China systematically hijacks internet traffic: researchers • Hacker News Board

Re: China systematically hijacks internet traffic: researchers

#51

Post by ausjke » Fri, Oct 26, 2018, 5:29 PM UTC

68c12c16 wrote: post #46

HippoBaro wrote: post #27

Earlier quoted context omitted.

(I live in China) I would advise against VPN entirely. I am unsure about the state ability to decrypt the content of the connection (heavily depends on how the VPN is configured really — weak and legacy ciphers, etc.). But they will detect it and eventually you'll start dropping packets like crazy. A simple way to evade all of this is to use shadowsocks with a strong cipher and strong password between your computer i…

shadowsocks is on their radar now...and they have been able to detect its usage with some success, unfortunately... i.e. The Random Forest Based Detection of Shadowsock's Traffic, https://ieeexplore.ieee.org/document/8048116/ I don't really understand what kind of scientists would do such researches to help the government carry out the censorship more efficiently, over their fellow people...it's either those intellec…

this is correct, SS is on the radar and is not as dependable as it used to be, there is a variant of SS that is said to be an improved version but it is still not 100% dependable.

Re: China systematically hijacks internet traffic: researchers

#52

Post by Markoff » Fri, Oct 26, 2018, 9:15 PM UTC

HippoBaro wrote: post #27

sethbannon wrote: post #11

As someone with a trip to Beijing on the horizon, aside from using a VPN, are there any other best practices to keep data secure while traveling there?

(I live in China) I would advise against VPN entirely. I am unsure about the state ability to decrypt the content of the connection (heavily depends on how the VPN is configured really — weak and legacy ciphers, etc.). But they will detect it and eventually you'll start dropping packets like crazy. A simple way to evade all of this is to use shadowsocks with a strong cipher and strong password between your computer i…

or he could just use roaming mobile data which are not subject to great firewall

Re: China systematically hijacks internet traffic: researchers

#53

Post by elorant » Fri, Oct 26, 2018, 9:25 PM UTC

lordlimecat wrote: post #50

elorant wrote: post #18

Earlier quoted context omitted.

Buy a feature phone and dump it once you return.

Buying a SIM in china requires you to register your passport.

I meant assume that your phone will be hacked so buy one that you can afford to throw away once you return from China.

Re: China systematically hijacks internet traffic: researchers

#54

Post by HippoBaro » Sat, Oct 27, 2018, 10:11 AM UTC

shawnz wrote: post #47

HippoBaro wrote: post #35

Earlier quoted context omitted.

Shadowshocks is not a VPN at all. It's a connectionless SOCKS5 proxy. No hand-check, no key exchange, no protocol agreement. VPN is not made to be undetected, only secure in the sense of data encryption. Shodowsocks has broader objectives. See https://shadowsocks.org/ for info.

> It's a connectionless SOCKS5 proxy. On your local workstation, it exposes itself as a SOCKS5 proxy. But to communicate with the shadowsocks server, it uses a proprietary protocol which is not SOCKS5 and does have a key exchange process. Either way, these details don't affect its ability to be detected. > VPN is not made to be undetected "VPN" is not just one technology. Many vendors of VPN software do claim that th…

Thanks for the info, couple of things I didn't know. What I meant by "it's not a VPN" was mainly it doesn't make your computer part of another private network.