Live data from Hacker News

Ask HN: The government of my country blocked VPN access. What should I use?

news.ycombinator.com

731–740 of 775 posts

Re: Ask HN: The government of my country blocked VPN access. What should I use?

#731
post #706

Earlier quoted context omitted.

HK "outside" the firewall, for now. It's where you would place the outside VM.

But does access to HK go throught the firewall?

The access from mainland to HK goes through the firewall, the access from HK to the normal internet is unrestricted as far as I know. The communication between the two VMs still needs to be obfuscated and encrypted. The only reason for the VM inside the Chinese Internet is higher bandwidth.

Re: Ask HN: The government of my country blocked VPN access. What should I use?

#732

Earlier quoted context omitted.

> red states Well you'd be surprised to find out that this stupid policy (and many more) have been brought forward by Labour (Left).

At this point, anyone who has been watching politics for a few decades understands that the left/right dichotomy is primarily one designed to keep the majority of people within a certain set of bounds. We see it revealed when politicians and ideologies that should be in opposition to one another still cooperate on the same strategies, like this one. The goal right now is to make online anonymity impossible. Adult con…

There is a real left/right dichotomy, but there are very few left parties in power anywhere. Democrats, for example, are right.

Re: Ask HN: The government of my country blocked VPN access. What should I use?

#733
woah, another country blocking discord again? (well, mine don't, just surprised)

quick resort: you can use quad9 or nextdns if they are just using the classic dpi blocking thing. if these just doesnt work, then there is psiphon. its an anti surveillance kit iirc. other comments might include more options. i just want to list the ones that i've tried and used.

Re: Ask HN: The government of my country blocked VPN access. What should I use?

#735

Hello! I've got experience working on censorship circumvention for a major VPN provider (in the early 2020s). - First things first, you have to get your hands on actual VPN software and configs. Many providers who are aware of VPN censorship and cater to these locales distribute their VPNs through hard-to-block channels and in obfuscated packages. S3 is a popular option but by no means the only one, and some VPN prov…

mullvad with DAITA is pretty good you can also purchase mullvad with cryptocurrencies, cash, etc.

Re: Ask HN: The government of my country blocked VPN access. What should I use?

#736

Hello! I've got experience working on censorship circumvention for a major VPN provider (in the early 2020s). - First things first, you have to get your hands on actual VPN software and configs. Many providers who are aware of VPN censorship and cater to these locales distribute their VPNs through hard-to-block channels and in obfuscated packages. S3 is a popular option but by no means the only one, and some VPN prov…

First, this is great information in an area I know very little about.

But I’m curious - from your experience - how do you know the OP isn’t pretending in order to learn about new avenues to block or attack or to track down people who are trying to circumvent?

I don’t mean that as a “be careful”. You’re the expert compared to me and for all I know these are unblockable. Or maybe those doing the blocking would already know about them? So I’m interested in just understanding more.

Re: Ask HN: The government of my country blocked VPN access. What should I use?

#738

Earlier quoted context omitted.

I've been a SA Generalist for a decade, primarily in biopharma. This is the terminology the people I worked alongside used which included both Network and Computer Engineers. It was explained to me that its just another version of MITM, the only difference is the number of resilient paths that need to be compromised. Eclipse type of attacks focus on compromising multiple nodes and most deal with breaking consensus al…

> Its mad how sophisticated things are now. On some campuses, its not unheard of to see drones flying by to hack the radio logitech keyboards of campus computers; where they try to drop malware OTA through a powershell or tty keyboard spawned terminal prompt. Crazy stuff. This is actually crazy indeed. At least you can still use corded keyboards or BT ones (until the day there is some 0-day on BT pairing...)

> until the day there is some 0-day on BT pairing

Early versions of BT that's already true. AFAIK, 4.2, 5, 6 are still safe. Though there has been a lot of activity I haven't followed this year wrt 4.2, so that may be dated.

Re: Ask HN: The government of my country blocked VPN access. What should I use?

#739

Earlier quoted context omitted.

do you have a reliable source for this claim?

China's use of SNI-based censorship is well-documented For example, see https://censorbib.nymity.ch/pdf/Niere2025a.pdf

Yes, but SNI is not ECH.

Re: Ask HN: The government of my country blocked VPN access. What should I use?

#740

Earlier quoted context omitted.

btw, veracrypt is the name if the follow up project. truecrypt shut down over a decade ago rather abruptly, so anything labeled truecrypt today is suspect as either out of date or potential malware.

Wasn't the conspiracy theory that truecrypt got shut down because it was 'too effective', and the successor projects presumably have intentional backdoors or something?

Truecrypt was likely developed by only 1 man, Paul le roux, who likely shut it down because he was on the run for being an international drug/human smuggler/cartel member. It’s kind of a crazy story.

But either way both truecrypt and veracrypt were independently audited and no major flaws were found. Not sure when the last veracrypt audit was done.

Post reply on HN