“Two days ago the police came to me and wanted me to stop working on this”

Post by [deleted] » Sat, Aug 22, 2015, 6:15 AM UTC

hipaulshi wrote: post #46

verroq wrote: post #40

Earlier quoted context omitted.

Who is the target audience of this software and how does it work? Do non technical users set this up on a VPS provider and then connect to it? I'd imagine most developers in China would just SSH tunnel their way out.

SSH dynamic port forwarding is no longer working for years. It is so easily picked up by GFW and minutes later it is gone together with the whole SSH connection. So does PPTP and L2TP VPN. GFW has been upgraded so many times for the past few years. The target audience is developers. The install is super simple via one line of `pip install`, the start code for daemon is also one line with the configuration inline or t…

Post by eridius » Sat, Aug 22, 2015, 6:22 AM UTC

conradev wrote: post #60

eridius wrote: post #45

Earlier quoted context omitted.

But that's the thing, you can't disable SIP from userland. It can only be disabled when booted into recovery mode. So yes, it absolutely does verify integrity, because it makes it so malware cannot embed itself into the system. Your last sentence there is 100% pure grade A FUD. You may as well just say "every security measure is bullshit, because if malware were to figure a way around it, then it wouldn't work". It's…

It's a boot argument to the kernel, stored in NVRAM. These arguments are normally mutable. Apple had to write code to prevent modifying said arguments. Said code can have flaws. But lets say you don't find a vulnerability in SIP userland detection, and instead find a kernel exploit to get around the protection: If malware were to figure a way around it, then even antivirus software can't uninstall it. Only Apple can.…

Post by bitinn » Sat, Aug 22, 2015, 6:23 AM UTC

usaar333 wrote: post #67

mrb wrote: post #54

I was visiting China recently (my first time there). I thought bypassing The Great Firewall was going to be as simple as an "ssh -D" SOCKS setup, or a "ssh -w" tunnel. Oh boy, I was wrong. If you try this, or even a basic OpenVPN setup, you will quickly find out your VPN works fine for about 5 minutes, but then latency increases to 5sec, 10sec, 30sec(!), and then everything times out. After some research I read onlin…

How do multinational companies' china offices get through the firewall? For example if my company uses Google apps, how do I ensure that my china office has access?

Post by kordless » Sat, Aug 22, 2015, 6:24 AM UTC

Rangi42 wrote: post #10

This wasn't a thorough deletion. The shadowsocks-iOS project has been switched to the 'rm' branch, but the 'master' branch still contains all the source code: https://github.com/shadowsocks/shadowsocks-iOS/tree/master There's also a downloadable 2.6.3 release with a built .dmg and source code: https://github.com/shadowsocks/shadowsocks-iOS/releases Even if it does get completely removed, a duplicate exists on GitLab:…

Post by nialv7 » Sat, Aug 22, 2015, 6:32 AM UTC

hipaulshi wrote: post #69

usaar333 wrote: post #67

Earlier quoted context omitted.

How do multinational companies' china offices get through the firewall? For example if my company uses Google apps, how do I ensure that my china office has access?

As far as Microsoft office in Beijing, I think they VPN to their Tokyo office first. Their traffic is ensured by negotiating directly with the big telecom company. Disclaimer: I do not work for them.