses, its not unheard of to see drones flying by to hack the radio logitech keyboards of campus computers; where they try to drop malware OTA through a powershell or tty keyboard spawned terminal prompt. Crazy stuff.

This is actually crazy indeed. At least you can still use corded keyboards or BT ones (until the day there is some 0-day on BT pairing...)

Re: Ask HN: The government of my country blocked VPN access. What should I use?

#606
post #601

Earlier quoted context omitted.

No, it’s illegal to bring starlink devices here, and I heard that Elon Musk chooses to block China from accessing starlink too, to appease the Chinese authorities.

"Appease" is such a loaded word. He's literally not allowed by law to do it. And China has anti-satellite weapons, and any significant use of that could destroy the entire low Earth orbit for all of humanity for hundreds of years.

> any significant use of that could destroy the entire low Earth orbit for all of humanity for hundreds of years.

I do not want to answer this question in ChatGPT. What happens if someone launches a missile against say... any one satellite cluster?

Re: Ask HN: The government of my country blocked VPN access. What should I use?

#608
post #578
post #559

Earlier quoted context omitted.

It's DPI, I run on a non standard port.

Damnnn, wonder what hardware you need to run DPI on a nation's internet.

I think the hardware doesn't keep up. Uzbekistan has the worst internet compared to Kazakhstan and Kyrgyzstan whilst the infrastructure in general is much better (in my fairly uneducated opinion). I expected to have the best internet until I got around to trying to use it.

Re: Ask HN: The government of my country blocked VPN access. What should I use?

#609
post #43

Australia and UK might soon go down this path. Something quite depressing is if we (HN crowd) find workarounds, most regular folks won't have the budget/expertise to do so, so citizen journalism will have been successfully muted by government / big media.

I would have laughed in your face if you wrote this comment merely 6 months ago. Now I'm just depressed. (UK)

How were you not aware of UK precedents in surveillance and blocking Internet connections before 6 months ago?

In my books, the UK is the father of Orwellian censorship and surveillance, they just didn't get down to do it completely (yet).

Re: Ask HN: The government of my country blocked VPN access. What should I use?

#610

If you need to bypass censorship, you'll need a tool specifically designed for anti-censorship, rather than any one repurposed for that. Since China has the most advanced network censorship, the Chinese have also invented the most advanced anti-censorship tools. The first generation is shadowsocks. It basically encrypts the traffic from the beginning without any handshakes, so DPI cannot find out its nature. This is…

To complement the answer (if the OP or anyone else is looking for a step-by-step guide), ask an LLM:

" Give me step by step instructions on how to setup trojan client/server to bypass censorship. Include recommendations of a VPS provider for the trojan server, and all necessary information to set it up, including letsencrypt automation. Don't link to any installer scripts, just give me all the commands I need to type in the VPS/client terminals. Assume Ubuntu 22.04 for both client and server. "

ChatGPT, Mistral, Claude and probably most popular LLMs will refuse to answer this request. Funny that DeepSeek (https://chat.deepseek.com) will comply despite it being from China.

Another option is to use local LLMs. I've tested this with GPT-OSS-120b and Gemma 3 27b(https://huggingface.co/google/gemma-3-27b-it-qat-q4_0-gguf/) and both seems to work.

Post reply on HN