Doesn't work in China, though:
GoodbyeDPI: Deep Packet Inspection circumvention utility
11–20 of 124 posts
Re: GoodbyeDPI: Deep Packet Inspection circumvention utility
#12Wireguard solves this, no need this
Re: GoodbyeDPI: Deep Packet Inspection circumvention utility
#13It's only for Windows. Linux didn't supported. :(
Re: GoodbyeDPI: Deep Packet Inspection circumvention utility
#14Looks like it uses WinDivert as the filtering driver, which says on its site that "Windows Server 2016 systems must have secure boot disabled"; not entirely surprising and a reminder of what a lot of the "security" stuff is really securing.
"secure boot must be disabled" is the equivalent of "in case of permissions error, just chmod 777". secure boot literally protects the user first, and is configurable with user provided keys on the vast vast majority of open platform computers (i.e. amd64)
"prevent injection of a driver that can divert all my shit at the kernel level" is exactly what you want secure boot protecting you from. there is no limitation of user rights because the user can turn it off and/or load their own keys at will.
secure boot fear mongering is bullshit nonsense
Re: GoodbyeDPI: Deep Packet Inspection circumvention utility
#15It's only for Windows. Linux didn't supported. :(
It IS supported on Linux, they have a tar file on the downloads page.
Re: GoodbyeDPI: Deep Packet Inspection circumvention utility
#16Earlier quoted context omitted.
It's widely employed by Russian and Indian ISPs to censor access to websites. I've had a largely successful run with GoodbyeDPI 's circumvention.
More importantly, it's widely deployed by HNers in US to snoop though everything you do on your phone, tablet and computer if you dare to use their wifi. The ops topics are full of people claiming how critically important it is for them to sniff through everything you do on "their" network for security. You don't need to go to Russia, China or India to have your privacy violated. Just go to work.
Your privacy isn't violated if you avail yourself of someone else's property.
Re: GoodbyeDPI: Deep Packet Inspection circumvention utility
#17Wireguard solves this, no need this
That’s assuming that the wireguard protocol is not blocked by that same DPI that you’re trying to circumvent.
The more tools - the better
Re: GoodbyeDPI: Deep Packet Inspection circumvention utility
#18Worth reading Deep Packet Inspection is Dead: https://security.ias.edu/deep-packet-inspection-dead-and-her... This tool is great, but I religiously route all my traffic through a VPN that I own and control. I’ve hardened the box I use to have zero logs and I don’t need to blindly trust a commercial provider whether they’ve been audited or not. There’s no way of really knowing they’re not logging in some capacity bar…
Well, the good point of GoodbyeDPI is exactly so that it preserves your IP address. Normally, when trying to circumvent censorship, you would need a VPN server in a different country. But the downsides are that the bank will deny all transactions and call you (OK, answered, they added the VPN IP to the whitelist), that you will miss local-only content, you won't be able to register for a doctor appointment online (the city uses a geo-restricting filter out of security concerns), and you will see foreign prices (which might be 5x higher in some cases!) on sites that differentiate based on the country. Also, extra latency in games. None of that applies with GoodbyeDPI.
Edit: the above is written from the viewpoint of the past myself, before emigration to the Philippines.
Re: GoodbyeDPI: Deep Packet Inspection circumvention utility
#19Earlier quoted context omitted.
More importantly, it's widely deployed by HNers in US to snoop though everything you do on your phone, tablet and computer if you dare to use their wifi. The ops topics are full of people claiming how critically important it is for them to sniff through everything you do on "their" network for security. You don't need to go to Russia, China or India to have your privacy violated. Just go to work.
Your privacy isn't violated if you avail yourself of someone else's property.
Violation and legality are two entirely different things.
Re: GoodbyeDPI: Deep Packet Inspection circumvention utility
#20Haha that’s cute. Here in china the GFW now simply routes the IPs to blackhole. False positive by virtual host or CDN you ask? They don’t care :)
That's what domain fronting is for, and even though the GFW attempts to filter by SNI, genetic algorithms like Geneva are able to find workarounds: https://geneva.cs.umd.edu/papers/foci21.pdf